Re: emergancy help needed

2002-11-01 Thread Ian McDonald
I hope these questions do not come over as terse or rude. I am genuinely
trying to understand how to get login/sasldb authentication working, and
confused by messages that appear - to me - to be contradictory.

On Wed, Oct 30, 2002 at 04:46:14PM -0500, Rob Siemborski wrote:
 On Wed, 30 Oct 2002, Guy Cohen wrote:

  apperently pwcheck_method: auxprop is not enough
  to make it work with mysql I had to add:
  auxprop_plugin: mysql login plain crammd5 digestmd5

 Um, you just need:

 auxprop_plugin: mysql

 The rest aren't auxprop plugins.

Then why are the source files for 'login' in the plugin directory, and why
it 'login' not mentioned as a possible pwcheck_method value in
doc/options.html?

This is not a rhetorical question; I genuinely want to understand (and get
Cyrus working).

- Original Message -
From: Rob Siemborski [EMAIL PROTECTED]
To: Guy Cohen [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Thursday, October 31, 2002 1:58 PM
Subject: Re: emergancy help needed [SOLVED]


 On Thu, 31 Oct 2002, Guy Cohen wrote:

  My old version was 2.1.1 so that wasn't needed.

 How were you using the MySQL auxprop plugin with 2.1.1 (it wasn't added
 until 2.1.6)?

  Is this all documented somewhere other then google?

 doc/options.html

 -Rob

doc/options.html says that the default auxprop_plugin list (null) leads to
all the plugins being queried.

Is this not true?





How do I migrate seen databases to skiplist?

2002-11-01 Thread Erik Enge
Hi.

I've converted all my databases in Cyrus (2.1.9) to skiplist in hopes of
stopping those annoying DBERROR messages.  In that process I came to
realize that I could not use the seen-files any more because they would
be incompatible with the new format.

Is there any way I can migrate those old files to the new format (I
believe they were Berkley DB - whatever is the default - and now they
are skiplist)?

Thanks in advance,

Erik.



RE: How do I migrate seen databases to skiplist?

2002-11-01 Thread Harris Landgarten
I used cvt_cyrusdb to convert the .seen files to skiplist. They were in
flat format on my machine. You should have a man page.

Harris

-Original Message-
From: [EMAIL PROTECTED]
[mailto:owner-info-cyrus;lists.andrew.cmu.edu] On Behalf Of Erik Enge
Sent: Friday, November 01, 2002 8:23 AM
To: [EMAIL PROTECTED]
Subject: How do I migrate seen databases to skiplist?

Hi.

I've converted all my databases in Cyrus (2.1.9) to skiplist in hopes of
stopping those annoying DBERROR messages.  In that process I came to
realize that I could not use the seen-files any more because they would
be incompatible with the new format.

Is there any way I can migrate those old files to the new format (I
believe they were Berkley DB - whatever is the default - and now they
are skiplist)?

Thanks in advance,

Erik.




Re: emergancy help needed

2002-11-01 Thread Rob Siemborski
On Fri, 1 Nov 2002, Ian McDonald wrote:

 Then why are the source files for 'login' in the plugin directory, and why
 it 'login' not mentioned as a possible pwcheck_method value in
 doc/options.html?

 This is not a rhetorical question; I genuinely want to understand (and get
 Cyrus working).

login.c is the source file for the LOGIN plugin, which is an (extreemly
weak) SASL mechanism, it's not an auxilliary property plugin.

-Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper





Re: How do I migrate seen databases to skiplist?

2002-11-01 Thread Rob Siemborski
On 1 Nov 2002, Erik Enge wrote:

 Is there any way I can migrate those old files to the new format (I
 believe they were Berkley DB - whatever is the default - and now they
 are skiplist)?

The cvt_cyrusdb program, in a form like:

(all one line, you'll need to modify for your specific needs)

find /var/imap/user -name \*.seen -exec /usr/cyrus/bin/cvt_cyrusdb \{\}
flat \{\}.new skiplist \; -exec mv \{\}.new \{\} \;

-Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper






Re: cyrus-dir-hash?

2002-11-01 Thread Gary Mills
On Fri, Nov 01, 2002 at 01:24:56PM +0800, Liu Jinhui wrote:
 When I compile cyrus-2.0.16, I used a patch called cyrus-dir-hash from 
http://mail.cc.umanitoba.ca/source/

This patch is included with recent version of Cyrus.  Only a configure
option is required to activate it.

 It simply centralizes all directory hashing into one function: dir_hash_c(). By 
default, 
 this function uses the old hashing scheme, based on the first letter of the user 
name. 
 When the compile-time symbol USE_DIR_FULL is defined, it uses the new scheme that 
hashes 
 all letters of the user name to provide an even hash distribution. 
 I wonder how much it will help the performance of cryrus-imap.
 In my situation , almost all users name are beginning with the same letter: 'u'.

The performance improvement depends on how many users you have, and on
how well your UFS implimentation handles large directories.  With Solaris,
for example, performance is pretty bad with 20,000 entries in one directory.
It's reasonable with only 1000 entries.

-- 
-Gary Mills--Unix Support--U of M Academic Computing and Networking-



Re: timsieved isn't listing any auth methods

2002-11-01 Thread Ken Murchison


Nick Fisher wrote:
 
 Hi People,
   I can't get timsieve to list it's one auth method... PLAIN and thus
 can't get sieveshell to work. This is the second set of posts I've made so
 if this seems a little familiar that's because it is ;)
 I've been working on and off on this bug for about two months now :(
 
 The problem is that timsieved isn't listing it's auth method and I don't
 know why. I'm using PLAIN as my auth method becuase I'm using pam_mysql to
 authenticate against a MySQL DB. I know that Plain is insecure but I have
 a firewall. I have tryed a number of things mostly revolving around the
 sasl2 plugins and none have helped in the least. I am intrested in ANY
 wild ideas that anyone might have about what to try next but please read
 the stuff below detailing what I have already tryed.
 
 I would also be most intrested to know if anyone managed to get PLAIN auth
 against PAM to work with timsieve...
 Or if anyone has timsieve working with *just* the PLAIN auth method.
 
 The one idea I still have is that timsieve isn't reading it's config data
 from /etc/imapd.conf. I have no clue as to how to check if this is a
 problem any ideas most welcome.

My guess is that you don't have PLAIN for _any_ of the services because
the plugins aren't installed where Cyrus/SASL can find them.  By
default, they should be in /usr/lib/sasl2.  This can be changed via
configure options at compile time, but you need to make sure that both
Cyrus and SASL are configured similarly.

-- 
Kenneth Murchison Oceana Matrix Ltd.
Software Engineer 21 Princeton Place
716-662-8973 x26  Orchard Park, NY 14127
--PGP Public Key--http://www.oceana.com/~ken/ksm.pgp



Re: Bug with mkimap virtual domains?

2002-11-01 Thread Ken Murchison
Just got back in town, and I'm catching up on list traffic.  I don't
understand what you're saying here, since none of your examples have any
numeric chars.  Obviously the domain/q/1community.net/* stuff is wrong,
is this what you're talking about?


Marc G. Fournier wrote:
 
 looks like mkimap isn't converting [0-9] to q, yet the imap/create mailbox
 stuff is?
 
 1community# du domain
 2   domain/1/1community.net/a
 2   domain/1/1community.net/b
 2   domain/1/1community.net/c
 2   domain/1/1community.net/d
 2   domain/1/1community.net/e
 2   domain/1/1community.net/f
 2   domain/1/1community.net/g
 2   domain/1/1community.net/h
 2   domain/1/1community.net/i
 2   domain/1/1community.net/j
 2   domain/1/1community.net/k
 2   domain/1/1community.net/l
 2   domain/1/1community.net/m
 2   domain/1/1community.net/n
 2   domain/1/1community.net/o
 2   domain/1/1community.net/p
 2   domain/1/1community.net/q
 2   domain/1/1community.net/r
 2   domain/1/1community.net/s
 2   domain/1/1community.net/t
 2   domain/1/1community.net/u
 2   domain/1/1community.net/v
 2   domain/1/1community.net/w
 2   domain/1/1community.net/x
 2   domain/1/1community.net/y
 2   domain/1/1community.net/z
 54  domain/1/1community.net
 56  domain/1
 8   domain/q/1community.net/a/user/admin
 10  domain/q/1community.net/a/user
 12  domain/q/1community.net/a
 14  domain/q/1community.net
 16  domain/q
 74  domain

-- 
Kenneth Murchison Oceana Matrix Ltd.
Software Engineer 21 Princeton Place
716-662-8973 x26  Orchard Park, NY 14127
--PGP Public Key--http://www.oceana.com/~ken/ksm.pgp



syntax for deliver

2002-11-01 Thread mario
Hi,

I have spend a lot of time with testing procmail and cyrus deliver but i have no 
success ☹

Postfix conf:
mailbox_command = /usr/bin/procmail -p -t -m /etc/procmailrc

/etc/procmailrc:

DELIVERMAIL=/usr/cyrus/bin/deliver
LOGFILE=/var/log/procmail/$USER.log

# try1
IMAP=$DELIVERMAIL -a -m user.$USER 
#try2
IMAP=$DELIVERMAIL –a $USER -m user.$USER
#try3
 IMAP=$DELIVERMAIL –a $USER -m $USER

#try1
:0 w
| $IMAP
#try2
:0
| $IMAP

and nearly all combinations ☺ without any success ☹


/from procmail log
procmail: Program failure (65) of /usr/cyrus/bin/deliver

if i got this error message, my var/log/messages shows a 
data format error 

or

Folder: /usr/cyrus/bin/deliver -a test -m user.test

In every case there is no email in the mailbox ☹

My system:
Suse7.3
Cyrus 2.0.16
Procmail 3.15.1

How is the right syntax for deliver from Cyrus 2.0.16


Thx for any help

Greeting mario






cyrus deliver syntax

2002-11-01 Thread mario
Hi,

I have spend a lot of time with testing procmail and cyrus deliver but i
have no success ?

Postfix conf:
mailbox_command = /usr/bin/procmail -p -t -m /etc/procmailrc

/etc/procmailrc:

DELIVERMAIL=/usr/cyrus/bin/deliver
LOGFILE=/var/log/procmail/$USER.log

# try1
IMAP=$DELIVERMAIL -a -m user.$USER 
#try2
IMAP=$DELIVERMAIL -a $USER -m user.$USER
#try3
 IMAP=$DELIVERMAIL -a $USER -m $USER

#try1
:0 w
| $IMAP
#try2
:0
| $IMAP

and nearly all combinations ? without any success ?


/from procmail log
procmail: Program failure (65) of /usr/cyrus/bin/deliver

if i got this error message, my var/log/messages shows a 
data format error 

or

Folder: /usr/cyrus/bin/deliver -a test -m user.test

In every case there is no email in the mailbox ?

My system:
Suse7.3
Cyrus 2.0.16
Procmail 3.15.1

How is the right syntax for deliver from Cyrus 2.0.16


Thx for any help

Greeting mario





syntax for deliver

2002-11-01 Thread mario
Hi,

I have spend a lot of time with testing procmail and cyrus deliver but i have no 
success ☹

Postfix conf:
mailbox_command = /usr/bin/procmail -p -t -m /etc/procmailrc

/etc/procmailrc:

DELIVERMAIL=/usr/cyrus/bin/deliver
LOGFILE=/var/log/procmail/$USER.log

# try1
IMAP=$DELIVERMAIL -a -m user.$USER 
#try2
IMAP=$DELIVERMAIL –a $USER -m user.$USER
#try3
 IMAP=$DELIVERMAIL –a $USER -m $USER

#try1
:0 w
| $IMAP
#try2
:0
| $IMAP

and nearly all combinations ☺ without any success ☹


/from procmail log
procmail: Program failure (65) of /usr/cyrus/bin/deliver

if i got this error message, my var/log/messages shows a 
data format error 

or

Folder: /usr/cyrus/bin/deliver -a test -m user.test

In every case there is no email in the mailbox ☹

My system:
Suse7.3
Cyrus 2.0.16
Procmail 3.15.1

How is the right syntax for deliver from Cyrus 2.0.16


Thx for any help

Greeting mario






Re: blocking logins at server

2002-11-01 Thread Lawrence Greenfield
   Date: Wed, 30 Oct 2002 12:55:03 -0500
   From: twk [EMAIL PROTECTED]

   We are running both 1.5.x and 2.1.x versions of Cyrus. I have a
   $#%$^#$%^ user that has his email client set to check every folder
   ever few seconds. I can't remove him from the password file, as we
   use Kerberos for authentication. I don't want to disable him in
   kerberos, just block his logins to the server. Is there any
   relatively straightforward way to do this?

As you might've suspected, we've never implemented anything to do
this. I've been down on the idea of adding an extra syscall every time
through the cmdloop() just to add this functionality.

Larry






RE: blocking logins at server

2002-11-01 Thread Schmehl, Paul L
Why not disable his account?  That will get his attention, and then you
can educate him and have him reset the check-mail interval in their
client.  We do this regularly.  You'd be amazed how fast someone that
you can never get ahold off will show up in your office when their
account doesn't work and only you can fix it. :-)

Paul Schmehl ([EMAIL PROTECTED])
TCS Department Coordinator
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/


 -Original Message-
 From: Lawrence Greenfield [mailto:leg+;andrew.cmu.edu] 
 Sent: Friday, November 01, 2002 4:01 PM
 To: Info-Cyrus; [EMAIL PROTECTED]
 Subject: Re: blocking logins at server
 
 
Date: Wed, 30 Oct 2002 12:55:03 -0500
From: twk [EMAIL PROTECTED]
 
We are running both 1.5.x and 2.1.x versions of Cyrus. I have a
$#%$^#$%^ user that has his email client set to check every folder
ever few seconds. I can't remove him from the password file, as we
use Kerberos for authentication. I don't want to disable him in
kerberos, just block his logins to the server. Is there any
relatively straightforward way to do this?
 
 As you might've suspected, we've never implemented anything 
 to do this. I've been down on the idea of adding an extra 
 syscall every time through the cmdloop() just to add this 
 functionality.
 
 Larry
 
 
 
 




Re: blocking logins at server

2002-11-01 Thread Scott Russell
On Fri, Nov 01, 2002 at 05:01:23PM -0500, Lawrence Greenfield wrote:
Date: Wed, 30 Oct 2002 12:55:03 -0500
From: twk [EMAIL PROTECTED]
 
We are running both 1.5.x and 2.1.x versions of Cyrus. I have a
$#%$^#$%^ user that has his email client set to check every folder
ever few seconds. I can't remove him from the password file, as we
use Kerberos for authentication. I don't want to disable him in
kerberos, just block his logins to the server. Is there any
relatively straightforward way to do this?
 
 As you might've suspected, we've never implemented anything to do
 this. I've been down on the idea of adding an extra syscall every time
 through the cmdloop() just to add this functionality.
 

What about using iptables to handle this? You could do it on a simple
level by blocking the workstation IP / IMAP port or possibly getting a
bit more advanced block the userid / IMAP port. (I thought iptables
could look at strings inside packets and take action?)

-- 
  Scott Russell ([EMAIL PROTECTED])
  Linux Technology Center, System Admin, RHCE.
  Dial 877-735-8200 then ask for 919-543-9289 (TTY)