Re: Negative worker count?!?
Hello, Oops. That would be nice to know too wouldn't it. Cyrus IMAP4 v2.2.12 Built from source. Regards, Earl Shannon Henrique de Moraes Holschuh wrote: On Thu, 01 Feb 2007, Earl Shannon wrote: Jan 31 17:24:03 uni24map master[3673]: lmtp has -2 workers?!? Jan 31 17:24:03 uni24map master[3673]: lmtp has -1 workers?!? Which Cyrus version, and if using a prepackaged one, exactly which one? Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Negative worker count?!?
Hello, We've recently started to see this show up in our imapd.log file: Jan 31 17:24:03 uni24map master[3673]: lmtp has -2 workers?!? Jan 31 17:24:03 uni24map master[3673]: lmtp has -1 workers?!? Does anyone know why the master would think the lmtp count has gone negative? The imap server gets very slow to respond to connections when this happens, which is what gets it noticed. Looking around and this is what we find. For the curious, here's uname -a: Linux uni24map.unity.ncsu.edu 2.4.21-15.0.4.ELsmp #1 SMP Sat Jul 31 01:25:25 EDT 2004 i686 i686 i386 GNU/Linux Right now we would entertain wild speculation regarding the cause. We have 12 machines and this is only the second one to display this behavior. They are all as much the same both in hardware and software as we can make them. Regards, Earl Shannon -- NCSU ITD Unix Systems Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: cyrus force pop3 clients to leave messages on server
Hello, We worked with this problem for a bit ourselves. We had a rather unique situation however. We had to allow an IMAP client (read this as a person, not MUA) to make a POP connection at login. This was for historical reasons. ( Got a new message count. And yes, we knew it was inaccurate for an IMAP user. ) Our cyrus servers were only for IMAP otherwise. Our POP service was provided to our POP users by a different mechanism. However, in order to prevent a POP MUA from connecting and then deleting all email from the server, either by deletion or copying to a local ( to the MUA ) space, we disabled deleted in the pop3 daemon by commenting out one line of code in the C source, that which set the deletion flag. Without the flag set deletions did not occur. Given our unique situation then and how many revisions back it was I don't know if this suggestion would work for you. But what you ask, strictly speaking, could be done then, and may still be possible. Whether or not it's a good idea is another question only you can really answer. What really needs to exist ( in my mind, and it may be there now, I haven't looked to see what is provided in awhile ) is some mechanism used by the cyrus software to determine if a user connecting is either POP or IMAP, and only allow connections via the appropriate protocol. Whether cyrus were to maintain this information itself or get it from some other source, either ldap, hesiod, NIS, or whatever could be either configurable at runtime or build time. Since we no longer need such an option ( we've since gone all IMAP, which was the easier thing to do) we haven't pursued it. Regards, Earl Shannon Martin Schiøtz wrote: On 7/30/06, Daniel Eckl <[EMAIL PROTECTED]> wrote: That's a good idea. But this may have an unwanted side effect: A pop3 client which is not configured to leave messages on server might ignore the possibility that messages on the server might be seen already. If the client doesn't compare fetched and unfetched mails with the UIDL command, it might always fetch all messages from the server over and over again, because it thinks it has deleted all fetched mails and all mails on server must be new. So would act al clients which don't use the UIDL command at all, because they miss the "leave messages on server" option at all. I see your point! I think have a better idea (but without knowing the reason for the posters request, it might be unusable, I don't know): The main mail service is build around imap and webmail also sa-learn ham is based on the INBOX. Actually I was thinking about not to provide POP3 at all. But if it was possible to force POP3 clients to leave copy on server I would have no worry also to provide POP3. Use sieve script to copy all incoming messages to another folder. The POP3 clients keep fetching and truncating the INBOX but all messages are still on the server in another folder. In case some of them are needed again, one could use a webmail IMAP client to view them or copy some of them into the inbox to be fetched again. I can see this would be a solution but anyway it would be taking to much space on the server. I think I will not to provide POP3 at all. Thanks! - Martin Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Ximian Evolution client / local imapd
Hello, Such a connection might be useful if the imap server expected to have the client running locally. I think the UW Imap server does that, but I'm only guessing. As others have already pointed out, doing it with Cyrus is not only a bad idea, it probably won't work. Regards, Earl Shannon Simon Matter wrote: On Fri, 2005-08-19 at 21:18 +, Brian Huffman wrote: All, Evolution has an option to remotely connect to an imap server that you otherwise can not connect to by using means such as ssh. It allows a "custom command" to connect to the imap server. The default is: "ssh -C -l %u %h exec /usr/sbin/imapd" Don't even think about running imapd by hand, only cyrus master can do it. It simply won't work. Simon Why would you want to do that instead of using IMAP SSL (or TLS)? Cyrus servers are ment not to be accessible by ordinary users (ie. more secure to local attacks). O. -- Ondrej Sury <[EMAIL PROTECTED]> Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Funding Cyrus High Availability
Hello, Question: Are people looking at this as both redundancy and performance, or just redundance? My $0.02 worth. Performance gains can be found the traditional way, ie, faster hardware, etc.Our biggest need is for redundance. If something goes wrong on one machine we still need to be able to let users use email. --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Seen Status
Hello, We've just completed moving accounts to new T3's in our SAN and have discovered a problem we not had doing this before. The seen status is gone and all the messages in the accounts appear as unread. We moved the seen status files. Any ideas about what we have missed would be most helpful. Particularly about what we can do to get the seen files recognized and used. Regards, Earl Shannon
All messages marked as New
Hello, We've recently moved accounts from servers running 1.5.14 to 2.1.11. We've had several users report that all their messages are being shown as New ( Unread ) by their email client and remain so despite reading the messages. Removing the users seen file fixes the problem for new mail. We however do not know why this is happening. Has anyone else seen similar problems? Is there a better fix available, ie, one that can read the seen status of the old server's format and translate that to the new server? Regards, Earl Shannon -- Systems Programmer, Computing Services, Information Technology NC State University. http://www.earl.ncsu.edu
Re: presubscribing mailboxes
Hello, An alternative is to authenticate as one user, probably the admin user, and be authorized to act on behalf of the account. That said, I don't know how to do this. If someone has an example of some perl code using the Perl IMAP Admin module that does this and is able to post it to the list I would appreciate it. Currently I do what you do when I need to subscribe a user to some mailboxes in their account. Edit their subscription files. Would definitely prefere being able to do this via the network instead of logging into the box. Regards, Earl Shannon -- Systems Programmer, Computing Services, Information Technology NC State University. http://www.earl.ncsu.edu Luca Olivetti wrote: > > [sent this yesterday but didn't appear on the list. something wrong with > the list server?] > > When I create a new user, I create some extra mailboxes: > > user.name.sent > user.name.drafts > user.name.templates > > While we were using netscape 4, during the first login it would > subscribe to all existing mailboxes, now that we've switched to mozilla > it doesn't, so I have to presubscribe these mailboxes while creating the > user. > The only way I found is a hack I'm not really happy with: > > SUBFILE=/var/lib/imap/user/$initial/$LOGIN.sub > echo -e "user.$LOGIN.sent\011" > $SUBFILE > echo -e "user.$LOGIN.plantillas\011" >> $SUBFILE > echo -e "user.$LOGIN.borradores\011" >> $SUBFILE > chown cyrus.mail $SUBFILE > chmod 600 $SUBFILE > > Is there a better way? > > TIA > -- > Luca Olivetti > Wetron Automatización S.A. http://www.wetron.es/ > Tel. +34 93 5883004 Fax +34 93 5883007
Re: Cyrus IMAP ; case studies, success stories, ... I need them
Hello, We have been using Cyrus at NCSU for some time now. We've only had a couple of software problems and they've been addressed with bugfixes now. NCSU is a large university in North Carolina, USA. We have four machines we are moving our accounts to that are running Cyrus. They are E-220R servers from Sun running Solaris. They have a SAN with 400 Gb of capacity split to provide 100Gb to each server. We currently have a quota limit for students of 10 Mb and faculty/staff of 20Mb. Additional quota may be leased if someone needs it. We have thousands of accounts per machine. The shared mailbox feature is nice. Our library uses that to help shuttle requests around. One of our departments is evaluating the possibility of using shared mailboxes to help with the amount of email they recieve asking for information about their programs, etc. Basically, Cyrus is a solid performer. I've only one big wish and that is some form of redundancy be built into it. As someone else also mentioned, we use the Steltor/Oracle Product, Corporate Time for calendaring and scheduling. Works for us and even has a nice web client. Frankly, I wish people would not insist on this combination of email and groupware. Email is done best by email software. Groupware should be able to use email API's to get any messaging done that needs to be emailed. We've seen our share of political infighting on campus here with people using Groupwise because they NEED the groupware capability. Anyway, my $0.02. Best of luck in your endeavor to use Cyrus. Regards, Earl Shannon -- Systems Programmer, Computing Services, Information Technology NC State University. http://www.earl.ncsu.edu Piet Ruyssinck wrote: > > Hi all, > > I have set up a test machine with cyrus imapd 2.1.11 and everything > that goes with it. Very nice system, working perfectly, in a test > environment of some 30 people. > > Today, I went to see management, to get money for the production system > hardware (I'm thinking about a full Sun Fire 280R with a full Sun > StorEdge 3310 SCSI Array), > ... only to hear that some other people are working on a solution based on MS > Exchange, because they want the groupware functionality. > > I might be able to convince them to adopt Cyrus imapd, if only I can > assure them that it will peacefully coexist with MS exchange. They can > agree on using Cyrus for e-mail, and Exchange for the groupware stuff. > But, being a full time unix admin, I have no clue about exchange. Is > such a setup possible ? Or does Exchange rely on its own e-mail system ? > > Together with information, I could also use any Cyrus imapd success > stories that I can get. > > If you're running Cyrus for a reasonably sized company or institution, > please let me know, including the hardware you're using, number of > (simultaneous) users, level of satisfaction, and other useful > information. Maybe we could collect this data in some kind of > registry. > > Looking forward to your replies, > Piet Ruyssinck > > -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- > Piet RUYSSINCKe-mail: [EMAIL PROTECTED] > Unix Systeem Administratie tel: +32 9 264 4733 > Directie Informatie- en Communicatietechnologie (ICT) fax: +32 9 264 4994 > Universiteit Gent (RUG) Krijgslaan 281, gebouw S9 - 9000 Gent, Belgie > -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- > Please avoid sending me Word or PowerPoint attachments > See http://www.fsf.org/philosophy/no-word-attachments.html
Re: Yet another mail-restore question...
Hello, Quick recovery is a definite concern with Cyrus. The thing that really needs to be looked at in my opinion is some form of scalability/redundancy design that allows machines to be added and removed on the fly without affecting services provided. This implies a cluster arrangement of some sort. This has been discussed a little bit before on this list, ie, mostly how to go about doing it with filesystems and TCP/IP load balancing mechanisms. I haven't looked closely enough at the concept of a Cyrus Murder to know whether or not it would provide the type of scalability and redundancy that I would like. Regards, Earl Shannon -- Systems Programmer, Computing Services, Information Technology NC State University. http://www.earl.ncsu.edu
Re: Yet another mail-restore question...
Hello, Sadly we've a little experience in IMAP server recovery. Most of what I'm listing makes common sense but I'll say it anyway. How to quickly get back a once working server depends upon whats wrong with it. We've not had any problems with software failing but have had hardware bite us(me) in the butt. The major concern we have is restoring a server in the event it goes completely south. We were looking at this recently from the wrong side of the event. The RAID controller in the server was not a redundant controller and its battery was failing. When I attempted to replace the battery I only made things worse. The machine lost the file system with the mail store and configuration files on it. While 40 Gb of data may not sound like much by todays standards anymore, wait until you lose it and are looking at recovering it. ( And with a 10 Mb quota limit currently, you figure out how many users were somewhat upset. And yes, we are very overbooked for quota on our machines. Believe it or not the students can get by with the 10 Mb limit. Staff on the other hand, who have 20 Mb, are still not satisfied. ) We took a two pronged approach to see which would come back faster, rebuilding the filesystem on the current machine using fsck and selected restorations, or simply building a new machine and restoring to it. We actually had the fsck'ed machine back before the restoration was done, but decided that a reconcstruct on each individual mailbox should also be done. That took almost another twelve hours. Building the new machine was pretty straight forward in this case since we would have been able to simply take the system disk from the old machine and put it in the new machine and just rebooted with the new RAID unit. But we also have an IMAP install "kit" we can use to create a new IMAP server when we need one. We would then have done the restoration to the newly installed machine. I don't know from experience if any of the Bare Metal recovery methods would have done the restoration any faster. I do believe that the system disk if lost can probably be recovered significantly faster via Bare Metal methods ( Such as what Veritas markets ) but we do not yet have the technology in house here. This has made me painfully aware that large file systems, while nice to store lots of stuff, have severe drawbacks when it comes to replacing them from backup. We are wanting to get transitioned to a journaling file system in order to help reduce fsck times on the occasional/unscheduled reboot. The bottom line is you have to know your system and its requirements for recovery. Making public a document about how to restore service in the event of a disaster would only give you an outline to use at your site since you would probably use different backup methods, have different OS you were using, etc. And you should really be able to come up with the outline yourself. Regards, Earl Shannon -- Systems Programmer, Computing Services, Information Technology NC State University. http://www.earl.ncsu.edu Bryntez wrote: > > Has anybody on the list made a detailed doc about > howto restore the maildb in case of disaster ? > I mean a short, quick note with step-by-step commands > to execute, to quickly get back in business ? > > If for some reason the system crashes, it sure would have > been nice to have a doc at hand to quickly restore the > imap-system, saving time, and not having to browse the whole > documentation when the sweat are dripping and the stress- > level are at a dangerous level :-) > > A copy of such doc would have been reassuring > > (Running Cyrus imap/sasl 2.1.5 on RedHat 7.3) > > Regards > bryntez
Re: Major Cyrus Problems
Hello, Make sure the users are actually subscribed to the folders and have permissions to access them. Regards, Earl Shannon -- Systems Programmer, Computing Services, Information Technology NC State University. http://www.earl.ncsu.edu Chris Nolan wrote: > > Hi, > > I'm running Cyrus 2.0.16 and a problem has arisen - users cannot see some > of their mail folders even though the directories are there and > reconstruct does recognise these folders when run. > > Any suggestions? > > Chris
Re: restoring from backup individual messages/folders
Hello, This is practically verbatim what we do at NCSU. We create a folder named BACKUP in their regular inbox and then restore their account from the requested date to that folder. Subscriptions need to be updated and quotas set for the BACKUP folder. We then delete it after two weeks. :) We do limit the number of restoration attempts to find something though, to two. We also only keep four weeks of data on tape. We use Veritas with a tape library for the backups. Worlds away better than what we were doing with ufsdump/ufsrestore. The idea of not actually deleting a message when a user flags it to go away has other implications besides easy restoration. How does that affect user quota, for example? File space usage for the machine in general, ie, how much data should you keep? Measure that in terms of time or space, or some mix of the two? Satisfactory answers to these questions would probably require a substantion redesign of the IMAP server software. Regards, Earl Shannon -- Systems Programmer, Computing Services, Information Technology NC State University. http://www.earl.ncsu.edu Dave McMurtrie wrote: > > On Thu, 2 Jan 2003, Hein Roehrig wrote: > > > I would be interested in what kind of services&strategies admins here > > offer to users regarding restoring accidentally deleted (&expunged) > > messages. > > > > In particular, while it is relatively safe to backup a running Cyrus > > and in the case of desaster reconstruct all mailboxes, stopping Cyrus > > for reconstructing a single mailbox seems unacceptable. > > I'd prefer it if we only did disaster recovery restores here (if we delete > your data, we'll get if back -- if you delete it, tough rocks) but that's > not the case. > > When a user requests a restore, we create (via IMAP protocol) a subfolder > in their INBOX and give it a separate quota root. This subfolder will > contain their restored INBOX and all restored subfolders. The mail files > are copied into the filesystem and then the restore folders are > reconstructed (which doesn't require us to stop cyrus). The user is then > free to browse through their restore subfolders and copy any messages they > need. After 14 days, their entire restore hierarchy is deleted. > > Even though this whole process is automated, it's still a pain. > > Thanks, > > Dave > -- > Dave McMurtrie, Systems Programmer > University of Pittsburgh > Computing Services and Systems Development, > Development Services -- UNIX and VMS Services > 717P Cathedral of Learning > (412)-624-6413 -- Systems Programmer, Computing Services, Information Technology NC State University. http://www.earl.ncsu.edu
Admin user as a proxy user
Hello, I've only found some passing references to this subject in the list archive. What I learned from the person who posted this question back in Febuary leaves me wondering. Basically what I would like is for the admin user to have more control over accounts, ie, act as if they were the user. Can this be done with the current implementation of cyrus? If so, how? The IMAP protocol appears to support actions for the authenticated user, which means one must have the password of the user to act in their stead. That is not possible in may cases, including ours here. I see an option available in the imapd conf file that addresses a proxy user, but how can one do it? A more concrete example of what I am refering to may help explain. If a user requests a restoration we create a BACKUP folder in thier inbox to hold the restored mail. Now, either I logon to the IMAP server and muck with their subscription file directly in order to subscribe them to this new folder, or tell them to subscribe to it. The second method is not very user friendly. The first method is kinda ugly and seems unnecessary to me. If I can create a folder in a users account using the admin tool, why can I not subscribe them to that folder also using the admin tool? Or can I and I just don't know how? Regards, Earl Shannon -- Systems Programmer, Computing Services, Information Technology NC State University. http://cinclant.unity.ncsu.edu/ershanno
