Re: Anyone using Linux LVM with cyrus?

2003-02-06 Thread Simon Matter
Hans Wilmer schrieb:
 
 On Wed, Feb 05, 2003 at 04:36:03PM -0400, Patrick Boutilier wrote:
 
  We are using LVM to give the ability to add disk space and expand our
  reiserfs when necessary.
 
 Is it possible to add disc space with ext3fs and LVM, too?
 
  We are using LVM on top of hardware RAID 5 so as long as 2 disks don't
  fail at once we should be OK.
 
 Hm, sounds nice :)
 
 To be more specific, what I've in mind is a setup like that, for
 60--100 users:
 
 +  18 or 36 GB SCSI: system itselfe and about 20--25 GB /var for
incoming/outgoing mail (incl. virus scanning) and the more actively
used part of the cyrus mail store, quota of about 100 MB/user or
10 GB shared by the user.* hierarchy on it
 
 +  120 GB IDE to keep another cyrus mail store partition (archive)
Users should move older mail from the default partition to
the archive. Some shared folders will probably reside on the IDE
discs, too. The archives will provide a quota of 1 GB/user.
 
 Two identical 120 GB IDE discs should be used to keep and mirror the
 archive. The SCSI disc should be mirrored also (at least the /var
 partition), though I'm not sure yet whether it's better to use a
 second SCSI disc for that or if it's a good idea to divide the IDEs
 into partitions of 100 GB and 20 GB each, so that the SCSI disc can be
 mirrored to the 20 GB partitions on the IDEs.
 
 Daily backups will probably be done to another 120 GB IDE disc. I'll
 use ext3fs for all partitions --- reiserfs or even xfs may have
 advantages, but I like ext3 more, and the expected number of files
 that have to be handled should be still ok for ext3.
 
 Is this a reasonable setup, and can it reliably be done with LVM? Or
 is it better to use raidtools2 for it?
 
 Or would you suggest to use hardware IDE RAID instead, maybe by
 forgoing SCSI?

Hi,

Your idea looks similar to what I'm intending to do with my next big
server. Some things come to mind:

- Hardware IDE Raid: Most so called hardware RAID are simply software
RAID, because the driver from the vendor does software RAID. Those
driver are often binary only and they do RAID worse than the Linux MD
driver does it. Until you want to go with true hardware RAID like 3ware,
stay away from it.

- I've been using LVM on top of software RAID0,1,5. I've been told that
the RAID function built in in LVM is not as good as Linux MD, YMMV.

- XFS on top of LVM/MD is very cool because you can grow volumes and
filesystems on the fully operating server. In fact, growing XFS can only
be done online. Unfortunately there were some issues with snapshotting
with XFS.

- ext3 on top of LVM/MD works well too. Snapshotting works well. Growing
filesystems have to be done offline. There are tools to grow online, but
this is dangerous.

Simon

 
 Any suggestions are appreciated --- I don't know how flexible LVM can
 make things, so a totally different setup might be even better.
 
 GH



Reject mail overquota

2003-02-06 Thread Víctor Guerra



Hello !, i am using cyrus 2.0.12 with SASL-1.5.24 
and i have a problem. I don't know how to make cyrus rejects a mail to the 
sender when the destinatary mailbox is over quota. How can i make 
this?

Regards.

Víctor Guerra[EMAIL PROTECTED]


saslauthd getpwent

2003-02-06 Thread RJ45

hello I noticed that getpwent method of saslauthd fails on solaris, it
works with pam or shadow but not with getpwent. IS it normal for Solaris 9
? or is there some trick to make it work?
thanks

Rick






mailinglists

2003-02-06 Thread Peter Burggraef
Hi,

I want cyrus to delete mails, older then sometime.

How can I do this?

Thank You
Peter



cyradm -- why not asking for password?

2003-02-06 Thread Peter Burggraef
Hi,

first thank you for your help with my last problem. I found the mistake and 
please don't laugh: When I tried to logon with cyradm, is seems for me, as if 
nothing happens. I used cyradm localhost and the curser jumped th the next 
line. But not more. After some returns I got the message: could not 
authenticate. After some hours I had tried evrything I hit on to enter my 
password. I got a message to enter my imap password. That was it.

Why is cyradm not asking for a password? Why do I have to enter it twice?

Thah you
Peter

 



Re: cyrus 2.2 and virtual domain resolution

2003-02-06 Thread Ilya

 i can login as [EMAIL PROTECTED] to both pop3 (telnet) and imap (mutt and
 imtest),
 I can login to pop3 and imtest with user and [EMAIL PROTECTED].
 BUT when I use mutt to login as [EMAIL PROTECTED] or user it 
 fails again with
 same domain=com in log.
 Where as [EMAIL PROTECTED] works fine.
 I cannot understand why pop3 and imtest (with -r and without, as user 
 and as
 [EMAIL PROTECTED]) works but mutt doesnt???
 
 
 Anything I am doing wrong?
  
 
 Do you have an IP reverse lookup setup in DNS for your machine ? dig -x 
 your.ip.address.here gives you defauldomain.com or 
 hostname.defaultdomain.com ?
 
 --Christian--

yes you were right DNS had reverse address for 127.0.0.1 as
localhost.defaultdomain.com. I fixed it, but it didnt change anything.
I still need hosts file to contain localhost.defaultdomain.com for users in
defaultdomain to be able to login at all .



Re: saslauthd getpwent

2003-02-06 Thread John Alton Tamplin
RJ45 wrote:


hello I noticed that getpwent method of saslauthd fails on solaris, it
works with pam or shadow but not with getpwent. IS it normal for Solaris 9
? or is there some trick to make it work?


During the transition here, I was running saslauthd -a getpwent because 
it was easier to hack the backdoor password into the getpwent method 
rather than pam, and it worked just fine feeding from NIS+ on Solaris 9. 
Is you name service switch setup properly?  Are you running NIS, or are 
you using local shadow files?

--
John A. Tamplin   Unix System Administrator
Emory University, School of Public Health +1 404/727-9931





Re: mailinglists

2003-02-06 Thread Patrick Boutilier
What version of cyrus? If 2.x :



man ipurge




Peter Burggraef wrote:

Hi,

I want cyrus to delete mails, older then sometime.

How can I do this?

Thank You
Peter





Re: looking for Cyrus mail format documentation

2003-02-06 Thread John Alton Tamplin
Phil Howard wrote:


That would result in doubling the bandwidth on the inside server connection
since it would be dealing with the mail first coming in to the MX, then
being replicated back out to the other server.  By delivering outside mail
to the outside server first, the only bandwidth usage is replicating to
the inside server (reverse the scenario for mail originating inside).
 

Is the cost of bandwidth to your inside server really so expensive as to 
justify the expense of complicated development, hosting an offsite 
server with that much bandwidth, and maintaining a remote system?  It 
really sounds like you are overengineering the problem.

If there was a way to track when the flags got changed.  I feel it's OK
to trust the clocks on the servers, and simply decide which flag state
prevails based on which has the later timestamp.  But I bet that metadata
isn't in the current mailstore design.


No, the time a flag was changed isn't kept.  In fact for seen flags 
which are cached in memory while a mailbox is open, only a single bit is 
kept.

--
John A. Tamplin   Unix System Administrator
Emory University, School of Public Health +1 404/727-9931





Re: mailinglists

2003-02-06 Thread John Alton Tamplin
Peter Burggraef wrote:


I want cyrus to delete mails, older then sometime.

How can I do this?
 

man ipurge

--
John A. Tamplin   Unix System Administrator
Emory University, School of Public Health +1 404/727-9931






Re: imapd's hang when maxchild count is reached

2003-02-06 Thread Henrique de Moraes Holschuh
On Wed, 05 Feb 2003, Igor Brezac wrote:
  descriptors down to a child via a unix domain socket using sendmsg() or
  recvmsg(). In this case the master accepts the connection, passes the
  descriptor to a child via sendmsg(), closes the socket (the child should now
  be servicing it), and goes back to listening.
 
 This is not very portable.  ;(

Would it work on Linux and Solaris? If the answer is yes to both, then I
would vote for adding that suport conditional to a configure.in check.

I guess if it can be done on Linux, the BSDs can almost certainly do it as
well.

-- 
  One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie. -- The Silicon Valley Tarot
  Henrique Holschuh



Re: imapd's hang when maxchild count is reached

2003-02-06 Thread Igor Brezac

On Thu, 6 Feb 2003, Henrique de Moraes Holschuh wrote:

 On Wed, 05 Feb 2003, Igor Brezac wrote:
   descriptors down to a child via a unix domain socket using sendmsg() or
   recvmsg(). In this case the master accepts the connection, passes the
   descriptor to a child via sendmsg(), closes the socket (the child should now
   be servicing it), and goes back to listening.
 
  This is not very portable.  ;(

 Would it work on Linux and Solaris? If the answer is yes to both, then I
 would vote for adding that suport conditional to a configure.in check.

 I guess if it can be done on Linux, the BSDs can almost certainly do it as
 well.


It'll work on all SVR4 (Solaris, DGUX, HPUX, etc.) based OSs and Linux.
I am not sure about BSD.  I know SCO will not work, at least earlier
versions will not work.

-- 
Igor





Compile-Error cuyry-imap2.1.12 and cyrus-imap2.1.9: Newbie

2003-02-06 Thread Klaus Litfin
Hallo to all,

I have problems to compile cyrus-imap-Server.
I'm a newbie in Cyrus, but I read the mailing-Archives,  to see if there 
is a solution to the problem and havent seen any.
Some hints were in changing the include of db.h in lib/cyrusdb_db3.c 
to a full path-incude. But this did not work for me.

Here is what i tried. I tried two nights without success. I would 
appreciate if someone could give me some help.
Many Thancs in advance.

Klaus
---

I tried different combinations:
For example i tried with (Berkley 4.0.14, cyrus-sasl-2.1.9, and 
cyrus-imapd-2.1.9)

The configure-Script of the cyrus-imapd failed, when analyzing the 
DB-Version.
and stopped:

./configure \
--with-sasl=/usr/local/lib \
--with-perl \
--with-auth=unix \
--with-openssl=/usr/local/openssl \
--without-ucdsnmp



loading cache ./config.cache
checking host system type... i686-pc-linux-gnu
checking for makedepend... makedepend
checking for gcc... gcc
checking whether the C compiler (gcc  ) works... yes
checking whether the C compiler (gcc  ) is a cross-compiler... no
checking whether we are using GNU C... yes
checking whether gcc accepts -g... yes
checking for ranlib... ranlib
checking whether make sets ${MAKE}... yes
checking for a BSD compatible install... /usr/bin/ginstall -c
checking how to run the C preprocessor... gcc -E
checking for AIX... no
checking for strerror in -lcposix... no
checking for mawk... no
checking for gawk... gawk
checking for working const... yes
checking for long file names... yes
checking for __attribute__... yes
checking for runpath switch... -Wl,-rpath,
checking for unistd.h... yes
checking for sys/select.h... yes
checking for sys/param.h... yes
checking for memmove... yes
checking for strcasecmp... yes
checking for ftruncate... yes
checking for strerror... yes
checking for getaddrinfo... yes
checking for getnameinfo... yes
checking for dirent.h that defines DIR... yes
checking for opendir in -ldir... no
checking whether struct tm is in sys/time.h or time.h... time.h
checking for tm_zone in struct tm... yes
checking for vprintf... yes
checking for db_create in -ldb-4.0... no
checking for db_create in -ldb-4... no
checking for db_create in -ldb4.0... no
checking for db_create in -ldb4... no
checking for db_create in -ldb-3.3... no
checking for db_create in -ldb3.3... no
checking for db_create in -ldb-3.2... no
checking for db_create in -ldb3.2... no
checking for db_create in -ldb-3.1... no
checking for db_create in -ldb3.1... no
checking for db_create in -ldb-3... no
checking for db_create in -ldb3... no
checking for db_create in -ldb... no
configure: error: this version requires Berkeley DB 3.x or later.
(Get it from http://www.sleepycat.com/.)
--

Is the configure-Script corrupt or did i make a mistake with the parameters?

A second/third  try was a combination of

(BerkleyDB 4.0.14, cyrus-sasl-2.1.12, and cyrus-imapd-2.1.12)

or with (BerkleyDB 4.1.25, cyrus-sasl-2.1.12, and cyrus-imapd-2.1.12).

At this time the configure-Script does not stop, but did not recognize 
the correct version of the database.
...
checking for vprintf... (cached) yes
checking for db.h... (cached) yes
checking for db_create in -ldb-4.1... (cached) no
checking for db_create in -ldb4.1... (cached) no
checking for db_create in -ldb-4.0... (cached) no
checking for db_create in -ldb4.0... (cached) no
checking for db_create in -ldb-4... (cached) no
checking for db_create in -ldb4... (cached) no
checking for db_create in -ldb-3.3... (cached) no
checking for db_create in -ldb3.3... (cached) no
checking for db_create in -ldb-3.2... (cached) no
checking for db_create in -ldb3.2... (cached) no
checking for db_create in -ldb-3.1... (cached) no
checking for db_create in -ldb3.1... (cached) no
checking for db_create in -ldb-3... (cached) no
checking for db_create in -ldb3... (cached) no
checking for db_create in -ldb... (cached) no
checking for db_open in -ldb... (cached) yes
checking duplicate db database backend... db3_nosync

In a little bit later the last step the compilation failed:


make depend

make all CFLAGS=-O
( I tried with export CPPFLAGS=-I/path-to-Berkley-includes ) but it 
did not work in a correct way)
The result:
.
gcc -L/usr/local/openssl/lib -Wl,-rpath,/usr/local/openssl/lib 
-L/usr/local/lib -Wl,-rpath,/usr/local/lib  -Wall -g -O2   -o imapd \
../master/service.o pushstats.o backend.o imapd.o index.o tls.o 
version.o libimap.a ../acap/libacap.a ../lib/libcyrus.a  
-L/usr/local/lib/lib  -Wl,-rpath,/usr/local/lib/lib -lsasl2   -ldl -lfl  
-lresolv   -ldb -lssl -lcrypto ../et/libcom_err.a -lwrap -lnsl
../lib/libcyrus.a(cyrusdb_db3.o): In function `init':
cyrusdb_db3.o(.text+0xd7): undefined reference to `db_env_create'
cyrusdb_db3.o(.text+0xea): undefined reference to `db_strerror'
cyrusdb_db3.o(.text+0x17e): undefined reference to `db_strerror'
cyrusdb_db3.o(.text+0x1b9): undefined reference to `db_strerror'
cyrusdb_db3.o(.text+0x24b): undefined reference to 

Re: Compile-Error cuyry-imap2.1.12 and cyrus-imap2.1.9: Newbie

2003-02-06 Thread Patrick Welche
On Thu, Feb 06, 2003 at 04:54:40PM +0100, Klaus Litfin wrote:
...
 Is the configure-Script corrupt or did i make a mistake with the parameters?
 
 A second/third  try was a combination of
 
 (BerkleyDB 4.0.14, cyrus-sasl-2.1.12, and cyrus-imapd-2.1.12)
 
 or with (BerkleyDB 4.1.25, cyrus-sasl-2.1.12, and cyrus-imapd-2.1.12).
 
 At this time the configure-Script does not stop, but did not recognize 
 the correct version of the database.
 ...
 checking for vprintf... (cached) yes
 checking for db.h... (cached) yes
 checking for db_create in -ldb-4.1... (cached) no
 checking for db_create in -ldb4.1... (cached) no
 checking for db_create in -ldb-4.0... (cached) no
 checking for db_create in -ldb4.0... (cached) no
...

One suggestion is to
  rm -rf config.cache
between configure runs. It seems that you are just getting the results of
the first run each time as they are still cached. (the db changing to yes
is a bit strange though)

The other option to look at is using the following configure options
  --with-dbdir=DIRBerkeley DB files are in prefix DIR
  --with-bdb-libdir=DIR   Berkeley DB lib files are in DIR
  --with-bdb-incdir=DIR   Berkeley DB include files are in DIR

Cheers,

Patrick



Re: imapd's hang when maxchild count is reached

2003-02-06 Thread Dave McMurtrie
On Thu, 6 Feb 2003, Henrique de Moraes Holschuh wrote:

 On Wed, 05 Feb 2003, Igor Brezac wrote:
   descriptors down to a child via a unix domain socket using sendmsg() or
   recvmsg(). In this case the master accepts the connection, passes the
   descriptor to a child via sendmsg(), closes the socket (the child should now
   be servicing it), and goes back to listening.
 
  This is not very portable.  ;(

 Would it work on Linux and Solaris? If the answer is yes to both, then I
 would vote for adding that suport conditional to a configure.in check.

 I guess if it can be done on Linux, the BSDs can almost certainly do it as
 well.

Would this actually work anyway?  If the parent were to pass a file
descriptor (by putmsg or any other means) to the child, isn't he really
just passing an integer value?  In other words, the integer value 5 in
process B is not the same thing as file descriptor 5 in process A.

When the parent initally forks the child, (if close on exec isn't set) the
child and parent will have the same file descriptors available to them.
Wouldn't any fd's opened in the parent after the child exec()s be unique
to the running instance of the parent process?

Just asking -- I could be wrong  it wouldn't be the first time.

Dave
--
Dave McMurtrie, Systems Programmer
University of Pittsburgh
Computing Services and Systems Development,
Development Services -- UNIX and VMS Services
717P Cathedral of Learning
(412)-624-6413




Re: Compile-Error cuyry-imap2.1.12 and cyrus-imap2.1.9: Newbie

2003-02-06 Thread Simon Matter
Klaus Litfin schrieb:
 
 Hallo to all,
 
 I have problems to compile cyrus-imap-Server.
 I'm a newbie in Cyrus, but I read the mailing-Archives,  to see if there
 is a solution to the problem and havent seen any.
 Some hints were in changing the include of db.h in lib/cyrusdb_db3.c
 to a full path-incude. But this did not work for me.

I don't know anything about your linux distro. With cyrus-imapd-2.1.12,
I had to modify my rpm spec to build on RedHat 6.2 like this:

--with-bdb-incdir=%_includedir/%{_dbver}

which is expanded to

--with-bdb-incdir=/usr/include/db3/db.h

Just adopt to your situation.

HTH
Simon

 
 Here is what i tried. I tried two nights without success. I would
 appreciate if someone could give me some help.
 Many Thancs in advance.
 
 Klaus
 ---
 
 I tried different combinations:
 For example i tried with (Berkley 4.0.14, cyrus-sasl-2.1.9, and
 cyrus-imapd-2.1.9)
 
 The configure-Script of the cyrus-imapd failed, when analyzing the
 DB-Version.
 and stopped:
 
 ./configure \
 --with-sasl=/usr/local/lib \
 --with-perl \
 --with-auth=unix \
 --with-openssl=/usr/local/openssl \
 --without-ucdsnmp
 
 loading cache ./config.cache
 checking host system type... i686-pc-linux-gnu
 checking for makedepend... makedepend
 checking for gcc... gcc
 checking whether the C compiler (gcc  ) works... yes
 checking whether the C compiler (gcc  ) is a cross-compiler... no
 checking whether we are using GNU C... yes
 checking whether gcc accepts -g... yes
 checking for ranlib... ranlib
 checking whether make sets ${MAKE}... yes
 checking for a BSD compatible install... /usr/bin/ginstall -c
 checking how to run the C preprocessor... gcc -E
 checking for AIX... no
 checking for strerror in -lcposix... no
 checking for mawk... no
 checking for gawk... gawk
 checking for working const... yes
 checking for long file names... yes
 checking for __attribute__... yes
 checking for runpath switch... -Wl,-rpath,
 checking for unistd.h... yes
 checking for sys/select.h... yes
 checking for sys/param.h... yes
 checking for memmove... yes
 checking for strcasecmp... yes
 checking for ftruncate... yes
 checking for strerror... yes
 checking for getaddrinfo... yes
 checking for getnameinfo... yes
 checking for dirent.h that defines DIR... yes
 checking for opendir in -ldir... no
 checking whether struct tm is in sys/time.h or time.h... time.h
 checking for tm_zone in struct tm... yes
 checking for vprintf... yes
 checking for db_create in -ldb-4.0... no
 checking for db_create in -ldb-4... no
 checking for db_create in -ldb4.0... no
 checking for db_create in -ldb4... no
 checking for db_create in -ldb-3.3... no
 checking for db_create in -ldb3.3... no
 checking for db_create in -ldb-3.2... no
 checking for db_create in -ldb3.2... no
 checking for db_create in -ldb-3.1... no
 checking for db_create in -ldb3.1... no
 checking for db_create in -ldb-3... no
 checking for db_create in -ldb3... no
 checking for db_create in -ldb... no
 configure: error: this version requires Berkeley DB 3.x or later.
 (Get it from http://www.sleepycat.com/.)
 --
 
 Is the configure-Script corrupt or did i make a mistake with the parameters?
 
 A second/third  try was a combination of
 
 (BerkleyDB 4.0.14, cyrus-sasl-2.1.12, and cyrus-imapd-2.1.12)
 
 or with (BerkleyDB 4.1.25, cyrus-sasl-2.1.12, and cyrus-imapd-2.1.12).
 
 At this time the configure-Script does not stop, but did not recognize
 the correct version of the database.
 ...
 checking for vprintf... (cached) yes
 checking for db.h... (cached) yes
 checking for db_create in -ldb-4.1... (cached) no
 checking for db_create in -ldb4.1... (cached) no
 checking for db_create in -ldb-4.0... (cached) no
 checking for db_create in -ldb4.0... (cached) no
 checking for db_create in -ldb-4... (cached) no
 checking for db_create in -ldb4... (cached) no
 checking for db_create in -ldb-3.3... (cached) no
 checking for db_create in -ldb3.3... (cached) no
 checking for db_create in -ldb-3.2... (cached) no
 checking for db_create in -ldb3.2... (cached) no
 checking for db_create in -ldb-3.1... (cached) no
 checking for db_create in -ldb3.1... (cached) no
 checking for db_create in -ldb-3... (cached) no
 checking for db_create in -ldb3... (cached) no
 checking for db_create in -ldb... (cached) no
 checking for db_open in -ldb... (cached) yes
 checking duplicate db database backend... db3_nosync
 
 In a little bit later the last step the compilation failed:
 
 make depend
 
 make all CFLAGS=-O
 ( I tried with export CPPFLAGS=-I/path-to-Berkley-includes ) but it
 did not work in a correct way)
 The result:
 .
 gcc -L/usr/local/openssl/lib -Wl,-rpath,/usr/local/openssl/lib
 -L/usr/local/lib -Wl,-rpath,/usr/local/lib  -Wall -g -O2   -o imapd \
  ../master/service.o pushstats.o backend.o imapd.o index.o tls.o
 version.o libimap.a ../acap/libacap.a ../lib/libcyrus.a
 -L/usr/local/lib/lib  -Wl,-rpath,/usr/local/lib/lib -lsasl2   -ldl -lfl
 -lresolv   -ldb 

Re: imapd's hang when maxchild count is reached

2003-02-06 Thread Henrique de Moraes Holschuh
On Thu, 06 Feb 2003, Dave McMurtrie wrote:
 Would this actually work anyway?  If the parent were to pass a file

You can send descriptors over sockets if your unix kernel supports it. Linux
does, and apparently so does Solaris.

Anyway, I dislike the idea of losing preforks heavily, it is bound to be a
major pain when the system is overloaded.

-- 
  One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie. -- The Silicon Valley Tarot
  Henrique Holschuh



Re: cyrus 2.2 and virtual domain resolution

2003-02-06 Thread Ken Murchison


Ilya wrote:
 
 I have strange issues with virtualdomains.
 Some background:
 Freebsd 4.7
 hostname is defaultdomain.com, and running hostname command returns 
defaultdomain.com
 in imapd.conf
 virtdomains: yes
 defaultdomain: defaultdomain.com
 
 I am using mysqlauxprop which runs this SQL statement: select password from xxx
 where user=%u and domain=%r
 some additional domains I have are example1.com example2.com example3.com
 
 when I login to pop3 or imap as user which belongs to example1.com the log
 shows:
 select password from xxx where user=user and domain=com
 Of course login fails.

Read doc/install-virtdomains.html.  The code strips the first part of
the hostname assuming that it is the local host part, leaving the rest
as the domain (eg, hostname=www.xxx.yyy.zzz = domain=xxx.yyy.zzz). 
Setting the hostname of your machine to the actual domainname won't
work.  Is there a good reason why you're doing this?  If so, then I'd be
happy to accept a patch which will work in both cases.

-- 
Kenneth Murchison Oceana Matrix Ltd.
Software Engineer 21 Princeton Place
716-662-8973 x26  Orchard Park, NY 14127
--PGP Public Key--http://www.oceana.com/~ken/ksm.pgp



Problem compiling imapd 2.1.12 on AIX 5

2003-02-06 Thread Christopher S. Pallone
First off, thank you for you help in advance. Secondly, I'm sorry for such 
a long email. I figure the more info up front, the less time to 
troubleshoot the problem. ;)

I am using:

CforAIX V5.0.2.5 (vac.C)
GNU Make V3.80
Cyrus SASL V2.1.12 (saslauthd w/LDAP)


I run configure with the following options:

env CC=xlc MAKE=gmake \
CFLAGS=-O -qMAXMEM=16384 -brtl \
CPPFLAGS=-I/usr/local/include \
LDFLAGS=-L/usr/local/lib \
./configure --with-cyrus-prefix=/usr/local/cyrus-imapd-2.1.12 \
--prefix=/usr/local/cyrus-imapd-2.1.12 \
--with-statedir=/var/imapd \
--with-bdb-libdir=/usr/local/BerkeleyDB-4/lib \
--with-bdb-incdir=/usr/local/BerkeleyDB-4/include \
--with-cyrus-group=mail \
--with-cyrus-user=cyrus \
--with-openssl=/usr/local/openssl \
--with-sasl=/usr/local \
--enable-fulldirhash \
--enable-netscapehack

Configure seems to run without error:
--
creating cache ./config.cache
checking host system type... rs6000-ibm-aix
checking for makedepend... 
/home/cpallone/src/cyrus-imapd-2.1.12/tools/not-mkdep
configure: warning: Makedepend is not installed on this system.  You should 
compile and install the version from the makedepend subdirectory.
checking for gcc... xlc
checking whether the C compiler (xlc -O -qMAXMEM=16384 -brtl -qalias=noansi 
-qsrcmsg -r -L/usr/local/lib) works... yes
checking whether the C compiler (xlc -O -qMAXMEM=16384 -brtl -qalias=noansi 
-qsrcmsg -r -L/usr/local/lib) is a cross-compiler... yes
checking whether we are using GNU C... no
checking whether xlc accepts -g... yes
checking for ranlib... ranlib
checking whether gmake sets ${MAKE}... yes
checking for a BSD compatible install... ./install-sh -c
checking how to run the C preprocessor... xlc -E
checking for AIX... yes
checking for strerror in -lcposix... no
checking for mawk... no
checking for gawk... no
checking for nawk... nawk
checking for working const... yes
checking for long file names... yes
checking for __attribute__... no
checking for runpath switch... -R
checking for unistd.h... yes
checking for sys/select.h... yes
checking for sys/param.h... yes
checking for memmove... yes
checking for strcasecmp... yes
checking for ftruncate... yes
checking for strerror... yes
checking for dirent.h that defines DIR... yes
checking for opendir in -ldir... no
checking for connect... yes
checking for res_search... yes
checking for dn_expand... yes
checking for dns_lookup... yes
checking for getaddrinfo... yes
checking for gai_strerror... yes
checking for getnameinfo... yes
checking whether struct tm is in sys/time.h or time.h... time.h
checking for tm_zone in struct tm... no
checking for tzname... yes
checking for vprintf... yes
checking for db.h... yes
checking for db_create in -ldb-4.1... yes
checking duplicate db database backend... db3_nosync
checking mboxlist database backend... db3
checking seen state database backend... flat
checking subscription database backend... flat
checking TLS cache database backend... db3_nosync
checking for bison... bison -y
checking for flex... flex
checking for yywrap in -lfl... yes
checking for main in -lfl... yes
checking for library containing regcomp... none required
checking for rxposix.h... no
checking for strerror... (cached) yes
checking for sys/resource.h... yes
checking for setrlimit... yes
checking for getrlimit... yes
checking for daemon... yes
checking for setsid... yes
checking for setproctitle... yes
checking nonblocking method... fcntl
checking timezone GMT offset method... gmtime
checking for shared mmap... no
checking for stupid shared mmap... no
configure: warning: *** This system does not have a working mmap()
configure: warning: *** Expect a considerable performance penalty
checking for fcntl... yes
checking for fdatasync... yes
checking for sigvec... yes
checking for openssl... /usr/local/openssl
checking for ZInitialize in -lzephyr... no
checking for com_err.h... no
configure: warning: com_err is required; included version will be used.
checking for modern syslog... yes
checking for getdtablesize... yes
checking to use old sieve service name... no
checking for dlopen... yes
checking for sasl/sasl.h... yes
checking for sasl/saslutil.h... yes
checking for prop_get in -lsasl2... yes
checking for sasl_checkapop in -lsasl2... yes
checking for perl... perl
checking for MD5Init... yes
checking for request_init in -lwrap... no
checking libwrap support... no
checking for sprint_objid in -lsnmp... yes
checking for ucd-snmp/version.h... no
checking UCD SNMP libraries... no
updating cache ./config.cache
creating ./config.status
creating man/Makefile
creating master/Makefile
creating lib/Makefile
creating acap/Makefile
creating imap/Makefile
creating imap/feedcyrus
creating imtest/Makefile
creating netnews/Makefile
creating perl/Makefile
creating sieve/Makefile
creating et/Makefile
creating timsieved/Makefile
creating notifyd/Makefile
creating perl/sieve/Makefile

Re: ACLs and such

2003-02-06 Thread Rob Siemborski
On Thu, 6 Feb 2003, Hans Wilmer wrote:

 BTW, which IMAP clients or other programs are out there that allow
 users to easily edit their ACLs? A webclient to just set ACLs would
 also be ok. It would be *very* nice if I could tell our users to set
 the permissions they want on their mailfolders all on their own :)

Mulberry and cyradm both do this (though most people don't immediately
jump to the conclusion that cyradm is an IMAP client).

-Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper




Re: ACLs and such

2003-02-06 Thread Hans Wilmer
On Wed, Feb 05, 2003 at 07:47:45PM -0500, Rob Siemborski wrote:

 So, Offhand, I think the rest of your mail is to special purpose for
 general use, but I'll address this part of it, since its been brought up
 before.

At least the ability to automatically spread folders across several
partitions depending on their names can contribute to performance.

 Part of the design of cyrus includes the assumption that it's a bigger
 helpdesk headache when users blow away their own acls (and lose access)
 than it is if they are actually held bound to them.  Therefore, within a
 user's mailbox hierarchy, you cannot remove full rights for that user.

This is a very good point, though it took me some time to understand
it. I didn't realize that I cannot remove the 'a' flag from ACLs of
user.* mailboxes for their owners.

But I can still achieve what I want by creating an 'archives'
hierarchy outside the 'user' hierarchy. With permissions set
correctly, it's at least even more clear to the users what the
archives-stuff is about.

BTW, which IMAP clients or other programs are out there that allow
users to easily edit their ACLs? A webclient to just set ACLs would
also be ok. It would be *very* nice if I could tell our users to set
the permissions they want on their mailfolders all on their own :)

 There are various arguments against this, and I think the final
 decision was that we look at an implicit rights patch, whereby
 admins could specify what rights their users had on their
 mailboxes implicitly (and I seem to remember Ken even made one), but
 I can't locate it right now.  Ken?

So this provides control over what rights are inherited? Sounds good :)


GH



Re: Anyone using Linux LVM with cyrus?

2003-02-06 Thread Hans Wilmer
On Thu, Feb 06, 2003 at 08:42:00AM +0100, Simon Matter wrote:

 - Hardware IDE Raid: Most so called hardware RAID are simply software
 RAID, because the driver from the vendor does software RAID. Those
 driver are often binary only and they do RAID worse than the Linux MD
 driver does it. Until you want to go with true hardware RAID like 3ware,
 stay away from it.

Ja, I will. For one thing, it's not an option to rely on drivers
supplied by the vendor, as you might suddenly get stuck without any
driver at all as soon as a kernel update or something like that is
neccessary. Well, 3ware seems to be what most ppl recommend.

For another thing, I'm very reluctant with trusting any IDE hardware
RAID. Before building on it, I definitely want to see that it actually
works.

 - I've been using LVM on top of software RAID0,1,5. I've been told that
 the RAID function built in in LVM is not as good as Linux MD, YMMV.

hm

This sounds a bit overdone to me, but if it's better to use both
tools, why not :)

 - XFS on top of LVM/MD is very cool because you can grow volumes and
 filesystems on the fully operating server. In fact, growing XFS can only
 be done online.

XFS is a nice FS, but once I tried it and managed to damage some
data. It was probably my own fault, but I'm still a bit, hm, afraid of
using it. Otoh, I'd prefer XFS over reiserfs --- I don't like reiserfs
for no relevant reason, just a personal dislike.

 Unfortunately there were some issues with snapshotting with XFS.

Snapshotting? What's that?

 - ext3 on top of LVM/MD works well too. Snapshotting works well. Growing
 filesystems have to be done offline. There are tools to grow online, but
 this is dangerous.

Growing could be done offline, but I doubt that it'll ever be
needed.

The server may end up with about 15 million files on a 100 or 120 GB
partition at the time it is running out of disk space. My intention
was to use ext3 on that partition, but considering the large number of
files, I begin to doubt that ext3 is a good choice.

What do you guys think?


GH



Re: Solaris 8 cyrus-imspd-v1.6a3 can't make lib/prot.o

2003-02-06 Thread Peter Lawler
Hi there Glo,
I've got a home brewed Solaris x86 box I thought I'd give it a whirl for
you. I'm running a self-compiled gcc 3.2.1, that seems to be going OK -
it's down cyrus-imap  sasl and apache2.xx so far, so I think it's OK
(haven't had a chance to get the GCC test suite from work yet, seeing 'I
don't need it'), long story. But I digress...



Current working directory /usr/local/src/cyrus-imspd-v1.6a3/lib



I don't know if this is relevant, but cyrus-sasl-2.1.10 was configured


Well, I was scratching my head too. I started falling over building
imclient:
imclient.c: In function `imclient_connect':
imclient.c:288: warning: passing arg 5 of `sasl_client_new' from
incompatible pointer type
imclient.c:288: too few arguments to function `sasl_client_new'
imclient.c: In function `imclient_input':
imclient.c:676: warning: passing arg 4 of `sasl_decode' from
incompatible pointer type
imclient.c: In function `imclient_processoneevent':
imclient.c:995: warning: passing arg 4 of `sasl_encode' from
incompatible pointer type
imclient.c: In function `interaction':
imclient.c:1163: warning: passing arg 1 of `memset' discards qualifiers
from pointer target type
imclient.c: In function `imclient_authenticate_sub':
imclient.c:1226: `SASL_IP_REMOTE' undeclared (first use in this function)
imclient.c:1226: (Each undeclared identifier is reported only once
imclient.c:1226: for each function it appears in.)
imclient.c:1234: `SASL_IP_LOCAL' undeclared (first use in this function)
imclient.c:1252: warning: passing arg 4 of `sasl_client_start' from
incompatible pointer type
imclient.c:1252: warning: passing arg 5 of `sasl_client_start' from
incompatible pointer type
imclient.c:1252: warning: passing arg 6 of `sasl_client_start' from
incompatible pointer type
imclient.c:1252: too many arguments to function `sasl_client_start'
imclient.c:1295: warning: passing arg 5 of `sasl_client_step' from
incompatible pointer type

Then I started looking at the dates on this thing. It's 2000. I
*suspect* imsp may not be compatible with SASL2.. The reasoning was
in the porting the app document doc/appconvert.html, which says:
The SASL_IP_REMOTE and SASL_IP_LOCAL properties are now
SASL_IPLOCALPORT and SASL_IPREMOTEPORT and take strings

H Oh dear, it's late. I'm writing offline. I think I might go
sleep some :-)

Pete.






Re: saslauthd getpwent

2003-02-06 Thread Peter Lawler
I'm having fun and games @ the moment on Solaris. Inconsistent results
between cyradm and imtest, but I digress...

Try using -a pam or -a shadow, see how you go. Check the auth debug log
(as documented).

Pete.

RJ45 wrote:

hello I noticed that getpwent method of saslauthd fails on solaris, it
works with pam or shadow but not with getpwent. IS it normal for Solaris 9
? or is there some trick to make it work?
thanks

Rick









Re: Solaris 8 cyrus-imspd-v1.6a3 can't make lib/prot.o

2003-02-06 Thread Rob Siemborski
On Fri, 7 Feb 2003, Peter Lawler wrote:

 Then I started looking at the dates on this thing. It's 2000. I
 *suspect* imsp may not be compatible with SASL2.. The reasoning was
 in the porting the app document doc/appconvert.html, which says:
 The SASL_IP_REMOTE and SASL_IP_LOCAL properties are now
 SASL_IPLOCALPORT and SASL_IPREMOTEPORT and take strings

Nope.  IMSPd doesn't support SASL2 as released.  There's code in CVS to do
it though, but it hasn't recieved much testing.

-Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper




Re: saslauthd getpwent

2003-02-06 Thread RJ45

it works for me with -a shadow and with -a pam

I think fetpwent does not work cause solaris is not compliant to this
method.
anyway postfix-2.0.3-TLS+cyrus-sasl-2.1.12+cyrus-imapd-2.1.12 is now
working fine on solaris 9 for me

Rick


On Fri, 7 Feb 2003, Peter Lawler wrote:

 I'm having fun and games @ the moment on Solaris. Inconsistent results
 between cyradm and imtest, but I digress...
 
 Try using -a pam or -a shadow, see how you go. Check the auth debug log
 (as documented).
 
 Pete.
 
 RJ45 wrote:
  hello I noticed that getpwent method of saslauthd fails on solaris, it
  works with pam or shadow but not with getpwent. IS it normal for Solaris 9
  ? or is there some trick to make it work?
  thanks
  
  Rick
  
  
  
 
 
 




Re: saslauthd getpwent

2003-02-06 Thread Peter Lawler
RJ45 wrote:

it works for me with -a shadow and with -a pam

I think fetpwent does not work cause solaris is not compliant to this
method.

I *suspect* (ie, without looking) that getpwent is for FreeBSD and the 
like, which have a different structure (ie, no /etc/shadow file)

Pete.



lm command

2003-02-06 Thread Daniel Moore
Hi guys, I am haveing trouble deleting, or renaming a few mailboxes that 
I created when I first set up the system for testing purposes. Cyrus has 
been running for 6 months without a problem with about 100 users, but I 
would like to tidy these up. When I try to delete these mailboxes I 
either get command failed: Mailbox does not exist or command failed: 
Operation is not supported on mailbox. I have attached my sessions 
below so you can see what I do... Should I delete the corresponding 
directories and then rebuild the database or what?


Thanks for taking the time,

Daniel.

---

lm

INBOX
nick.kotlarksi
user.achim
user.achim.Sent
user.adam
user.daniel

 sam user.daniel root rl   // as a test
 lam user.daniel
danielm lrswipcda
root lr//expected result

 sam nick.kotlarski root c
command failed: Mailbox does not exist 

 lam nick.kotlarski
command failed: Mailbox does not exist

 sam INBOX root c
 lam INBOX
root lca

 dm INBOX
command failed: Operation is not supported on mailbox

---




Move Emails From a unix format to cyrus

2003-02-06 Thread test s
Hi,
Does anyone know how to Move Emails From a unix format which is on server A 
to cyrus which is on server B

Thanks

_
Add photos to your messages with MSN 8. Get 2 months FREE*.  
http://join.msn.com/?page=features/featuredemail



informing users about quotas

2003-02-06 Thread Hans Wilmer
Hi,

how can users securely be informed about their quota usage?

It seems to be left to the clients to ignore or to not ignore the
warnings from cyrus. Unfortunately, the mozilla client ignores the
warnings, and incoming mail would be silently rejected once the user
is over quota.

Is there a tool (for cyrus 1.5.x as comes with Debian Woody) that
could be run by cron to send the users who are about to reach their
quota limit a warning message?


GH



Re: informing users about quotas

2003-02-06 Thread John A. Tamplin
Quoting Hans Wilmer [EMAIL PROTECTED]:

 how can users securely be informed about their quota usage?
 
 It seems to be left to the clients to ignore or to not ignore the
 warnings from cyrus. Unfortunately, the mozilla client ignores the
 warnings, and incoming mail would be silently rejected once the user
 is over quota.
 
 Is there a tool (for cyrus 1.5.x as comes with Debian Woody) that
 could be run by cron to send the users who are about to reach their
 quota limit a warning message?

What we do is run a perl script that parses the output of quota and sends email
to everyone over quota.  Our custom delivery program recognizes the from address
(our help desk) and sets the ignorequota option on the LMTP connection so the
mail is delivered regardless.

Even before we had that running, the users who were over quota noticed pretty
quickly they weren't getting mail and called the help desk :).

-- 
John A. Tamplin
Unix System Administrator



Re: looking for Cyrus mail format documentation

2003-02-06 Thread Phil Howard
On Thu, Feb 06, 2003 at 09:58:30AM -0500, John Alton Tamplin wrote:

| Phil Howard wrote:
| 
| That would result in doubling the bandwidth on the inside server connection
| since it would be dealing with the mail first coming in to the MX, then
| being replicated back out to the other server.  By delivering outside mail
| to the outside server first, the only bandwidth usage is replicating to
| the inside server (reverse the scenario for mail originating inside).
|   
| 
| Is the cost of bandwidth to your inside server really so expensive as to 
| justify the expense of complicated development, hosting an offsite 
| server with that much bandwidth, and maintaining a remote system?  It 
| really sounds like you are overengineering the problem.

Under the original plan, the development was not complicated and thus
not expensive.  The new plan changes the picture.


| If there was a way to track when the flags got changed.  I feel it's OK
| to trust the clocks on the servers, and simply decide which flag state
| prevails based on which has the later timestamp.  But I bet that metadata
| isn't in the current mailstore design.
| 
| No, the time a flag was changed isn't kept.  In fact for seen flags 
| which are cached in memory while a mailbox is open, only a single bit is 
| kept.

And hence with a conflict in flags, it's not trivial, maybe impossible,
to resolve.

-- 
-
| Phil Howard - KA9WGN |   Dallas   | http://linuxhomepage.com/ |
| [EMAIL PROTECTED] | Texas, USA | http://ka9wgn.ham.org/|
-