delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2012/05/02/01:04:10

X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-1.6 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED,DKIM_VALID,FREEMAIL_FROM,KHOP_RCVD_TRUST,KHOP_THREADED,RCVD_IN_DNSWL_LOW,RCVD_IN_HOSTKARMA_YE
X-Spam-Check-By: sourceware.org
MIME-Version: 1.0
Reply-To: gdm AT linuxpro DOT co DOT za
In-Reply-To: <jnqd2q$566$1@dough.gmane.org>
References: <CAJzjPK=z11r7N-iMu7BaTsBq6J=v2TnDdg5kiy5zEFU=uJZf0Q AT mail DOT gmail DOT com> <jnqd2q$566$1 AT dough DOT gmane DOT org>
Date: Wed, 2 May 2012 17:03:40 +1200
Message-ID: <CAJzjPKnS7S-3UmC5P0z1MN5HU8d-xoT+Yg1b=UfrKyE_sHYMpQ@mail.gmail.com>
Subject: Re: look to secure cygwin email delivery
From: Gregory Machin <gdm AT linuxpro DOT co DOT za>
To: cygwin AT cygwin DOT com
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id q42545g0003221

Thanks .
I have tests as you suggest , so long as the user does not have admin
privileges.

The problem I have is most users have local admin rites on their
machines. Which make it difficult to secure .

G


On Wed, May 2, 2012 at 4:27 PM, Andrew DeFaria <Andrew AT defaria DOT com> wrote:
> On 05/01/2012 09:01 PM, Gregory Machin wrote:
>>
>> Hi.
>> I’m new to Cygwin.
>>
>> Our users are required to use Active Directory authentication for
>> sending email , via our exchange server, this is fine for Outlook and
>> Thunderbird, but not for scripts that run under Cygwin. I configured
>> sSMTP for a user to use , the issues with this is that the
>> configuration is in clear text and is visible to all users on the
>> machine.
>
> No it's visible to all users who have been given read permission to the
> file. You can chmod 600 the file I believe. I know that unless the snooper
> has admin rights they will be limited by their UID and GID. Not sure if a
> plain Windows user logging in can gain access to the file though.
>
>>
>> Thus my questions is  howto configure the Cygwin environment to use
>> the user’s authentication tokens to send email via Exchange , or in a
>> way that the users  authentication details are not exposed.
>>
>> Thanks
>>
>> Greg
>>
>
>
> --
> Andrew DeFaria <http://defaria.com>
> If it's zero degrees outside today and it's supposed to be twice as cold
> tomorrow, how cold is it going to be?
>
>
> --
> Problem reports:       http://cygwin.com/problems.html
> FAQ:                   http://cygwin.com/faq/
> Documentation:         http://cygwin.com/docs.html
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple


- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019