Re: Checking for a mailbox's backend server
Perfect! Thanks!
-Brenden
Andrew Morgan wrote:
On Tue, 19 Sep 2006, Brenden Conte wrote:
Is there a way to remotely find what backend server a specific
mailbox is on using the admin account? This includes both users
mailboxes as well as shared mailboxes.
##
# Locate which backend a mailbox is on
##
sub locatemailbox {
my ($server, $authuser, $authpw, $mailbox) = @_;
my $location = ;
use Mail::IMAPClient;
my $imap = Mail::IMAPClient-new(
Server = $server,
User = $authuser,
Password = $authpw
);
if (! $imap) {
die(Cannot connect to mail server '$server' to locate
mailbox - $!);
}
my @results = $imap-tag_and_run(qq/GETANNOTATION $mailbox *
value.shared/);
$imap-logout;
foreach my $r (@results) {
$r =~ s/\r//g;
$r =~ s/\n//g;
if ($r =~ /\/vendor\/cmu\/cyrus-imapd\/server
\(value.shared (.*)\)$/) {
$location = $1;
}
}
return $location;
}
Andy
--
Brenden Conte
System Programmer, CMT.CIO
Rensselaer Polytechnic Institute
(518)276-4264
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Checking for a mailbox's backend server
Is there a way to remotely find what backend server a specific mailbox is on using the admin account? This includes both users mailboxes as well as shared mailboxes. Thanks, -- Brenden Conte System Programmer, CMT.CIO Rensselaer Polytechnic Institute (518)276-4264 Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Berkeley db errors with lmtp
Cause for concern, or par for the course? :) My situation is that I'm working on getting lmtpproxy frontends to work, and they do. But every time a message is delivered, the lmtp process on the frontend machine also logs these additional lines: Aug 30 09:21:02 frontend lmtp[5079]: DBERROR db4: Database handles open during environment close Aug 30 09:21:02 frontend lmtp[5079]: DBERROR: error exiting application: Invalid argument Is this a problem, or just another ignorable Berkeley error? The only database that uses berkeley is the tlssessions.db on the frontends (although i havn't directly verified that that is the file the error refers to) Thanks, -- Brenden Conte System Programmer, CMT.CIO Rensselaer Polytechnic Institute (518)276-4264 Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Frontend Referrals (or lack thereof)
Thank you!
-Brenden
Andrew Morgan wrote:
On Wed, 16 Aug 2006, Brenden Conte wrote:
I'm not sure if this has been asked before, but the list archives
appear to be down and i can no longer connect to the anonymous imap
server (Thunderbird doesn't have a concept of anonymous login,
without LOGIN, apparently).
Is there a way to prevent the frontend machines in a MURDER cluster
from issuing referrals?
Thanks for your replies.
I was given the attached patch by a sysadmin at PSU, which I am using
here in production. After you apply the patch, simple add the
following to your imapd.conf on your frontends:
# On frontend servers, disable referrals
proxyd_disable_mailbox_referrals: 1
I have not tested this on the v2.3.x series.
Andy
--- cyrus-imapd-2.2.10.dist/imap/proxyd.c 2004-11-23 09:40:15.0
-0800
+++ cyrus-imapd-2.2.10/imap/proxyd.c2005-01-14 12:50:11.965210408 -0800
@@ -1227,7 +1227,7 @@
/* Cleanup Globals */
proxyd_cmdcnt = 0;
-disable_referrals = 0;
+disable_referrals =
config_getswitch(IMAPOPT_PROXYD_DISABLE_MAILBOX_REFERRALS);
supports_referrals = 0;
proxyd_userisadmin = 0;
proxyd_starttls_done = 0;
@@ -2823,6 +2823,10 @@
prot_printf(proxyd_out, * CAPABILITY );
prot_printf(proxyd_out, CAPABILITY_STRING);
+if (config_getswitch(IMAPOPT_PROXYD_DISABLE_MAILBOX_REFERRALS) == 0) {
+ prot_printf(proxyd_out, MAILBOX-REFERRALS);
+}
+
if (config_getint(IMAPOPT_IMAPIDLEPOLL) 0) {
prot_printf(proxyd_out, IDLE);
}
diff -r -u cyrus-imapd-2.2.10.dist/imap/version.h
cyrus-imapd-2.2.10/imap/version.h
--- cyrus-imapd-2.2.10.dist/imap/version.h 2004-11-23 09:52:52.0
-0800
+++ cyrus-imapd-2.2.10/imap/version.h 2005-01-14 12:46:38.391024296 -0800
@@ -55,7 +55,7 @@
/* CAPABILITIES are now defined here, not including sasl ones */
#define CAPABILITY_STRING IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ \
- MAILBOX-REFERRALS NAMESPACE UIDPLUS ID \
+ NAMESPACE UIDPLUS ID \
NO_ATOMIC_RENAME UNSELECT \
CHILDREN MULTIAPPEND BINARY \
SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES \
diff -r -u cyrus-imapd-2.2.10.dist/lib/imapoptions
cyrus-imapd-2.2.10/lib/imapoptions
--- cyrus-imapd-2.2.10.dist/lib/imapoptions 2004-07-21 12:07:45.0
-0700
+++ cyrus-imapd-2.2.10/lib/imapoptions 2005-01-14 12:47:41.125560426 -0800
@@ -630,6 +630,10 @@
connections that these referrals would cause, thus resulting in a higher
authentication load on the respective backend server. */
+{ proxyd_disable_mailbox_referrals, 0, SWITCH }
+/* Set to true to disable the use of mailbox-referrals on the
+ proxy servers.*/
+
{ proxyservers, NULL, STRING }
/* A list of users and groups that are allowed to proxy for other
users, seperated by spaces. Any user listed in this will be
--
Brenden Conte
System Programmer, CMT.CIO
Rensselaer Polytechnic Institute
(518)276-4264
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Frontend Referrals (or lack thereof)
I'm not sure if this has been asked before, but the list archives appear to be down and i can no longer connect to the anonymous imap server (Thunderbird doesn't have a concept of anonymous login, without LOGIN, apparently). Is there a way to prevent the frontend machines in a MURDER cluster from issuing referrals? Thanks for your replies. -- Brenden Conte System Programmer, CMT.CIO Rensselaer Polytechnic Institute (518)276-4264 Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: 2.2 murder backend authentication problems
Andrew Morgan wrote: On Thu, 18 May 2006, Brenden Conte wrote: I've been wrestling with a new cyrus murder setup. At this point, edits made to a backend server are properly propigated through the master and frontends. Now, i'm trying to test administration through the frontend servers. For example, when i connect to a frontend server and issue a `CREATE user.testuser imap-backend` the frontend logs show the following: In my testing, I had to create mailboxes on the backend. Maybe someone else can confirm this, but I don't think you can create mailboxes from a frontend. Andy Can anyone definitively confirm this? I get permission denied when i try, so i want to make sure this is by design and not an actual permissions problem. P.S. Thank you to everyone that responded to this thread! -- Brenden Conte System Programmer, CMT.CIO Rensselaer Polytechnic Institute (518)276-4264 Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
2.2 murder backend authentication problems
I've been wrestling with a new cyrus murder setup. At this point, edits made to a backend server are properly propigated through the master and frontends. Now, i'm trying to test administration through the frontend servers. For example, when i connect to a frontend server and issue a `CREATE user.testuser imap-backend` the frontend logs show the following: May 18 10:00:28 imap-frontend imap[24327]: accepted connection May 18 10:00:28 imap-frontend imap[24327]: mystore: starting txn 2147483656 May 18 10:00:28 imap-frontend imap[24327]: mystore: committing txn 2147483656 May 18 10:00:28 imap-frontend imap[24327]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication May 18 10:00:28 imap-frontend imap[24327]: login: client [128.113.124.76] cyrusadmin PLAIN+TLS User logged in May 18 10:00:28 imap-frontend imap[24327]: Doing a peer verify May 18 10:00:28 imap-frontend imap[24327]: Doing a peer verify May 18 10:00:28 imap-frontend imap[24327]: received server certificate May 18 10:00:28 imap-frontend imap[24327]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication May 18 10:00:28 imap-frontend imap[24327]: couldn't authenticate to backend server: no mechanism available May 18 10:00:28 imap-frontend imap[24327]: PROTERR: end of file reached -- and the backend: -- May 18 10:00:28 imap-backend imap[5517]: accepted connection May 18 10:00:28 imap-backend imap[5517]: mystore: starting txn 2147483674 May 18 10:00:28 imap-backend imap[5517]: mystore: committing txn 2147483674 May 18 10:00:28 imap-backend imap[5517]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication --- Network dumps show that its using TLS, but i can't tell what the traffic looks like after TLS starts. I've manually logged in with LOGIN to verify that the cyrusproxy,proxypasswd combo is valid on the backend server Here are the pertainant pieces of my frontend imapd.conf... --- configdirectory: /var/lib/imap partition-default: /tmp admins: cyrusadmin proxy_authname: cyrusproxy imap-backend_passwd: proxypass postuser: sharedfolders allowplaintext: 1 sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN LOGIN GSSAPI sasl_minimum_layer: 0 tls_key_file: /etc/ssl/cert.key tls_cert_file: /etc/ssl/cert.cert tls_ca_file: /etc/ssl/CA.cert # Murder mupdate_username: cyrusproxy mupdate_authname: cyrusproxy mupdate_password: proxypass mupdate_server: imap-master.domain.tld - And the relivant parts of the backend config: - admins: cyrusadmin cyrusbackend postuser: sharedfolders allowplaintext: 1 sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN LOGIN GSSAPI sasl_minimum_layer: 0 # SSL tls_key_file: /etc/ssl/cert.key tls_cert_file: /etc/ssl/cert.cert tls_ca_file: /etc/ssl/CA.cert # Murder mupdate_username: cyrusbackend mupdate_authname: cyrusbackend mupdate_password: backendpasswd mupdate_server: imap-master.domain.tld proxyservers: cyrusbackend cyrusproxy allowusermoves: 1 - If anyone has suggestions it would be very much appreciated. Thanks. -- Brenden Conte System Programmer, CMT.CIO Rensselaer Polytechnic Institute (518)276-4264 Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: 2.2 murder backend authentication problems
True, and i perhaps used a bad example - this occurs anytime i try to connect to the backend, not just on CREATE. for example, i can successfully, log in with a valid account, but if i try to `SELECT INBOX`, I get the same error. Thanks. -Brenden Andrew Morgan wrote: On Thu, 18 May 2006, Brenden Conte wrote: I've been wrestling with a new cyrus murder setup. At this point, edits made to a backend server are properly propigated through the master and frontends. Now, i'm trying to test administration through the frontend servers. For example, when i connect to a frontend server and issue a `CREATE user.testuser imap-backend` the frontend logs show the following: In my testing, I had to create mailboxes on the backend. Maybe someone else can confirm this, but I don't think you can create mailboxes from a frontend. Andy -- Brenden Conte System Programmer, CMT.CIO Rensselaer Polytechnic Institute (518)276-4264 Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Murder cluster questions
I have some questions, mainly around murder and versions. We're looking to expand to a Murder cluster, but are still running 2.2 versions of the software. Obviously, i would like to use the latest version for any new installs, so I was wondering - both in the context of building the cluster as well as future upgrades - if there is a 'all same version' requirement (i.e. all servers must be upgraded at the same time) or whether the protocol was standard enough that it didn't matter (Between frontend and backends? Between backends (i.e. moving a mailbox)? Master vs frontend vs backend?) Naturally, this question doesn't involve using new features not present in the older versions. Thanks in advance for your responses! -- Brenden Conte System Programmer, CMT.CIO Rensselaer Polytechnic Institute (518)276-4264 Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: mailbox listed twice
This looks like the problem arises if there is a child mailbox that starts out exactly the same as the parent, and only the next character in the child string after the end of the parent string match is a space. Or, (!strncmp(parnet,child,strlen(parent) child[strlen(parent)+1] == ' '); Is that a correct analysis? -Brenden --On Thursday, November 03, 2005 06:54:22 PM -0500 Ken Murchison [EMAIL PROTECTED] wrote: Patrick Radtke wrote: On Nov 3, 2005, at 1:57 PM, Ken Murchison wrote: For some of our users I see the following when listing their mailboxes. user.des2004.Professors and Faculty (\HasNoChildren) user.des2004.Professors and Faculty (\Noselect \HasChildren) The mailbox is listed twice. Sometimes clients (Apple Mail) get confused by this (sometime you can store messages in the folder, and other times you can't) Mailbox is only listed once in the mailboxes.db Anyone know why this happens? Can you capture the actual LIST/LSUB command? Same deal with mailbox listed twice imtest -t -a cyrus -u des2004 localhost Authenticated. Security strength factor: 256 c list P% * LIST (\HasNoChildren) . Professors and Faculty * LIST (\HasNoChildren) . Professors and Faculty Fall 03 * LIST (\Noselect \HasChildren) . Professors and Faculty c OK Completed (0.000 secs 4 calls) c list P%.% * LIST (\HasNoChildren) . Professors and Faculty.Professors and Faculty Spring 04 c OK Completed (0.000 secs 2 calls) This is a problem with ' ' sorting before '.'. There is a known problem in that Cyrus uses the ASCII sort order to compare mailbox names, but wants the hierarchysep character to sort first, which it doesn't in ASCII. This is something that I need to fix. The sort-term solution is to tell your users to not use spaces in mailbox names. -- Kenneth Murchison Systems Programmer Carnegie Mellon University Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html - Brenden Conte System Programmer, CMT.CIO Rensselaer Polytechnic Institute (518)276-4264 Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Converting deliver.db from berkely-nosync to skiplist
Skiplist doesn't have fast lookups? I admit to not knowing the intricacies of the various formats, but i thought skiplist and Berkeley were at least comparable, as the opinion i've seen has been that skiplist is better, especially when encountering corruption with berkeley. Also, that is not an option, since i wish not to get woken up every other night because mail isn't being delivered due to this problem. -Brenden --On Sunday, September 25, 2005 11:08:28 AM +0200 [EMAIL PROTECTED] wrote: Brenden Conte wrote: Using RPM version of 2.2.10 and Berkeley DB 4.1.25... We've run into problems the last few nights with corruption of the duplicate delivery database (delivery.db). I tried disabling it, however that caused processes to fail to communicate to the local lmtp sockets for some reason. We do enjoy this feature, and disabling it was no the optimal solution, so we would like to convert it to skiplist. Don't, you need fast lookups. When this file gets corrupted just move it out of the way between a stop and start. Also, I noted in the man page that it also includes sieve in the description for that option. I was unaware of any sieve database - where is it (or is it old, left over from previous versions)? Thanks, Brenden Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html Henk -- Henk Roose [EMAIL PROTECTED] CWI - Centrum voor Wiskunde en Informatica Centre for Mathematics and Computer Science Amsterdam (NL) Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Converting deliver.db from berkely-nosync to skiplist
Using RPM version of 2.2.10 and Berkeley DB 4.1.25... We've run into problems the last few nights with corruption of the duplicate delivery database (delivery.db). I tried disabling it, however that caused processes to fail to communicate to the local lmtp sockets for some reason. We do enjoy this feature, and disabling it was no the optimal solution, so we would like to convert it to skiplist. Also, I noted in the man page that it also includes sieve in the description for that option. I was unaware of any sieve database - where is it (or is it old, left over from previous versions)? Thanks, Brenden Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Migrate from stand-alone to murder
I have looked everywhere for documentation on this, and haven't found anything. My question is, of course, how easy is it to migrate from a standalone IMAP server to a murder cluster, and what would be involved in such a migration? Thanks, Brenden --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: sieve + TLS = DBERROR
I am also running into this problem (2.2.10), while using TLS (i havn't tried without). Is this known/fixed/pending issue? I didn't see any response to this thread. -Brenden --On Sunday, April 03, 2005 02:24:51 PM -0300 Andreas Hasenack [EMAIL PROTECTED] wrote: Whenever I use sieve with TLS I get this error in the logs upon logout: Apr 3 14:18:02 fox sieve[301]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication Apr 3 14:18:02 fox sieve[301]: login: pandora.conectiva[10.0.2.177] andreas GSSAPI+TLS User logged in Apr 3 14:18:06 fox sieve[301]: DBERROR db4: Database handles open during environment close -- logout here Apr 3 14:18:06 fox sieve[301]: DBERROR: error exiting application: Invalid argument This happened with sivtest -t -m gssapi fox, for example. Other daemons behave ok (pop3, imap, lmtp). Besides the error message, no other problems are visible yet. Any clues? --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: [wish] expansion for popminpoll
Do you mean something like a href=https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2410;this/a? I haven't heard much from this since my last update. The patch still works - I'm still using it with 2.2.10 (since its functionality more or less a requirement here). -Brenden On Wed, 2005-03-02 at 08:14, Sergey wrote: Hello. popminpool good parameter for blocking too often automatic access. But this function has lack at manual access. For example the user can receive headings of messages, choose necessary and accept them, but this parameter complicates such operating mode. I think, that it would be good to make parameter popnolimitpoolcount which will allow to set a small amount unlimited attempts. What do you think about it ? -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: [PATCH] 2.3 %qu vs. %llu on *BSD
Linux printf page: q (quad. BSD 4.4 and Linux libc5 only. Dont use.) This is a synonym for ll. ... and further down under 'Conforming to'... Linux libc5 knows about the five C standard flags and the flag, locale, %m$ and *m$. It knows about the length modifiers h,l,L,Z,q, but accepts L and q both for long doubles and for long long integers (this is a bug). It no longer recognizes FDOU, but adds a new conversion character m, which outputs strerror(errno). and finally the linux scanf: q equivalent to L. This flag does not exist in ANSI C. ...and there you have it. I was curious, so i thought i'd post my findings for linux boxen (FC2). -Brenden On Fri, 2004-09-17 at 21:30, John Capo wrote: FreeBSD 4.X printf() and friends support the %llu format. scanf() and friends do not. I suspect this is true of most BSD-4.4 derived systems. I don't know what ANSI says about this issue. One way to fix it is attached. My autoconf foo is lacking so I just jammed a #define into configure.in where O_DSYNC is defined for BSD systems. I doubt this will work in all cases. John Capo -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
the amazing disappearing quota
I'm running an older (2.2.6) version of cyrus imapd, and i keep running into the situation where a users quota disappears. Is this a known (and/or fixed) bug? Or am i stumbling onto something stranger? The only thing i can say is that there are no errors in the logs, (except LOSTQUOTA entries when i delete an account) and the quotaroot files for the quotaless users are completely msising. Thanks, -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: the amazing disappearing quota
Nevermind. I little deeper digging in the list revealed the issue. Regards, -Brenden On Mon, 2004-09-20 at 15:50, Brenden Conte wrote: I'm running an older (2.2.6) version of cyrus imapd, and i keep running into the situation where a users quota disappears. Is this a known (and/or fixed) bug? Or am i stumbling onto something stranger? The only thing i can say is that there are no errors in the logs, (except LOSTQUOTA entries when i delete an account) and the quotaroot files for the quotaless users are completely msising. Thanks, -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Prevent remove file with imap
I have a patch still waiting in the wings of the cyrus bugzilla at https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2394. The patch is against 2.2.3, however it applies against 2.2.5 still (and works, as i'm using it myself). Basically, it makes it so that any imap permissions are also understood and obeyed by the pop side. -Brenden On Wed, 2004-06-16 at 11:50, sam wrote: Ken Murchison wrote: sam wrote: Dear all, How can I configure cyrus-imap prevent user remove files from the inbox folder? Do you mean prevent them from removing messages? Why would you want to do this on someone's INBOX? You should be able to do this by removing their 'd' right, but since users always have the implicit 'a' right, if they are savvy they can reinstate the 'd' right for themselves. Also note that this won't prevent the POP3 DELE command from working. Thanks for the info. Do you know how to prevent the POP4 DELE command? Thanks sam --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Prevent remove file with imap
The patch only makes the pop obey the permissions. The user can't change permissions via pop, its not in the protocol - as long as the user doesn't have admin privileges on his account, he won't be able to change them via imap either. -Brenden On Wed, 2004-06-16 at 16:13, sam wrote: Brenden Conte wrote: I have a patch still waiting in the wings of the cyrus bugzilla at https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2394. The patch is against 2.2.3, however it applies against 2.2.5 still (and works, as i'm using it myself). Basically, it makes it so that any imap permissions are also understood and obeyed by the pop side. Will you fix should prevent from user reinstate the 'd' right for themself? Thanks sam -Brenden On Wed, 2004-06-16 at 11:50, sam wrote: Ken Murchison wrote: sam wrote: Dear all, How can I configure cyrus-imap prevent user remove files from the inbox folder? Do you mean prevent them from removing messages? Why would you want to do this on someone's INBOX? You should be able to do this by removing their 'd' right, but since users always have the implicit 'a' right, if they are savvy they can reinstate the 'd' right for themselves. Also note that this won't prevent the POP3 DELE command from working. Thanks for the info. Do you know how to prevent the POP4 DELE command? -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Eudora 5 edit side effects?
While browsing the faq, I found this question in the documentation:
---
Q: Eudora 5.x can't connect using STARTTLS (SSL Neogotiation Failed).
What should I do?
A: First, complain to QUALCOMM because their STARTTLS implementation
is broken. Eudora doesn't support TLSv1 (per RFC2246) and Cyrus requires
it. If you really need this before it is fixed in Eudora, remove or
comment out the following lines in tls.c:
if (tlsonly) {
off |= SSL_OP_NO_SSLv2;
off |= SSL_OP_NO_SSLv3;
}
What kind of side effects does making this change have? Undesirables?
Thanks,
--
Brenden Conte
System Programmer, CCT
Rensselaer Polytechnic Institute
(518)276-2540
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Writing directly to email
Theoretically that would work, but unfortunately every client cdoes things differently - especially caching. Therefore any nonstandard behavior is likely to cause different results for different clients. -Brenden On Wed, 2004-04-28 at 20:32, Eli Cantu wrote: Quoting [EMAIL PROTECTED]: I was wondering if it was at all possible to pipe text form something like logging into an email file with out screwing things up for Cyrus. For example, say i have a crown tab that appends new mail.err data to the file /var/spool/imap/m/user/me/1. with just simple stdout redirection . I just tried it on a message in my Trash directory. I appended using I did not see the additional text I appended when I checked the message. I then opened up the file in vi. I can see the appended text, it just doesn't show up in the mail client (imp). So I added two '^M's at the bottom, just as there originally was. Still no luck. I deleted the message, and it deleted normally. h. e - This mail sent through IMP: http://horde.org/imp/ --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
overquota messages and lmtp 'injecting'
We have been looking at a way to easily notify users that they are over quota and are getting mail rejected. I noticed an internet draft on LTMP injecting, but i didn't see anything about that ability within cyrus. Is there a way to insert a message into a users mailbox, even if they're over quota (short of creating the message in the proper directory and reconstructing their mailbox)? Thanks, -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: ctl_deliver/cyr_expire -E clarification
On Fri, 2004-02-27 at 10:44, Ken Murchison wrote: Either you've found a weird bug, or you have the 'expire' mailbox annotation set on this mailbox. Go into cyradm and do an 'info' on the mailbox and see if it lists the expire annotation. Thank you for pointing that out, it was indeed the expire annotation. -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Delete ACL problem
On Thu, 2004-02-19 at 17:41, Rob Siemborski wrote: On Thu, 19 Feb 2004, Brenden Conte wrote: In short, heres a demonstration. localhost.localdomain cm user.test localhost.localdomain sam user.test conteb all localhost.localdomain dam user.test conteb deleteaclmailbox: conteb: Unexpected extra arguments to Deleteacl Can you get a telemetry log of this, it works for me: MAIL5.andrew.cmu.edu sam user.rjs3 foo rl MAIL5.andrew.cmu.edu dam user.rjs3 foo MAIL5.andrew.cmu.edu (g_imap is the admin in this case) Using cyradm and (trying) to perform just the dam user.test conteb command, this shows up in the telemetry logs: -- g_imap Fri Feb 20 08:58:33 2004 10772855133 OK User logged in 10772855134 RLIST 1077285513* LIST (\Noselect) . 4 OK Completed (0.000 secs 0 calls) 10772855265 DELETEACL MAILBOX user.test conteb 10772855265 BAD Unexpected extra arguments to Deleteacl Hope this helps, -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Delete ACL problem
On Fri, 2004-02-20 at 09:11, Rob Siemborski wrote: You are using an old version of cyradm against a new version of cyrus IMAP (which no longer supports the MAILBOX parameter to DELETEACL). Update your cyradm to match the Cyrus IMAP version. -Rob [EMAIL PROTECTED] mail]# ls -als /usr/local/bin/cyradm 12 -r-xr-xr-x1 root root11977 Feb 12 09:52 /usr/local/bin/cyradm [EMAIL PROTECTED] mail]# ls -als /usr/local/src/cyrus-imapd-2.2.3.autocreate/perl/imap/cyradm 12 -rwxr-xr-x1 root root11977 Feb 12 15:17 /usr/local/src/cyrus-imapd-2.2.3.autocreate/perl/imap/cyradm [EMAIL PROTECTED] mail]# diff /usr/local/bin/cyradm /usr/local/src/cyrus-imapd-2.2.3.autocreate/perl/imap/cyradm [EMAIL PROTECTED] mail]# It appears by all tests to be the cyradm directly from the 2.2.3 sources. I will dig around to see if theres any other version conflicts i can find. -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Delete ACL problem
Ah, found it, indeed, it was the old version. Replacing the modules with the new one fixed the problem. Thanks! Brenden On Fri, 2004-02-20 at 10:02, Rob Siemborski wrote: On Fri, 20 Feb 2004, Brenden Conte wrote: It appears by all tests to be the cyradm directly from the 2.2.3 sources. I will dig around to see if theres any other version conflicts i can find. The key is the Admin.pm file, not the cyradm shell script. -Rob -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456 Research Systems Programmer * /usr/contributed Gatekeeper -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Delete ACL problem
In short, heres a demonstration. localhost.localdomain cm user.test localhost.localdomain sam user.test conteb all localhost.localdomain dam user.test conteb deleteaclmailbox: conteb: Unexpected extra arguments to Deleteacl I've looked in the archives, but found nothing that worked. Just performed an upgrade from 2.1.16. It worked prior to the upgrade. Any help with this would be appreciated. - name : Cyrus IMAPD version: v2.2.3 2004/01/14 02:11:03 vendor : Project Cyrus support-url: http://asg.web.cmu.edu/cyrus os : Linux os-version : 2.4.9-e.12smp environment: Built w/Cyrus SASL 2.1.17 Running w/Cyrus SASL 2.1.17 Built w/Sleepycat Software: Berkeley DB 3.3.11: (July 12, 2001) Running w/Sleepycat Software: Berkeley DB 3.3.11: (July 12, 2001) Built w/OpenSSL 0.9.6b [engine] 9 Jul 2001 Running w/OpenSSL 0.9.6b [engine] 9 Jul 2001 CMU Sieve 2.2 TCP Wrappers mmap = shared lock = fcntl nonblock = fcntl auth = unix idle = poll - Thanks, -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: +S reliance?
On Fri, 2004-02-13 at 13:24, Wil Cooley wrote: On Tue, 2004-02-10 at 11:06, Brenden Conte wrote: In the install documents, it says to be sure to set the +S attribute in the imap directory. Is there any hard reliance on this? If i use a filesystem that doesn't support +S, are things going to break? I'm guessing you're talking about installing on Linux, since I know of no other OS with this attribute. My guess is that Ralf's recommendations for Postfix+ext3 also apply: http://www.stahl.bau.tu-bs.de/~hildeb/postfix/postfix_ext3.shtml Of course, if you're running something other than ext2 or ext3, I don't know. Perhaps a little more specificity would get a better answer. Wil Well, that was more or less my question ;-) I know programs like qmail had problems with non-sync'ed filesystems, i was wondering if that was the case as well with cyrus. Turns out i had just overlooked that part in the documentation that says don't worry about it if you're not using ext2. Thanks! -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
+S reliance?
In the install documents, it says to be sure to set the +S attribute in the imap directory. Is there any hard reliance on this? If i use a filesystem that doesn't support +S, are things going to break? Thanks, -- Brenden Conte System Programmer, CCT Rensselaer Polytechnic Institute (518)276-2540 --- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
