Re: [Dovecot] troubles with 1.1.8 and squirrelmail over HTTPS
Hello Jack Setting up imapproxy on a third machine greatly improve performances on my mailhub which doesn't refuse connexions anymore. Thanks a lot for your help ! Frank Jack Stewart wrote: Frank Bonnet wrote: Timo Sirainen wrote: On Thu, 2009-01-15 at 16:25 +0100, Frank Bonnet wrote: I had to increase the max_mail_processes to 8192 to have a functionnal IMAP server with normal clients AND squirrelmail clients 8192 sounds enormous to me , any infos welcome ! How many imap processes have you running typically? Hi, I don't know if this will help or not - I'm taking my comments offline because it isn't clear if they are related to your core problem. Also, they seem to be specific to high usage servers/people. We're not 1.1.8 yet but I've spent a reasonable amount of time tweaking the Linux side. We run at about ~1300 processes per server. Squirrelmail does a login/logout on every single page that is clicked. So I've found that running an imap proxy (such as the one at imapproxy.org really helps). It creates some additional connections but they get re-used pretty frequently. If 1.1.8 isn't logging out quickly, or not cleanly shutting down the connection, or something similar, that could explain additional connections. What does netstat -an show? On some O/S's the process will disappear from ps but not be fully released until the socket/connection disappears (in this case tcp). If you have a bunch of WAIT/FIN_WAIT's something like this seems pretty likely. I've found that going through localhost allows you to bypass TLS while still enforcing TLS for non-localhost connections. It's pretty nice for overhead/connect speed. Also, an imap proxy may need a non-encrypted connection. Besides the dovecot max_ ... settings, in our system you need to tweak limits.conf and bump up the limits via the ulimit command in the dovecot init script. Open file descriptors and process limits seem to be the main settings. After this, you get into kernel tuning such as inotify settings. Let me know if you have any questions. If some of this helps, we might want to feed it back into the list. ---Jack
Re: [Dovecot] troubles with 1.1.8 and squirrelmail over HTTPS
On Tue, 2009-01-20 at 10:06 +0100, Frank Bonnet wrote: > Timo Sirainen wrote: > > On Thu, 2009-01-15 at 16:25 +0100, Frank Bonnet wrote: > >> I had to increase the max_mail_processes to 8192 > >> to have a functionnal IMAP server with normal clients AND > >> squirrelmail clients > >> > >> 8192 sounds enormous to me , any infos welcome ! > > > > How many imap processes have you running typically? > > > > Did you found any explaination to this problem ? > Do you think it could be a Linux problem or a Dovecot problem ? If the problem had to do with max_mail_processes, Dovecot would have logged: "Maximum number of mail processes exceeded (see max_mail_processes setting)" Did it? If you can't find that from logs, then either you're not looking at the right logs (http://wiki.dovecot.org/Logging) or changing the max_mail_processes didn't actually do anything and instead simply restarting Dovecot fixed it (or the original problem just happened to go away for some other reason). signature.asc Description: This is a digitally signed message part
Re: [Dovecot] troubles with 1.1.8 and squirrelmail over HTTPS
Timo Sirainen wrote: On Thu, 2009-01-15 at 16:25 +0100, Frank Bonnet wrote: I had to increase the max_mail_processes to 8192 to have a functionnal IMAP server with normal clients AND squirrelmail clients 8192 sounds enormous to me , any infos welcome ! How many imap processes have you running typically? Did you found any explaination to this problem ? Do you think it could be a Linux problem or a Dovecot problem ? Thanks
Re: [Dovecot] troubles with 1.1.8 and squirrelmail over HTTPS
On Thu, 2009-01-15 at 16:25 +0100, Frank Bonnet wrote: > I had to increase the max_mail_processes to 8192 > to have a functionnal IMAP server with normal clients AND > squirrelmail clients > > 8192 sounds enormous to me , any infos welcome ! How many imap processes have you running typically? signature.asc Description: This is a digitally signed message part
Re: [Dovecot] troubles with 1.1.8 and squirrelmail over HTTPS
Timo Sirainen wrote: On Wed, 2009-01-14 at 16:28 +0100, Frank Bonnet wrote: Hello I noticed a problem after upgrading to 1.1.8 Users that access to their mailboxes using webmail squirrelmail and HTTPS using HTTP seems to work correctly but it not safe enough ... There is an error message saying the imap server send a BYE command ... I downgraded our Dovecot server to 1.1.7 then it works again ... Like Tom said, the http vs https difference shouldn't be visible to Dovecot. Anyway do you see any errors in Dovecot's log files? http://wiki.dovecot.org/Logging Well ... I apologize ! I finally found the problem but it sounds a bit strange I had to increase the max_mail_processes to 8192 to have a functionnal IMAP server with normal clients AND squirrelmail clients 8192 sounds enormous to me , any infos welcome ! the machine run Debian etch 64 bits , dovecot has been re-compiled on the machine. it is an IBM X3650 with 7Gb of RAM.
Re: [Dovecot] troubles with 1.1.8 and squirrelmail over HTTPS
On Thu, 2009-01-15 at 02:49, Frank Bonnet wrote: > Timo Sirainen wrote: > > On Wed, 2009-01-14 at 16:28 +0100, Frank Bonnet wrote: > >> Hello > >> > >> I noticed a problem after upgrading to 1.1.8 > >> > >> Users that access to their mailboxes using webmail squirrelmail and HTTPS > >> using HTTP seems to work correctly but it not safe enough ... > >> > >> There is an error message saying the imap server send a BYE command ... > >> > >> I downgraded our Dovecot server to 1.1.7 then it works again ... > > > > Like Tom said, the http vs https difference shouldn't be visible to > > Dovecot. Anyway do you see any errors in Dovecot's log files? > > http://wiki.dovecot.org/Logging > > > > I KNOW all of this ... but that happen > > I'll carefully read logfiles tomorrow then tell what I'll find. And what version of SM you are using. We use the latest and have no issues, and you need to tell us what said the error, SM via php display, or apache or what.
Re: [Dovecot] troubles with 1.1.8 and squirrelmail over HTTPS
Timo Sirainen wrote: On Wed, 2009-01-14 at 16:28 +0100, Frank Bonnet wrote: Hello I noticed a problem after upgrading to 1.1.8 Users that access to their mailboxes using webmail squirrelmail and HTTPS using HTTP seems to work correctly but it not safe enough ... There is an error message saying the imap server send a BYE command ... I downgraded our Dovecot server to 1.1.7 then it works again ... Like Tom said, the http vs https difference shouldn't be visible to Dovecot. Anyway do you see any errors in Dovecot's log files? http://wiki.dovecot.org/Logging I KNOW all of this ... but that happen I'll carefully read logfiles tomorrow then tell what I'll find.
Re: [Dovecot] troubles with 1.1.8 and squirrelmail over HTTPS
On Wed, 2009-01-14 at 16:28 +0100, Frank Bonnet wrote: > Hello > > I noticed a problem after upgrading to 1.1.8 > > Users that access to their mailboxes using webmail squirrelmail and HTTPS > using HTTP seems to work correctly but it not safe enough ... > > There is an error message saying the imap server send a BYE command ... > > I downgraded our Dovecot server to 1.1.7 then it works again ... Like Tom said, the http vs https difference shouldn't be visible to Dovecot. Anyway do you see any errors in Dovecot's log files? http://wiki.dovecot.org/Logging signature.asc Description: This is a digitally signed message part
Re: [Dovecot] troubles with 1.1.8 and squirrelmail over HTTPS
Frank Bonnet schreef: > Hello > > I noticed a problem after upgrading to 1.1.8 > > Users that access to their mailboxes using webmail squirrelmail and HTTPS > using HTTP seems to work correctly but it not safe enough ... > > There is an error message saying the imap server send a BYE command ... > > I downgraded our Dovecot server to 1.1.7 then it works again ... > > Does somebody has the same problem ? > > Communication between Dovecot and Squirrelmail has nothing to do with communication between Squirrelmail/Apache and the end user. Did you also upgrade Squirrelmail or its config files in the process? signature.asc Description: OpenPGP digital signature
[Dovecot] troubles with 1.1.8 and squirrelmail over HTTPS
Hello I noticed a problem after upgrading to 1.1.8 Users that access to their mailboxes using webmail squirrelmail and HTTPS using HTTP seems to work correctly but it not safe enough ... There is an error message saying the imap server send a BYE command ... I downgraded our Dovecot server to 1.1.7 then it works again ... Does somebody has the same problem ? -- Cordialement Frank Bonnet ESIEE Paris
