#151 dspam_stats creating non-existent users

v3.6.8
open-postponed
None
5
2012-06-26
2012-06-25
kloetpatra
No

Hi!
when i'm using dspam_stats for non-existent users it will create the user...
for example invoking "dspam_stats -H xyzuser"

ls -la /var/spool/dspam/data/local/xyzuser
total 2316
drwxr-x--- 2 root root 4096 2012-06-25 15:04 ./
drwxr-x--- 12 root root 4096 2012-06-25 15:04 ../
-rw-r--r-- 1 root root 2359688 2012-06-25 15:04 xyzuser.css
-rw-r--r-- 1 root root 0 2012-06-25 15:04 xyzuser.lock

Discussion

  • Stevan Bajic

    Stevan Bajic - 2012-06-25

    Probably you have instructed DSPAM to automatically create users as soon as DSPAM is processing messages/tasks for a user.

    If you set/change in dspam.conf:
    Preference "optIn=off"
    Preference "optOut=on"
    Opt in

    Change preferences for default:
    dspam_admin change preference default optIn off
    dspam_admin change preference default optOut on

    Restart DSPAM daemon and retry to list statistics for a non existing user:
    dspam_stats -H ishouldnotexist

    If you still get a user created then it is a bug. If you don't get the user created then please take the time and read the DSPAM documentation regarding user handling in DSPAM.

     
  • Stevan Bajic

    Stevan Bajic - 2012-06-25
    • assigned_to: nobody --> sbajic
    • status: open --> pending
     
  • kloetpatra

    kloetpatra - 2012-06-26
    • status: pending --> open-postponed
     
  • kloetpatra

    kloetpatra - 2012-06-26

    I did the changes, and dspam_stats is still adding new users.
    Have to say that I'm not running dspam in daemon mode using pipes instead.

    IMHO creating users is a untypical action for a "stats program" regardless of the opt setting.

     
  • Stevan Bajic

    Stevan Bajic - 2012-06-26

    > I did the changes, and dspam_stats is still adding new users.
    >
    This is very strange. I run over here the GIT version and I can not make my DSPAM to produce the same result as you have:

    theia ~ # ls -lah /var/spool/dspam/data/localdomain/testuser
    ls: cannot access /var/spool/dspam/data/localdomain/testuser: No such file or directory
    theia ~ # dspam_stats -H testuser@localdomain
    testuser@localdomain:
    TP True Positives: 0
    TN True Negatives: 0
    FP False Positives: 0
    FN False Negatives: 0
    SC Spam Corpusfed: 0
    NC Nonspam Corpusfed: 0
    TL Training Left: 2500
    SHR Spam Hit Rate 100.00%
    HSR Ham Strike Rate: 100.00%
    PPV Positive predictive value: 100.00%
    OCA Overall Accuracy: 100.00%

    theia ~ # ls -lah /var/spool/dspam/data/localdomain/testuser
    ls: cannot access /var/spool/dspam/data/localdomain/testuser: No such file or directory
    theia ~ # ls -lah /var/spool/dspam/data/localdomain
    ls: cannot access /var/spool/dspam/data/localdomain: No such file or directory
    theia ~ # dspam_stats -H testuser
    testuser:
    TP True Positives: 0
    TN True Negatives: 0
    FP False Positives: 0
    FN False Negatives: 0
    SC Spam Corpusfed: 0
    NC Nonspam Corpusfed: 0
    TL Training Left: 2500
    SHR Spam Hit Rate 100.00%
    HSR Ham Strike Rate: 100.00%
    PPV Positive predictive value: 100.00%
    OCA Overall Accuracy: 100.00%

    theia ~ # ls -lah /var/spool/dspam/data/local/testuser
    ls: cannot access /var/spool/dspam/data/local/testuser: No such file or directory
    theia ~ # ls -lah /var/spool/dspam/data/local
    ls: cannot access /var/spool/dspam/data/local: No such file or directory
    theia ~ #

    > Have to say that I'm not running dspam in daemon mode using pipes instead.
    >
    This does not matter. Using pipes or daemon mode both result in using libdspam (aka: same logic).

    > IMHO creating users is a untypical action for a "stats program" regardless of the opt setting.
    >
    Yes if it is not documented. But in the case of DSPAM it is a documented behaviour.

    So the problem you have is either configuration problem (this is still my suspicion) or the fact that you run that old 3.6.8 version. You however ruled out that it is configuration so the only left option is to test a more recent version of DSPAM. Do you have the possibility to do a test with 3.10.2?

     

Log in to post a comment.