Re: [Evolution] sieve
On Wed, 2006-05-17 at 07:41 +0200, Ron Smits wrote: a few years ago, there was some talk about integrating serverside filtering in evolution somewhere in 2003 if I remember correctly. has this ever happened? Ron Hi Ron, I asked about this and did some investigation on its support in other mail clients. See below: http://bugzilla.gnome.org/show_bug.cgi?id=216959 I just got Sieve working with Horde (Ingo module) and it is great. Only thing I'm not sure about is if there is a way to apply Sieve filters to already delivered mail - maybe you know an answer to that? Murray Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: no global admin with virtual domains? [was Re: saslpasswd and virtual domains]
former03 | Baltasar Cevc wrote:
Hi Rudy,
On 16.05.2006, at 11:39, Rudy Gevaert wrote:
But as you can see the [EMAIL PROTECTED] user doesn't list any mailboxes or
create any mailboxes.
Does anybody have any clues?
I just had a look at my config - I've set servername and defaultdomain
to the same value ('jura') - maybe you can try if that helps. Another
thing you could try would be to use the fqdn instead of the short
hostname - maybe Cyrus does a reverse lookup on the IP (there are some
functions that will do that).
I can't change servername to jura because our users will connect to
'mail.ugent.be' and 'mail.ugent.be' is a round robin DNS to our imap
proxy servers (e.g. jura.ugent.be, ...).
And these proxy server will forward requests to the correct imap backend
(e.g. mail1.ugent.be, mail2.ugent.be, ...)
jura.ugent.be and mail1.ugent.be are the same machine. jura.ugent.be is
eth0 and mail1.ugent.be is eth0:1
I've tested a bit further and added a user [EMAIL PROTECTED] to the
sasldb2 file. I can then login with cyradm. But can't ask for any
mailboxes or create mailboxes.
I added [EMAIL PROTECTED] also to the sasldb2 file. I can login with
cyradm but can't do a thing.
I would think that sasl is doing everything ok, but it is the imap
server that is stopping some things.
Does anybody have any clues about how to further debug this?
--
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Rudy Gevaert e-mail: [EMAIL PROTECTED]
Directie ICT, Afdeling Infrastructuur
Groep Systemen tel: +32 9 264 4734
Universiteit Gent / Ghent Universityfax: +32 9 264 4994
Krijgslaan 281, gebouw S9, 9000 Gent, Belgie www.UGent.be
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: no global admin with virtual domains? [was Re: saslpasswd and virtual domains]
Hi Rudy,
On 17.05.2006, at 10:29, Rudy Gevaert wrote:
former03 | Baltasar Cevc wrote:
Hi Rudy,
On 16.05.2006, at 11:39, Rudy Gevaert wrote:
But as you can see the [EMAIL PROTECTED] user doesn't list any mailboxes or
create any mailboxes.
Does anybody have any clues?
I just had a look at my config - I've set servername and
defaultdomain to the same value ('jura') - maybe you can try if that
helps. Another thing you could try would be to use the fqdn instead
of the short hostname - maybe Cyrus does a reverse lookup on the IP
(there are some functions that will do that).
I can't change servername to jura because our users will connect to
'mail.ugent.be' and 'mail.ugent.be' is a round robin DNS to our imap
proxy servers (e.g. jura.ugent.be, ...).
And these proxy server will forward requests to the correct imap
backend (e.g. mail1.ugent.be, mail2.ugent.be, ...)
What I wanted to suggest is to replace the servername value in
imapd.conf (with the 'side effect' of having that name shown when
connecting to that server).
Or would it be possible to change the default domain in your setup to
the same value as servername.
If I rembember correctly, the only setup where I got the admin thing
really working was when I had both variables set to the same value;
however, I'm quite sure it's a knowledge problem and there is some
nicer solution (anybody out on the list who could give a hint?).
Baltasar
_ former 03 gmbh
_ infanteriestraße 19 haus 6 eg
_ 80797 muenchen
_ www.former03.de
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: no global admin with virtual domains? [was Re: saslpasswd and virtual domains]
former03 | Baltasar Cevc wrote:
Hi Rudy,
On 17.05.2006, at 10:29, Rudy Gevaert wrote:
former03 | Baltasar Cevc wrote:
Hi Rudy,
On 16.05.2006, at 11:39, Rudy Gevaert wrote:
But as you can see the [EMAIL PROTECTED] user doesn't list any mailboxes or
create any mailboxes.
Does anybody have any clues?
I just had a look at my config - I've set servername and
defaultdomain to the same value ('jura') - maybe you can try if that
helps. Another thing you could try would be to use the fqdn instead
of the short hostname - maybe Cyrus does a reverse lookup on the IP
(there are some functions that will do that).
I can't change servername to jura because our users will connect to
'mail.ugent.be' and 'mail.ugent.be' is a round robin DNS to our imap
proxy servers (e.g. jura.ugent.be, ...).
And these proxy server will forward requests to the correct imap
backend (e.g. mail1.ugent.be, mail2.ugent.be, ...)
What I wanted to suggest is to replace the servername value in
imapd.conf (with the 'side effect' of having that name shown when
connecting to that server).
Or would it be possible to change the default domain in your setup to
the same value as servername.
If I rembember correctly, the only setup where I got the admin thing
really working was when I had both variables set to the same value;
however, I'm quite sure it's a knowledge problem and there is some nicer
solution (anybody out on the list who could give a hint?).
I now changed defaultdomain and servername to mail1 and added a
[EMAIL PROTECTED] user to the sasldb2 file. imapd.conf has the following:
jura:/mail/mail1/etc# cyradm --user [EMAIL PROTECTED] mail1.ugent.be
Password:
mail1.ugent.be lm
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
mail1.ugent.be cm user/[EMAIL PROTECTED]
mail1.ugent.be lm
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
user/[EMAIL PROTECTED] (\HasNoChildren)
mail1.ugent.be quit
As you can see I can now login :) and create mailboxes. So I guess I'm
logged in as the global admin! Hurah!
Not setting defaultdomain and it doesn't work. So I guess they both
have to be set.
I am not sure how this will now work together with ssl certificates.
Als users will be connecting to mail.ugent.be and in the end will end up
on mail1.ugent.be or mail2.ugent.be or mail3.ugent.be
But there is a proxy in between so maybe this will be fix that problem.
Thank you for your help! An other problem that is fixed. Up to the
next one :)
--
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Rudy Gevaert e-mail: [EMAIL PROTECTED]
Directie ICT, Afdeling Infrastructuur
Groep Systemen tel: +32 9 264 4734
Universiteit Gent / Ghent Universityfax: +32 9 264 4994
Krijgslaan 281, gebouw S9, 9000 Gent, Belgie www.UGent.be
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
building Cyrus-imap on Intel OS X
Hello, I'm receiving the following error message from building the DarwinPort of Cyrus on my Intel-based Mac: --- Configuring cyrus-imapd checking build system type... configure: error: cannot guess build type; you must specify one Error: Target com.apple.configure returned: configure failure: shell command cd /opt/local/var/db/dports/build/ _opt_local_var_db_dports_sources_rsync.rsync.darwinports.org_dpupdate_dp orts_mail_cyrus-imapd/work/cyrus-imapd-2.2.12 ./configure -- prefix=/opt/local --mandir=/opt/local/share/man --sysconfdir=/opt/ local/etc/cyrus --with-cyrus-prefix=/opt/local --with-pidfile=/opt/ local/var/run/cyrus-master.pid --with-bdb-incdir=/opt/local/include/ db4 --with-bdb-libdir=/opt/local/lib --with-perl=/opt/local/bin/perl --with-sasl=/opt/local --with-openssl=/opt/local --with-cyrus- user=cyrus --with-cyrus-group=mail --with-auth=unix --enable-listext --enable-cmulocal --enable-netscapehack returned error 1 Command output: checking build system type... configure: error: cannot guess build type; you must specify one Warning: the following items did not execute (for cyrus-imapd): com.apple.activate com.apple.configure com.apple.build com.apple.destroot com.apple.archive com.apple.install Error: /opt/local/bin/port: Status 1 encountered during processing. From: http://developer.apple.com/documentation/Porting/Conceptual/ PortingUnix/compiling/chapter_4_section_3.html Some earlier versions of autoconf handle cross-compiling poorly. If your tool contains a configure script generated by an early autoconf, you may be able to significantly improve things by replacing some of the config.* files (and config.guess in particular) with updated copies from the version of autoconf that comes with Mac OS X. Does this apply here? Would updating the config.guess remedy this issue? --- Joe Auty UITS Messaging Indiana University [EMAIL PROTECTED] PGP.sig Description: This is a digitally signed message part Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Outlook does not delete but displays deleted messages asstrike-trough
hi, my Outlook users does not purge the mails, after delete them. Does anybody found a way, to delete the messages, that has the delete flag, or something else? Most ipurge examples needs a trash folder, but Outlook does not move the messages to a trash like folder. cu denny -- Sicherheit verständlich http://www.sides.de GnuPG Key http://pgpkeys.pca.dfn.de:11371/pks/lookup?op=getsearch=0x2A5CE192AB7D3FE0 signature.asc Description: Dies ist ein digital signierter Nachrichtenteil Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Outlook does not delete but displays deleted messages asstrike-trough
Denny Schierz wrote: anybody found a way, to delete the messages, that has the delete flag, or something else? Most ipurge examples needs a trash folder, but Outlook does not move the messages to a trash like folder. Ipurge seems to delete messages based on the specs you give it as options rather than to expunge mailboxes. Is there some tool to expunge the deleted mail? GH Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Murder trouble, 2 unified servers authenticating to each other
Hi list, I retried everything and probably found some new insights: Am Sonntag, 14. Mai 2006 02:29 schrieb Michael Leupold: I set up 2 servers (2.3.3) today to operate in a murder (both running unified). They are called master.leunet.lan and slave.leunet.lan. mupdate seems to be running fine so far, but if one imapd should proxy for the other it won't work. the main problem is that slave (frontend) won't connected to master (backend). I thought this was due to self-signed certificates but it doesn't seem to be. The client gives me a no worthy mechs after negotiating TLS. As I have my users on an ldap server I'm using saslauthd and advertise PLAIN. I tried 'imtest -t -m PLAIN -a manager master' and it works as well. Is PLAIN disallowed for frontend-backend authentication? Is there a way to get more debug-output? Thanks and kind regards, Michael Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: building Cyrus-imap on Intel OS X
On May 17, 2006, at 10:31 AM, Joe Auty wrote: Hello, I'm receiving the following error message from building the DarwinPort of Cyrus on my Intel-based Mac: You may want to refresh your ports. When I get errors on a compile, it's the first thing I do. -Michael - Das Verhalten von Gates hatte mir bewiesen, dass ich auf ihn und seine beiden Gefaehrten nicht rechnen durfte. (The behavior of Gates proved to me that I couldn't count on him or his two companions.) -Karl May, Winnetou III Das Testament des Apachen Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: building Cyrus-imap on Intel OS X
On May 17, 2006, at 11:21 AM, Michael Johnson wrote: On May 17, 2006, at 10:31 AM, Joe Auty wrote: Hello, I'm receiving the following error message from building the DarwinPort of Cyrus on my Intel-based Mac: You may want to refresh your ports. When I get errors on a compile, it's the first thing I do. I've done that PGP.sig Description: This is a digitally signed message part Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Outlook does not delete but displays deleted messages asstrike-trough
H. Wilmer wrote: Denny Schierz wrote: anybody found a way, to delete the messages, that has the delete flag, or something else? Most ipurge examples needs a trash folder, but Outlook does not move the messages to a trash like folder. Ipurge seems to delete messages based on the specs you give it as options rather than to expunge mailboxes. Is there some tool to expunge the deleted mail? GH There is an option (I believe under Edit) to 'Purge deleted messages' which permanently deletes messages marked as to be deleted - is this what you were after? Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
RE: Outlook does not delete but displays deleted messages as strike-through
... Even better: it can be even added to Outlook's top menu. Right click on the toolbar, select customize, Commands, Edit and drag 'Purge deleted messages' into the top menu bar. In Outlook, Edit-Purge Deleted Messages -Original Message- From: [EMAIL PROTECTED] [mailto:info-cyrus- [EMAIL PROTECTED] On Behalf Of Denny Schierz Sent: Wednesday, May 17, 2006 10:43 AM To: info-cyrus@lists.andrew.cmu.edu Subject: Re: Outlook does not delete but displays deleted messagesasstrike-trough hi, my Outlook users does not purge the mails, after delete them. Does anybody found a way, to delete the messages, that has the delete flag, or something else? Most ipurge examples needs a trash folder, but Outlook does not move the messages to a trash like folder. cu denny -- Sicherheit verständlich http://www.sides.de GnuPG Key http://pgpkeys.pca.dfn.de:11371/pks/lookup?op=getsearch=0x2A5CE192AB7 D3FE 0 Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
cyrus+sendmail+lmtpunix connection refused by localhost
Hello, We have recently started to experience an inconsistent problem after restarting cyrus and sendmail after a nightly backup script runs. All services seem to start properly, but mail delivery is deferred with sendmail logging dsn=4.4.1, stat=Deferred: Connection refused by localhost It appears to be something in lmtp, but we aren't sure what exactly. We are using the socket for lmtpunix delivery. The magic bullet seemed to be stopping all services and removing /var/run/cyrus-master.pid and some old lmtp lock files, but then this may have been coincidental. I found a few similar reports on Google, but no definite answers to this problem. Any insight as to why this would just start happening out of the blue would be most appreciated. Thank you, Chris Harms # additional info # Software versions cyrus 2.2.12 sendmail 8.13.6 # /var/imap/socket srwxrwxrwx 1 root root 0 May 16 22:36 lmtp # cyrus.conf lmtp cmd=lmtpd listen=lmtp prefork=0 lmtpunix cmd=lmtpd listen=/var/imap/socket/lmtp prefork=1 Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Outlook does not delete but displays deleted messages asstrike-trough
On Wednesday 17 May 2006 09:35, James Yale wrote: There is an option (I believe under Edit) to 'Purge deleted messages' which permanently deletes messages marked as to be deleted - is this what you were after? Is this considered to be good UI design by anyone? Or, is IMAP support just crippled in Outlook? BTW, the Mac version of Outlook (Entourage or whatever its called) also seems to have this behavior also. wt -- Warren Turkal, Research Associate III/Systems Administrator Colorado State University, Dept. of Atmospheric Science Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Replication problem
Don't put syncclient in the SERVICE section, it should go in the START section. Your syncserver line looks correct. How many users are on your primary? Possibly you see thrashing on the replica if its doing the initial copy of everyone's files. The initial sync can be time consuming depending on mailbox size and number of users. You can also try running sync_client manually //to sync a specific user with logging and in verbose mode sync_client -v -l -u username -Patrick On May 17, 2006, at 12:17 PM, David Korpiewski wrote: Hi Patrick, I do apologize, that message was hurried so I could get it out and you are right, I did not correctly label things. Your suggestion fixed my main problem, however, a new problem appeared. It started to work when I set the replica to use sasl_mech_list: PLAIN. I had accidentally put this line into my master instead of the replica, hence, why it didn't work. So the replica works, but something else is broken: Right now the sync is updating at at least once a second. Unfortunately, it is tying up all of the resources on the replica, leading it to thrash and eventually crash. I set this option in imapd.conf files on both master and replica, but it has no effect: sync_repeat_interval: 10 One other note: I found it interesting that the install- replication.html instructions never mentioned adding a prefork=1 to the sync-server and sync-client SERVICE lines. I added these and it was the only way I could keep the sync-server and sync-client running in the background. It makes me wonder if this has something to do with my problem the runaway replication, especially since now I have two sync_client and two sync_server daemons running.. (sync_client running on master, sync_server on replica) syncclientcmd=/usr/lib/cyrus-imapd/sync_client -r listen=csync prefork=1 syncserver cmd=/usr/lib/cyrus-imapd/sync_server listen=csync prefork=1 Here are some logs and other data: imapd.conf on the master (LMC1) configdirectory: /var/lib/imap partition-default: /var/spool/imap admins: cyrus davidk sievedir: /var/lib/imap/sieve sendmail: /usr/sbin/sendmail hashimapspool: true sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN sync_authname: cyrus sync_log: 1 sync_host: lmc2.cs.umass.edu sync_repeat_interval: 10 sync_password: X tls_cipher_list: PLAIN TLSv1 :SSLv3 :SSLv2 : !DES : !LOW :@STRENGTH tls_ca_file: /usr/share/ssl/certs/cyrus1.pem tls_cert_file: /usr/share/ssl/certs/cyrus1.pem tls_key_file: /usr/share/ssl/certs/cyrus.key imapd.conf on the replica (LMC2) - configdirectory: /var/lib/imap partition-default: /var/spool/imap admins: cyrus davidk sievedir: /var/lib/imap/sieve sendmail: /usr/sbin/sendmail hashimapspool: true sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN sync_repeat_interval: 10 sync_machineid:2 sync_log: 1 tls_cipher_list: PLAIN TLSv1 :SSLv3 :SSLv2 : !DES : !LOW :@STRENGTH tls_ca_file: /usr/share/ssl/certs/cyrus2.pem tls_cert_file: /usr/share/ssl/certs/cyrus2.pem tls_key_file: /usr/share/ssl/certs/cyrus.key Running log of the Master: - May 17 11:30:56 lmc1 master[20248]: process 20361 exited, status 0 May 17 11:30:56 lmc1 sync_client[20364]: Doing a peer verify May 17 11:30:56 lmc1 sync_client[20364]: Doing a peer verify May 17 11:30:56 lmc1 master[20367]: about to exec /usr/lib/cyrus- imapd/sync_client May 17 11:30:56 lmc1 sync_client[20364]: received server certificate May 17 11:30:56 lmc1 sync_client[20364]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication May 17 11:30:56 lmc1 sync_client[20367]: Doing a peer verify May 17 11:30:56 lmc1 sync_client[20367]: Doing a peer verify May 17 11:30:56 lmc1 sync_client[20367]: received server certificate May 17 11:30:56 lmc1 sync_client[20367]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication May 17 11:30:56 lmc1 master[20248]: process 20367 exited, status 0 May 17 11:30:56 lmc1 master[20370]: about to exec /usr/lib/cyrus- imapd/sync_client May 17 11:30:57 lmc1 sync_client[20370]: Doing a peer verify May 17 11:30:57 lmc1 sync_client[20370]: Doing a peer verify May 17 11:30:57 lmc1 sync_client[20370]: received server certificate May 17 11:30:57 lmc1 sync_client[20370]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication May 17 11:30:57 lmc1 master[20248]: process 20364 exited, status 0 May 17 11:30:57 lmc1 master[20373]: about to exec /usr/lib/cyrus- imapd/sync_client May 17 11:30:57 lmc1 master[20248]: process 20370 exited, status 0 May 17 11:30:57 lmc1 master[20376]: about to exec /usr/lib/cyrus- imapd/sync_client May 17 11:30:57 lmc1 sync_client[20373]: Doing a peer verify May 17 11:30:57 lmc1 sync_client[20373]: Doing a peer verify May 17 11:30:57 lmc1 sync_client[20373]: received server certificate May 17 11:30:57 lmc1 sync_client[20373]: starttls: TLSv1
mailboxes.db backend comparison
I've been doing some more testing of Cyrus Murder operation. My most recent test was to rebuild the mupdate master mailboxes.db from my backend server. Both the backend and the mupdate master were configured for a skiplist mailboxes.db format. The size of the mailboxes.db is 146382 mailboxes. Then, I configured the mupdate master to use berkeley for mailboxes.db. Here are the times it took to do the full sync from the backend to the mupdate master: skiplist - 20-25 minutes berkeley - 3 minutes I know many people have decided to use skiplist for all their Cyrus databases, but this seems like a clear advantage for Berkeley DB. Any thoughts? Andy Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Replication problem
I swear I'm going to tattoo RTFM to my forehead. :-) Putting sync_client into the START section fixed the problem. Replication works flawlessly now. Thank you very much for your help! David Patrick Radtke wrote: Don't put syncclient in the SERVICE section, it should go in the START section. Your syncserver line looks correct. How many users are on your primary? Possibly you see thrashing on the replica if its doing the initial copy of everyone's files. The initial sync can be time consuming depending on mailbox size and number of users. You can also try running sync_client manually //to sync a specific user with logging and in verbose mode sync_client -v -l -u username -Patrick On May 17, 2006, at 12:17 PM, David Korpiewski wrote: Hi Patrick, I do apologize, that message was hurried so I could get it out and you are right, I did not correctly label things. Your suggestion fixed my main problem, however, a new problem appeared. It started to work when I set the replica to use sasl_mech_list: PLAIN. I had accidentally put this line into my master instead of the replica, hence, why it didn't work. So the replica works, but something else is broken: Right now the sync is updating at at least once a second. Unfortunately, it is tying up all of the resources on the replica, leading it to thrash and eventually crash. I set this option in imapd.conf files on both master and replica, but it has no effect: sync_repeat_interval: 10 One other note: I found it interesting that the install-replication.html instructions never mentioned adding a prefork=1 to the sync-server and sync-client SERVICE lines. I added these and it was the only way I could keep the sync-server and sync-client running in the background. It makes me wonder if this has something to do with my problem the runaway replication, especially since now I have two sync_client and two sync_server daemons running..(sync_client running on master, sync_server on replica) syncclientcmd=/usr/lib/cyrus-imapd/sync_client -r listen=csync prefork=1 syncserver cmd=/usr/lib/cyrus-imapd/sync_server listen=csync prefork=1 Here are some logs and other data: imapd.conf on the master (LMC1) configdirectory: /var/lib/imap partition-default: /var/spool/imap admins: cyrus davidk sievedir: /var/lib/imap/sieve sendmail: /usr/sbin/sendmail hashimapspool: true sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN sync_authname: cyrus sync_log: 1 sync_host: lmc2.cs.umass.edu sync_repeat_interval: 10 sync_password: X tls_cipher_list: PLAIN TLSv1 :SSLv3 :SSLv2 : !DES : !LOW :@STRENGTH tls_ca_file: /usr/share/ssl/certs/cyrus1.pem tls_cert_file: /usr/share/ssl/certs/cyrus1.pem tls_key_file: /usr/share/ssl/certs/cyrus.key imapd.conf on the replica (LMC2) - configdirectory: /var/lib/imap partition-default: /var/spool/imap admins: cyrus davidk sievedir: /var/lib/imap/sieve sendmail: /usr/sbin/sendmail hashimapspool: true sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN sync_repeat_interval: 10 sync_machineid:2 sync_log: 1 tls_cipher_list: PLAIN TLSv1 :SSLv3 :SSLv2 : !DES : !LOW :@STRENGTH tls_ca_file: /usr/share/ssl/certs/cyrus2.pem tls_cert_file: /usr/share/ssl/certs/cyrus2.pem tls_key_file: /usr/share/ssl/certs/cyrus.key Running log of the Master: - May 17 11:30:56 lmc1 master[20248]: process 20361 exited, status 0 May 17 11:30:56 lmc1 sync_client[20364]: Doing a peer verify May 17 11:30:56 lmc1 sync_client[20364]: Doing a peer verify May 17 11:30:56 lmc1 master[20367]: about to exec /usr/lib/cyrus-imapd/sync_client May 17 11:30:56 lmc1 sync_client[20364]: received server certificate May 17 11:30:56 lmc1 sync_client[20364]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication May 17 11:30:56 lmc1 sync_client[20367]: Doing a peer verify May 17 11:30:56 lmc1 sync_client[20367]: Doing a peer verify May 17 11:30:56 lmc1 sync_client[20367]: received server certificate May 17 11:30:56 lmc1 sync_client[20367]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication May 17 11:30:56 lmc1 master[20248]: process 20367 exited, status 0 May 17 11:30:56 lmc1 master[20370]: about to exec /usr/lib/cyrus-imapd/sync_client May 17 11:30:57 lmc1 sync_client[20370]: Doing a peer verify May 17 11:30:57 lmc1 sync_client[20370]: Doing a peer verify May 17 11:30:57 lmc1 sync_client[20370]: received server certificate May 17 11:30:57 lmc1 sync_client[20370]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication May 17 11:30:57 lmc1 master[20248]: process 20364 exited, status 0 May 17 11:30:57 lmc1 master[20373]: about to exec /usr/lib/cyrus-imapd/sync_client May 17 11:30:57 lmc1 master[20248]: process 20370 exited, status 0 May 17 11:30:57 lmc1 master[20376]: about to exec /usr/lib/cyrus-imapd/sync_client May 17 11:30:57 lmc1 sync_client[20373]: Doing a peer
Replication question
One last question that I don't see answered on the 'net: Say the master fails and we push all of our users to the replica, what is the method to get the changes back from the replica to the master once we are operational again? Simply reverse the roles? I'd imagine that bringing the master back online when the replica is handling all email might cause catastrophic problems when it starts synching. Thank you David -- David Korpiewski Phone: 413-545-4319 Software Specialist IFax: 413-577-2285 Department of Computer Science ICQ: 7565766 University of Massachusetts Amherst Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: cyrus+sendmail+lmtpunix connection refused by localhost
Andrzej Adam Filip wrote: Chris Harms [EMAIL PROTECTED] writes: Hello, We have recently started to experience an inconsistent problem after restarting cyrus and sendmail after a nightly backup script runs. All services seem to start properly, but mail delivery is deferred with sendmail logging dsn=4.4.1, stat=Deferred: Connection refused by localhost It appears to be something in lmtp, but we aren't sure what exactly. We are using the socket for lmtpunix delivery. The magic bullet seemed to be stopping all services and removing /var/run/cyrus-master.pid and some old lmtp lock files, but then this may have been coincidental. I found a few similar reports on Google, but no definite answers to this problem. Any insight as to why this would just start happening out of the blue would be most appreciated. Thank you, Chris Harms # additional info # Software versions cyrus 2.2.12 sendmail 8.13.6 # /var/imap/socket srwxrwxrwx 1 root root 0 May 16 22:36 lmtp # cyrus.conf lmtp cmd=lmtpd listen=lmtp prefork=0 lmtpunix cmd=lmtpd listen=/var/imap/socket/lmtp prefork=1 Two recomended tests: a) direct execution of deliver program (echo subject: test; echo) | cyrdeliver -- mailbox_name [ it will try to submit message via unix socket ] b) making sendmail deliver the message in verbose mode in sendmail-8.12+ as root execute: (echo subject: test; echo)| sendmail -v mailbox_name One possible source of problem: HostStatusDirectory option makes sendmail remember for some time initial problems with delivery to cyrus imap. Have you set the option in your sendmail.cf? It appears to be enabled: O HostStatusDirectory=.hoststat Reviewing my backup script shows the stopping / starting of sendmail to be commented out, so I should probably uncomment that first. Or would it be a good idea to turn off the HostStatusDirectory option anyway? Thank you for your help, Chris Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: cyrus+sendmail+lmtpunix connection refused by localhost
Hi there, I'm having this very same problem. My HostStatusDirectory setting is off, however. This has only started again since upgrading to 2.3.3. Really hoping someone has ideas here. Thanks. Lenny -- Wisdom is to a man an infinite Treasure - Anonymous Quoting Chris Harms [EMAIL PROTECTED]: Andrzej Adam Filip wrote: Chris Harms [EMAIL PROTECTED] writes: Hello, We have recently started to experience an inconsistent problem after restarting cyrus and sendmail after a nightly backup script runs. All services seem to start properly, but mail delivery is deferred with sendmail logging dsn=4.4.1, stat=Deferred: Connection refused by localhost It appears to be something in lmtp, but we aren't sure what exactly. We are using the socket for lmtpunix delivery. The magic bullet seemed to be stopping all services and removing /var/run/cyrus-master.pid and some old lmtp lock files, but then this may have been coincidental. I found a few similar reports on Google, but no definite answers to this problem. Any insight as to why this would just start happening out of the blue would be most appreciated. Thank you, Chris Harms # additional info # Software versions cyrus 2.2.12 sendmail 8.13.6 # /var/imap/socket srwxrwxrwx 1 root root 0 May 16 22:36 lmtp # cyrus.conf lmtp cmd=lmtpd listen=lmtp prefork=0 lmtpunix cmd=lmtpd listen=/var/imap/socket/lmtp prefork=1 Two recomended tests: a) direct execution of deliver program (echo subject: test; echo) | cyrdeliver -- mailbox_name [ it will try to submit message via unix socket ] b) making sendmail deliver the message in verbose mode in sendmail-8.12+ as root execute: (echo subject: test; echo)| sendmail -v mailbox_name One possible source of problem: HostStatusDirectory option makes sendmail remember for some time initial problems with delivery to cyrus imap. Have you set the option in your sendmail.cf? It appears to be enabled: O HostStatusDirectory=.hoststat Reviewing my backup script shows the stopping / starting of sendmail to be commented out, so I should probably uncomment that first. Or would it be a good idea to turn off the HostStatusDirectory option anyway? Thank you for your help, Chris Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: mailboxes.db backend comparison
On 17 May 2006, at 14:21, Andrew Morgan wrote: My most recent test was to rebuild the mupdate master mailboxes.db from my backend server. skiplist - 20-25 minutes berkeley - 3 minutes How long does it take to LIST the contents of each database? :wes Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Replication question
On Wed, May 17, 2006 at 03:40:17PM -0400, Patrick Radtke wrote: when we switch we comment out the sync_server line on the replica to make sure it won't listen. We have a as master config and an as slave config - and switch them via symlinks. Similar basic concept though - or at least it will be once everything is actually running... When it comes to get the master up to speed, then we reverse the roles. Yep - that's the idea. Replicate everything back then switch roles again. I'm going to be interested to see how fast we can effect the switchover. Certainly users will lose their connections. We also have an IP address which migrates with the 'master' status - such that the init script that brings up the master IP address also sets the correct symlinks to ensure that the server is running in master mode. The replication is done to another IP address again - and the init script that brings up that IP also ensures that the server is running in replica mode. So nothing can replicate unless one server is in master mode and the other in replica mode - the IP addresses ensure it. This has the other very nice advantage that the configuration files are _identical_ on the two servers, since we don't have to specify a different replication target. We also generate a file with all our usernames in it and feed it to sync_client on the replica and that way it will go through every user and make sure they get re-synced. Now that's a fantastic idea. Why didn't I think of that. I'll be writing something like that in the next few minutes. I do think you meant to say sync_client on the master there. Bron. Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Replication question
On Wed, May 17, 2006 at 03:40:17PM -0400, Patrick Radtke wrote: when we switch we comment out the sync_server line on the replica to make sure it won't listen. We have a as master config and an as slave config - and switch them via symlinks. Similar basic concept though - or at least it will be once everything is actually running... When it comes to get the master up to speed, then we reverse the roles. Yep - that's the idea. Replicate everything back then switch roles again. I'm going to be interested to see how fast we can effect the switchover. Certainly users will lose their connections. We also have an IP address which migrates with the 'master' status - such that the init script that brings up the master IP address also sets the correct symlinks to ensure that the server is running in master mode. The replication is done to another IP address again - and the init script that brings up that IP also ensures that the server is running in replica mode. So nothing can replicate unless one server is in master mode and the other in replica mode - the IP addresses ensure it. This has the other very nice advantage that the configuration files are _identical_ on the two servers, since we don't have to specify a different replication target. Sounds interesting, would be nice if you could make your scripts and configs available as samples for others. Simon Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
