RE: Sieve: Vacation not working (solved)

2009-05-28 Thread Sebastian Hagedorn
--On 27. Mai 2009 22:42:30 -0400 Gottschalk, David dgot...@emory.edu 
wrote:



Well, I tried to enable this same feature this evening in sendmail, but
ran into some problems. Forgive me as I am complete novice when it comes
to enabling this feature in sendmail. I enabled this in my sendmail.cf,


You didn't actually edit the .cf file, did you? That's not how it works ... 
you need to edit the .mc and generate the .cf.



then got the following error:

unknown mailer cyrusv2

--
.:.Sebastian Hagedorn - RZKR-R1 (Gebäude 52), Zimmer 18.:.
.:.Regionales Rechenzentrum (RRZK).:.
.:.Universität zu Köln / Cologne University - ✆ +49-221-478-5587.:.

pgpGH6Rpkaax6.pgp
Description: PGP signature

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

2.3.14: posting to shared mailbox results in 550 Permission denied

2009-05-28 Thread Simon Matter
Hi,

I have a server which I upgraded recently from 2.3.13 to 2.3.14.
Now I realized that sending mail to shared folders doesn't work anymore.
I have verified the problem on a test box and it looks like this:

May 28 11:01:49 install lmtpunix[15085]: accepted connection
May 28 11:01:49 install lmtpunix[15085]: lmtp connection preauth'd as postman
May 28 11:01:49 install lmtpunix[15085]: verify_user(system) failed:
Permission denied
May 28 11:01:49 install postfix/lmtp[15077]: 87D6F34018:
to=+sys...@localhost.corp.invoca.ch, orig_to=+sys...@localhost,
relay=install.corp.invoca.ch[/var/lib/imap/socket/lmtp], delay=0.12,
delays=0.09/0.01/0/0.03, dsn=5.7.1, status=bounced (host
install.corp.invoca.ch[/var/lib/imap/socket/lmtp] said: 550-You do not
have permission to post a message to this mailbox. 550-Please contact the
owner of this mailbox in order to submit 550-your message, or postmaster
if you believe you 550-received this message in error. 550 5.7.1
Permission denied (in reply to RCPT TO command))

The mailbox has the following permissions:

localhost.localdomain lam system
anonymous p
anyone lrs

I just downgraded to 2.3.13 and it works again, upgrading to 2.3.14 and it
doesnt.

Somehow there was a change from 2.3.13 to 2.3.14 which triggers the
problem. I tried to identify which change it is but can't find it.

Another interesting detail is that both servers where it doesn't work are
RedHat EL4 on i386 while I have a server RedHat EL5 on x86_64 where it
seems to work.

Does anyone who knows the changes between 2.3.13 and 2.3.14 have an idea
what could be the problem here?

Thanks,
Simon


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Sieve: Vacation not working (solved)

2009-05-28 Thread Garry
Sebastian Hagedorn wrote:
 --On 27. Mai 2009 22:42:30 -0400 Gottschalk, David
 dgot...@emory.edu wrote:

 Well, I tried to enable this same feature this evening in sendmail, but
 ran into some problems. Forgive me as I am complete novice when it comes
 to enabling this feature in sendmail. I enabled this in my sendmail.cf,

 You didn't actually edit the .cf file, did you? That's not how it
 works ... you need to edit the .mc and generate the .cf.
He didn't, he put it in the .mc and m4'd it ... anyway, I suppose the
cause is the rather old sendmail 8.12 he is running, which most likely
doesn't have the appropriate files for cyrusv2 as a mailer yet ...

I'm not sure if it will be sufficient to just add the appropriate config
files, or if the cyrusv2-files require some additional functionality
inside sendmail 8.13.x that might not be present in earlier versions ...

-garry

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Sieve: Vacation not working (solved)

2009-05-28 Thread Sebastian Hagedorn

--On 28. Mai 2009 11:39:03 +0200 Garry ga...@glendown.de wrote:


You didn't actually edit the .cf file, did you? That's not how it
works ... you need to edit the .mc and generate the .cf.

He didn't, he put it in the .mc and m4'd it ...


Wouldn't the m4 command have thrown an error in that case if it didn't know 
the cyrusv2 mailer? Unless you use the m4 files of a newer sendmail than 
the one you're actually running, that is.



anyway, I suppose the
cause is the rather old sendmail 8.12 he is running, which most likely
doesn't have the appropriate files for cyrusv2 as a mailer yet ...


Actually it does, at least with 8.12.6 and higher. 8.12.2 doesn't seem to 
have it.

--
.:.Sebastian Hagedorn - RZKR-R1 (Gebäude 52), Zimmer 18.:.
.:.Regionales Rechenzentrum (RRZK).:.
.:.Universität zu Köln / Cologne University - ✆ +49-221-478-5587.:.

pgpNlKAiwoQRI.pgp
Description: PGP signature

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: 2.3.14: posting to shared mailbox results in 550 Permission denied

2009-05-28 Thread Simon Matter
 Hi,

 I have a server which I upgraded recently from 2.3.13 to 2.3.14.
 Now I realized that sending mail to shared folders doesn't work anymore.
 I have verified the problem on a test box and it looks like this:

 May 28 11:01:49 install lmtpunix[15085]: accepted connection
 May 28 11:01:49 install lmtpunix[15085]: lmtp connection preauth'd as
 postman
 May 28 11:01:49 install lmtpunix[15085]: verify_user(system) failed:
 Permission denied
 May 28 11:01:49 install postfix/lmtp[15077]: 87D6F34018:
 to=+sys...@localhost.corp.invoca.ch, orig_to=+sys...@localhost,
 relay=install.corp.invoca.ch[/var/lib/imap/socket/lmtp], delay=0.12,
 delays=0.09/0.01/0/0.03, dsn=5.7.1, status=bounced (host
 install.corp.invoca.ch[/var/lib/imap/socket/lmtp] said: 550-You do not
 have permission to post a message to this mailbox. 550-Please contact the
 owner of this mailbox in order to submit 550-your message, or postmaster
 if you believe you 550-received this message in error. 550 5.7.1
 Permission denied (in reply to RCPT TO command))

 The mailbox has the following permissions:

 localhost.localdomain lam system
 anonymous p
 anyone lrs


What fails with 2.3.14 is append_check() in verify_user().

Any ideas?

Simon


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: 2.3.14: posting to shared mailbox results in 550 Permission denied

2009-05-28 Thread nodens2099
Simon Matter a écrit :
 The mailbox has the following permissions:

 localhost.localdomain lam system
 anonymous p
 anyone lrs

 
 What fails with 2.3.14 is append_check() in verify_user().
 
 Any ideas?
 

You need anyone p (anyone lrsp in your case) to deliver messages in
a mailbox other than INBOX.

Regards,


-- 
Clément Hermann (nodens)

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: 2.3.14: posting to shared mailbox results in 550 Permission denied

2009-05-28 Thread Bron Gondwana
On Thu, May 28, 2009 at 12:25:10PM +0200, Simon Matter wrote:
  Hi,
 
  I have a server which I upgraded recently from 2.3.13 to 2.3.14.
  Now I realized that sending mail to shared folders doesn't work anymore.
  I have verified the problem on a test box and it looks like this:
 
  May 28 11:01:49 install lmtpunix[15085]: accepted connection
  May 28 11:01:49 install lmtpunix[15085]: lmtp connection preauth'd as
  postman
  May 28 11:01:49 install lmtpunix[15085]: verify_user(system) failed:
  Permission denied
  May 28 11:01:49 install postfix/lmtp[15077]: 87D6F34018:
  to=+sys...@localhost.corp.invoca.ch, orig_to=+sys...@localhost,
  relay=install.corp.invoca.ch[/var/lib/imap/socket/lmtp], delay=0.12,
  delays=0.09/0.01/0/0.03, dsn=5.7.1, status=bounced (host
  install.corp.invoca.ch[/var/lib/imap/socket/lmtp] said: 550-You do not
  have permission to post a message to this mailbox. 550-Please contact the
  owner of this mailbox in order to submit 550-your message, or postmaster
  if you believe you 550-received this message in error. 550 5.7.1
  Permission denied (in reply to RCPT TO command))
 
  The mailbox has the following permissions:
 
  localhost.localdomain lam system
  anonymous p
  anyone lrs
 
 
 What fails with 2.3.14 is append_check() in verify_user().

The only change that hits that area is a type conversion from long
to quota_t.

I'll try to recreate the bug here.

Bron.

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: 2.3.14: posting to shared mailbox results in 550 Permission denied

2009-05-28 Thread Simon Matter
 Simon Matter a écrit :
 The mailbox has the following permissions:

 localhost.localdomain lam system
 anonymous p
 anyone lrs


 What fails with 2.3.14 is append_check() in verify_user().

 Any ideas?


 You need anyone p (anyone lrsp in your case) to deliver messages in
 a mailbox other than INBOX.

Hi,

Thanks for your suggestion. Indeed what you say make things work. However,
'anonymous p' has always worked and still works with 2.3.13. However, it
seems not to work on all 2.3.14. That's really interesting.

Simon


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: 2.3.14: posting to shared mailbox results in 550 Permission denied

2009-05-28 Thread Simon Matter
 On Thu, May 28, 2009 at 12:25:10PM +0200, Simon Matter wrote:
  Hi,
 
  I have a server which I upgraded recently from 2.3.13 to 2.3.14.
  Now I realized that sending mail to shared folders doesn't work
 anymore.
  I have verified the problem on a test box and it looks like this:
 
  May 28 11:01:49 install lmtpunix[15085]: accepted connection
  May 28 11:01:49 install lmtpunix[15085]: lmtp connection preauth'd as
  postman
  May 28 11:01:49 install lmtpunix[15085]: verify_user(system) failed:
  Permission denied
  May 28 11:01:49 install postfix/lmtp[15077]: 87D6F34018:
  to=+sys...@localhost.corp.invoca.ch, orig_to=+sys...@localhost,
  relay=install.corp.invoca.ch[/var/lib/imap/socket/lmtp], delay=0.12,
  delays=0.09/0.01/0/0.03, dsn=5.7.1, status=bounced (host
  install.corp.invoca.ch[/var/lib/imap/socket/lmtp] said: 550-You do not
  have permission to post a message to this mailbox. 550-Please contact
 the
  owner of this mailbox in order to submit 550-your message, or
 postmaster
  if you believe you 550-received this message in error. 550 5.7.1
  Permission denied (in reply to RCPT TO command))
 
  The mailbox has the following permissions:
 
  localhost.localdomain lam system
  anonymous p
  anyone lrs
 

 What fails with 2.3.14 is append_check() in verify_user().

 The only change that hits that area is a type conversion from long
 to quota_t.

 I'll try to recreate the bug here.

Hi Bron,

I tried to find out more but with no success. Here is what works and what
not:

x86_64 works OK:
localhost.localdomain lam system
group:leitung lrswipkte
simat lrswipcda
gamat lrswipcda
anonymous p

i386 does NOT work:
localhost.localdomain lam system
anonymous p
anyone lrs


i386 works OK:
localhost.localdomain lam system
anyone lrsp

Regards,
Simon


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: 2.3.14: posting to shared mailbox results in 550 Permission denied

2009-05-28 Thread Bron Gondwana
On Thu, May 28, 2009 at 12:25:10PM +0200, Simon Matter wrote:
  Hi,
 
  I have a server which I upgraded recently from 2.3.13 to 2.3.14.
  Now I realized that sending mail to shared folders doesn't work anymore.
  I have verified the problem on a test box and it looks like this:
 
  May 28 11:01:49 install lmtpunix[15085]: accepted connection
  May 28 11:01:49 install lmtpunix[15085]: lmtp connection preauth'd as
  postman
  May 28 11:01:49 install lmtpunix[15085]: verify_user(system) failed:
  Permission denied
  May 28 11:01:49 install postfix/lmtp[15077]: 87D6F34018:
  to=+sys...@localhost.corp.invoca.ch, orig_to=+sys...@localhost,
  relay=install.corp.invoca.ch[/var/lib/imap/socket/lmtp], delay=0.12,
  delays=0.09/0.01/0/0.03, dsn=5.7.1, status=bounced (host
  install.corp.invoca.ch[/var/lib/imap/socket/lmtp] said: 550-You do not
  have permission to post a message to this mailbox. 550-Please contact the
  owner of this mailbox in order to submit 550-your message, or postmaster
  if you believe you 550-received this message in error. 550 5.7.1
  Permission denied (in reply to RCPT TO command))
 
  The mailbox has the following permissions:
 
  localhost.localdomain lam system
  anonymous p
  anyone lrs
 
 
 What fails with 2.3.14 is append_check() in verify_user().

MAIL FROM:br...@fastmail.fm
250 2.1.0 ok
RCPT TO:bb+shared.foo
250 2.1.5 ok

With:

postuser: bb

In imapd.conf.  That seems to be what the docs recommend.  It looks like
you're just using a naked +mail...@domain?

I'm a little confused.  Can you show me the config and how it's supposed
to work?

Bron ( who hasn't ever used shared folders )

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: 2.3.14: posting to shared mailbox results in 550 Permission denied

2009-05-28 Thread Bron Gondwana
On Thu, May 28, 2009 at 03:23:13PM +0200, Simon Matter wrote:
 Hi Bron,
 
 I tried to find out more but with no success. Here is what works and what
 not:
 
 x86_64 works OK:
 localhost.localdomain lam system
 group:leitung lrswipkte
 simat lrswipcda
 gamat lrswipcda
 anonymous p

 i386 does NOT work:
 localhost.localdomain lam system
 anonymous p
 anyone lrs
 
 i386 works OK:
 localhost.localdomain lam system
 anyone lrsp

Ooh.  The difference being that the 'p' is on anyone.

Looks like maybe LMTP isn't being considered anonymous on
the middle host.  Would fit with it looking like it thinks
it's dealing with user system in your original error message.

I'm suspecting the target address is being parsed differently
somehow between the two releases.

Bron.

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


RE: Sieve: Vacation not working (solved)

2009-05-28 Thread Gottschalk, David
Gary,
   I actually have this file in my /usr/share/sendmail-cf/mailer folder 
already. Is there something special I have to do to make sendmail build this 
into the .cf file? I didn't think there was, but maybe I'm missing something.

Thanks.

David Gottschalk
UTS Email team
david.gottsch...@emory.edu


-Original Message-
From: Garry Glendown [mailto:ga...@glendown.de]
Sent: Wednesday, May 27, 2009 11:18 PM
To: Gottschalk, David
Subject: Re: Sieve: Vacation not working (solved)

Gottschalk, David wrote:
 I put the lines in  my sendmail.mc file then built the sendmail.cf file.

 I'm running a old version of Redhat.

 Sendmail version is 8.12.11.

That could be the cause of the problem ... I reckon 8.12 doesn't have
the cyrusv2 mailer config files yet ... if you have access to some newer
systems, try whether you can copy the files from
/usr/share/sendmail/mailer/cyrusv2.m4 (or similar) to your system and
see if that gets it working ...

The resulting .cf has these differences on my system: (SuSE Enterprise
10 w/ sendmail 8.13):

787c786
 R@  $#cyrus $: @  special case error msgs
---
 R@  $#cyrusv2 $: @special case
error msgs
866,867c865,866
 R$=L  @ $=w .   $#cyrus $: @ $1 special local names
 R$+  @ $=w .$#cyrus $: $1   regular
local name
---
 R$=L  @ $=w .   $#cyrusv2 $: @ $1   special
local names
 R$+  @ $=w .$#cyrusv2 $: $1 regular
local name
889,890c888,889
 R$=L  $#cyrus $: @ $1 special local names
 R$+   $#cyrus $: $1   regular local names
---
 R$=L  $#cyrusv2 $: @ $1   special local names
 R$+   $#cyrusv2 $: $1 regular local names
907,908c906,907
 R$+ + *   $#cyrus $@ $h $: $1
 R$+ + $*  $#cyrus $@ + $2 $: $1 + *
---
 R$+ + *   $#cyrusv2 $@ $h $: $1
 R$+ + $*  $#cyrusv2 $@ + $2 $: $1 + *
921c920
 R   $+  + $*  $#cyrus $@ $2 $: @ $1   strip the extra +
---
 R   $+  + $*  $#cyrusv2 $@ $2 $: @ $1 strip the extra +
975,976c974,975
 R  $*  @ $*  $*   $#cyrus $@ $...@$2 $: $1
 R  $+   $#cyrus $@ $1$: $1
---
 R  $*  @ $*  $*   $#cyrusv2 $@ $...@$2 $: $1
 R  $+   $#cyrusv2 $@ $1$: $1
982,983c981,982
 R $+  $* @ $*  $* $#cyrus $@ $...@$3 $: $1
 R $+  $*$#cyrus $@ $2$: $1
---
 R $+  $* @ $*  $* $#cyrusv2 $@ $...@$3 $: $1
 R $+  $*$#cyrusv2 $@ $2$: $1
1873,1877c1872,1874
 ##
 ###   Cyrus Mailer specification   ###
 ##

 #  $Id: cyrus.m4,v 8.23 2001/11/12 23:11:34 ca Exp $ (Carnegie
Mellon)  #
---
 #
 ###   Cyrus V2 Mailer specification   ###
 #
1878a1876
 #  $Id: cyrusv2.m4,v 1.1 2002/06/01 21:14:57 ca Exp $  #
1880,1886c1878,1881
 Mcyrus,   P=/usr/lib/cyrus/bin/deliver, F=lsDFMnPqAh5@/:|,
S=EnvFromL, R=EnvToL/HdrToL,
   U=cyrus:mail, T=DNS/RFC822/X-Unix,
   A=deliver -e -f $f -m $h -- $u

 Mcyrusbb, P=/usr/lib/cyrus/bin/deliver, F=lsDFMnPu, S=EnvFromL,
R=EnvToL/HdrToL,
   U=cyrus:mail, T=DNS/RFC822/X-Unix,
   A=deliver -e -m $u
---
 Mcyrusv2, P=[IPC], F=lsDFMnqXzA@/:|m,
   S=EnvFromSMTP/HdrFromL, R=EnvToL/HdrToL, E=\r\n,
   T=DNS/RFC822/SMTP,
   A=FILE /var/lib/imap/socket/lmtp


This e-mail message (including any attachments) is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information.  If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, distribution
or copying of this message (including any attachments) is strictly
prohibited.

If you have received this message in error, please contact
the sender by reply e-mail message and destroy all copies of the
original message (including attachments).

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: 2.3.14: posting to shared mailbox results in 550 Permission denied

2009-05-28 Thread Simon Matter
 On Thu, May 28, 2009 at 03:23:13PM +0200, Simon Matter wrote:
 Hi Bron,

 I tried to find out more but with no success. Here is what works and
 what
 not:

 x86_64 works OK:
 localhost.localdomain lam system
 group:leitung lrswipkte
 simat lrswipcda
 gamat lrswipcda
 anonymous p

 i386 does NOT work:
 localhost.localdomain lam system
 anonymous p
 anyone lrs

 i386 works OK:
 localhost.localdomain lam system
 anyone lrsp

 Ooh.  The difference being that the 'p' is on anyone.

 Looks like maybe LMTP isn't being considered anonymous on
 the middle host.  Would fit with it looking like it thinks
 it's dealing with user system in your original error message.

Well, from what I understand the call to verify_user() is done to check
whether mailbox system exists.


 I'm suspecting the target address is being parsed differently
 somehow between the two releases.

So far I tried to insert some debug lines so I can see what the difference
is. Note, i'm always using the same i386 box only difference is that I
change the lmtpd binary to see where it does something different.

So far I found the following:

verify_user() is called the same way, at least the ACL string is the same
then append_check() is called, which now calls mailbox_open_header().
Here, the mailbox struct gets filled but somehow myrights has a different
value.
Back in append_check() the lines below result in the permission denied:
if ((m.myrights  aclcheck) != aclcheck) {
r = (m.myrights  ACL_LOOKUP) ?
  IMAP_PERMISSION_DENIED : IMAP_MAILBOX_NONEXISTENT;

With 2.3.13 we have
aclcheck: 32 myrights: 39

With 2.3.14 we have
aclcheck: 32 myrights: 7

There was either a change in permission calculation or it has something to
do with data types, which could be the reason why the same version seems
to  do fine on 64bit but not on 32bit.

Simon


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: 2.3.14: posting to shared mailbox results in 550 Permission denied

2009-05-28 Thread Simon Matter
 On Thu, May 28, 2009 at 12:25:10PM +0200, Simon Matter wrote:
  Hi,
 
  I have a server which I upgraded recently from 2.3.13 to 2.3.14.
  Now I realized that sending mail to shared folders doesn't work
 anymore.
  I have verified the problem on a test box and it looks like this:
 
  May 28 11:01:49 install lmtpunix[15085]: accepted connection
  May 28 11:01:49 install lmtpunix[15085]: lmtp connection preauth'd as
  postman
  May 28 11:01:49 install lmtpunix[15085]: verify_user(system) failed:
  Permission denied
  May 28 11:01:49 install postfix/lmtp[15077]: 87D6F34018:
  to=+sys...@localhost.corp.invoca.ch, orig_to=+sys...@localhost,
  relay=install.corp.invoca.ch[/var/lib/imap/socket/lmtp], delay=0.12,
  delays=0.09/0.01/0/0.03, dsn=5.7.1, status=bounced (host
  install.corp.invoca.ch[/var/lib/imap/socket/lmtp] said: 550-You do not
  have permission to post a message to this mailbox. 550-Please contact
 the
  owner of this mailbox in order to submit 550-your message, or
 postmaster
  if you believe you 550-received this message in error. 550 5.7.1
  Permission denied (in reply to RCPT TO command))
 
  The mailbox has the following permissions:
 
  localhost.localdomain lam system
  anonymous p
  anyone lrs
 

 What fails with 2.3.14 is append_check() in verify_user().

 MAIL FROM:br...@fastmail.fm
 250 2.1.0 ok
 RCPT TO:bb+shared.foo
 250 2.1.5 ok

 With:

 postuser: bb

 In imapd.conf.  That seems to be what the docs recommend.  It looks like
 you're just using a naked +mail...@domain?

 I'm a little confused.  Can you show me the config and how it's supposed
 to work?

OK, I think the postuser can be empty but how you did it is correct.
I have tested with postuser now and it's still the same. I have:

[r...@client140 ~]# cat /etc/imapd.conf
configdirectory: /var/lib/imap
partition-default: /var/spool/imap
admins: cyrus
sievedir: /var/lib/imap/sieve
sendmail: /usr/sbin/sendmail
hashimapspool: true
sasl_pwcheck_method: saslauthd
sasl_mech_list: PLAIN
tls_cert_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem
tls_key_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem
tls_ca_file: /etc/pki/tls/certs/ca-bundle.crt
postuser: bb

localhost.localdomain lam *
system:
  anonymous p
  anyone lrs

And now I do:

[si...@somehost simix]$ telnet client140 24
Trying 192.168.10.140...
Connected to client140.
Escape character is '^]'.
220 client140.bi.corp.invoca.ch Cyrus LMTP v2.3.14-Invoca-RPM-2.3.14-4
server ready
MAIL FROM:simon.mat...@invoca.ch
250 2.1.0 ok
RCPT TO:bb+system
550-You do not have permission to post a message to this mailbox.
550-Please contact the owner of this mailbox in order to submit
550-your message, or postmaster if you believe you
550-received this message in error.
550 5.7.1 Permission denied

As soon as I give p right to anyone it starts to work. But that was not
the case until 2.3.14 and I don't think that's how it should be.

Simon


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


RE: Sieve: Vacation not working (My issue resolved!!)

2009-05-28 Thread Gottschalk, David
Good news!

I was able to get it working. I had the lines in the wrong order, and that 
apparently caused sendmail to not recognize the mailer.

Now, the vacation replies are working, and it appears sieve is working well.

Thanks to everyone for their help!

David Gottschalk
UTS Email team
david.gottsch...@emory.edu


-Original Message-
From: Garry [mailto:ga...@glendown.de]
Sent: Thursday, May 28, 2009 10:17 AM
To: Gottschalk, David
Subject: Re: Sieve: Vacation not working (solved)

Gottschalk, David wrote:
 Oh, one thing I forgot to mention.

 I got the unknown mailer error in a SMTP conversation after rebuilding the 
 .cf file. I didn't get it when doing a make on the .mc file, or even when 
 restarting sendmail.

Phew ... sounds weird ...  normally, m4 barfs when there is something
wrong or missing ... please note that I pulled th lines apart, having
the first two well above any MAILER lines, and the MAILER(cyrusv2) at
the end ... dunno if that might cause a problem with your setup ...


This e-mail message (including any attachments) is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information.  If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, distribution
or copying of this message (including any attachments) is strictly
prohibited.

If you have received this message in error, please contact
the sender by reply e-mail message and destroy all copies of the
original message (including attachments).

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Unable to remove folder - Solved

2009-05-28 Thread Lazara F. Adorno Martins
Thanks!
  - Original Message - 
  From: Lazara F. Adorno Martins 
  To: info-cyrus@lists.andrew.cmu.edu 
  Sent: Tuesday, May 26, 2009 12:32 PM
  Subject: Unable to remove folder


  Hello,

  By mistake, when we created a user with dot, the user was created out of the 
cyrus structure user/. 
  The problem is: We can't remove useredilxx/silva. 

  When lm command:

  localhost.localdomain lm
  user/zixx/Rascunhos (\HasNoChildren)
  user/zuxx (\HasChildren)
  user/zuxx/Enviados (\HasNoChildren)
  user/zuxx/Lixeira (\HasNoChildren)
  user/zuxx/Rascunhos (\HasNoChildren)
  useredilxx/silva (\HasNoChildren)
  localhost.localdomain

  When we try to locate user, the structure is:

  /mail/spoolmail/cyrus/mail/s/useredilxx
  /mail/spoolmail/cyrus/mail/s/useredilxx/silva
  /mail/spoolmail/cyrus/mail/s/useredilxx/silva/cyrus.cache
  /mail/spoolmail/cyrus/mail/s/useredilxx/silva/cyrus.header
  /mail/spoolmail/cyrus/mail/s/useredilxx/silva/cyrus.index

  The folder useredilxx/silva appear for all user.

  Any ideas? 

  Thanks in advance for your help.

  Lázara F. Adorno


--


  
  Cyrus Home Page: http://cyrusimap.web.cmu.edu/
  Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
  List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: 2.3.14: posting to shared mailbox results in 550 Permission denied

2009-05-28 Thread Simon Matter
 On Thu, May 28, 2009 at 12:25:10PM +0200, Simon Matter wrote:
  Hi,
 
  I have a server which I upgraded recently from 2.3.13 to 2.3.14.
  Now I realized that sending mail to shared folders doesn't work
 anymore.
  I have verified the problem on a test box and it looks like this:
 
  May 28 11:01:49 install lmtpunix[15085]: accepted connection
  May 28 11:01:49 install lmtpunix[15085]: lmtp connection preauth'd as
  postman
  May 28 11:01:49 install lmtpunix[15085]: verify_user(system) failed:
  Permission denied
  May 28 11:01:49 install postfix/lmtp[15077]: 87D6F34018:
  to=+sys...@localhost.corp.invoca.ch, orig_to=+sys...@localhost,
  relay=install.corp.invoca.ch[/var/lib/imap/socket/lmtp], delay=0.12,
  delays=0.09/0.01/0/0.03, dsn=5.7.1, status=bounced (host
  install.corp.invoca.ch[/var/lib/imap/socket/lmtp] said: 550-You do
 not
  have permission to post a message to this mailbox. 550-Please contact
 the
  owner of this mailbox in order to submit 550-your message, or
 postmaster
  if you believe you 550-received this message in error. 550 5.7.1
  Permission denied (in reply to RCPT TO command))
 
  The mailbox has the following permissions:
 
  localhost.localdomain lam system
  anonymous p
  anyone lrs
 

 What fails with 2.3.14 is append_check() in verify_user().

 MAIL FROM:br...@fastmail.fm
 250 2.1.0 ok
 RCPT TO:bb+shared.foo
 250 2.1.5 ok

 With:

 postuser: bb

 In imapd.conf.  That seems to be what the docs recommend.  It looks like
 you're just using a naked +mail...@domain?

 I'm a little confused.  Can you show me the config and how it's supposed
 to work?

 OK, I think the postuser can be empty but how you did it is correct.
 I have tested with postuser now and it's still the same. I have:

 [r...@client140 ~]# cat /etc/imapd.conf
 configdirectory: /var/lib/imap
 partition-default: /var/spool/imap
 admins: cyrus
 sievedir: /var/lib/imap/sieve
 sendmail: /usr/sbin/sendmail
 hashimapspool: true
 sasl_pwcheck_method: saslauthd
 sasl_mech_list: PLAIN
 tls_cert_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem
 tls_key_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem
 tls_ca_file: /etc/pki/tls/certs/ca-bundle.crt
 postuser: bb

 localhost.localdomain lam *
 system:
   anonymous p
   anyone lrs

 And now I do:

 [si...@somehost simix]$ telnet client140 24
 Trying 192.168.10.140...
 Connected to client140.
 Escape character is '^]'.
 220 client140.bi.corp.invoca.ch Cyrus LMTP v2.3.14-Invoca-RPM-2.3.14-4
 server ready
 MAIL FROM:simon.mat...@invoca.ch
 250 2.1.0 ok
 RCPT TO:bb+system
 550-You do not have permission to post a message to this mailbox.
 550-Please contact the owner of this mailbox in order to submit
 550-your message, or postmaster if you believe you
 550-received this message in error.
 550 5.7.1 Permission denied

 As soon as I give p right to anyone it starts to work. But that was not
 the case until 2.3.14 and I don't think that's how it should be.

I have installed 2.3.14 on two new boxes running RHEL5. One is i386 and
one is x86_64.

I can confirm that anonymous posting to a shared folder with 'anonymous p'
rights works on the 64bit version but not on the 32bit version.
So there must be a change between 2.3.13 and 2.3.14 which breaks something
on 32bit systems but not on 64bit.

Thanks,
Simon


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Urgent help needed with cyrus administration

2009-05-28 Thread Denis BUCHER
Hello everyone,

I still cannot solve this very simple problem : how to set quota for a
user in another domain ???

Any help would be greatly appreciated !!!

I really don't understand how to access other (virtual) domains from
cyradm :

  su - cyrus
  cyradm --user cyrus localhost
  lm

I see all mailboxes from our main domain, for example :

user.dbucherml.ML (\HasChildren)
user.dbucherml.ML.Fournisseurs (\HasChildren)
user.dbucherml.ML.Fournisseurs.Acer (\HasNoChildren)
user.dbucherml.ML.Fournisseurs.Alltron (\HasNoChildren)
user.dbucherml.ML.Fournisseurs.Microsoft (\HasChildren)
user.dbucherml.ML.Fournisseurs.Microsoft.MSPRP (\HasNoChildren)

As you can see I don't have any @hsolutions.ch or @anything.else

I was reading that my cyrus user is maybe not a global admin ?
But how to make it global, then ?

Denis

Denis Bucher

-- 

Denis Bucher   Horus Digital Solutions sàrl  Each problem has a solution
___
   Tél. +41-22-8000625 Fax: +41-22-8000622  www.hsolutions.ch

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Cyrus APIs ?

2009-05-28 Thread Thomas Cataldo
Hi,

We are building webmail  groupware software using cyrus for the mail
storage part. I'm wondering if any programming interface existed to
extend cyrus parts ?

Interesting things for us would be :
  - extending sieve (for exemple to implement in my organisation /
out of my organisation vacation messages)
  - IMAP protocol extensions (most needed thing would be to idle on
every folders, not just inbox)
  - custom authentification mechanism (for single sign-on purpose,
because kerberos doesn't fit everywhere)

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Cyrus APIs ?

2009-05-28 Thread Bron Gondwana
On Fri, May 29, 2009 at 12:27:27AM +0200, Thomas Cataldo wrote:
 Hi,
 
 We are building webmail  groupware software using cyrus for the mail
 storage part. I'm wondering if any programming interface existed to
 extend cyrus parts ?

Yeah, it's called the C language.  Compile your own.

Personally I use git these days.  Used to keep all the
patches with quilt, and before that we just fiddled around
in a CVS checkout and hoped nobody messed up.  That's not
so clever.  Version control good.

 Interesting things for us would be :
   - extending sieve (for exemple to implement in my organisation /
 out of my organisation vacation messages)

That's just a matter of writing the correct sieve script.  No
extention needed.

   - IMAP protocol extensions (most needed thing would be to idle on
 every folders, not just inbox)

Yeah, good luck with that one.  It's a pretty major protocol extention,
and everything's very folder centric.  It would be a rather large SMOP
(small matter of programming) for this.

   - custom authentification mechanism (for single sign-on purpose,
 because kerberos doesn't fit everywhere)

BYO saslauthd protocol daemon.  We have one written in Perl that does
all sorts of clever.  Just put this in your imapd.conf

sasl_pwcheck_method: saslauthd

And have your daemon listen on a unix socket at:

/var/state/saslauthd/mux

You need to speak the saslauthd protocol, which is a packed string
format.  We parse it in Perl like this:

  my $LoginName = get_counted_string($Self-{server}{client});
  my $Password = get_counted_string($Self-{server}{client});
  my $Service = lc get_counted_string($Self-{server}{client});
  my $Realm = get_counted_string($Self-{server}{client});

And return one of:

  use constant SASL_SUCC_RESP  = pack(nA3, 2, OK\000);
  use constant SASL_FAIL_RESP  = pack(nA3, 2, NO\000);

(with this function - slightly ugly code, but it works)

sub get_counted_string {
  my $fh = shift;

  my ($rd, $data);

  ($rd = sysread($fh, $data, 2)) == 2
or die Unable to read counted string size ($rd != 2) ($!);

  my $size = unpack(n, $data);

  $data = ''; $rd = 0; my $this_data = ''; my $rem_size = $size;
  while (my $this_rd = sysread($fh, $this_data, $rem_size)) {
$rd += $this_rd;
$rem_size -= $this_rd;
$data .= $this_data;
  }
  die Unable to read counted string data ($rd != $size) ($!)
unless ($rd  == $size);

  return unpack(A$size, $data);
}

Bron.

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Problem with websieve and accents

2009-05-28 Thread Bron Gondwana
On Thu, May 28, 2009 at 10:50:39PM +0200, Denis BUCHER wrote:
 Hello,
 
 I am blocked with websieve.pl vacation/out-of-office because when users
 are entering accents the script fails with an error...
 
 Does anyone has a suggestion on how to make accents work ?

Yes, but I haven't committed it to CVS yet.  I'm working on full
UTF8 support in sieve scripts.

Bron ( sorry, that doesn't solve your immediate problem! )

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Problem with websieve and accents

2009-05-28 Thread Rob Mueller

 I am blocked with websieve.pl vacation/out-of-office because when users
 are entering accents the script fails with an error...

 Does anyone has a suggestion on how to make accents work ?

 Yes, but I haven't committed it to CVS yet.  I'm working on full
 UTF8 support in sieve scripts.

Well it depends where there are accents in the sieve script. I believe the 
current state of things (2.3.14) is:

1. In folder names - should work (you need to use the utf-8 version of the 
folder name, not the modified utf-7 version)
2. In vacation messages - should work
3. In header/body checks - needs Bron's fixes

And a reminder, the script must be in utf-8 encoding.

Rob


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Cyrus APIs ?

2009-05-28 Thread Rob Mueller
   - IMAP protocol extensions (most needed thing would be to idle on
 every folders, not just inbox)

 Yeah, good luck with that one.  It's a pretty major protocol extention,
 and everything's very folder centric.  It would be a rather large SMOP
 (small matter of programming) for this.

If you have idled stupport, this shouldn't be too hard to implement.

Basically the way idled currently works is that a process sends it a message 
about which mailbox it's interested in, and then idled sends it a USR1 sig 
if something changes on that mailbox.

I think all you'd need to do is loop and send multiple mailbox names to 
idled, and it'll USR1 you when any of them change. Of course you then have 
to poll to find out which ones, which is a bit annoying, but would be 
fixable with a bit more work.

Rob


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Sieve: Vacation not working (solved)

2009-05-28 Thread Garry Glendown
Garry wrote:
 define(`confLOCAL_MAILER', `cyrus')dnl
 ifdef(`CYRUS_MAILER_ARGS',,
  `define(`CYRUS_MAILER_ARGS', `deliver -e -f $f -m $h -- $u')')
 dnl MAILER(`cyrus')dnl

Of course, that was

MAILER(`cyrus')dnl

Also, please note that the define/ifdef part was well above all the
other MAILER lines, whereas the MAILER line was inserted as the last
MAILER line, on both versions ...

-garry

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html