[NBLUG/talk] SquirrelMail and PHP.

[ME]

Since your prepackaged squirrelmail install did not properly setup the web
server to serve the PHP, and seems to have issues with using different
locations from the src based tarball, and is probably an older version of
SM that has security holes (If 1.2.x and prior to 1.2.11) or (not
1.4.0)...

Why dont you just ununstall that packaged SM, and then download andinstall
the one from the tarball?

The install is pretty easy: you untar and uncompress it, by default is
becomes "squirrelmail", then mv the present SM web dir to a new name, and
mv the extracted squirrelmail to use the same name as the packaged one.

(Say you had SM in "/var/www/html/sm")

Go get the tarball:
 If you have php 4.3.1 or later, then get 1.4.0.
 If you have PHP 4.2.3 -> 4.0.8, then get 1.2.11
 ( http://www.squirrelmail.org/download.php )
 ( I put mine in /usr/local/src )
# mv /var/www/html/sm /var/www/html/sm.old
# cd /var/www/html/
(if no folder called "squirrelmail" then go on ...)
# tar -xzvf /path/to/downloaded/squirelmailtar.gz
# mv squirrelmail sm

Check out the file called INSTALL in your new SM dir.
# cd sm
# less INSTALL

The instructions are rather easy to follow. They really just say stuff like:
# chown -R apache.apache data
# chown -R YOURUSERNAME pref*
Then drop the root shell and go with your own account and configure SM:
$ cd /var/www/html/sm
$ ./configure
(configure it, and save it)

See if using the standard release works better for you than the packaged
one. I think you will find the results more agreeable.

-ME

> My data files live in /var/lib/squirrelmail/prefs/.
> My Squirrelmail tree is in /usr/share/squirrelmail/.
> My virtual host (waggie.net) symlinks from /home/chrisw/web/webmail/ to
> /usr/share/squirrelmail/.
>
> I added your suggestions for a <Directory> statement and restarted my
> server, to no avail.  I tried both variations on the directory, and I put
> /usr/share/squirrelmail in there, too (at the same time).
>
> I did put an index.html file in /var/lib/squirrelmail/ (and prefs/) per
> your
> suggestion..
>
> I still receive the same error, unfortunately.
>
> - Christopher Wagner
> chrisw at pacaids.com
>
> Packaging Aids Corporation - Information Systems
> P.O. Box 9144
> San Rafael, CA 94912-9144
> http://www.pacaids.com/
> (415) 454-4868 x116
>
>
> -----Original Message-----
> From: talk-admin at nblug.org [mailto:talk-admin at nblug.org]On Behalf Of
> troy
> Sent: Wednesday, April 23, 2003 5:13 PM
> To: talk at nblug.org
> Subject: Re: [NBLUG/talk] SquirrelMail and PHP.
>
> I may have missed one of the earlier e-mails, but do you have a
> <Directory></Directory> clause in httpd.conf that allows access to
> /usr/share/squirrelmail?
>
> Something similar to what Mike provided earlier:
> <Directory "/var/lib/squirrelmail/prefs"> #maybe, /var/lib/squirrelmail
>     Options All
>     AllowOverride All
>     DirectoryIndex index.html index.htm default.html default.htm index.php
>     AddType application/x-httpd-php .php
>     AddType application/x-httpd-php-source .phps
> </Directory>
>
> I'm still fuzzy on where your files really live, but I think the missing
> <Directory> bit may be the key.  Note that you need to allow access to the
> physical dir itself, not the symlinked dir.
>
> One more thing to remember... Sometimes you'll have directories with
> sensitive
> files that do need to be accessable by the web server.  For these dirs,
> make
> sure that you include some sort of index.html to prevent snooping.
>
> -troy
>
> _______________________________________________
> talk mailing list
> talk at nblug.org
> http://nblug.org/mailman/listinfo/talk
> _______________________________________________
> talk mailing list
> talk at nblug.org
> http://nblug.org/mailman/listinfo/talk
>
>