Re: launchd agent for securing mail through ssh tunnel
site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com On 13/apr/07, at 22:01, James Peach wrote: Hi, I use to read email through an ssh tunnel and I want to turn the task into an on-demand launchd user agent. So far, I have come out with the following, "nearly working", solution: <snip> I have a couple of problems, though: It should not make any difference: RunAtLoad is false by default. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>my.mail.service</string> <key>Program</key> <string>/usr/bin/ssh</string> <key>ProgramArguments</key> <array> <string>/usr/bin/ssh</string> <string>-L</string> <string>9025:mailserver:25</string> <string>jpeach@mailserver</string> <string>imapd</string> Have you set up a passwordless account? Why are you executing imapd? </array> <key>inetdCompatibility</key> <dict> <key>Wait</key> <false/> </dict> <key>Sockets</key> <dict> <key>Listeners</key> <dict> <key>SockNodeName</key> <string>localhost</string> <key>SockServiceName</key> <integer>9220</integer> This is not the same port as the tunnel's port (9025). <key>SockType</key> <string>stream</string> <key>SockFamily</key> <string>IPv4</string> </dict> </dict> <key>Debug</key> <true/> Nicola _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... On 13/04/07, Nicola Vitacolonna <vitacolo@dimi.uniud.it> wrote: Ar you sure that ssh isn't prompting? Yes, pretty sure. I have tried from the Terminal. Remove the RunAtLoad key? I use this with Mail.app, and it works just fine: Your solution does not seem correct. Jay's explanation in a previous mail was very clear, but unfortunately, my search was no luck. The only "workaround" I have found is of the kind explained at http://cg.scs.carleton.ca/~morin/ misc/laptopmail. But even that solution does not work for me (I have also tried to use xinetd, but without success). Maybe using launchd with stunnel may be worth trying? Has anyone experience with it? This email sent to site_archiver@lists.apple.com
participants (1)
-
Nicola Vitacolonna