Re: IMAPD-2.2 imapd: Too many open files
On Tue, 25 Feb 2003, Mike O'Rourke wrote: > I still have to change hash_insert to cyrus_hash_insert though, :-( but I > have a diff at hand to do that with every new download! ;-) If you want to make all the hash_* functions cyrus_hash_*, and send me a diff, I'll take it and get rid of the problems for good. -Rob -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456 Research Systems Programmer * /usr/contributed Gatekeeper
Re: IMAPD-2.2 imapd: Too many open files
On Mon, 24 Feb 2003, Mike O'Rourke wrote: > What do you want me to "try again"? Resend the post, or resetting line > 622 of master.c to s->maxfds? The strace included in the original post > was on the initial instance of an imapd prefork. Initially, I had > prefork set to 0 in cyrus.conf, and could never catch the "Too many open > files" error, so I set prefork to 1 and strace was able to attach to the > process. Try the current CVS. -Rob I retrieved the CVS from today, and the too many open files condition is fixed. Thanks. I still have to change hash_insert to cyrus_hash_insert though, :-( but I have a diff at hand to do that with every new download! ;-) Mike.
Re: Fw: PATCH: have lmtpd report sieve script file errors
By the way.. just noticed a bug in the RPM's version of imapd.conf. It sets "sieveuserhomedir" to no. The actual imapd.conf variable is "sieveusehomedir" (use, not user). It doesn't matter, because the default is no, but should probably be fixed anyway, lest someone get confused when they try to set it to yes! Jay - Original Message - From: "Luca Olivetti" <[EMAIL PROTECTED]> To: "Jay Levitt" <[EMAIL PROTECTED]> Cc: "info-cyrus" <[EMAIL PROTECTED]> Sent: Sunday, February 23, 2003 10:19 AM Subject: Re: Fw: PATCH: have lmtpd report sieve script file errors > Jay Levitt wrote: > > I forgot to CC you on this question... > > Strange, I didn't see this message on info-cyrus, anyway: > > >>Also, the reason I discovered this is that Mandrake's "msec" > >>security-auditing process automatically chowns /usr/sieve to root.root > >>several times a day. Luca, do you think this is something that the RPMs > >>should override in /etc/security/perm.local to cyrus.mail, either > >>automatically or (if such a thing is possible) after prompting? I'm of > > The RPM uses /var/lib/imap/sieve by default, and that isn't affected by > msec, at least it isn't on my two systems, one 8.2 and the other 9.0, > both with security level 3 (implying CHECK_PERMS=yes). > I've checked the perm configuration files for all levels and none of > them touches anything under /var/lib. > > Bye > -- > Luca Olivetti > >
procmailrc and deliver problem
Hello all. I am still having trouble getting /usr/cyrus/bin/deliver to deliver mail using .procmailrc. I have no problem using deliver from the command line -- it's processed just fine and I can see the message in the user.admin mailstore: /usr/cyrus/bin/deliver -m user.admin -a admin < sample_mail.txt. I'm really pulling my hair out over this. Could someone please take a look at my .procmailrc for errors? Also is there a way to use .forward to send the message? I don't care what mechanism is used.. I just want _something_ to work. .procmailrc (sample 1) -- LOGFILE=/var/log/procmail.log :0hfw | /usr/bin/formail -I 'From ' :0 w LOGNAME = $1 EXTENSION = $2 * EXTENSION ?? . | /usr/cyrus/bin/deliver -a "$LOGNAME" -e -q -m "$EXTENSION" -- "$LOGNAME" # If no Extension we try this :0 wE | /usr/cyrus/bin/deliver -a "$LOGNAME" -e -q -- "$LOGNAME" # Whichever one we tried, failed EXITCODE = $? HOST -- Here are the entries in /var/log/procmail.log for the following .procmailrc : Subject: RE: testing still Folder: LOGNAME I don't see anywhere in the log file /var/log/imapd.log that the message was even seen/rejected. In addition sendmail doesn't complain at all about the 'format' of the message: Feb 24 13:30:54 mercury sendmail[28023]: h1OJUs8K028023: from=<[EMAIL PROTECTED]>, size=666, class=0, n rcpts=1, msgid=<[EMAIL PROTECTED]>, proto=SMTP, daemon=MTA, relay=NTAdmin. simutronics.com [198.83.204.82] Feb 24 13:30:54 mercury sendmail[28023]: h1OJUs8K028023: Milter add: header: X-Spam-Status: No Feb 24 13:30:54 mercury sendmail[28023]: h1OJUs8K028023: Milter add: header: X-Scanned-By: MIMEDefang 2.28 (www . roaringpenguin . com / mimedefang) Feb 24 13:30:54 mercury sendmail[28025]: h1OJUs8K028023: to=<[EMAIL PROTECTED]>, ctladdr=<[EMAIL PROTECTED] nics.com> (696/100), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30977, dsn=2.0.0, stat=Sent -- -- I have also tried this procmailrc file (declaring LOGNAME & EXTENSION before :0 w:) .procmailrc (sample 2) -- LOGFILE=/var/log/procmail.log :0hfw | /usr/bin/formail -I 'From ' LOGNAME = $1 EXTENSION = $2 :0 w * EXTENSION ?? . | /usr/cyrus/bin/deliver -a "$LOGNAME" -e -q -m "$EXTENSION" -- "$LOGNAME" # If no Extension we try this :0 wE | /usr/cyrus/bin/deliver -a "$LOGNAME" -e -q -- "$LOGNAME" # Whichever one we tried, failed EXITCODE = $? HOST - It listed these errors in /var/log/procmail.log procmail: Program failure (65) of "/usr/cyrus/bin/deliver Subject: stupid imap2 Folder /usr/cyrus/bin/deliver -a -e -q -- And the message was bounced back: The original message was received at Mon, 24 Feb 2003 13:14:21 -0600 from NTAdmin.simutronics.com [198.83.204.82] - The following addresses had permanent fatal errors - <[EMAIL PROTECTED]> (reason: Data format error) - Transcript of session follows - 501 5.6.0 Data format error Regards, Jim
Re: Another question about MUPDATE server
On Mon, 24 Feb 2003, Etienne Goyer wrote: > Thanks Rob for your answer so far. Concerning the replication process, > we where thinking about using something like heartbeat to monitor the > service. Once the master has been found inoperative, heartbeat should > promote one of the replica as master, by running a script to restart the > replica in server mode for example. Okay, this is slightly different than what I thought you were saying. I'm assuming you're also playing some sort of game to get the DNS changed to the new master (or the new master takes the IP of the dead machine). > You mention consistancy issue. What could these be ? If it would be > about changes not having been pushed to the replica, a work-around would > be to recreate the MUPDATE database (?) from scratch from the backend > (but this might be too prohibitive in wall clock time). Imagine this: BACKEND -> Master: RESERVE user.rjs3 Master -> BACKEND: OK Master -> Replicas: RESERVE user.rjs3 BACKEND -> Master: ACTIVATE user.rjs3 Master -> BACKEND: OK *MASTER DIES* You now have an inconsistant database on your replicas. Typically this would be solved by the slaves resyncing when the master came back up, and until then the mailbox is unavailable anyway. If you're going to recreate the mupdate database from scratch anyway, there's not much need of a hot spare. Of course, it is slightly faster to rebuild the master mupdate database if you have a relatively recent copy. The bigger problem is more that mail to nonexistant mailboxes will be rejected (which is why lmtpproxyd queries the mupdate master directly, instead of relying on a replicated copy). -Rob -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456 Research Systems Programmer * /usr/contributed Gatekeeper
Re: hanging imapds
Dave, Most look like this. Perhaps waiting for someone to log in. serena \$ pstack 18215 18215: imapd fef1ea54 sigsuspend (ffbee4d0) feecee10 _libc_sleep (1, 2, , 0, 1, 1ab30) + f4 0001ab30 cmd_login (e2138, efec, e2288, 0, 6e006c69, 6e00) + 244 00019684 cmdloop (dc800, d9400, 4d000, 4d000, 4d000, 1a800) + 111c 00018330 service_main (0, ffbefc6c, ffbefc74, 2, 0, ffbefa80) + 24c 00016d28 main (1, ffbefc6c, 4bc00, ffbefc74, 0, 0) + 460 00016720 _start (0, 0, 0, 0, 0, 0) + 5c --On 24 February 2003 07:29 -0500 Dave McMurtrie <[EMAIL PROTECTED]> wrote: On Mon, 24 Feb 2003, Paul Christie wrote: We are accumulating hanging imapd processes at the rate of about 30 per day. Some are over 20 days old now. I can find no pattern in terms of client used etc. Any suggestions for investigating this further? Where does /usr/proc/bin/pstack show them being stuck? Maybe gcore one of them, too. Dave -- Dave McMurtrie, Systems Programmer University of Pittsburgh Computing Services and Systems Development, Development Services -- UNIX and VMS Services 717P Cathedral of Learning (412)-624-6413 Paul Christie Bath University Computing Services
Re: howto refuse connection based on load..
On Mon, 24 Feb 2003, [EMAIL PROTECTED] wrote: > >On Mon, 2003-02-24 at 10:13, [EMAIL PROTECTED] wrote: > >> Hello, how to refuse the logons based on load average? You don't, unless you write some scripts to do it... there isn't such a built-in test in Cyrus. > >In imapd.conf you can set a limit on the number of spawned connection. > > how? man cyrus.conf, look for "maxchild". -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh
Re: Another question about MUPDATE server
Thanks Rob for your answer so far. Concerning the replication process, we where thinking about using something like heartbeat to monitor the service. Once the master has been found inoperative, heartbeat should promote one of the replica as master, by running a script to restart the replica in server mode for example. You mention consistancy issue. What could these be ? If it would be about changes not having been pushed to the replica, a work-around would be to recreate the MUPDATE database (?) from scratch from the backend (but this might be too prohibitive in wall clock time). Does that make sense ? Again, thank you for your input. On Fri, Feb 21, 2003 at 11:59:25AM -0500, Rob Siemborski wrote: > On Fri, 21 Feb 2003, Etienne Goyer wrote: > > > I would have another question concerning MUPDATE. The white-paper on > > Cyrus imapd Murder hinted about the possibility(1) of having your MUPDATE > > server replicating. If it is available, I would like to replicate the > > MUPDATE server for both scalability and automatic failover, somewhat > > like what is possible with OpenLDAP using slurpd. Is this part of Cyrus > > imapd current distribution or planned for future developpement ? > > The whole point of mupdate is the replication, so this is definately > present in the current code. It won't give you any automatic failover > though since there is only one mupdate master. > > There are some consistancy issues with using the slaves as authoritative > sources, however. > > Presumably, work could be done to make the database more of a traditional > replicated database (akin to ubik), but we didn't have an immediate need > for that, so simplicity was prefered. > > -Rob > > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- > Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456 > Research Systems Programmer * /usr/contributed Gatekeeper -- Etienne GoyerLinux Québec Technologies Inc. http://www.LinuxQuebec.com [EMAIL PROTECTED] PGP Pub Key: http://www.LinuxQuebec.com/pubkeys/eg.key Fingerprint: F569 0394 098A FC70 B572 5D20 3129 3D86 8FD5 C853
Re: howto refuse connection based on load..
On Mon, 2003-02-24 at 13:54, [EMAIL PROTECTED] wrote: > >On Mon, 2003-02-24 at 10:13, [EMAIL PROTECTED] wrote: > >> Hello, how to refuse the logons based on load average? > > > >In imapd.conf you can set a limit on the number of spawned connection. > > > > how? man cyrus.conf (sorry worng file) maxchild=-1 The maximum number of instances of this service to spawn. A value of -1 means unlimited. This integer value is optional. > > >Refusing on load average I think is always a strange idea as load avg. > >is not a good basis for how loaded a machine is. > > why? load is an evaluation of many thing io , cpu usage , memory usage?. Since mail is often IO based high loads happen. Often no enough to stop things from working. -- Simon Loader "Ive had all I can stands I cant stand no more" - pop i
Re: Deleting mailbox
Sebastian Konstanty Zdrojewski wrote: I am experiencing the following trouble: from both cyradm and IMAP I cannot delete a mailbox. Phisically I tested the permissions and it is everything ok. Anybody can help me? Here is a screenshot of the error: -- BEGIN ATTACHMENT -- [EMAIL PROTECTED] imap]# telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK nexus.technomind.it Cyrus IMAP4 v2.1.11 server ready . login postmaster technoworld . OK User logged in . delete sebzdr00 . NO Permission denied . logout * BYE LOGOUT received . OK Completed Connection closed by foreign host. The administrator has rights to set the ACL on any mailbox, but needs the C right explicitly granted. Do setacl sebzdr00 postmaster c (assuming postmaster is an admin account) and then delete it. -- John A. Tamplin Unix System Administrator Emory University, School of Public Health +1 404/727-9931
Re: IMAPD-2.2 imapd: Too many open files
On Mon, 24 Feb 2003, Mike O'Rourke wrote: > What do you want me to "try again"? Resend the post, or resetting line > 622 of master.c to s->maxfds? The strace included in the original post > was on the initial instance of an imapd prefork. Initially, I had > prefork set to 0 in cyrus.conf, and could never catch the "Too many open > files" error, so I set prefork to 1 and strace was able to attach to the > process. Try the current CVS. -Rob -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456 Research Systems Programmer * /usr/contributed Gatekeeper
Re: howto refuse connection based on load..
>On Mon, 2003-02-24 at 10:13, [EMAIL PROTECTED] wrote: >> Hello, how to refuse the logons based on load average? > >In imapd.conf you can set a limit on the number of spawned connection. > how? >Refusing on load average I think is always a strange idea as load avg. >is not a good basis for how loaded a machine is. why? -- Simon Loader "Ive had all I can stands I cant stand no more" - pop i
Re: Testing
ipswitch has an automated responder used to test emails the email address is [EMAIL PROTECTED] i use it all the time . just an F.Y.I to all the testers . - Original Message - From: "Simon Loader" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, February 24, 2003 4:34 AM Subject: Re: Testing > On Mon, 2003-02-24 at 02:02, [EMAIL PROTECTED] wrote: > > Test > > Please can we stop getting these tests? > > -- > Simon Loader > "ive had all I can stand I cant stands no more" > > >
Re: hanging imapds
On Mon, 24 Feb 2003, Paul Christie wrote: > We are accumulating hanging imapd processes at the rate of about 30 per > day. Some are over 20 days old now. I can find no pattern in terms of > client used etc. Any suggestions for investigating this further? Where does /usr/proc/bin/pstack show them being stuck? Maybe gcore one of them, too. Dave -- Dave McMurtrie, Systems Programmer University of Pittsburgh Computing Services and Systems Development, Development Services -- UNIX and VMS Services 717P Cathedral of Learning (412)-624-6413
Re: SSL Update due to Security Advisory
On Mon, 24 Feb 2003, Peter Lawler wrote: > For those who may have missed it, > http://www.openssl.org/news/secadv_20030219.txt As a datapoint, although I could compile Cyrus against OpenSSL 0.9.7a and it appeared to work for imaps, both apache 1.3.27 and sendmail 8.12.7 didn't work correctly (coredump in EWP_update or something). I've backed out to OpenSSL 0.9.6i which fixes the vulnerability and also works with all the packages I need to link against. ian
Deleting mailbox
Hello everybody, I am experiencing the following trouble: from both cyradm and IMAP I cannot delete a mailbox. Phisically I tested the permissions and it is everything ok. Anybody can help me? Here is a screenshot of the error: -- BEGIN ATTACHMENT -- [EMAIL PROTECTED] imap]# telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK nexus.technomind.it Cyrus IMAP4 v2.1.11 server ready . login postmaster technoworld . OK User logged in . delete sebzdr00 . NO Permission denied . logout * BYE LOGOUT received . OK Completed Connection closed by foreign host. -- END ATTACHMENT -- TIA En3pY -- Sebastian Konstanty Zdrojewski IT Analyst Neticon S.r.l. via Valtellina, 16 - 20159 Milano Tel. +39 02 68.80.731 Cell. +39 349.33.04.311 ICQ # 97334916 -- Web: http://www.neticon.it/ E-mail: [EMAIL PROTECTED]
2.2 stable release (again)
Hello According to previous postings - is there any changes in roadmap of 2.2 release? -- Dimitry Subject: Re: 2.2 stable release From: Rob Siemborski andrew.cmu.edu> Date: Sat, 11 Jan 2003 15:51:14 -0500 (EST) Cc: marc.bigler day.com, andrew.cmu.edu> On Sat, 11 Jan 2003, Ken Murchison wrote: > IIRC, Rob is targeting sometime in February. I've been real busy with > my regular job, so I haven't had much time to tie up the remaining > virtdomain and NNTP loose ends (mostly documentation and utilities), but > I hope to have it done whenever Rob (and possibly Jen with the Sieve > bytecode stuff) are ready. > > FWIW, I've been running the 2.2 code (virtdomains: no) since I started > working on it (6 months ago) without any problems. Yeah, late february sounds about right, though no guarantees, there's a number of things left to do. We are most likely going to go with the sieve bytecode stuff (which I'd consider early alpha-quality in the sieve-bytecode branch at this point). The other biggie is IPv6 support, which requires some thought about how to do some things with master (basically, do we want master to link libcyrus). Also misc cleanups/stability stuff (e.g. code to convert scripts -> bytecode, stability testing, etc) -Rob -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456 Research Systems Programmer * /usr/contributed Gatekeeper
hanging imapds
Dear All, We are accumulating hanging imapd processes at the rate of about 30 per day. Some are over 20 days old now. I can find no pattern in terms of client used etc. Any suggestions for investigating this further? name : Cyrus version: v2.0.16 vendor : Project Cyrus support-url: http://asg.web.cmu.edu/cyrus os : SunOS os-version : 5.8 environment: Cyrus SASL 1.5.27 Sleepycat Software: Berkeley DB 3.3.11: (July 12, 2001) OpenSSL 0.9.6d 9 May 2002 Paul Christie Bath University Computing Services
Re: howto refuse connection based on load..
On Mon, 2003-02-24 at 10:13, [EMAIL PROTECTED] wrote: > Hello, how to refuse the logons based on load average? In imapd.conf you can set a limit on the number of spawned connection. Refusing on load average I think is always a strange idea as load avg. is not a good basis for how loaded a machine is. -- Simon Loader "Ive had all I can stands I cant stand no more" - pop i
howto refuse connection based on load..
Hello, how to refuse the logons based on load average? thnx.
Re: Testing
On Mon, 2003-02-24 at 02:02, [EMAIL PROTECTED] wrote: > Test Please can we stop getting these tests? -- Simon Loader "ive had all I can stand I cant stands no more"
