Actually, my permission problem must be different from Dmitry's problem. I just tried running sync_client by hand and it quits :
$/usr/cyrus/bin/sync_client -v -u username
Error from send_lock(): bailing out!

Syslog says :
sync_client[21692]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication
sync_client[21692]: LOCK received NO response: Permission denied

Is the "no authentication" a problem?

I would think not, as the replica's syslog says :
syncserver[13455]: login: master [10.1.32.141] cyrus-admin PLAIN+TLS User logged in

But then, I don't know what the permission problem is...

Thanks,

Vincent

Vincent Deffontaines wrote:
Greetings,

I am experimenting problems quite similar to those of Dmitry.
I had the same TLS setup problem, now fixed. If interest is raised I can patch the replication documentation so that other users will get it straightforward.

Now, here is what I get in my syslogs :
o Master server :
Feb  2 09:25:25 master sync_client[25787]: Doing a peer verify
Feb  2 09:25:25 master sync_client[25787]: Doing a peer verify
Feb  2 09:25:25 master sync_client[25787]: received server certificate
Feb  2 09:25:25 master sync_client[25787]: starttls: TLSv1 with cipher
AES256-SHA (256/256 bits new) no authentication
[snip]
Feb 2 09:35:26 master sync_client[25432]: RESTART received NO response: Permission denied
Feb  2 09:35:26 master sync_client[25432]: sync_client RESTART failed

That seems to be the last message I get from sync_client. It no longer runs now.


o Replica :
Feb  2 09:19:49 replica syncserver[26003]: executed
Feb  2 09:19:49 replica syncserver[28997]: mystore: starting txn 2147483653
Feb 2 09:19:49 replica syncserver[28997]: mystore: committing txn 2147483653 Feb 2 09:19:49 replica syncserver[28997]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication Feb 2 09:19:49 replica syncserver[28997]: login: master [10.1.32.141] cyrus-admin PLAIN+TLS User logged in
Feb  2 09:24:46 replica syncserver[26003]: accepted connection
Feb  2 09:24:46 replica syncserver[26003]: cmdloop(): startup
Feb  2 09:24:47 replica syncserver[26003]: mystore: starting txn 2147483656
Feb 2 09:24:47 replica syncserver[26003]: mystore: committing txn 2147483656 Feb 2 09:24:47 replica syncserver[26003]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication Feb 2 09:24:47 replica syncserver[26003]: login: master [10.1.32.141] cyrus-admin PLAIN+TLS User logged in

So, I suppose the problem is about the "permission denied" raised on the master log?
I have "admin: cyrus-admin" on both imapd.confs.

I have attached a strace on the sync_client process. It raises many repetitive :
## BEGIN WHILE(1)
time(NULL)                              = 1138871181
stat64("/var/lib/cyrus/sync/log", 0xbf983fac) = -1 ENOENT (No such file or directory)
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGCHLD, NULL, {SIG_DFL}, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
nanosleep({1, 0}, {1, 0})               = 0
##END WHILE(1)
then after a dozens of minutes :
time(NULL)                              = 1138871669
write(5, "\27\3\1\0 S\16\316\344\226%\225B\332cA\t\367HG\317\222"..., 37) = 37
time(NULL)                              = 1138871669
read(5, "\27\3\1\0000", 5)              = 5
read(5, "\340\204\255b0t*\350\203\21\2X\223Y\342\342\242\375\331"..., 48) = 48
time([1138871669])                      = 1138871669
getpid()                                = 21510
rt_sigaction(SIGPIPE, {0xb7d04a70, [], SA_RESTORER, 0xb7c58a18}, {SIG_DFL}, 8) = 0
send(6, "<179>Feb  2 10:14:29 sync_client"..., 88, 0) = 88
rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
time([1138871669])                      = 1138871669
getpid()                                = 21510
rt_sigaction(SIGPIPE, {0xb7d04a70, [], SA_RESTORER, 0xb7c58a18}, {SIG_DFL}, 8) = 0
send(6, "<179>Feb  2 10:14:29 sync_client"..., 67, 0) = 67
rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
exit_group(1)


Any help will be appreciated.

Vincent Deffontaines

PS : sorry if this is starting a new thread, I am willing to reply to the thread opened by Dmitry, but I just subscribed to the ML.

PS2 : in case this matters, I have applied the Athens university autocreate patch on both master and replica. Bash me if this is stupid :)
----
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

----
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Reply via email to