Re: [Evolution] sieve

2006-05-17 Thread Murray Trainer
On Wed, 2006-05-17 at 07:41 +0200, Ron Smits wrote:
 a few years ago, there was some talk about integrating serverside
 filtering in evolution somewhere in 2003 if I remember correctly.
 
 has this ever happened?
 
 Ron

Hi Ron,

I asked about this and did some investigation on its support in other
mail clients.  See below:

http://bugzilla.gnome.org/show_bug.cgi?id=216959

I just got Sieve working with Horde (Ingo module) and it is great.  Only
thing I'm not sure about is if there is a way to apply Sieve filters to
already delivered mail - maybe you know an answer to that?

Murray


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: no global admin with virtual domains? [was Re: saslpasswd and virtual domains]

2006-05-17 Thread Rudy Gevaert

former03 | Baltasar Cevc wrote:

Hi Rudy,

On 16.05.2006, at 11:39, Rudy Gevaert wrote:

But as you can see the [EMAIL PROTECTED] user doesn't list any mailboxes or 
create any mailboxes.


Does anybody have any clues?



I just had a look at my config - I've set servername and defaultdomain 
to the same value ('jura') - maybe you can try if that helps. Another 
thing you could try would be to use the fqdn instead of the short 
hostname - maybe Cyrus does a reverse lookup on the IP (there are some 
functions that will do that).



I can't change servername to jura because our users will connect to 
'mail.ugent.be' and 'mail.ugent.be' is a round robin DNS to our imap 
proxy servers (e.g. jura.ugent.be, ...).
And these proxy server will forward requests to the correct imap backend 
(e.g. mail1.ugent.be, mail2.ugent.be, ...)


jura.ugent.be and mail1.ugent.be are the same machine.  jura.ugent.be is 
eth0 and mail1.ugent.be is eth0:1


I've tested a bit further and added a user [EMAIL PROTECTED] to the 
sasldb2 file.  I can then login with cyradm.  But can't ask for any 
mailboxes or create mailboxes.


I added [EMAIL PROTECTED] also to the sasldb2 file.  I can login with 
cyradm but can't do a thing.


I would think that sasl is doing everything ok, but it is the imap 
server that is stopping some things.


Does anybody have any clues about how to further debug this?


--
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Rudy Gevaert e-mail: [EMAIL PROTECTED]
Directie ICT, Afdeling Infrastructuur
Groep Systemen  tel: +32 9 264 4734
Universiteit Gent / Ghent Universityfax: +32 9 264 4994
Krijgslaan 281, gebouw S9, 9000 Gent, Belgie   www.UGent.be
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: no global admin with virtual domains? [was Re: saslpasswd and virtual domains]

2006-05-17 Thread former03 | Baltasar Cevc

Hi Rudy,

On 17.05.2006, at 10:29, Rudy Gevaert wrote:


former03 | Baltasar Cevc wrote:

Hi Rudy,
On 16.05.2006, at 11:39, Rudy Gevaert wrote:
But as you can see the [EMAIL PROTECTED] user doesn't list any mailboxes or 
create any mailboxes.


Does anybody have any clues?
I just had a look at my config - I've set servername and 
defaultdomain to the same value ('jura') - maybe you can try if that 
helps. Another thing you could try would be to use the fqdn instead 
of the short hostname - maybe Cyrus does a reverse lookup on the IP 
(there are some functions that will do that).



I can't change servername to jura because our users will connect to 
'mail.ugent.be' and 'mail.ugent.be' is a round robin DNS to our imap 
proxy servers (e.g. jura.ugent.be, ...).
And these proxy server will forward requests to the correct imap 
backend (e.g. mail1.ugent.be, mail2.ugent.be, ...)
What I wanted to suggest is to replace the servername value in 
imapd.conf (with the 'side effect' of having that name shown when 
connecting to that server).


Or would it be possible to change the default domain in your setup to 
the same value as servername.


If I rembember correctly, the only setup where I got the admin thing 
really working was when I had both variables set to the same value; 
however, I'm quite sure it's a knowledge problem and there is some 
nicer solution (anybody out on the list who could give a hint?).


Baltasar

_ former 03 gmbh
_ infanteriestraße 19 haus 6 eg
_ 80797 muenchen

_ www.former03.de


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: no global admin with virtual domains? [was Re: saslpasswd and virtual domains]

2006-05-17 Thread Rudy Gevaert

former03 | Baltasar Cevc wrote:

Hi Rudy,

On 17.05.2006, at 10:29, Rudy Gevaert wrote:


former03 | Baltasar Cevc wrote:


Hi Rudy,
On 16.05.2006, at 11:39, Rudy Gevaert wrote:

But as you can see the [EMAIL PROTECTED] user doesn't list any mailboxes or 
create any mailboxes.


Does anybody have any clues?


I just had a look at my config - I've set servername and 
defaultdomain to the same value ('jura') - maybe you can try if that 
helps. Another thing you could try would be to use the fqdn instead 
of the short hostname - maybe Cyrus does a reverse lookup on the IP 
(there are some functions that will do that).




I can't change servername to jura because our users will connect to 
'mail.ugent.be' and 'mail.ugent.be' is a round robin DNS to our imap 
proxy servers (e.g. jura.ugent.be, ...).
And these proxy server will forward requests to the correct imap 
backend (e.g. mail1.ugent.be, mail2.ugent.be, ...)


What I wanted to suggest is to replace the servername value in 
imapd.conf (with the 'side effect' of having that name shown when 
connecting to that server).


Or would it be possible to change the default domain in your setup to 
the same value as servername.


If I rembember correctly, the only setup where I got the admin thing 
really working was when I had both variables set to the same value; 
however, I'm quite sure it's a knowledge problem and there is some nicer 
solution (anybody out on the list who could give a hint?).



I now changed defaultdomain and servername to mail1 and added a 
[EMAIL PROTECTED] user to the sasldb2 file. imapd.conf has the following:


jura:/mail/mail1/etc# cyradm --user [EMAIL PROTECTED] mail1.ugent.be
Password:
mail1.ugent.be lm
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
mail1.ugent.be cm user/[EMAIL PROTECTED]
mail1.ugent.be lm
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
mail1.ugent.be quit

As you can see I can now login :) and create mailboxes.  So I guess I'm 
logged in as the global admin! Hurah!


Not setting defaultdomain and it doesn't work.  So I guess they both 
have to be set.


I am not sure how this will now work together with ssl certificates. 
Als users will be connecting to mail.ugent.be and in the end will end up 
 on mail1.ugent.be or mail2.ugent.be or mail3.ugent.be

But there is a proxy in between so maybe this will be fix that problem.

Thank you for your help!  An other problem that is fixed.  Up to the 
next one :)


--
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Rudy Gevaert e-mail: [EMAIL PROTECTED]
Directie ICT, Afdeling Infrastructuur
Groep Systemen  tel: +32 9 264 4734
Universiteit Gent / Ghent Universityfax: +32 9 264 4994
Krijgslaan 281, gebouw S9, 9000 Gent, Belgie   www.UGent.be
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


building Cyrus-imap on Intel OS X

2006-05-17 Thread Joe Auty

Hello,

I'm receiving the following error message from building the  
DarwinPort of Cyrus on my Intel-based Mac:


---  Configuring cyrus-imapd
checking build system type... configure: error: cannot guess build  
type; you must specify one
Error: Target com.apple.configure returned: configure failure: shell  
command cd /opt/local/var/db/dports/build/ 
_opt_local_var_db_dports_sources_rsync.rsync.darwinports.org_dpupdate_dp 
orts_mail_cyrus-imapd/work/cyrus-imapd-2.2.12  ./configure -- 
prefix=/opt/local --mandir=/opt/local/share/man --sysconfdir=/opt/ 
local/etc/cyrus --with-cyrus-prefix=/opt/local --with-pidfile=/opt/ 
local/var/run/cyrus-master.pid --with-bdb-incdir=/opt/local/include/ 
db4 --with-bdb-libdir=/opt/local/lib --with-perl=/opt/local/bin/perl  
--with-sasl=/opt/local --with-openssl=/opt/local --with-cyrus- 
user=cyrus --with-cyrus-group=mail --with-auth=unix --enable-listext  
--enable-cmulocal --enable-netscapehack returned error 1
Command output: checking build system type... configure: error:  
cannot guess build type; you must specify one


Warning: the following items did not execute (for cyrus-imapd):  
com.apple.activate com.apple.configure com.apple.build  
com.apple.destroot com.apple.archive com.apple.install

Error: /opt/local/bin/port: Status 1 encountered during processing.


From:

http://developer.apple.com/documentation/Porting/Conceptual/ 
PortingUnix/compiling/chapter_4_section_3.html



Some earlier versions of autoconf handle cross-compiling poorly. If  
your tool contains a configure script generated by an early  
autoconf, you may be able to significantly improve things by  
replacing some of the config.* files (and config.guess in  
particular) with updated copies from the version of autoconf that  
comes with Mac OS X.



Does this apply here? Would updating the config.guess remedy this issue?


---
Joe Auty
UITS Messaging
Indiana University
[EMAIL PROTECTED]






PGP.sig
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Outlook does not delete but displays deleted messages asstrike-trough

2006-05-17 Thread Denny Schierz
hi,

my Outlook users does not purge the mails, after delete them. Does
anybody found a way, to delete the messages, that has the delete flag,
or something else? Most ipurge examples needs a trash folder, but
Outlook does not move the messages to a trash like folder.

cu denny

-- 
Sicherheit verständlich http://www.sides.de
GnuPG Key
http://pgpkeys.pca.dfn.de:11371/pks/lookup?op=getsearch=0x2A5CE192AB7D3FE0


signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Outlook does not delete but displays deleted messages asstrike-trough

2006-05-17 Thread H. Wilmer

Denny Schierz wrote:


anybody found a way, to delete the messages, that has the delete flag,
or something else? Most ipurge examples needs a trash folder, but
Outlook does not move the messages to a trash like folder.


Ipurge seems to delete messages based on the specs you give it as 
options rather than to expunge mailboxes.


Is there some tool to expunge the deleted mail?


GH

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Murder trouble, 2 unified servers authenticating to each other

2006-05-17 Thread Michael Leupold
Hi list,

I retried everything and probably found some new insights:

Am Sonntag, 14. Mai 2006 02:29 schrieb Michael Leupold:
 I set up 2 servers (2.3.3) today to operate in a murder (both running
 unified). They are called master.leunet.lan and slave.leunet.lan. mupdate
 seems to be running fine so far, but if one imapd should proxy for the
 other it won't work.

the main problem is that slave (frontend) won't connected to master (backend). 
I thought this was due to self-signed certificates but it doesn't seem to be. 
The client gives me a no worthy mechs after negotiating TLS. As I have my 
users on an ldap server I'm using saslauthd and advertise PLAIN.
I tried 'imtest -t  -m PLAIN -a manager master' and it works as well.

Is PLAIN disallowed for frontend-backend authentication? Is there a way to get 
more debug-output?

Thanks and kind regards,
Michael

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: building Cyrus-imap on Intel OS X

2006-05-17 Thread Michael Johnson

On May 17, 2006, at 10:31 AM, Joe Auty wrote:


Hello,

I'm receiving the following error message from building the  
DarwinPort of Cyrus on my Intel-based Mac:


You may want to refresh your ports.  When I get errors on a compile,  
it's the first thing I do.


-Michael

-
Das Verhalten von Gates hatte mir bewiesen, dass ich auf ihn und  
seine beiden Gefaehrten nicht rechnen durfte.
(The behavior of Gates proved to me that I couldn't count on him or  
his two companions.)

-Karl May, Winnetou III Das Testament des Apachen


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: building Cyrus-imap on Intel OS X

2006-05-17 Thread Joe Auty


On May 17, 2006, at 11:21 AM, Michael Johnson wrote:


On May 17, 2006, at 10:31 AM, Joe Auty wrote:


Hello,

I'm receiving the following error message from building the  
DarwinPort of Cyrus on my Intel-based Mac:


You may want to refresh your ports.  When I get errors on a  
compile, it's the first thing I do.





I've done that




PGP.sig
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Outlook does not delete but displays deleted messages asstrike-trough

2006-05-17 Thread James Yale

H. Wilmer wrote:

Denny Schierz wrote:


anybody found a way, to delete the messages, that has the delete flag,
or something else? Most ipurge examples needs a trash folder, but
Outlook does not move the messages to a trash like folder.


Ipurge seems to delete messages based on the specs you give it as 
options rather than to expunge mailboxes.


Is there some tool to expunge the deleted mail?


GH


There is an option (I believe under Edit) to 'Purge deleted messages'
which permanently deletes messages marked as to be deleted - is this
what you were after?



Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


RE: Outlook does not delete but displays deleted messages as strike-through

2006-05-17 Thread Ciprian Vizitiu

... Even better: it can be even added to Outlook's top menu. Right click on
the toolbar, select customize, Commands, Edit and drag 'Purge deleted
messages' into the top menu bar.

 In Outlook, Edit-Purge Deleted Messages
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:info-cyrus- 
  [EMAIL PROTECTED] On Behalf Of Denny Schierz
  Sent: Wednesday, May 17, 2006 10:43 AM
  To: info-cyrus@lists.andrew.cmu.edu
  Subject: Re: Outlook does not delete but displays deleted 
  messagesasstrike-trough
  
  hi,
  
  my Outlook users does not purge the mails, after delete them. Does 
  anybody found a way, to delete the messages, that has the 
 delete flag, 
  or something else? Most ipurge examples needs a trash folder, but 
  Outlook does not move the messages to a trash like folder.
  
  cu denny
  
  --
  Sicherheit verständlich http://www.sides.de GnuPG Key 
  
 http://pgpkeys.pca.dfn.de:11371/pks/lookup?op=getsearch=0x2A5CE192AB7
  D3FE
  0
 
 
 Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: 
 http://cyruswiki.andrew.cmu.edu List Archives/Info: 
 http://asg.web.cmu.edu/cyrus/mailing-list.html
 
 


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


cyrus+sendmail+lmtpunix connection refused by localhost

2006-05-17 Thread Chris Harms

Hello,

We have recently started to experience an inconsistent problem after 
restarting cyrus and sendmail after a nightly backup script runs.  All 
services seem to start properly, but mail delivery is deferred with 
sendmail logging


dsn=4.4.1, stat=Deferred: Connection refused by localhost

It appears to be something in lmtp, but we aren't sure what exactly.  We 
are using the socket for lmtpunix delivery.  The magic bullet seemed to 
be stopping all services and removing /var/run/cyrus-master.pid and some 
old lmtp lock files, but then this may have been coincidental.  I found 
a few similar reports on Google, but no definite answers to this problem.


Any insight as to why this would just start happening out of the blue 
would be most appreciated.


Thank you,
Chris Harms

# additional info

# Software versions
cyrus 2.2.12
sendmail 8.13.6

# /var/imap/socket
srwxrwxrwx 1 root  root  0 May 16 22:36 lmtp

# cyrus.conf
 lmtp  cmd=lmtpd listen=lmtp prefork=0
 lmtpunix  cmd=lmtpd listen=/var/imap/socket/lmtp prefork=1



Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Outlook does not delete but displays deleted messages asstrike-trough

2006-05-17 Thread Warren Turkal
On Wednesday 17 May 2006 09:35, James Yale wrote:
 There is an option (I believe under Edit) to 'Purge deleted messages'
 which permanently deletes messages marked as to be deleted - is this
 what you were after?

Is this considered to be good UI design by anyone? Or, is IMAP support just 
crippled in Outlook? BTW, the Mac version of Outlook (Entourage or whatever 
its called) also seems to have this behavior also.

wt
-- 
Warren Turkal, Research Associate III/Systems Administrator
Colorado State University, Dept. of Atmospheric Science

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Replication problem

2006-05-17 Thread Patrick Radtke
Don't put  syncclient  in the SERVICE section,  it should go in the  
START section.


Your syncserver line looks correct.

How many users are on your primary? Possibly you see thrashing on the  
replica if its doing the initial copy of everyone's files. The  
initial sync can be time consuming depending on mailbox size and  
number of users.


You can also try running sync_client manually

//to sync a specific user with logging and in verbose mode
sync_client -v -l -u  username

-Patrick
On May 17, 2006, at 12:17 PM, David Korpiewski wrote:


Hi Patrick,
   I do apologize, that message was hurried so I could get it out  
and you are right, I did not correctly label things.  Your  
suggestion fixed my main problem, however, a new problem appeared.


It started to work when I set the replica to use sasl_mech_list:  
PLAIN.  I had accidentally put this line into my master instead of  
the replica, hence, why it didn't work.


So the replica works, but something else is broken:

Right now the sync is updating at at least once a second.  
Unfortunately, it is tying up all of the resources on the replica,  
leading it to thrash and eventually crash.


I set this option in imapd.conf files on both master and replica,  
but it has no effect:


sync_repeat_interval: 10

One other note: I found it interesting that the install- 
replication.html instructions never mentioned adding a prefork=1 to  
the sync-server and sync-client SERVICE lines.  I added these and  
it was the only way I could keep the sync-server and sync-client  
running in the background. It makes me wonder if this has something  
to do with my problem the runaway replication, especially since now  
I have two sync_client and two sync_server daemons running.. 
(sync_client running on master, sync_server on replica)


syncclientcmd=/usr/lib/cyrus-imapd/sync_client -r  
listen=csync prefork=1
syncserver   cmd=/usr/lib/cyrus-imapd/sync_server  
listen=csync prefork=1




Here are some logs and other data:

imapd.conf on the master (LMC1)

configdirectory: /var/lib/imap
partition-default: /var/spool/imap
admins: cyrus davidk
sievedir: /var/lib/imap/sieve
sendmail: /usr/sbin/sendmail
hashimapspool: true
sasl_pwcheck_method: saslauthd
sasl_mech_list: PLAIN

sync_authname: cyrus
sync_log: 1
sync_host: lmc2.cs.umass.edu
sync_repeat_interval: 10
sync_password: X

tls_cipher_list: PLAIN TLSv1 :SSLv3 :SSLv2 : !DES : !LOW :@STRENGTH
tls_ca_file:  /usr/share/ssl/certs/cyrus1.pem
tls_cert_file:  /usr/share/ssl/certs/cyrus1.pem
tls_key_file:  /usr/share/ssl/certs/cyrus.key



imapd.conf on the replica (LMC2)
-
configdirectory: /var/lib/imap
partition-default: /var/spool/imap
admins: cyrus davidk
sievedir: /var/lib/imap/sieve
sendmail: /usr/sbin/sendmail
hashimapspool: true
sasl_pwcheck_method: saslauthd
sasl_mech_list: PLAIN

sync_repeat_interval: 10
sync_machineid:2
sync_log: 1

tls_cipher_list: PLAIN TLSv1 :SSLv3 :SSLv2 : !DES : !LOW :@STRENGTH
tls_ca_file: /usr/share/ssl/certs/cyrus2.pem
tls_cert_file: /usr/share/ssl/certs/cyrus2.pem
tls_key_file: /usr/share/ssl/certs/cyrus.key



Running log of the Master:
-
May 17 11:30:56 lmc1 master[20248]: process 20361 exited, status 0
May 17 11:30:56 lmc1 sync_client[20364]: Doing a peer verify
May 17 11:30:56 lmc1 sync_client[20364]: Doing a peer verify
May 17 11:30:56 lmc1 master[20367]: about to exec /usr/lib/cyrus- 
imapd/sync_client

May 17 11:30:56 lmc1 sync_client[20364]: received server certificate
May 17 11:30:56 lmc1 sync_client[20364]: starttls: TLSv1 with  
cipher AES256-SHA (256/256 bits new) no authentication

May 17 11:30:56 lmc1 sync_client[20367]: Doing a peer verify
May 17 11:30:56 lmc1 sync_client[20367]: Doing a peer verify
May 17 11:30:56 lmc1 sync_client[20367]: received server certificate
May 17 11:30:56 lmc1 sync_client[20367]: starttls: TLSv1 with  
cipher AES256-SHA (256/256 bits new) no authentication

May 17 11:30:56 lmc1 master[20248]: process 20367 exited, status 0
May 17 11:30:56 lmc1 master[20370]: about to exec /usr/lib/cyrus- 
imapd/sync_client

May 17 11:30:57 lmc1 sync_client[20370]: Doing a peer verify
May 17 11:30:57 lmc1 sync_client[20370]: Doing a peer verify
May 17 11:30:57 lmc1 sync_client[20370]: received server certificate
May 17 11:30:57 lmc1 sync_client[20370]: starttls: TLSv1 with  
cipher AES256-SHA (256/256 bits new) no authentication

May 17 11:30:57 lmc1 master[20248]: process 20364 exited, status 0
May 17 11:30:57 lmc1 master[20373]: about to exec /usr/lib/cyrus- 
imapd/sync_client

May 17 11:30:57 lmc1 master[20248]: process 20370 exited, status 0
May 17 11:30:57 lmc1 master[20376]: about to exec /usr/lib/cyrus- 
imapd/sync_client

May 17 11:30:57 lmc1 sync_client[20373]: Doing a peer verify
May 17 11:30:57 lmc1 sync_client[20373]: Doing a peer verify
May 17 11:30:57 lmc1 sync_client[20373]: received server certificate
May 17 11:30:57 lmc1 sync_client[20373]: starttls: TLSv1 

mailboxes.db backend comparison

2006-05-17 Thread Andrew Morgan
I've been doing some more testing of Cyrus Murder operation.  My most 
recent test was to rebuild the mupdate master mailboxes.db from my backend 
server.  Both the backend and the mupdate master were configured for a 
skiplist mailboxes.db format.  The size of the mailboxes.db is 146382 
mailboxes.  Then, I configured the mupdate master to use berkeley for 
mailboxes.db.  Here are the times it took to do the full sync from the 
backend to the mupdate master:


skiplist - 20-25 minutes
berkeley - 3 minutes

I know many people have decided to use skiplist for all their Cyrus 
databases, but this seems like a clear advantage for Berkeley DB.  Any 
thoughts?


Andy

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Replication problem

2006-05-17 Thread David Korpiewski

I swear I'm going to tattoo RTFM to my forehead.  :-)

Putting sync_client into the START section fixed the problem. 
Replication works flawlessly now.


Thank you very much for your help!

David


Patrick Radtke wrote:
Don't put  syncclient  in the SERVICE section,  it should go in the 
START section.


Your syncserver line looks correct.

How many users are on your primary? Possibly you see thrashing on the 
replica if its doing the initial copy of everyone's files. The initial 
sync can be time consuming depending on mailbox size and number of users.


You can also try running sync_client manually

//to sync a specific user with logging and in verbose mode
sync_client -v -l -u  username

-Patrick
On May 17, 2006, at 12:17 PM, David Korpiewski wrote:


Hi Patrick,
   I do apologize, that message was hurried so I could get it out and 
you are right, I did not correctly label things.  Your suggestion 
fixed my main problem, however, a new problem appeared.


It started to work when I set the replica to use sasl_mech_list: 
PLAIN.  I had accidentally put this line into my master instead of 
the replica, hence, why it didn't work.


So the replica works, but something else is broken:

Right now the sync is updating at at least once a second. 
Unfortunately, it is tying up all of the resources on the replica, 
leading it to thrash and eventually crash.


I set this option in imapd.conf files on both master and replica, but 
it has no effect:


sync_repeat_interval: 10

One other note: I found it interesting that the 
install-replication.html instructions never mentioned adding a 
prefork=1 to the sync-server and sync-client SERVICE lines.  I added 
these and it was the only way I could keep the sync-server and 
sync-client running in the background. It makes me wonder if this has 
something to do with my problem the runaway replication, especially 
since now I have two sync_client and two sync_server daemons 
running..(sync_client running on master, sync_server on replica)


syncclientcmd=/usr/lib/cyrus-imapd/sync_client -r listen=csync 
prefork=1
syncserver   cmd=/usr/lib/cyrus-imapd/sync_server listen=csync 
prefork=1




Here are some logs and other data:

imapd.conf on the master (LMC1)

configdirectory: /var/lib/imap
partition-default: /var/spool/imap
admins: cyrus davidk
sievedir: /var/lib/imap/sieve
sendmail: /usr/sbin/sendmail
hashimapspool: true
sasl_pwcheck_method: saslauthd
sasl_mech_list: PLAIN

sync_authname: cyrus
sync_log: 1
sync_host: lmc2.cs.umass.edu
sync_repeat_interval: 10
sync_password: X

tls_cipher_list: PLAIN TLSv1 :SSLv3 :SSLv2 : !DES : !LOW :@STRENGTH
tls_ca_file:  /usr/share/ssl/certs/cyrus1.pem
tls_cert_file:  /usr/share/ssl/certs/cyrus1.pem
tls_key_file:  /usr/share/ssl/certs/cyrus.key



imapd.conf on the replica (LMC2)
-
configdirectory: /var/lib/imap
partition-default: /var/spool/imap
admins: cyrus davidk
sievedir: /var/lib/imap/sieve
sendmail: /usr/sbin/sendmail
hashimapspool: true
sasl_pwcheck_method: saslauthd
sasl_mech_list: PLAIN

sync_repeat_interval: 10
sync_machineid:2
sync_log: 1

tls_cipher_list: PLAIN TLSv1 :SSLv3 :SSLv2 : !DES : !LOW :@STRENGTH
tls_ca_file: /usr/share/ssl/certs/cyrus2.pem
tls_cert_file: /usr/share/ssl/certs/cyrus2.pem
tls_key_file: /usr/share/ssl/certs/cyrus.key



Running log of the Master:
-
May 17 11:30:56 lmc1 master[20248]: process 20361 exited, status 0
May 17 11:30:56 lmc1 sync_client[20364]: Doing a peer verify
May 17 11:30:56 lmc1 sync_client[20364]: Doing a peer verify
May 17 11:30:56 lmc1 master[20367]: about to exec 
/usr/lib/cyrus-imapd/sync_client

May 17 11:30:56 lmc1 sync_client[20364]: received server certificate
May 17 11:30:56 lmc1 sync_client[20364]: starttls: TLSv1 with cipher 
AES256-SHA (256/256 bits new) no authentication

May 17 11:30:56 lmc1 sync_client[20367]: Doing a peer verify
May 17 11:30:56 lmc1 sync_client[20367]: Doing a peer verify
May 17 11:30:56 lmc1 sync_client[20367]: received server certificate
May 17 11:30:56 lmc1 sync_client[20367]: starttls: TLSv1 with cipher 
AES256-SHA (256/256 bits new) no authentication

May 17 11:30:56 lmc1 master[20248]: process 20367 exited, status 0
May 17 11:30:56 lmc1 master[20370]: about to exec 
/usr/lib/cyrus-imapd/sync_client

May 17 11:30:57 lmc1 sync_client[20370]: Doing a peer verify
May 17 11:30:57 lmc1 sync_client[20370]: Doing a peer verify
May 17 11:30:57 lmc1 sync_client[20370]: received server certificate
May 17 11:30:57 lmc1 sync_client[20370]: starttls: TLSv1 with cipher 
AES256-SHA (256/256 bits new) no authentication

May 17 11:30:57 lmc1 master[20248]: process 20364 exited, status 0
May 17 11:30:57 lmc1 master[20373]: about to exec 
/usr/lib/cyrus-imapd/sync_client

May 17 11:30:57 lmc1 master[20248]: process 20370 exited, status 0
May 17 11:30:57 lmc1 master[20376]: about to exec 
/usr/lib/cyrus-imapd/sync_client

May 17 11:30:57 lmc1 sync_client[20373]: Doing a peer 

Replication question

2006-05-17 Thread David Korpiewski

One last question that I don't see answered on the 'net:

Say the master fails and we push all of our users to the replica, what 
is the method to get the changes back from the replica to the master 
once we are operational again?   Simply reverse the roles?  I'd imagine 
that bringing the master back online when the replica is handling all 
email might cause catastrophic problems when it starts synching.


Thank you
David



--

David Korpiewski Phone: 413-545-4319
Software Specialist IFax:   413-577-2285
Department of Computer Science   ICQ:   7565766
University of Massachusetts Amherst



Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: cyrus+sendmail+lmtpunix connection refused by localhost

2006-05-17 Thread Chris Harms

Andrzej Adam Filip wrote:

Chris Harms [EMAIL PROTECTED] writes:

  

Hello,

We have recently started to experience an inconsistent problem after
restarting cyrus and sendmail after a nightly backup script runs.  All
services seem to start properly, but mail delivery is deferred with
sendmail logging

dsn=4.4.1, stat=Deferred: Connection refused by localhost

It appears to be something in lmtp, but we aren't sure what exactly.
We are using the socket for lmtpunix delivery.  The magic bullet
seemed to be stopping all services and removing
/var/run/cyrus-master.pid and some old lmtp lock files, but then this
may have been coincidental.  I found a few similar reports on Google,
but no definite answers to this problem.

Any insight as to why this would just start happening out of the blue
would be most appreciated.

Thank you,
Chris Harms

# additional info

# Software versions
cyrus 2.2.12
sendmail 8.13.6

# /var/imap/socket
srwxrwxrwx 1 root  root  0 May 16 22:36 lmtp

# cyrus.conf
 lmtp  cmd=lmtpd listen=lmtp prefork=0
 lmtpunix  cmd=lmtpd listen=/var/imap/socket/lmtp prefork=1



Two recomended tests:
a) direct execution of deliver program
(echo subject: test; echo) | cyrdeliver -- mailbox_name
[ it will try to submit message via unix socket ]
b) making sendmail deliver the message in verbose mode
in sendmail-8.12+ as root execute:
(echo subject: test; echo)| sendmail -v mailbox_name

One possible source of problem: HostStatusDirectory option makes
sendmail remember for some time initial problems with delivery to
cyrus imap.
Have you set the option in your sendmail.cf?

  

It appears to be enabled:

O HostStatusDirectory=.hoststat

Reviewing my backup script shows the stopping / starting of sendmail to 
be commented out, so I should probably uncomment that first.  Or would 
it be a good idea to turn off the HostStatusDirectory option anyway?


Thank you for your help,
Chris

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: cyrus+sendmail+lmtpunix connection refused by localhost

2006-05-17 Thread Lenny

Hi there,

I'm having this very same problem. My HostStatusDirectory setting is  
off, however. This has only started again since upgrading to 2.3.3.  
Really hoping someone has ideas here. Thanks.


Lenny
--
Wisdom is to a man an infinite Treasure - Anonymous


Quoting Chris Harms [EMAIL PROTECTED]:


Andrzej Adam Filip wrote:

Chris Harms [EMAIL PROTECTED] writes:



Hello,

We have recently started to experience an inconsistent problem after
restarting cyrus and sendmail after a nightly backup script runs.  All
services seem to start properly, but mail delivery is deferred with
sendmail logging

dsn=4.4.1, stat=Deferred: Connection refused by localhost

It appears to be something in lmtp, but we aren't sure what exactly.
We are using the socket for lmtpunix delivery.  The magic bullet
seemed to be stopping all services and removing
/var/run/cyrus-master.pid and some old lmtp lock files, but then this
may have been coincidental.  I found a few similar reports on Google,
but no definite answers to this problem.

Any insight as to why this would just start happening out of the blue
would be most appreciated.

Thank you,
Chris Harms

# additional info

# Software versions
cyrus 2.2.12
sendmail 8.13.6

# /var/imap/socket
srwxrwxrwx 1 root  root  0 May 16 22:36 lmtp

# cyrus.conf
lmtp  cmd=lmtpd listen=lmtp prefork=0
lmtpunix  cmd=lmtpd listen=/var/imap/socket/lmtp prefork=1



Two recomended tests:
a) direct execution of deliver program
(echo subject: test; echo) | cyrdeliver -- mailbox_name
[ it will try to submit message via unix socket ]
b) making sendmail deliver the message in verbose mode
in sendmail-8.12+ as root execute:
(echo subject: test; echo)| sendmail -v mailbox_name

One possible source of problem: HostStatusDirectory option makes
sendmail remember for some time initial problems with delivery to
cyrus imap.
Have you set the option in your sendmail.cf?



It appears to be enabled:

O HostStatusDirectory=.hoststat

Reviewing my backup script shows the stopping / starting of sendmail to
be commented out, so I should probably uncomment that first.  Or would
it be a good idea to turn off the HostStatusDirectory option anyway?

Thank you for your help,
Chris

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html





Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: mailboxes.db backend comparison

2006-05-17 Thread Wesley Craig

On 17 May 2006, at 14:21, Andrew Morgan wrote:
My most recent test was to rebuild the mupdate master mailboxes.db  
from my backend server.


skiplist - 20-25 minutes
berkeley - 3 minutes


How long does it take to LIST the contents of each database?

:wes

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Replication question

2006-05-17 Thread Bron Gondwana
On Wed, May 17, 2006 at 03:40:17PM -0400, Patrick Radtke wrote:
 when we switch we comment out the sync_server line on the replica to  
 make sure it won't listen.

We have a as master config and an as slave config - and switch them
via symlinks.  Similar basic concept though - or at least it will be
once everything is actually running...

 When it comes to get the master up to speed, then we reverse the roles.

Yep - that's the idea.  Replicate everything back then switch roles
again.  I'm going to be interested to see how fast we can effect the
switchover.  Certainly users will lose their connections.

We also have an IP address which migrates with the 'master' status -
such that the init script that brings up the master IP address also sets 
the correct symlinks to ensure that the server is running in master
mode.  The replication is done to another IP address again - and the 
init script that brings up that IP also ensures that the server is
running in replica mode.  So nothing can replicate unless one server is
in master mode and the other in replica mode - the IP addresses ensure
it.  This has the other very nice advantage that the configuration files
are _identical_ on the two servers, since we don't have to specify a
different replication target.

 We also generate a file with all our usernames in it and feed it to  
 sync_client on the replica and that way it will go through every user  
 and make sure they get re-synced.

Now that's a fantastic idea.  Why didn't I think of that.  I'll be
writing something like that in the next few minutes.  I do think you
meant to say sync_client on the master there. 

Bron.

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Replication question

2006-05-17 Thread Simon Matter
 On Wed, May 17, 2006 at 03:40:17PM -0400, Patrick Radtke wrote:
 when we switch we comment out the sync_server line on the replica to
 make sure it won't listen.

 We have a as master config and an as slave config - and switch them
 via symlinks.  Similar basic concept though - or at least it will be
 once everything is actually running...

 When it comes to get the master up to speed, then we reverse the roles.

 Yep - that's the idea.  Replicate everything back then switch roles
 again.  I'm going to be interested to see how fast we can effect the
 switchover.  Certainly users will lose their connections.

 We also have an IP address which migrates with the 'master' status -
 such that the init script that brings up the master IP address also sets
 the correct symlinks to ensure that the server is running in master
 mode.  The replication is done to another IP address again - and the
 init script that brings up that IP also ensures that the server is
 running in replica mode.  So nothing can replicate unless one server is
 in master mode and the other in replica mode - the IP addresses ensure
 it.  This has the other very nice advantage that the configuration files
 are _identical_ on the two servers, since we don't have to specify a
 different replication target.

Sounds interesting, would be nice if you could make your scripts and
configs available as samples for others.

Simon

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html