Re: cyradm freebsd ldap auth problem

2005-06-29 Thread Ondrej Sury
What is your auth method?  Ie. show us output of:

grep -E ^sasl /etc/imapd.conf

if you are using saslauthd, then does testsaslauthd works?

And did you read and understand all installation instructions?

Ondrej.

On Tue, 2005-06-28 at 21:55 -0300, Luís Cargnini wrote:
 People i  having the following problem:
 cyradm --u cyrus localhost
 Password:
 cyradm: cannot authenticate to server with  as cyrus
  
 My entirely system is installed but i'm still can't connect as cyrus
 using cyradm what could i do ?
 What other information they need to help me ?
-- 
Ondrej Sury [EMAIL PROTECTED]

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Saslauthd and 2 authentication mechanism

2005-06-29 Thread Paul van der Vlis
Hello,

I want to use 2 authentication mechanisms with Saslauthd. When the first
one gives no, it should try the other one.

The man-page says: saslauthd supports one or more 'authentication
mechanisms', but it does not work, saslauthd uses only the first mechanism.

[EMAIL PROTECTED]:~/techniek$ ps ax | grep sasl
 4951 ?Ss 0:00 /usr/sbin/saslauthd -a pam ldap
 4952 ?S  0:00 /usr/sbin/saslauthd -a pam ldap
 4953 ?S  0:00 /usr/sbin/saslauthd -a pam ldap
 4954 ?S  0:00 /usr/sbin/saslauthd -a pam ldap
 4955 ?S  0:00 /usr/sbin/saslauthd -a pam ldap

I have also tried -a 'pam ldap' but then saslauthd does not start.

Does somebody know more?

With regards
Paul van der Vlis
Groningen, Netherlands.
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Saslauthd and 2 authentication mechanism

2005-06-29 Thread Dmitriy Kirhlarov
On Wed, Jun 29, 2005 at 10:59:29AM +0200, Paul van der Vlis wrote:
 Hello,
 
 I want to use 2 authentication mechanisms with Saslauthd. When the first
 one gives no, it should try the other one.
 
 The man-page says: saslauthd supports one or more 'authentication
 mechanisms', but it does not work, saslauthd uses only the first mechanism.
 
 [EMAIL PROTECTED]:~/techniek$ ps ax | grep sasl
  4951 ?Ss 0:00 /usr/sbin/saslauthd -a pam ldap
  4952 ?S  0:00 /usr/sbin/saslauthd -a pam ldap
  4953 ?S  0:00 /usr/sbin/saslauthd -a pam ldap
  4954 ?S  0:00 /usr/sbin/saslauthd -a pam ldap
  4955 ?S  0:00 /usr/sbin/saslauthd -a pam ldap
 
 I have also tried -a 'pam ldap' but then saslauthd does not start.

Try
-a pam -a ldap

By.
Dmitriy
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: ldap/imapd

2005-06-29 Thread Paul van der Vlis
Dmitriy Kirhlarov schreef:
 On Tue, Jun 07, 2005 at 12:10:31PM -0400, Igor Brezac wrote:
 
Many stories in the internet with using saslauthd and NOT using ldapS.

What stories?  saslauthd can use ldaps just fine.
 
 http://asg.web.cmu.edu/cyrus/download/imapd/install-configure.html
 http://deb.utalca.cl/?p=26
 http://www.magic-lamp.org/howto_cyrusimap_ldap.0.html
 as example.
 
I not want use saslauthd and want use ldap-over-ssl.

Are you saying you want to use auxprop rather than saslauthd or your only 
requirement is to use ldaps.  Both auxprop and saslauthd can be configured 
to use ldaps.
 
 I want use auxprop rather than saslauthd if possible (not strong requirement).

I use saslauthd.

 And I have to use ldapS (it's strong requirement)

That's what I use too. This is my /etc/saslauthd.conf:

ldap_servers: ldaps://192.168.10.249/
ldap_auth_method: fastbind
ldap_tls_cacert_file: /path/to/rootcert.pem
ldap_filter: cn=%u,ou=lrl,o=wlg

With regards,
Paul van der Vlis
Groningen, Netherlands.
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Saslauthd and 2 authentication mechanism

2005-06-29 Thread Igor Brezac


On Wed, 29 Jun 2005, Paul van der Vlis wrote:


Hello,

I want to use 2 authentication mechanisms with Saslauthd. When the first
one gives no, it should try the other one.

The man-page says: saslauthd supports one or more 'authentication
mechanisms',


This does not say that you can use more than one concurrently.


but it does not work, saslauthd uses only the first mechanism.

[EMAIL PROTECTED]:~/techniek$ ps ax | grep sasl
4951 ?Ss 0:00 /usr/sbin/saslauthd -a pam ldap
4952 ?S  0:00 /usr/sbin/saslauthd -a pam ldap
4953 ?S  0:00 /usr/sbin/saslauthd -a pam ldap
4954 ?S  0:00 /usr/sbin/saslauthd -a pam ldap
4955 ?S  0:00 /usr/sbin/saslauthd -a pam ldap

I have also tried -a 'pam ldap' but then saslauthd does not start.


You can use only one at a time.

--
Igor
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: cyradm freebsd ldap auth problem

2005-06-29 Thread Luís Cargnini
i did the modifications
testsaslauthd -u cyrus -p *
0: OK Success.
%cyradm --user cyrus localhost
IMAP Password:
  Invalid user at
/usr/local/lib/perl5/site_perl/5.8.6/mach/Cyrus/IMAP/Admin.pm line 118
cyradm: cannot authenticate to server with  as cyrus


On 29/06/05, Ondrej Sury [EMAIL PROTECTED] wrote:
 On Wed, 2005-06-29 at 07:58 -0300, Luís Cargnini wrote:
  On 29/06/05, Ondrej Sury [EMAIL PROTECTED] wrote:
   What is your auth method?  Ie. show us output of:
  
   grep -E ^sasl /etc/imapd.conf
  
  sasl_minimum_layer: 1
  sasl_pwcheck_method: saslauthd
  sasl_ldap_servers: localhost
  sasl_ldap_bind_dn: cn=Manager,dc=domain,dc=com,dc=br
  sasl_ldap_bind_pw: *
  sasl_mech_list: LOGIN PLAIN CRAM-MD5 DIGEST-MD5 NTLM
 
 You are mixing saslauthd and auxprop together.
 
 It should look like:
 
 #grep -E ^sasl /etc/imapd.conf
 
 sasl_mech_list: PLAIN LOGIN
 sasl_pwcheck_method: saslauthd
 sasl_auto_transition: no
 
 How does your /etc/saslauthd.conf looks like?  It should be something
 like:
 
 ldap_servers: ldap://localhost
 ldap_version: 3
 ldap_auth_method: bind
 ldap_default_realm: localhost
 ldap_filter: [EMAIL PROTECTED]
 ldap_bind_dn: cn=Manager,dc=domain,dc=com,dc=br
 ldap_bind_pw: 
 ldap_search_base: dc=domain,dc=com,dc=br
 
 (read LDAP_SASLAUTHD doc in your cyrus-sasl distribution)
 
   if you are using saslauthd, then does testsaslauthd works?
  
  how could i test it ?
 
 man testsaslauthd
 
   And did you read and understand all installation instructions?
  
  yes
 
 Then first your SASL must work...  only after that you can log into
 cyrus.
 
 Ondrej.
 --
 Ondrej Sury [EMAIL PROTECTED]
 
 


-- 
Thanks  Regards
Msc. Bsc. Luís Vitório Cargnini
IEEE Member
Mastering Degree student @ PUC-RS Eletrical Engineer Faculty

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Tunning for large number of files in INBOX

2005-06-29 Thread Joel Nimety
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello,

I'm trying to set up cyrus-imap as a backend for an email archiving
solution.  I'm creating one account on the imap server for each customer
  domain(s) we'll be archiving mail for.  I'm concerned that the number
of emails that will end up in each INBOX will reach some limit (ext3 fs
limit, practical limit, etc.)

Is there a way I can have cyrus hash the files within the INBOX
directories into sub directories? If this isn't possible does anyone
have a sieve script that can sort mail into folders by date?  Any help
is much appreciated.

Thanks.

Joel Nimety
Perimeter Internetworking Corp.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFCwwTO/uHyjmXLFuQRAl6JAKCOVWPN5iIBet1OVIlJLmTi7UgnzwCfdu8v
wa1rZXcjC8yGSNQY6VDUVYM=
=5apL
-END PGP SIGNATURE-
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Tunning for large number of files in INBOX

2005-06-29 Thread Michael Loftis



--On June 29, 2005 4:30:06 PM -0400 Joel Nimety [EMAIL PROTECTED] 
wrote:



Hello,

I'm trying to set up cyrus-imap as a backend for an email archiving
solution.  I'm creating one account on the imap server for each customer
  domain(s) we'll be archiving mail for.  I'm concerned that the number
of emails that will end up in each INBOX will reach some limit (ext3 fs
limit, practical limit, etc.)


With EXT3 there are definite limits, not hard ones, but practical ones for 
time to traverse/read the inode and list.  Use ReiserFS.  For Mail clients 
most can't handle big folders because many of them are just POP3/NNTP 
clients retrofitted to squak IMAP.  Get a real IMAP client like Mulberry 
that takes advantage of server side sorting, threading, and searching to 
allow for (nearly) limitless mailboxes but not download each and every 
header.


With ReiserFS and UFS+Hashdirs (Linux and FreeBSD respectively) I 
personally have many mailboxes that are well over 20k or 30k messages, and 
have a few in the 200k range, haven't run into any performance problems. 
With EXT3 I had serious problems in the 5k range, or less.




Is there a way I can have cyrus hash the files within the INBOX
directories into sub directories? If this isn't possible does anyone
have a sieve script that can sort mail into folders by date?  Any help
is much appreciated.


No, and no, but the latter should be something simple enough to 
create.A coworker did something llike this and found he had to create 
entries for every month, and then either manually swap them yearly or 
rewrite the rules yearly because Sieve has no variables or anything like 
that.



---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Sending alert through IMAP?

2005-06-29 Thread BQ
Hi,

This question is a bit off topic, but I hope someone can sched some
light on this.

In rare circumstances, we need to send message to all our users.
Usually we post a notice on the webmail web site, but the problem is
with users which use their MUAs with IMAP4 clients.

As almost all clients nicely show a popup when the user is over quota,
I was wondering if we can use the same mechanism to send arbitrary
messages to clients?

Thanks for help,

BQ

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: cyradm freebsd ldap auth problem

2005-06-29 Thread Luís Cargnini
i still receiving the same error 8-(

On 29/06/05, Joerg Pulz [EMAIL PROTECTED] wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 
 On Wed, 29 Jun 2005, Luís Cargnini wrote:
 
  i did the modifications
  testsaslauthd -u cyrus -p *
  0: OK Success.
  %cyradm --user cyrus localhost
  IMAP Password:
   Invalid user at
  /usr/local/lib/perl5/site_perl/5.8.6/mach/Cyrus/IMAP/Admin.pm line 118
  cyradm: cannot authenticate to server with  as cyrus
 
 Hi,
 
 please make sure that there is a file named Cyrus.conf in
 /usr/local/lib/sasl2/ !
 Put the following line into this file at the topmost position:
 pwcheck_method: saslauthd
 
 If you have done this, your authentication via ldap should work.
 the testsaslauthd utility is only usable to verufy that saslauthd is
 working as expected, but says nothing about the cyrus-imapd part.
 
 regards
 Joerg
 
 - --
 The beginning is the most important part of the work.
 -Plato
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.1 (FreeBSD)
 
 iD8DBQFCwwreSPOsGF+KA+MRAjuUAKCYJavedaiSq8MxcR1GjSjjR94LNgCgv0Hc
 6NTUsqaWqB5Y44ptrRnN+ds=
 =Tv3D
 -END PGP SIGNATURE-
 


-- 
Thanks  Regards
Msc. Bsc. Luís Vitório Cargnini
IEEE Member
Mastering Degree student @ PUC-RS Eletrical Engineer Faculty

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Tunning for large number of files in INBOX

2005-06-29 Thread Andrew Morgan


On Wed, 29 Jun 2005, Michael Loftis wrote:

--On June 29, 2005 4:30:06 PM -0400 Joel Nimety [EMAIL PROTECTED] 
wrote:



Hello,

I'm trying to set up cyrus-imap as a backend for an email archiving
solution.  I'm creating one account on the imap server for each customer
  domain(s) we'll be archiving mail for.  I'm concerned that the number
of emails that will end up in each INBOX will reach some limit (ext3 fs
limit, practical limit, etc.)


With EXT3 there are definite limits, not hard ones, but practical ones for 
time to traverse/read the inode and list.  Use ReiserFS.  For Mail clients 
most can't handle big folders because many of them are just POP3/NNTP clients 
retrofitted to squak IMAP.  Get a real IMAP client like Mulberry that takes 
advantage of server side sorting, threading, and searching to allow for 
(nearly) limitless mailboxes but not download each and every header.


With ReiserFS and UFS+Hashdirs (Linux and FreeBSD respectively) I personally 
have many mailboxes that are well over 20k or 30k messages, and have a few in 
the 200k range, haven't run into any performance problems. With EXT3 I had 
serious problems in the 5k range, or less.


In the interest of completeness, under 2.6 linux kernels you can format an 
ext3 partition using the dir_index option.  This enables a hash tree index 
for directories that supposedly improves lookups with very large 
directories.  Here is the command I use to build my mail spool filesystem:


  mkfs -t ext3 -j -m 1 -O dir_index /dev/sdb1

I have not used other filesystems such as Reiser or XFS, so I cannot offer 
any performance comparisons.


Andy
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Shared Folders Question

2005-06-29 Thread Matt Schwartz
How do I set up shared folders on my cyrus imap server?  I have created 
a mailbox called shared.announcements and any attempt to send an email 
to shared.announcements fails.  I have tried sending an email to 
shared+announcements and they both bounce saying that the mailbox does 
not exist.  Here is the error below:


[EMAIL PROTECTED] 
mailto:[EMAIL PROTECTED]: data format error. Command 
output:

   shared+announcements: Mailbox does not exist

Yet I have created a mailbox in cyradm called shared.announcements with 
an acl allowing everyone to post.  I have gone through the archives of 
the info-cyrus list and could not find a clear answer to this.  Any help 
would be appreciated.


---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Shared Folders Question

2005-06-29 Thread Lars Kristiansen



--On Wednesday, June 29, 2005 06:55:06 PM -0400 Matt Schwartz 
[EMAIL PROTECTED] wrote:



How do I set up shared folders on my cyrus imap server?  I have created a
mailbox called shared.announcements and any attempt to send an email to
shared.announcements fails.  I have tried sending an email to
shared+announcements and they both bounce saying that the mailbox does


Maybe this address will work:
[EMAIL PROTECTED]

man imapd.conf
look for the configuration option postuser.



not exist.  Here is the error below:

[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]: data format error. Command
output:
shared+announcements: Mailbox does not exist

Yet I have created a mailbox in cyradm called shared.announcements with
an acl allowing everyone to post.  I have gone through the archives of
the info-cyrus list and could not find a clear answer to this.  Any help
would be appreciated.

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html




--
Med vennlig hilsen
Lars Kristiansen

A D V E N T U R A S
Tlf: 22 20 59 90
Fax: 22 20 59 91
[EMAIL PROTECTED]
http://www.adventuras.no

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


configuring with postfix

2005-06-29 Thread Matt Schwartz
Hi, 

I really appreciate the help that everyone has been giving me.  I have 
gotten very far with using Cyrus IMAP and I must say it is heads above 
courier, the one I used to use.  I have one nagging issue and all will 
be straight.  I would like to make it easier for users posting to a 
shared folder.  For example, bb+public.announcements, they might type 
announcements instead.  I have tried to do this with postfix but to no 
avail. The message keeps getting bounced.  How do I configure postfix 
such that it expands the alias announcements into the full name of the 
public folder?  I apologize if I have the wrong list.


Thanks,
Matt

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html