Updating Cyrus

2002-12-31 Thread Víctor Guerra



Hello everybody, i want to update my cyrus-imap 
server from 2.0.16 to 2.1.11 and i have two questions:
1) What are the steps that i must do?
2) Can I separate mailboxes in diferent partitions 
depending of their first letter? (for example: if mailbox name is 
exampleAmydomaincom must be delivered in /var/mail/e)

Thanks a lot.
Regards.

Víctor GuerraAdministrador de SistemasRED 
SKIOS S.A[EMAIL PROTECTED]TLF: 91 
7990163FAX: 91 7990164


make depend problems

2002-12-31 Thread marc . bigler
Hello,

I am trying to compile the latest version of Cyrus IMAPD and have some
problems already with the make depend, as you can see here in my output:


gmake[1]: Leaving directory `/opt/source/cyrus-imapd-2.1.11/imtest'
### Making depend in /opt/source/cyrus-imapd-2.1.11/perl
gmake[1]: Entering directory `/opt/source/cyrus-imapd-2.1.11/perl'
### Making depend in /opt/source/cyrus-imapd-2.1.11/perl/sieve
gmake[2]: Entering directory `/opt/source/cyrus-imapd-2.1.11/perl/sieve'
gmake[2]: *** No rule to make target `depend'.  Stop.
gmake[2]: Leaving directory `/opt/source/cyrus-imapd-2.1.11/perl/sieve'
gmake[1]: *** [depend] Error 1
gmake[1]: Leaving directory `/opt/source/cyrus-imapd-2.1.11/perl'
gmake: *** [depend] Error 1

Does anyone have an idea what the problem could be ??? I am using standard
GNU tools on Solaris 9.

Regards







Re: Updating Cyrus

2002-12-31 Thread Rob Siemborski
On Tue, 31 Dec 2002, [iso-8859-1] Víctor Guerra wrote:

 Hello everybody, i want to update my cyrus-imap server from 2.0.16 to
 2.1.11 and i have two questions:

 1) What are the steps that i must do?

Read doc/install-upgrade.html, doc/changes.html might also be interesting.

 2) Can I separate mailboxes in diferent partitions depending of their
 first letter? (for example: if mailbox name is exampleAmydomaincom must
 be delivered in /var/mail/e)

You can separate mailboxes onto different partitions, yes, I'm not sure
why you would limit it to first letter though.

You can define in imapd.conf items like:

partition-u1: /imap/u1
partition-u2: /imap/u2

and then move mailboxes between them with the rename command in cyradm
(e.g. rename user.rjs3 user.rjs3 u2)

Just be sure that the defaultpartition imapd.conf option specifies the
partition to get creates done on by default, and that all the partitions
have the hashing directories configured properly (e.g. /a, /b, /c, etc)
and all permissions are set.

-Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper





Re: Sendmail Unix Hierarchy Sep

2002-12-31 Thread Simon Loader
I havent messed with sendmail configs for a while (been using these new 
fangled MTA`s of late). Check the flags for your mailer is passing the 
full emial. Track down which line in the config the error is coming from 
becuase it looks like this is a sendmail problem.

--
Simon Loader

Ilan Rabinovitch wrote:

thanks for the suggestion.  I patched cyrus but I'm still getting:

Dec 31 04:30:44 igaming1 sendmail[5278]: gBV4TxVF005275: gBV4UiVF005278:
DSN: User unknown

In the sendmail logs. 

Any suggestions?

Thanks again,
Ilan


On Mon, Dec 30, 2002 at 08:59:00PM -0600, Simon Loader wrote:

Are you using cyrus 2.2 ? (cvs only) if not try the lmtp patch at
http://www.surf.org.uk/downloads/

--
Simon Loader

Ilan Rabinovitch wrote:



Hello,

In case this might help I'm attaching my sendmail.mc file.
I'm still not having much luck with this thing.
Same problem of sendmail rewriting the recipient to be just 'user' instead
of '[EMAIL PROTECTED]'

Any suggestions greatly appreciated.  Is there a guide or a document out
there on this I cant seem to find antyhign that covers this problem.

Thanks,
Ilan

divert(-1)
# 
#
#	(C) Copyright 2000 by Carnegie Mellon University
#	Portions (C) Copyright 2000 Red Hat, Inc.
#
#	This sample mc file is for a site that uses the Cyrus IMAP server
#	exclusively for local mail. This requires Sendmail 8.10 or later.
#
divert(0)
include(`/usr/share/sendmail-cf/m4/cf.m4')
OSTYPE(`linux')
define(`confDEF_USER_ID',``8:12'')dnl
define(`confTO_CONNECT', `1m')dnl
define(`confBIND_OPTS',`-DNSRCH -DEFNAMES')dnl
define(`confDONT_PROBE_INTERFACES',true)dnl
define(`confTO_IDENT',`0')dnl
define(`confLOCAL_MAILER',`cyrus')dnl
define(`ALIAS_FILE',`/etc/mail/aliases')dnl
define(`STATUS_FILE', `/var/log/sendmail.st')dnl
FEATURE(`mailertable',`hash -o /etc/mail/mailertable')dnl
FEATURE(redirect)dnl
FEATURE(always_add_domain)dnl
FEATURE(use_cw_file)dnl
FEATURE(`access_db')dnl
FEATURE(`genericstable')dnl
FEATURE(`virtusertable')dnl
EXPOSED_USER(`root')dnl
EXPOSED_USER(`postmaster')dnl
EXPOSED_USER(`mailer-daemon')dnl
MAILER(smtp)dnl
MAILER(local)dnl

MAILER_DEFINITIONS
Mcyrus,		P=[IPC], F=lsDFMnqA5@/:|SmXz, E=\r\n,
		S=EnvFromL, R=EnvToL/HdrToL, T=DNS/RFC822/X-Unix, 
		A=FILE /var/lib/imap/socket/lmtp

LOCAL_RULE_0
Rbb + $+  @ $=w . 	$#cyrus $: + $1

LOCAL_RULESETS
# if there's a plus part, we want to directly deliver it
SLocal_localaddr
R$+ + $*	$#cyrus $@ $: $1 + $2


Ilan Rabinovitch wrote:


Hello,

I'm trying to get sendmail to work with Cyrus-Imap and UnixHierarchysep.
Right now when e-mails come in sendmail only seems to pass on the 'user'
part of '[EMAIL PROTECTED]' so the mail never reaches the mail box I created
for it.

Any suggestions on how to fix this? Anyone have a sample sendmail.mc I can
look at?

thanks,
Ilan








Re: Sendmail Unix Hierarchy Sep

2002-12-31 Thread Ilan Rabinovitch
Ya this is definately a sendmail problem.  I was hoping someone on this list
had run into it before because for the life of me I cant figure out which
flag I need to remove or add to solve this.

Thanks,
Ilan

On Tue, Dec 31, 2002 at 09:34:51AM -0600, Simon Loader wrote:
 I havent messed with sendmail configs for a while (been using these new 
 fangled MTA`s of late). Check the flags for your mailer is passing the 
 full emial. Track down which line in the config the error is coming from 
 becuase it looks like this is a sendmail problem.
 
 -- 
 Simon Loader
 
 Ilan Rabinovitch wrote:
 
 thanks for the suggestion.  I patched cyrus but I'm still getting:
 
 Dec 31 04:30:44 igaming1 sendmail[5278]: gBV4TxVF005275: gBV4UiVF005278:
 DSN: User unknown
 
 In the sendmail logs. 
 
 Any suggestions?
 
 Thanks again,
 Ilan
 
 
 On Mon, Dec 30, 2002 at 08:59:00PM -0600, Simon Loader wrote:
 
 Are you using cyrus 2.2 ? (cvs only) if not try the lmtp patch at
 http://www.surf.org.uk/downloads/
 
 -- 
 Simon Loader
 
 Ilan Rabinovitch wrote:
 
 
 Hello,
 
 In case this might help I'm attaching my sendmail.mc file.
 I'm still not having much luck with this thing.
 Same problem of sendmail rewriting the recipient to be just 'user' 
 instead
 of '[EMAIL PROTECTED]'
 
 Any suggestions greatly appreciated.  Is there a guide or a document out
 there on this I cant seem to find antyhign that covers this problem.
 
 Thanks,
 Ilan
 
 divert(-1)
 # 
 #
 #  (C) Copyright 2000 by Carnegie Mellon University
 #  Portions (C) Copyright 2000 Red Hat, Inc.
 #
 #  This sample mc file is for a site that uses the Cyrus IMAP server
 #  exclusively for local mail. This requires Sendmail 8.10 or later.
 #
 divert(0)
 include(`/usr/share/sendmail-cf/m4/cf.m4')
 OSTYPE(`linux')
 define(`confDEF_USER_ID',``8:12'')dnl
 define(`confTO_CONNECT', `1m')dnl
 define(`confBIND_OPTS',`-DNSRCH -DEFNAMES')dnl
 define(`confDONT_PROBE_INTERFACES',true)dnl
 define(`confTO_IDENT',`0')dnl
 define(`confLOCAL_MAILER',`cyrus')dnl
 define(`ALIAS_FILE',`/etc/mail/aliases')dnl
 define(`STATUS_FILE', `/var/log/sendmail.st')dnl
 FEATURE(`mailertable',`hash -o /etc/mail/mailertable')dnl
 FEATURE(redirect)dnl
 FEATURE(always_add_domain)dnl
 FEATURE(use_cw_file)dnl
 FEATURE(`access_db')dnl
 FEATURE(`genericstable')dnl
 FEATURE(`virtusertable')dnl
 EXPOSED_USER(`root')dnl
 EXPOSED_USER(`postmaster')dnl
 EXPOSED_USER(`mailer-daemon')dnl
 MAILER(smtp)dnl
 MAILER(local)dnl
 
 MAILER_DEFINITIONS
 Mcyrus,P=[IPC], F=lsDFMnqA5@/:|SmXz, E=\r\n,
S=EnvFromL, R=EnvToL/HdrToL, T=DNS/RFC822/X-Unix, 
A=FILE /var/lib/imap/socket/lmtp
 
 LOCAL_RULE_0
 Rbb + $+  @ $=w .$#cyrus $: + $1
 
 LOCAL_RULESETS
 # if there's a plus part, we want to directly deliver it
 SLocal_localaddr
 R$+ + $*   $#cyrus $@ $: $1 + $2
 
 
 Ilan Rabinovitch wrote:
 
 
 Hello,
 
 I'm trying to get sendmail to work with Cyrus-Imap and UnixHierarchysep.
 Right now when e-mails come in sendmail only seems to pass on the 'user'
 part of '[EMAIL PROTECTED]' so the mail never reaches the mail box I 
 created
 for it.
 
 Any suggestions on how to fix this? Anyone have a sample sendmail.mc I 
 can
 look at?
 
 thanks,
 Ilan
 
 
 



Re: make depend problems

2002-12-31 Thread simon . brady
On Tue, 31 Dec 2002 [EMAIL PROTECTED] wrote:

 I am trying to compile the latest version of Cyrus IMAPD and have some
 problems already with the make depend, as you can see here in my output:
 
 gmake[1]: Leaving directory `/opt/source/cyrus-imapd-2.1.11/imtest'
 ### Making depend in /opt/source/cyrus-imapd-2.1.11/perl
 gmake[1]: Entering directory `/opt/source/cyrus-imapd-2.1.11/perl'
 ### Making depend in /opt/source/cyrus-imapd-2.1.11/perl/sieve
 gmake[2]: Entering directory `/opt/source/cyrus-imapd-2.1.11/perl/sieve'
 gmake[2]: *** No rule to make target `depend'.  Stop.
 gmake[2]: Leaving directory `/opt/source/cyrus-imapd-2.1.11/perl/sieve'
 gmake[1]: *** [depend] Error 1
 gmake[1]: Leaving directory `/opt/source/cyrus-imapd-2.1.11/perl'
 gmake: *** [depend] Error 1
 
 Does anyone have an idea what the problem could be ??? I am using standard
 GNU tools on Solaris 9.

Are you using the --disable-sieve configure option? It's broken and will
produce this error, but the attached patch (tested on Solaris 8 with GNU
tools) fixes the problem.

--
Simon Brady mailto:[EMAIL PROTECTED]
ITS Technical Services
University of Otago, Dunedin, New Zealand

diff -ru cyrus-imapd-2.1.11.orig/configure.in cyrus-imapd-2.1.11/configure.in
--- cyrus-imapd-2.1.11.orig/configure.inSun Nov 17 05:31:54 2002
+++ cyrus-imapd-2.1.11/configure.in Wed Jan  1 13:37:32 2003
@@ -871,7 +871,10 @@
EXTRA_OUTPUT=${EXTRA_OUTPUT} timsieved/Makefile notifyd/Makefile
 
PERL_SUBDIRS=${PERL_SUBDIRS} sieve
+   PERL_DEPSUBDIRS=sieve
EXTRA_OUTPUT=${EXTRA_OUTPUT} perl/sieve/Makefile perl/sieve/lib/Makefile
+else
+   PERL_DEPSUBDIRS=none
 fi
 
 dnl Check for MD5 functions
@@ -941,6 +944,7 @@
 dnl   fi
 dnl ], perl=$PERL; with_perl=$with_perl; prefix=$prefix; SASL_LIB=$LIB_SASL; 
SASL_INC=$SASLFLAGS; export SASL_LIB SASL_INC)
 AC_SUBST(PERL_SUBDIRS)
+AC_SUBST(PERL_DEPSUBDIRS)
 AC_SUBST(PERL)
 
 dnl make sure that Makefile is the last thing output
diff -ru cyrus-imapd-2.1.11.orig/perl/Makefile.in cyrus-imapd-2.1.11/perl/Makefile.in
--- cyrus-imapd-2.1.11.orig/perl/Makefile.inTue Jul 23 04:16:05 2002
+++ cyrus-imapd-2.1.11/perl/Makefile.in Wed Jan  1 13:37:55 2003
@@ -44,7 +44,7 @@
 
 SUBDIRS = @PERL_SUBDIRS@
 
-DEPSUBDIRS = sieve
+DEPSUBDIRS = @PERL_DEPSUBDIRS@
 
 srcdir = @srcdir@
 VPATH = @srcdir@
@@ -107,11 +107,13 @@
rm -f Makefile Makefile.bak config.status config.log config.cache
 
 depend::
-   @for d in  $(DEPSUBDIRS); \
-   do \
-   (cd $$d; echo ### Making depend in `pwd`;   \
-   $(MAKE) $(MFLAGS) DESTDIR=$(DESTDIR) depend) || exit 1; \
-   done
+   @if test $(DEPSUBDIRS) != none; then \
+   for d in  $(DEPSUBDIRS); \
+   do \
+   (cd $$d; echo ### Making depend in `pwd`;   \
+   $(MAKE) $(MFLAGS) DESTDIR=$(DESTDIR) depend) || exit 
+1; \
+   done; \
+   fi
 
 checkdepend::
 



Re: [Annoyed] Cyrus-imapd/sasl upgrade and lmtpd behaviour...

2002-12-31 Thread simon . brady
On Mon, 30 Dec 2002, Scott Smith wrote:

 What you probably want to do is add your MTA to the same group as Cyrus,
 at most.  [...]  Cyrus / SASL peeps, can you DOCUMENT this, since I
 personally know of several people that have had this problem, including
 myself when I upgraded from 1.5.x :)

Not wanting to sound patronising, but doc/install-configure.html already 
says this:

  * Edit /etc/group and add user daemon to the mail group. This 
will permit sendmail to run the deliver (LMTP client) program to
deliver mail to the IMAP server.

Mind you, it's under Sendmail 8.9.x - perhaps it need to be moved to an
outer scope?

--
Simon Brady mailto:[EMAIL PROTECTED]
ITS Technical Services
University of Otago, Dunedin, New Zealand




Re: SASLAuthD keeps dying.

2002-12-31 Thread simon . brady
On 29 Dec 2002, Oliver Jones wrote:

 I think it is the TLS support of pam_ldap that is causing the core
 dump.  I ran saslauthd in a debugger and it seg faulted in
 libcrypto.so.2 which is part of openssl.
 
 The interesting thing is that all my other pam related apps arn't
 dumping core or crashing and they are all using TLS to talk to the LDAP
 server via pam_ldap.  So it must be some interaction between pam, LDAP
 and saslauthd that is causing the issue.

This doesn't directly solve your problem, but have you considered dropping 
PAM and just using saslauthd's built-in ldap support? I'm running it in 
production (2.1.10) talking to ldap://localhost, and have tested it 
successfully with ldaps://remotehost. What does PAM-LDAP buy you that the 
native mechanism doesn't?

(Although as an aside, I strongly second Henrique's advice about checking
which libraries it's picking up: I sweated several hours over a different
saslauthd problem only to find that ldd told me the answer instantly.)

--
Simon Brady mailto:[EMAIL PROTECTED]
ITS Technical Services
University of Otago, Dunedin, New Zealand





Re: someoone are using saslauthd+ldaps?

2002-12-31 Thread simon . brady
On Sat, 28 Dec 2002, Felix Cuello wrote:

   Someone are using saslauthd + ldaps?, because my saslauthd works fine
   with LDAP but not with LDAPS...

I can confirm that it works with SASL 2.1.10 / OpenLDAP 2.0.27 on 
Solaris 8. What sort of problems are you getting? Does ldaps in general 
work from the machine, e.g. can you do an ldapsearch to ldaps://host?

--
Simon Brady mailto:[EMAIL PROTECTED]
ITS Technical Services
University of Otago, Dunedin, New Zealand





Re: [Annoyed] Cyrus-imapd/sasl upgrade and lmtpd behaviour...

2002-12-31 Thread Scott Smith
huh...but I don't use Sendmail, so I never saw that :)

So yes maybe moving it to a different spot in the documentation and making
it a bit more generalized is a good idea, I agree.

Scott

--
[EMAIL PROTECTED] ``Chews?  I'll take charleston
http://storm.lackluster.net/~scott/ chews for SIXTEEN MILLIONS!!''

On Wed, 1 Jan 2003 [EMAIL PROTECTED] wrote:

 On Mon, 30 Dec 2002, Scott Smith wrote:

  What you probably want to do is add your MTA to the same group as Cyrus,
  at most.  [...]  Cyrus / SASL peeps, can you DOCUMENT this, since I
  personally know of several people that have had this problem, including
  myself when I upgraded from 1.5.x :)

 Not wanting to sound patronising, but doc/install-configure.html already
 says this:

   * Edit /etc/group and add user daemon to the mail group. This
 will permit sendmail to run the deliver (LMTP client) program to
 deliver mail to the IMAP server.

 Mind you, it's under Sendmail 8.9.x - perhaps it need to be moved to an
 outer scope?

 --
 Simon Brady mailto:[EMAIL PROTECTED]
 ITS Technical Services
 University of Otago, Dunedin, New Zealand






saslauthd performance anxiety

2002-12-31 Thread simon . brady
I've just upgraded to imapd 2.1.11, and while it's going fine so far I'm a
bit concerned about how it will cope under load when our students return.

The problem is that I'm using the saslauthd native LDAP mechanism, and the
directory it's binding to is quite slow (it's actually a slapd instance
running a shell backend which routes bind requests to different places
depending on the usercode - don't ask...). Because saslauthd makes
synchronous bind calls, it's doesn't take many concurrent requests to
exhaust the default pool of five instances.

Since it's hard to predict peak usage, I'm tempted to run the daemon with 
the -n0 option so it can spawn as required. However, a colleague has 
pointed out that if something blows up then spawn-on-demand could kill the 
server - with a fixed-size pool, auth requests would fail but the system 
would keep going.

Can anyone offer advice on tuning the saslauthd pool? Are there particular
options, either on the command line or in saslauthd.conf, which I should
be looking at?

Many thanks...
Simon

--
Simon Brady mailto:[EMAIL PROTECTED]
ITS Technical Services
University of Otago, Dunedin, New Zealand




Re: saslauthd performance anxiety

2002-12-31 Thread Igor Brezac

On Wed, 1 Jan 2003 [EMAIL PROTECTED] wrote:

 I've just upgraded to imapd 2.1.11, and while it's going fine so far I'm a
 bit concerned about how it will cope under load when our students return.

 The problem is that I'm using the saslauthd native LDAP mechanism, and the
 directory it's binding to is quite slow (it's actually a slapd instance
 running a shell backend which routes bind requests to different places
 depending on the usercode - don't ask...). Because saslauthd makes
 synchronous bind calls, it's doesn't take many concurrent requests to
 exhaust the default pool of five instances.

 Since it's hard to predict peak usage, I'm tempted to run the daemon with
 the -n0 option so it can spawn as required. However, a colleague has
 pointed out that if something blows up then spawn-on-demand could kill the
 server - with a fixed-size pool, auth requests would fail but the system
 would keep going.


How many concurrent authentications do you need?  You can use
testsaslauthd (in $cyrus-sasl/saslauthd) to verify the performance of
saslauthd.

 Can anyone offer advice on tuning the saslauthd pool? Are there particular
 options, either on the command line or in saslauthd.conf, which I should
 be looking at?


Try using 'ldap_auth_method: custom'.  It is up to three times faster
than the 'bind' method.

-Igor