[Maia-users] I cannot login as admin

[David Morton]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Jul 5, 2007, at 8:13 AM, DUKE wrote:

> >> Many thanks for your help. Now it starts, but I cannot find "the  
> key"
> >> which is mentioned in the docs, as the super-admin menu. Where  
> is it or
> >> why is it not here ?
>
> At first you have to build a keyfile:
>
>          /var/spool/amavis/maia/scripts/generate-key.pl > /var/ 
> spool/amavis/blowfish.key
>
> After that you must set the path to your keyfile in maia.conf:
>
>         – Set $key_file line to read
>                       $key_file="/var/spool/amavis/blowfish.key";
>
>  At least you must spezifie the keyfile in your admin-panel under  
> systemconfiguration:
>
>           /var/spool/amavis/blowfish.key
>


Or better yet, remove the key file and make sure both entries are  
empty.    If you don't need the encryption, I wouldn't use it.  It  
only prevents accidental reading of email by someone directly in the  
database... unless you have a way to make sure only the webserver can  
read the key for only the Maia application...   Anyone that can  
access the key file can access the email.  And even then, the  
superadmin can always turn on the option to read user's email...    
The encryption feature is there for specific client that requested  
for a specific situation;  I really don't find very useful and it  
wastes CPU time.


OTOH, it would certainly be good to put Maia on an SSL host.   That  
is accomplished outside of Maia, same as any other web server  
application.


David Morton
Maia Mailguard http://www.maiamailguard.com
mortonda at dgrmm.net



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD8DBQFGjPiEUy30ODPkzl0RAuQjAKDCcdTWcrEuvw11pr6/rTWxeNGMywCePlxl
dNILvu4guD13BK2BxEk88Yg=
=F35k
-----END PGP SIGNATURE-----