Re: Cyrus IMAPd 2.2.13p1 2.3.15 Released

2009-09-10 Thread Simon Matter
 (un-CCed CERT, they don't care!)

 On Wed, Sep 09, 2009 at 10:20:33PM +0200, Simon Matter wrote:
  I'd like to announce the releases of Cyrus IMAPd 2.2.13p1 and 2.3.15.
  These releases should both be considered production quality.  These
  releases are being made at this time to fix the potential buffer
  overflow vulnerability described in CERT VU#336053:
  http://www.kb.cert.org/vuls/id/336053
 
  The 2.2.13p1 release is no different from 2.2.13 other than the buffer
  overflow fix.  The 2.3.15 release contains several other non-critical
  bugfixes and feature enhancements.  For full details, please see
  doc/changes.html and doc/install-upgrade.html which are included in
 the
  distribution.
 
  I'd personally like to thank Bron Gondwana of Fastmail.fm for finding
  and fixing the buffer overflow, as well as his numerous other
  contributions to the 2.3.15 release.

 Hello Cyrus IMAP team,

 Thanks for the new release. While upgrading our RPMs I found two small
 issues:

 1) Old (ancient) GCC doesn't like some of the new code. A patch to fix
 the
 issue is attached.

 Applied to my git tree - I'll push it back to CVS.  Thanks.

Great, thanks.


 2) Old (ancient) zlib doesn't have the deflateBound() function. Looks
 like
 at least zlib = 1.2.x is needed. Maybe the zlib detection could also
 check the version of the deflateBound() function?

 It shouldn't be too hard to rewrite it to not use deflateBound() at all.
 I'll have a look at that.

Sounds good, I was sure it could be done but not by me. If I try it nobody
will be happy with the result :(


 Who still has ancient zlib?  RH 7.3?

Yes, or RHEL2.1, which is now EOL. Really, it's low priority but still
nice to have as much compatibility as possible which makes life of
packagers easier. Just let me know if you have patches to test...


 For those interested, the package is available in the usual place
 http://www.invoca.ch/pub/packages/cyrus-imapd/

 Cool :)  I don't actually have a redhat machine to test things on, but
 it's good to have these packages out there.

 Bron ( not everyone wants to be hand-building Cyrus all the time! )

Some years back I did quite a number of Cyrus installs for companies
around the world. That's gone now because of my own packages which have
even be included in RedHat EL.

Regards,
Simon


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Cyrus IMAPd 2.2.13p1 2.3.15 Released

2009-09-10 Thread Duncan Gibb
Bron Gondwana wrote:

DBR https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2642

BG we use nginx in front of cyrus, so we don't use the built-in
BG tls engine at all.  I wouldn't feel comfortable testing this
BG one.  Is anyone running it on top of 2.3.14, or only on the
BG 2.2 series?

Not yet.  I'm going test it on the Sirius tree (and hence sort out
interactions with https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=3119
and https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=3133 ) once I've
merged 2.3.15 there and into Debian mainline.

tls_require_cert optional would open the possibility of doing both
cert-based auth FE-to-BE and still allowing referrals with non-cert
clients...


Cheers


Duncan

-- 
Duncan Gibb - Technical Director
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk/ || t: +44 870 608 0063
Debian Cyrus Team - https://alioth.debian.org/projects/pkg-cyrus-imapd/

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Patch: add regex support to ipurge to improve folder selection

2009-09-10 Thread Carsten Hoeger
On Wed, Sep 09, Adam Tauno Williams wrote:

 On Tue, 2009-07-21 at 11:57 -0400, Matt Selsky wrote:
  On Jul 21, 2009, at 10:43 AM, Carsten Hoeger wrote:
  
   attached the patch to add regex pattern matching to folders for  
   ipurge.
  
  Can you add this to bugzilla for tracking?
 
 Was this ever uploaded to the bugzilla?

Yes: https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=3167

-- 
With best regards,

Carsten Hoeger


pgpoi9AArh3Vz.pgp
Description: PGP signature

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Cyrus IMAPd 2.2.13p1 2.3.15 Released

2009-09-10 Thread Bron Gondwana
On Wed, Sep 09, 2009 at 10:20:33PM +0200, Simon Matter wrote:
 2) Old (ancient) zlib doesn't have the deflateBound() function. Looks like
 at least zlib = 1.2.x is needed. Maybe the zlib detection could also
 check the version of the deflateBound() function?

Try this patch (attached) and see if that is happy with your old zlib)

Bron.


diff --git a/lib/prot.c b/lib/prot.c
index 6eb285d..1ae690d 100644
--- a/lib/prot.c
+++ b/lib/prot.c
@@ -93,7 +93,6 @@ int write;
 newstream = (struct protstream *) xzmalloc(sizeof(struct protstream));
 newstream-buf = (unsigned char *) 
 	xmalloc(sizeof(char) * (PROT_BUFSIZE));
-newstream-buf_size = PROT_BUFSIZE;
 newstream-ptr = newstream-buf;
 newstream-maxplain = PROT_BUFSIZE;
 newstream-fd = fd;
@@ -103,6 +102,11 @@ int write;
 if(write)
 	newstream-cnt = PROT_BUFSIZE;
 
+#ifdef HAVE_ZLIB
+newstream-zbuf = 0;
+newstream-zbuf_size = 0;
+#endif
+
 return newstream;
 }
 
@@ -515,6 +519,34 @@ int prot_fill(struct protstream *s)
 if (s-eof || s-error) return EOF;
 
 do {
+#ifdef HAVE_ZLIB
+	/* check if there's anything in the zlib buffer already */
+	if (s-zstrm  s-zstrm-avail_in) {
+	int zr;
+	if (!s-zbuf) {
+		s-zbuf = (unsigned char *)xmalloc(sizeof(unsigned char) * (PROT_BUFSIZE));
+		s-zbuf_size = PROT_BUFSIZE;
+	}
+	s-zstrm-next_out = s-zbuf;
+	s-zstrm-avail_out = s-zbuf_size;
+	zr = inflate(s-zstrm, Z_SYNC_FLUSH);
+	if (zr != Z_OK) {
+		/* Error decompressing */
+		syslog(LOG_ERR, zlib error: %d %s, zr, s-zstrm-msg);
+		s-error = xstrdup(Error decompressing data);
+		return EOF;
+	}
+
+	if (s-zstrm-avail_out  PROT_BUFSIZE) {
+		/* inflated some data */
+		s-ptr = s-zbuf;
+		s-cnt = PROT_BUFSIZE - s-zstrm-avail_out;
+		syslog(LOG_DEBUG,= decompressed to %d bytes, s-cnt);
+		break;
+	}
+	}
+#endif
+
 	/* wait until get input */
 	haveinput = 0;
 
@@ -633,74 +665,41 @@ int prot_fill(struct protstream *s)
 	}
 
 #ifdef HAVE_ZLIB
-	if (s-zstrm  s-cnt  0) {
-	/* Decompress the data */
-	int zr = Z_OK;
+	if (s-zstrm) {
+	/* transfer the stream to the input of the z_stream and loop */
 
 	s-zstrm-next_in = s-ptr;
 	s-zstrm-avail_in = s-cnt;
-	s-zstrm-next_out = s-zbuf;
-	s-zstrm-avail_out = s-zbuf_size;
-
-	syslog(LOG_DEBUG, inflate(%d bytes), s-cnt);
+	s-cnt = 0;
+	}
+#endif /* HAVE_ZLIB */
+} while (!s-cnt);
 
-	do {
-		if (!s-zstrm-avail_out) {
-		/* Need more space to decompress */
-		syslog(LOG_DEBUG,
-			   growing decompress buffer from %d to %d bytes,
-			   s-zbuf_size, s-zbuf_size + PROT_BUFSIZE);
-
-		s-zbuf = (unsigned char *)
-			xrealloc(s-zbuf, s-zbuf_size + PROT_BUFSIZE);
-		s-zstrm-next_out = s-zbuf + s-zbuf_size;
-		s-zstrm-avail_out = PROT_BUFSIZE;
-		s-zbuf_size += PROT_BUFSIZE;
-		}
+if (s-logfd != -1) {
+	time_t newtime;
+	char timebuf[20];
 
-		zr = inflate(s-zstrm, Z_SYNC_FLUSH);
-	} while (zr == Z_OK  !s-zstrm-avail_out);
+	time(newtime);
+	snprintf(timebuf, sizeof(timebuf), %ld, newtime);
+	write(s-logfd, timebuf, strlen(timebuf));
 
-	if (zr != Z_OK || s-zstrm-avail_in) {
-		/* Error decompressing */
-		s-error = xstrdup(Error decompressing data);
-		return EOF;
+	left = s-cnt;
+	ptr = s-ptr;
+	do {
+	n = write(s-logfd, ptr, left);
+	if (n == -1  (errno != EINTR)) {
+		break;
 	}
 
-	s-ptr = s-zbuf;
-	s-cnt = s-zbuf_size - s-zstrm-avail_out;
-
-	syslog(LOG_DEBUG,= decompressed to %d bytes, s-cnt);
-	}
-#endif /* HAVE_ZLIB */
-	
-	if (s-cnt  0) {
-	if (s-logfd != -1) {
-		time_t newtime;
-		char timebuf[20];
-
-		time(newtime);
-		snprintf(timebuf, sizeof(timebuf), %ld, newtime);
-		write(s-logfd, timebuf, strlen(timebuf));
-
-		left = s-cnt;
-		ptr = s-ptr;
-		do {
-		n = write(s-logfd, ptr, left);
-		if (n == -1  errno != EINTR) {
-			break;
-		}
-		if (n  0) {
-			ptr += n;
-			left -= n;
-		}
-		} while (left);
+	if (n  0) {
+		ptr += n;
+		left -= n;
 	}
+	} while (left);
+}
 
-	s-cnt--;		/* we return the first char */
-	return *s-ptr++;
-	}
-} while (1);
+s-cnt--;		/* we return the first char */
+return *s-ptr++;
 }
 
 /*
@@ -751,20 +750,12 @@ static int prot_flush_encode(struct protstream *s,
 #ifdef HAVE_ZLIB
 if (s-zstrm) {
 	/* Compress the data */
-	unsigned long def_size = deflateBound(s-zstrm, left);
 	int zflush = s-boundary ? Z_FULL_FLUSH : Z_SYNC_FLUSH;
 	int zr = Z_OK;
 
-	if (def_size  s-zbuf_size) {
-	/* Make sure buffer is large enough to hold compressed data.
-	 * Oversize the buffer, so we (hopefully) eliminate
-	 * multiple small incremental reallocations.
-	 */
-	syslog(LOG_DEBUG, growing compress buffer from %u to %lu bytes,
-		   s-zbuf_size, def_size + PROT_BUFSIZE);
-
-	s-zbuf_size = def_size + PROT_BUFSIZE;
-	s-zbuf = (unsigned char *) xrealloc(s-zbuf, s-zbuf_size);
+	if (!s-zbuf) {
+	s-zbuf = (unsigned char 

Cyrus IMAPd 2.3.15 - Fatal error: cyrusdb backend berkeley-nosync not supported

2009-09-10 Thread Konrad Mauz
Hi all,

I've tried to upgrade Cyrus from 2.3.8 to 2.3.15. 
I compiled 2.3.15 on the same machines with the same configure call:

./configure --prefix=/usr/cyrus --enable-nntp \
   --enable-murder --enable-replication \
   --enable-listext --enable-netscapehack --without-bdb

But wenn I tried to restart imapd and pop3d process generate a lot
of error messages like:

Sep 10 06:44:11 mailsrv master[10325]: service pop3 pid 11258 in READY state: 
terminated abnormally
Sep 10 06:44:11 mailsrv imap[11259]: Fatal error: cyrusdb backend 
berkeley-nosync not supported
Sep 10 06:44:11 mailsrv pop3[11260]: Fatal error: cyrusdb backend 
berkeley-nosync not supported
Sep 10 06:44:11 mailsrv lmtpunix[11261]: FATAL: cyrusdb backend berkeley-nosync 
not supported
Sep 10 06:44:11 mailsrv imap[11262]: Fatal error: cyrusdb backend 
berkeley-nosync not supported
Sep 10 06:44:11 mailsrv pop3[11263]: Fatal error: cyrusdb backend 
berkeley-nosync not supported
Sep 10 06:44:11 mailsrv master[10325]: service imap pid 11259 in READY state: 
terminated abnormally
Sep 10 06:44:11 mailsrv master[10325]: service pop3 pid 11260 in READY state: 
terminated abnormally
Sep 10 06:44:11 mailsrv master[10325]: service lmtpunix pid 11261 in READY 
state: terminated abnormally
Sep 10 06:44:11 mailsrv master[10325]: service imap pid 11262 in READY state: 
terminated abnormally
Sep 10 06:44:11 mailsrv master[10325]: service pop3 pid 11263 in READY state: 
terminated abnormally
Sep 10 06:44:11 mailsrv imap[11264]: Fatal error: cyrusdb backend 
berkeley-nosync not supported
Sep 10 06:44:11 mailsrv pop3[11265]: Fatal error: cyrusdb backend 
berkeley-nosync not supported

The relevant part in /etc/imapd.conf:

# DB Settings
mboxlist_db: skiplist
seenstate_db: skiplist
quota_db: skiplist
duplicate_db: skiplist
annotation_db: skiplist
ptscache_db: skiplist
subscription_db: flat
tlscache_db: skiplist

I can not find any reference to a berkley db, so I don't know why the daemons 
thow errors about
the missing berkeley support. The only to dbs which are berkeley-nosync by 
default are:
duplicate_db and tlscache_db, but I have them set to skiplist in my config.

Can anyone tell me, which db defaultsetting is berkeley-nosync and not 
overwritten in my imapd.conf?

Regards,

Konrad

PS: the old imapd binary are not linked with berkeley db - checked with ldd


-- 
Konrad Mauz 
Rechenzentrum
Hochschule Technik, Wirtschaft und Gestaltung
Braunegger-Strasse 55, D 78462 Konstanz 
e-mail: km...@htwg-konstanz.de
Tel.:   +49 7531 206-472
Fax.:   +49 7531 206-153

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Cyrus IMAPd 2.3.15 - Fatal error: cyrusdb backend berkeley-nosync not supported

2009-09-10 Thread Simon Matter
 Hi all,

 I've tried to upgrade Cyrus from 2.3.8 to 2.3.15.
 I compiled 2.3.15 on the same machines with the same configure call:

 ./configure --prefix=/usr/cyrus --enable-nntp \
--enable-murder --enable-replication \
--enable-listext --enable-netscapehack --without-bdb

 But wenn I tried to restart imapd and pop3d process generate a lot
 of error messages like:

 Sep 10 06:44:11 mailsrv master[10325]: service pop3 pid 11258 in READY
 state: terminated abnormally
 Sep 10 06:44:11 mailsrv imap[11259]: Fatal error: cyrusdb backend
 berkeley-nosync not supported
 Sep 10 06:44:11 mailsrv pop3[11260]: Fatal error: cyrusdb backend
 berkeley-nosync not supported
 Sep 10 06:44:11 mailsrv lmtpunix[11261]: FATAL: cyrusdb backend
 berkeley-nosync not supported
 Sep 10 06:44:11 mailsrv imap[11262]: Fatal error: cyrusdb backend
 berkeley-nosync not supported
 Sep 10 06:44:11 mailsrv pop3[11263]: Fatal error: cyrusdb backend
 berkeley-nosync not supported
 Sep 10 06:44:11 mailsrv master[10325]: service imap pid 11259 in READY
 state: terminated abnormally
 Sep 10 06:44:11 mailsrv master[10325]: service pop3 pid 11260 in READY
 state: terminated abnormally
 Sep 10 06:44:11 mailsrv master[10325]: service lmtpunix pid 11261 in READY
 state: terminated abnormally
 Sep 10 06:44:11 mailsrv master[10325]: service imap pid 11262 in READY
 state: terminated abnormally
 Sep 10 06:44:11 mailsrv master[10325]: service pop3 pid 11263 in READY
 state: terminated abnormally
 Sep 10 06:44:11 mailsrv imap[11264]: Fatal error: cyrusdb backend
 berkeley-nosync not supported
 Sep 10 06:44:11 mailsrv pop3[11265]: Fatal error: cyrusdb backend
 berkeley-nosync not supported

 The relevant part in /etc/imapd.conf:

 # DB Settings
 mboxlist_db: skiplist
 seenstate_db: skiplist
 quota_db: skiplist
 duplicate_db: skiplist
 annotation_db: skiplist
 ptscache_db: skiplist
 subscription_db: flat
 tlscache_db: skiplist

 I can not find any reference to a berkley db, so I don't know why the
 daemons thow errors about
 the missing berkeley support. The only to dbs which are berkeley-nosync by
 default are:
 duplicate_db and tlscache_db, but I have them set to skiplist in my
 config.

 Can anyone tell me, which db defaultsetting is berkeley-nosync and not
 overwritten in my imapd.conf?

That may be 'statuscache_db'. Check man imapd.conf to be sure.

Regards,
Simon


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Cyrus IMAPd 2.2.13p1 2.3.15 Released

2009-09-10 Thread Simon Matter
 On Wed, Sep 09, 2009 at 10:20:33PM +0200, Simon Matter wrote:
 2) Old (ancient) zlib doesn't have the deflateBound() function. Looks
 like
 at least zlib = 1.2.x is needed. Maybe the zlib detection could also
 check the version of the deflateBound() function?

 Try this patch (attached) and see if that is happy with your old zlib)

Hi Bron,

Now it builds fine even with old zlib.

While we are at it, and because this patch affects the Clean-Shutdown
patch - are there any plans to include the Clean-Shutdown patch into
upstream?

It has worked very well for us in the past and I'd love to see this one go
in.

Thanks,
Simon


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Cyrus IMAPd 2.3.15 - Fatal error: cyrusdb backend berkeley-nosync not supported

2009-09-10 Thread Konrad Mauz
On Thu, Sep 10, 2009 at 09:10:57AM +0200, Konrad Mauz wrote:
 Hi all,
 
 I've tried to upgrade Cyrus from 2.3.8 to 2.3.15. 
 I compiled 2.3.15 on the same machines with the same configure call:
 
 ./configure --prefix=/usr/cyrus --enable-nntp \
--enable-murder --enable-replication \
--enable-listext --enable-netscapehack --without-bdb
 
 But wenn I tried to restart imapd and pop3d process generate a lot
 of error messages like:
 
 Sep 10 06:44:11 mailsrv master[10325]: service pop3 pid 11258 in READY state: 
 terminated abnormally
 Sep 10 06:44:11 mailsrv imap[11259]: Fatal error: cyrusdb backend 
 berkeley-nosync not supported
 Sep 10 06:44:11 mailsrv pop3[11260]: Fatal error: cyrusdb backend 
 berkeley-nosync not supported
 Sep 10 06:44:11 mailsrv lmtpunix[11261]: FATAL: cyrusdb backend 
 berkeley-nosync not supported
 Sep 10 06:44:11 mailsrv imap[11262]: Fatal error: cyrusdb backend 
 berkeley-nosync not supported
 Sep 10 06:44:11 mailsrv pop3[11263]: Fatal error: cyrusdb backend 
 berkeley-nosync not supported
 Sep 10 06:44:11 mailsrv master[10325]: service imap pid 11259 in READY state: 
 terminated abnormally
 Sep 10 06:44:11 mailsrv master[10325]: service pop3 pid 11260 in READY state: 
 terminated abnormally
 Sep 10 06:44:11 mailsrv master[10325]: service lmtpunix pid 11261 in READY 
 state: terminated abnormally
 Sep 10 06:44:11 mailsrv master[10325]: service imap pid 11262 in READY state: 
 terminated abnormally
 Sep 10 06:44:11 mailsrv master[10325]: service pop3 pid 11263 in READY state: 
 terminated abnormally
 Sep 10 06:44:11 mailsrv imap[11264]: Fatal error: cyrusdb backend 
 berkeley-nosync not supported
 Sep 10 06:44:11 mailsrv pop3[11265]: Fatal error: cyrusdb backend 
 berkeley-nosync not supported
 
 The relevant part in /etc/imapd.conf:
 
 # DB Settings
 mboxlist_db: skiplist
 seenstate_db: skiplist
 quota_db: skiplist
 duplicate_db: skiplist
 annotation_db: skiplist
 ptscache_db: skiplist
 subscription_db: flat
 tlscache_db: skiplist
 
 I can not find any reference to a berkley db, so I don't know why the daemons 
 thow errors about
 the missing berkeley support. The only to dbs which are berkeley-nosync by 
 default are:
 duplicate_db and tlscache_db, but I have them set to skiplist in my config.
 
 Can anyone tell me, which db defaultsetting is berkeley-nosync and not 
 overwritten in my imapd.conf?
 

I missed the the new feature statuscache and statuscache_db ( since version 
2.3.11 ).
The db statuscache_db is by default berkeley-nosync.

Thanks to Simon Matter for this usefull hint.

Regards,

Konrad

-- 
Konrad Mauz 
Rechenzentrum
Hochschule Technik, Wirtschaft und Gestaltung
Braunegger-Strasse 55, D 78462 Konstanz 
e-mail: km...@htwg-konstanz.de
Tel.:   +49 7531 206-472
Fax.:   +49 7531 206-153

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Cyrus IMAPd 2.2.13p1 2.3.15 Released

2009-09-10 Thread Bron Gondwana
On Thu, Sep 10, 2009 at 09:59:32AM +0200, Simon Matter wrote:
  On Wed, Sep 09, 2009 at 10:20:33PM +0200, Simon Matter wrote:
  2) Old (ancient) zlib doesn't have the deflateBound() function. Looks
  like
  at least zlib = 1.2.x is needed. Maybe the zlib detection could also
  check the version of the deflateBound() function?
 
  Try this patch (attached) and see if that is happy with your old zlib)
 
 Hi Bron,
 
 Now it builds fine even with old zlib.

Great.  I've tested it with my development thunderbird copy that has
COMPRESS=DEFLATE support built in.  Haven't rolled it out to production
yet, but probably will in a few hours once I'm happy that everything
has rebased correctly.

 While we are at it, and because this patch affects the Clean-Shutdown
 patch - are there any plans to include the Clean-Shutdown patch into
 upstream?

Yeah, like this.

I have a fixed clean-shutdown that applies over the zlib changes in my
github repository.  I went through and re-ordered everything so I could
pop this to the top of the patch queue.
 
 It has worked very well for us in the past and I'd love to see this one go
 in.

Yeah - I need to make sure it's squeeky-clean safe, but it's been
pretty good for us too.  We do often have hundreds of processes
left after 10 seconds though, waiting on locks - which kind of
sucks.  Would be nice to fix that too!

Bron.

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Cyrus IMAPd 2.2.13p1 2.3.15 Released

2009-09-10 Thread Sebastian Hagedorn
-- Bron Gondwana br...@fastmail.fm is rumored to have mumbled on 10. 
September 2009 14:49:14 +1000 regarding Re: Cyrus IMAPd 2.2.13p1  2.3.15 
Released:



While we're at it, what about #2642?

https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2642

We were recently bitten by that particular problem.


Now, that's a bit more complicated!  Also, we use nginx in front
of cyrus, so we don't use the built-in tls engine at all.  I
wouldn't feel comfortable testing this one.  Is anyone running it
on top of 2.3.14, or only on the 2.2 series?


I have to admit that we currently don't. I applied the patch, compiled 
successfully, copied over just the imapd binary, created a special entry in 
cyrus.conf, that used that binary, and found that it segfaulted. I didn't 
investigate further, because I was under pressure. I reversed the patch and 
added just a single line in tls.c:


askcert = 0;

That worked, but of course that disables all client certificates. Because I 
didn't want to maintain a local patch, I came up with this workaround:


https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2642#c8

Still, that's not exactly a clean solution. So ideally the patch in #2642 
should be made to work in 2.3.15 ... I'd be happy to beta-test it if 
someone can clean it up.

--
Sebastian Hagedorn - RZKR-R1 (Flachbau), Zi. 18, Robert-Koch-Str. 10
Regionales Rechenzentrum (RRZK)
Universität zu Köln / Cologne University - Tel. +49-221-478-5587

p7sAqDVu7uiVm.p7s
Description: S/MIME cryptographic signature

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

v2.3.15 IMAP connection hangs

2009-09-10 Thread Rosenbaum, Larry M.
I have just installed v2.3.15 on Solaris 9 Sparc with Cyrus-SASL 2.1.24rc1.  
When I connect to the IMAP port, I get a banner message but there is no 
response to any command I give it (including 0 logout).  I am able to give 
commands to the POP3 port and LMTP port just fine.  Previous versions of Cyrus 
IMAP work OK too.  Where should I look for the problem?

Thanks,
Larry

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: v2.3.15 IMAP connection hangs

2009-09-10 Thread Bron Gondwana
On Thu, Sep 10, 2009 at 04:11:37PM -0400, Rosenbaum, Larry M. wrote:
 I have just installed v2.3.15 on Solaris 9 Sparc with Cyrus-SASL 2.1.24rc1.  
 When I connect to the IMAP port, I get a banner message but there is no 
 response to any command I give it (including 0 logout).  I am able to give 
 commands to the POP3 port and LMTP port just fine.  Previous versions of 
 Cyrus IMAP work OK too.  Where should I look for the problem?

Can you get a trace on the process (truss or similar) that shows what file
it's sitting waiting on a lock for?  It's probably a locking issue.

Bron.

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Cyrus IMAPd 2.2.13p1 2.3.15 Released

2009-09-10 Thread Simon Matter

 I have a fixed clean-shutdown that applies over the zlib changes in my
 github repository.  I went through and re-ordered everything so I could
 pop this to the top of the patch queue.

 It has worked very well for us in the past and I'd love to see this one
 go
 in.

 Yeah - I need to make sure it's squeeky-clean safe, but it's been
 pretty good for us too.  We do often have hundreds of processes
 left after 10 seconds though, waiting on locks - which kind of
 sucks.  Would be nice to fix that too!

What I saw on some hosts while upgrading from 2.3.14 to 2.3.15 is that I
had idled processes hanging around. Looks like they have not been
terminated.
I tried to reproduce it on several hosts but I don't get stuck idled's
now. Maybe it just happens on busy servers or after they ran for some
time.

Regards,
Simon


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html