Re: Syncing multiple IMAP/ user accounts

[Vincent Beffara <vbeffara+ml@xxxxxxxxx>]

> All my users are configured the same way (now ;-) ). The shell is=3D0D
> "/etc/false" and ...=3D0D
>
> > (BTW this is running as myself and not as root, which is the whole po=
in=3D
> > of using sudo - if you run as root, you don't really need it ...) The=
 =3D0D
> > line you will need in /etc/sudoers is something like=3D0D
>
> ... I added them to some User_Alias directive in "/etc/sudoers" and...=3D=
0D
>
> > offlineimap localhost=3D(ALL) NOPPASSWD: /usr/bin/offlineimap
>
> ...the rest is similar to your config. The only difference is (still, b=
ut=3D > =3D0D
> will be changed) that root is the executing user in the crontab. Can=3D=
0D
> everybody run the sudo command?

The binary file has mode 755, if that's what you are asking - but only=20
users explicitly in the /etc/sudoers file (as a separate line or within=20
a group) can actually use it to run commands. The others will get an=20
error message along the lines of 'you are not a sudoer'.

>                                 I'd create a limited account for the su=
do=3D
> stuff then.=3D0D

Yes, that's the spirit. There are 2 use cases (that I know of): yours=20
(i.e. a limited user that has to run one command as somebody else), and=20
the "opposite" giving your main (non-root) account a way to run any=20
command as root.

In my example the name of the limited account is 'offlineimap', but it=20
might as well be 'daemon' or even 'nobody', if you have other tasks for=20
it to do.

In any case, sudo is a great tool.

  /v

PS: Your mailer seems to do some funky stuf with quoted-printable=20
encoding ...

--=20
Vincent Beffara
UMPA - ENS Lyon
46 All=E9e d'Italie
69364 LYON cedex 07
Tel: 04 72 72 85 25
Fax: 04 72 72 84 80