Re: launchd agent for securing mail through ssh tunnel
Re: launchd agent for securing mail through ssh tunnel
- Subject: Re: launchd agent for securing mail through ssh tunnel
- From: Nicola Vitacolonna <email@hidden>
- Date: Wed, 18 Apr 2007 14:37:48 +0200
On 13/apr/07, at 22:01, James Peach wrote:
On 13/04/07, Nicola Vitacolonna <email@hidden> wrote:
Hi,
I use to read email through an ssh tunnel and I want to turn the task
into an on-demand launchd user agent. So far, I have come out with
the following, "nearly working", solution:
<snip>
I have a couple of problems, though:
Ar you sure that ssh isn't prompting?
Yes, pretty sure. I have tried from the Terminal.
Remove the RunAtLoad key?
It should not make any difference: RunAtLoad is false by default.
I use this with Mail.app, and it works just fine:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN"
"http://www.apple.com/DTDs/PropertyList-1.0.dtd";>
<plist version="1.0">
<dict>
<key>Label</key>
<string>my.mail.service</string>
<key>Program</key>
<string>/usr/bin/ssh</string>
<key>ProgramArguments</key>
<array>
<string>/usr/bin/ssh</string>
<string>-L</string>
<string>9025:mailserver:25</string>
<string>jpeach@mailserver</string>
<string>imapd</string>
Have you set up a passwordless account? Why are you executing imapd?
</array>
<key>inetdCompatibility</key>
<dict>
<key>Wait</key>
<false/>
</dict>
<key>Sockets</key>
<dict>
<key>Listeners</key>
<dict>
<key>SockNodeName</key>
<string>localhost</string>
<key>SockServiceName</key>
<integer>9220</integer>
This is not the same port as the tunnel's port (9025).
<key>SockType</key>
<string>stream</string>
<key>SockFamily</key>
<string>IPv4</string>
</dict>
</dict>
<key>Debug</key>
<true/>
Your solution does not seem correct.
Jay's explanation in a previous mail was very clear, but
unfortunately, my search was no luck. The only "workaround" I have
found is of the kind explained at http://cg.scs.carleton.ca/~morin/
misc/laptopmail. But even that solution does not work for me (I have
also tried to use xinetd, but without success). Maybe using launchd
with stunnel may be worth trying? Has anyone experience with it?
Nicola
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden