Re: preserve message flags in upgrade

[Edward Rudd]

Poyner, Brandon wrote:
> I copied a mail store from a Cyrus 2.1.12 server to a Cyrus 2.2.12
> server, performed a reconstruct -rf on that mail store, copied and
> converted the seen file to skiplist, and finally copied the quota file
> and ran a quota –f.  The problem is that all of the flags except for
> Seen are no longer there.  It’s as if the reconstruct process didn’t
> make the cyrus.index properly.  I searched Google and read the upgrade
> instructions to no avail.  What did I do wrong, how can I fix it?

reconstruct rebuilds the index files from scratch (and that's where the
flags are stored) so you lose all that by forcing a reconstruct. (-f).

You shouldn't need to use reconstruct at all during an upgrade. Just
make sure you copy all the metadata (seen, quota, sieve, and the mail
and indexes and the mailboxes.db).



Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Can I bypass authentication for connections from a host

[Edward Rudd]

On Thu, 2005-10-20 at 19:54 +0530, Ramprasad A Padmanabhan wrote:
> Hi,
>We are running cyrus-imapd-2.2.3-8 on linux. I would like to run some
> maintenance script from a server. Can I configure cyrus to bypass
> authentication for connections from one IP


AFAIK you can't.

What kind of maintenance scripts/tasks are you needing to do?  As most,
if not all, things can be done with machine the server is on by using
the various cyrus utilities (w/o require a password). you just have to
"su " to the cyrus user and run them. (ie.. squatter, purge, quota,
reconstruct, ctk_mboxlist, etc...)



> We are using saslauthd with mysql based authentication
> 
> Thanks
> Ram
> 
> 
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: cyrus imap proxy?

[Edward Rudd]

On Sat, 2005-10-08 at 13:28 +0200, Mark Hannessen wrote:
> hi list,
[snip]

> now I thought perhaps it would be possible to do this through some sort of 
> proxy, but I haven't found any information about this.

Perdition would be the easiest way to get you going..
(http://www.vergenet.net/linux/perdition/)  It will allow you the
flexibility to redirect the user to two different backend without having
to redo your cyrus imap server setup (which AFAIK setting up murder
would require that).

I have RPMS for EL3/WBEL3 if you need them.

> thanks,
> 
> Mark Hannessen
> 
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Passing full userid or realm to SASL

[Edward Rudd]

On Wed, 2005-10-05 at 10:40 -0500, Marcus I. Ryan wrote:
[snip]
> 
> imapd.conf includes:
> virtdomains: userid
> defaultdomain: riboflavin.net
> sasl_pwcheck_method: saslauthd
> sasl_auto_transition: no
> sasl_mech_list: plain login
> unixhierarchysep: yes
> 

Now, are you having issues with the riboflavin.net domain? or another
virtual domain?  If you have no need to have riboflavin.net in the
"default" domain in cyrus' virutal server setup, I'd highly suggest not
setting defaultdomain. as it could possibly be something with the
defaultdomain handling where cyrus decides not to send the realm.

> The rest of the settings I would think aren't related; paths, etc.
> 
> The ldap filter in saslauthd is set for:
> ldap_search_base: ou=%d,
> ldap_scope: sub
> ldap_auth_method: custom
> ldap_filter: (mailRoutingAddress=%u)


Try ldap_filter: ([EMAIL PROTECTED])

That is what I use in my setup and it works.


> Though I tried without to make sure that wasn't the problem, I run 
> saslauthd with the -r flag, so realm should be appended to the userid 
> if passed.

try running w/o the -r flag and with the changes I'v suggested above

[snip]
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Passing full userid or realm to SASL

[Edward Rudd]

On Wed, 2005-10-05 at 01:31 -0500, Marcus I. Ryan wrote:
> I've set up SASL with an LDAP backend that checks for a user in either 
> the ou of the SASL realm, or the ou matching their domain (so 
> [EMAIL PROTECTED] as the username or user with domain.tld as the realm).
> 
> I got it working using testsaslauthd, but when I try it through IMAP it 
> appears IMAP strips the domain from the userid before it passes it to 
> SASL, and doesn't pass it as a realm.  I can handle it either way 
> (passing a username of [EMAIL PROTECTED] or having it passed in as a 
> userid and a realm), but it doesn't seem to do either.  Am I missing a 
> setting/configuration option, or does this require some kind of code 
> patch?

[snip]

> 
> Any thoughts are appreciated.  Thanks.


What version of SASL are you using? What version of Cyrus IMAP?

Are you using %u and %f in the ldap_filter configuration in
saslauthd,.conf? The userid is sent in %u and the realm (domain) in %r.
(this is in cyrus sasl version 2.1.20, cyrus imapd 2.2.12)

Also try setting the virtdomains: userid in /etc/imapd.conf (if using
cyrus 2.2.x) That will ensure that cyrus sends the whole userid to
sasl. 

-- 
Edward Rudd <[EMAIL PROTECTED]>


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: subsriptions by mail client

[Edward Rudd]

On Mon, 2005-08-15 at 08:20, Wouter van Marle wrote:
> Hi all,
> 
> Normally the IMAP protocol allows subscription to certain mail
> folders. Is this possible with cyrus server, and if so how can I
> enable this? At the moment Evolution says I can not subscribe to
> folders of my imap server (running on localhost by the way).

Yes, Cyrus supports IMAP Subscriptions, you need to make sure you
configured the IMAP connection to allow IMAP subscriptions by checking
the "Show only subscribed folders" in the receiving options page.

> Wouter. 
> 
> __
> 
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Redundant Imap Servers

[Edward Rudd]

Landy Bible wrote:

I'm going to be setting up a small email server for my family and 
business.  There will be maybe 10 or 15 mail accounts, and it will 
handle 500 - 1000 emails per day, max.  Although its a small system, I 
need a redundant setup so if one server goes down, another will 
continue its job.  Is Murder suited to this task, or do I need to look 
for something else?


I just finished setting up a similar setup.  I used drbd 
 and heartbeat over the drbd interface to do a 
failover of the primary fails.  I also have a separate front end box 
that spools all the incoming mail to the amavisd-new content filter 
which sends it to the backend server to be stored into cyrus.


Murder doesn't provide failover, it only splits up the spool across 
multiple servers.  I believe that support for a load balance/fail over 
type setup is being added into the CVS cyrus.



---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Virtual domain problems...

[Edward Rudd]

On Sat, 2005-05-21 at 10:25, Pete Phillips wrote:
> >>>>> "Francisco" == Francisco Reyes <[EMAIL PROTECTED]> writes:
> 
> Francisco> It would help if you post your master.cf.  The parts
> Francisco> related to Cyrus.
> 
> OK - here  it is:
> 
>   user=cyrus argv=/usr/lib/cyrus/bin/deliver -e -r ${sender} -m ${extension} 
> ${user}


With postfix you need to use the virtual_transport instead of the
local_transport.

so in my config I have

virtual_transport = lmtp:/var/lib/imap/socket/lmtp

as with local_ postfix only sends the username portion, but with virutal
it sends the whole [EMAIL PROTECTED] 

and, unless you REALLY need to use deliver you should use lmtp as it is
significantly faster.

> Hope this helps.
> Pete
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Default realm for cyrus imapd

[Edward Rudd]

With postfix and several other SASL aware applications, I can specify the
default realm if none was passed with the login credentials, however
AFACT Cyrus IMAPd does not provide this functionality.. It always uses the
machines local hostname.. 

The reason I am needing this is that I am setting up a HA
failover setup and need to specify the a "common" realm for both servers
(ie. the domain) otherwise I'd have to maintain two separate sasldb files
or have all the accounts in the sasldb twice, once for each domain.



---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: mail to multiple users

[Edward Rudd]

On Wed, 2005-04-13 at 17:25, Helmut Weigel wrote:

[snip]

> And now i want to send one single email, maybe with a fully featured 150 
> Pages colored PDF Attachment, to them all.
> 
> Can you see any chance, that this message is just stored once in the 
> mailstore and there are 5 references /links to that email?

Yes, cyrus will post one message to the store and hard link the rest.

> What would the MTA have to tell cyrus to do that, if even possible?
the MTA would have to be configured to use LMTP to send the message and
send the multiple recipients in one submission to the LMTP socket.

> I think a way around this are public imap folders. But it would be great 
> if the first szenario would be possible.
Assuming the users are using IMAP and check other folders in their
account, this would be an alternative.  With pop3 this wouldn't work
however.


-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: cyrus to sync mail on 2 machines

[Edward Rudd]

On Sat, 2005-04-02 at 15:20, rado wrote:
> Hi Y'all
> Let me explain what's goin on 1st.
> ...just a hobby kinda challenge k?
> running Redhat Fedora core 3
> sendmail etc
> 
> 2 servers here...as a HA(High Availability) Redundancy project.
> 1 server is the master the other a slave.
> The actual HA swich scripting is done.. If the master goes down, the
> slave takes over. Master comes back to the net, the slave relinquished
> back to the Master.
> enuf for that stuff.
> 
> keeping the mail in sync is a grrr.
> 
> Question: Is there anyway thru cyrus imap, pop, murder, whatever, is
> there anyway cyrus can take the mail that comes in and sync it to the
> slave?

in the released cyrus imap, no.  I *believe* this may be possible with
some of th new code being added to CVS HEAD.  I am implementing a
similar system where I work, but I am using drbd (http://www.drbd.org/)
to sync the backend filesystem.

> thx
> 
> John Rose 
> 
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Cyrus with LDAP

[Edward Rudd]

On Thu, 2005-03-31 at 21:14, Shashank Agrawal wrote:
> Hello,
> 
> Here are my config files. /etc/saslauthd.conf didn't exist on my
> system. so i created a new one. but still it doesn't work. Thank you.


the configuration looks fine. did you check your /var/log/auth.log? did
you try running testsaslauthd? did you start saslauthd?

[snip]
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Cyrus with LDAP

[Edward Rudd]

On Thu, 2005-03-31 at 19:24, Shashank Agrawal wrote:
> Hello,
> 
> I am unable to get cyrus authentication with LDAP. I am running fedora core 3.
> 
> I would appreciate any help. Is there any patch that i need to apply?
> 
> Here is my config file.
your imapd.conf file looks fine

What does your /etc/saslauthd.conf file look like and what does your
/etc/sysconfig/saslauthd file look like?

the /etc/sysconfig/saslauthd file need to have the auth mech uncommented
and set to ldap (default is pam) and  your /etc/saslauthd.conf file
needs to be configured to connect to your LDAP directory. unless you are
using pam_ldap then you can leave the configuration using PAM, but I
haven't played with that configuration.

[snip]

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Can't use cyrus deliver with mboxes containing a '@'

[Edward Rudd]

On Sat, 2005-03-19 at 13:01, Jean-Michel besnard wrote:
> just replying to myself after I figured out I had to escape the '@' as 
> follows:
> 
> cyrdeliver -a [EMAIL PROTECTED] -m user/[EMAIL PROTECTED]
> 
> it would probably be useful to document that somewhere
> 
> Jean-Michel
> 

The Cyrus WIKI is the perfect place to document this. It's at the bottom
of every e-mail the list.

Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

high system load and disk activity after starting cyrus

[Edward Rudd]

I have a WBEL3 system that I just installed my cyrus imapd 2.2.10 RPMS
(Simon Matter's RPMS) on (this is a vmware test setup system for
upgrading an existing RH 7.3 box) and when I start cyrus-imap either
with a copy of the existing spool or with no spool at all the system CPU
spikes and stays at 100% and there is constant disk access (writing at
about 3.2MB a second). and there is nothing being reported to the logs
that is letting me know what is going on.

I have another WBEL3 system (athlon 650) using the same cyrus rpms that
works perfectly fine (using it for my person 2GB+ e-mail spool). and I
have an RH 7.3 system in my vmware that works fine with 2.2.3.  
So, does anyone have an clues why this would happen or how I can track
down what is causing the spike in load and disk access (ie figure out
what cyrus piece is the guilty culprit).


-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Creating and using virtual domains in/with Cyrus..

[Edward Rudd]

On Sun, 2005-02-27 at 17:46, Eric Schnoebelen wrote:
[snip]

>   Its like it's always seeing ``virtdomains: off'', no
> matter what I enter.  I wonder if it's related to the 64bit
> issue I saw mentioned earlier. (this is an Alpha, an LP64,
> little endian, machine.)

Would you mind posting your imapd.conf to the list? maybe we can spot
something?


-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Creating and using virtual domains in/with Cyrus..

[Edward Rudd]

On Sun, 2005-02-27 at 13:03, Eric Schnoebelen wrote:
[snip]
>   Hmm, it doesn't seem to be doing that for me.  I end up
> with something looking like this:
> 
>   /
>  /user/
>  /user/[EMAIL PROTECTED]
>  /user/[EMAIL PROTECTED]
>  /user/[EMAIL PROTECTED]
> 
>   I'm creating users using cyradm, using 
> 
>   cm user/[EMAIL PROTECTED]
>   cm user/[EMAIL PROTECTED]

Do you have the virtdomains configuration set in imapd.conf ?
it looks to me as if you have virtdomains: off (or not set at all) which
would mean virtual domains support is disabled and users will be created
like you explained above.

[snip]

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Creating and using virtual domains in/with Cyrus..

[Edward Rudd]

On Sun, 2005-02-27 at 13:03, Eric Schnoebelen wrote:
[snip]
>   Hmm, it doesn't seem to be doing that for me.  I end up
> with something looking like this:
> 
>   /
>  /user/
>  /user/[EMAIL PROTECTED]
>  /user/[EMAIL PROTECTED]
>  /user/[EMAIL PROTECTED]
> 
>   I'm creating users using cyradm, using 
> 
>   cm user/[EMAIL PROTECTED]
>   cm user/[EMAIL PROTECTED]
> 
> - When the defaultdomain is changed, strange things may happen...
> 
I just re-looked over you original e-mail and you have virtdomains:
true.. true is not a valid option.. Try setting it to "on" or "userid"
(per "man imapd.conf")

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: how to pipe mail to external program?

[Edward Rudd]

On Thu, 2005-02-24 at 22:29, Tuna Sundae wrote:
> On Thu, 24 Feb 2005 19:45:33 -0700, Craig White <[EMAIL PROTECTED]> wrote:
> 
> That's the thing... I can't get postfix to check the alias map before
> giving the mail to cyrus' deliver. So I was hoping there was a cyrus
> way to do this.
> 
> Is anyone using postfix/cyrus and having it first look at /etc/aliases
> before delivering to 'deliver'?

First, this is definitely a postfix question belonging on the postfix
mailing list.  

Second, you most likely don't have /etc/aliases in your postfix
alias_maps configuration. a default install of postfix uses
/etc/postfix/aliases, but /etc/aliases can be added by editing main.cf
(read the postfix documentation on postfix.org, or post to the
postfix-users mailing list for more assistance)

Third, unless you have a REAL need to use 'deliver' you should be using
LMTP to inject mail into cyrus, as it provides better performance.

> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Horde/IMP authentication to Cyrus via client certificates?

[Edward Rudd]

On Wed, 16 Feb 2005 21:18:07 -0700, Kevin P. Fleming wrote:

[snip]
> 
> Any thoughts on how difficult it would be to get Cyrus IMAP to accept a 
> client certificate, validate it and automatically "log in" the user once 
> that is done? I'll happily contribute the code back to CMU if I get it 
> working, but I though I'd ask the gurus for their opinions before I 
> tried to tackle it :-)

This is really a Cyrus-SASL topic. as Cyrus IMAP doesn't really care how
the user gets authenticated, only that the SASL layer authenticates the
users.  So client certificate authentication would have to be added as a
SASL authentication module.

> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Cyrus folder list takes a very long time to return

[Edward Rudd]

On Fri, 2005-02-11 at 12:47, Gavin Kelman wrote:

> So the questions are:
> 
> 1) Why does '. list "" *' take so long to return a list of folders?
> There are only 30 folders in my mailbox.

have you tried lsub "" *

list will list ALL folders, lsub will list only subscribed folders.
another thing to look at would be what DB format you used for your
mailboxes.db when you compiled cyrus. it SHOULD be skiplist, if it's
not, then that could be the problem.

> 2) Squirrelmail, Outlook and Thunderbird seem to pick up the list
> of folder instantly, with no delay. How come? Caching may certainly
> be an issue, but I've tried to eliminate this.

I bet most of those do cache the folder listings on their end. Horde can
do this now in the horde 3/imp 4 release, but you have to enable it in
the IMP configuration.  Also seting up the imapproxy
(http://www.imapporoxy.org) for any webmail app would be a good thing.


> 3) Am I (and therefore Horde/IMP/PHP/C-client libs) using the right
> command to list the mailbox folders? Is there some cyrus specific
> command to list them quickly?
It's the standard IMAP4rev1 command to list folders.. there's only two
ways to get a folder listing, list and lsub.

> Cheers,
> Gavin.
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Restrict IMAP usage to certain hosts

[Edward Rudd]

On Fri, 2005-02-04 at 16:01, Bart Boelaert wrote:
> Hello all,
> 
> Cyrus IMAP relies on Cyrus SASL for authentication purposes. I now want to
> set-up the following configuration :
> 1) Certain users should be allowed IMAP access from any host, all other
> users should use POP3
> 2) IMAP access should be allowed for all users, when they check their e-mail
> via webmail (which retrieves the mail via IMAP). Webmail is installed on a
> web server located near the mail server.

This could be easily met, by firewall rules, but you still want to allow
some users to access IMAP directly.

A possible solution may be to look at perdition
http://www.vergenet.net/linux/perdition/

[snip]

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

apop not working

[Edward Rudd]

I'm running cyrus Imapd 2.2.3 (Simon matter's invocha rpms) and just
noticed odd thing.. Cyrus authenticates via saslauthd over LDAP, and
pop3 user/pass works fine.. but pop3 apop fails with "user not found". 
and the auth logs looks like it's trying to look the user up in the
slapdb auxprop.
Does anyone have any idea why this is occurring? and is there anyway to
simply disable apop for the time being until I upgrade to 2.2.10 and use
the ldapdb auxprop backend again?

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: how to create user name with dot with cyrus 2.0.17

[Edward Rudd]

On Mon, 2004-10-11 at 19:39, sam wrote:
> Christopher Paluch wrote:
> 
> > I think your imapd.conf file is correct.  How are you creating your 
> > user?  Are you specifying "user/first.name" when creating it?
> >
> Yes, I tried "cm user/xxx.yyy" at the cyradm prompt, but I got error:
>  > cm user/xxx.yyy
> createmailbox: Invalid mailbox name
> only the following form is correct:
>  > cm xxx.yyy
> localhost.authtec.com> lm
> xxx.yyy

You need to run cyrus IMAPd 2.1.x or 2.2.x to have usernames with a ".".

> I found version 2.2 does not have this problem. 2.2 allows the creation 
> of name with dot.
> Another problem with 2.0.1 is that the name created is not associated 
> with my domian name.
> I think I need to use cyrus-imap 2.2 with sasl1 for another 
> installation. I previously used cyrus-imap 2.2 with sasl2, and sasl2 
> caused alot of weird problem.

You can't run cyrus imap 2.2  with sasl 1.. you can only use cyrus 2.1
or 2.2 with sasl 2..   You should probably post the "weirdness" on the
cyrus-sasl mailing list to see if you can get it sorted out.   I
personally still am using cyrus sasl 2.1.15 as the newer releases have
some weirdness attached with them. (though I haven't tried the .19
release yet).

> Thanks
> Sam.
> 
> >
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Cyrus, LDAP, and attributes

[Edward Rudd]

On Sun, 2004-10-10 at 05:15, Nick Hodulik wrote:
[snip]

> So my questions are:
> 
> 1.) Is there a configuration option in Cyrus for something similar to 
> result_attribute in Postfix?
well, no.. cyrus itself doesn't really care what accounts are available
in your ldap.. the ldap_filter in the saslauthd.conf is strictly for
authentication, when someone logs in to check their e-mail.  Cyrus
relies on the MTA (postfix) to verify that the e-mail is correct , and
that the cyrus admin (via cradmin or similar app) created the inbox for
the user (unless you are using the autocreate patch).

> 2.) If not, exactly what data does ldap_filter return? Using Cyrus, how 
> would I accomplish the same result I would get from the above example 
> in Postfix?

The filter itself is used to fetch the users DN within the directory for
authentication.

> 3.) Am I asking the wrong question? :-)

> Thanks for anyone's help.
> 
> Nick Hodulik
> Low Fat Technology
> 

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: I have no INBOX!

[Edward Rudd]

[EMAIL PROTECTED] wrote:
So I fired up imtest to see if this is a Squirrel problem or an IMAP
problem:
imtest -u azz.domain.com -a azz.domain.com localhost
After putting in my password, I list my mailboxes...
. list * *
* LIST (\HasNoChildren) "."" "user.azz^domain^com"
. OK Completed (0.000 secs 2 calls)
 

This looks to me as the user azz.domain.com is set as a Cyrus 
Administrator in the /etc/imapd.conf file..  an administrator account on 
cyrus CAN NOT have an INBOX.. an adminsitrator is ONLY for 
administration and not for receiving e-mail..

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: raw access to imap quotas, with mail user

[Edward Rudd]

On Mon, 2004-09-20 at 05:53, Felix Cuello wrote:
> On Sun, Sep 19, 2004 at 09:26:42PM -0700, Carl P. Corliss wrote:
> > Better yet, only update it when you absolute need to (meaning: only when 
> > you are checking mail or making a change to your mailbox by deleting, 
> > moving or renaming). That should work - of course providing your web portal 
> > is functioning as a mail client (checking mail/etc) and not -only- 
> > interacting with imap to retrieve the quota.
> You are talking about some kind of triggers... but that's difficult because i
> don't have source code of the Webmail imap program [my boss bought that a few
> years ago].

You could setup an imapproxy and have the webmail connect to that. That
is what I do with horde/imp to make it run MUCH faster.

http://www.imapproxy.org/

This will save the relogin 
> regards,
> 
> Félix
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: raw access to imap quotas, with mail user

[Edward Rudd]

On Sun, 2004-09-19 at 18:32, Felix Cuello wrote:
> Hello,
> 
>I wrote a small C program to access to quota files without ask cyrus. This
>program run under mail group.
>I noticed when something change in the mailbox [deleting mails, receiving
>mails, etc] the /var/imap/quota permissions are resetted to:
> 
>-rw---  cyrus.mail
> 
>Then mail users can't have read access to this files and my C program
>doesn't have read access to the files.
> 
>It is possible to change that?
Possible, yes, probable, no.  It's kinda insecure to do that, and relies
on the cyrus mail store being the same. it's better to go through the
channels provided by cyrus and not bypass them and go directly to the
store.

What's wrong with just making an imap connect to ask for the quota root?
(you don't have to run cyradm to check quatas..)
>Thanks a lot,
> 
>Félix
>
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Duplicate delivery suppression possibly not working right on cyrus 2.2.3

[Edward Rudd]

I have cyrus 2.2.3 with a vritual domain setup, and postfix as the MTA.

I recently setup an alias account that delivers the message to two
different e-mail accounts (in the same domain) inside of postfix..
However, only the first person in the alias list received the message.
in the maillog it shows that the e-mail has send to both addresses
(running through amavisd) and then both messages get delivered back into
postfix.. And it shows that both messages made it to the LMTP socket to
deliver to cyrus.. but only one arrived.

in the log Before the lmtp delivery there is some duplicate_mark,
duplicate_check entries..

Aug 30 04:27:08 ns3 lmtpunix[30172]: accepted connection
Aug 30 04:27:08 ns3 lmtpunix[30172]: lmtp connection preauth'd as
postman
Aug 30 04:27:08 ns3 lmtpunix[30172]: IOERROR: fstating sieve script
/var/lib/imap/sieve/domain/d/drip.ws/c/clarence/defaultbc: No such file
or directory
Aug 30 04:27:08 ns3 lmtpunix[30172]: duplicate_check:
<[EMAIL PROTECTED]>drip.ws!user.clarence 0
Aug 30 04:27:08 ns3 lmtpunix[30172]: mystore: starting txn 2147500836
Aug 30 04:27:08 ns3 lmtpunix[30172]: mystore: committing txn 2147500836
Aug 30 04:27:08 ns3 lmtpunix[30172]: duplicate_mark:
<[EMAIL PROTECTED]>drip.ws!user.clarence
1093858028 1339
Aug 30 04:27:08 ns3 lmtpunix[30172]: duplicate_check:
<[EMAIL PROTECTED]>drip.ws!user.urkle   0
Aug 30 04:27:08 ns3 lmtpunix[30172]: mystore: starting txn 2147500837
Aug 30 04:27:08 ns3 lmtpunix[30172]: mystore: committing txn 2147500837
Aug 30 04:27:08 ns3 lmtpunix[30172]: duplicate_mark:
<[EMAIL PROTECTED]>drip.ws!user.urkle   1093858028
2313
Aug 30 04:27:08 ns3 lmtpunix[30172]: mystore: starting txn 2147500838
Aug 30 04:27:08 ns3 lmtpunix[30172]: mystore: committing txn 2147500838
Aug 30 04:27:08 ns3 lmtpunix[30172]: duplicate_mark:
<[EMAIL PROTECTED]>.urkle+drip.ws.sieve.
1093858028 0

Does anyone have any clue why this has happened? Is this as a result of
duplicate delivery? if it is, I thought it was not supposed to take
effect for different mailboxes, and different accounts even.

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: using imap LIST to retrieve list of domains in 2.2.3

[Edward Rudd]

On Tue, 2004-08-17 at 18:37, Ken Murchison wrote:
> Edward Rudd wrote:
> > I don't want a list of "ALL" of the folders. just the mailboxes.
> 
> Try using the internal format of the names (domain!mailbox):
> 
> . LIST "" *!user/%
> 
> This should return mailboxes of the form:
> 
> user/[EMAIL PROTECTED]
> 

Thanks, that worked perfectly.

> > 
> > 
> >>2) Are you using unix separator instead of '.'?
> > 
> > 
> > virtual domains don't work unless you are using the unix separator.
> > so I am using unix hierarchy separator.
> 
> Incorrect.  The "real" virtdomains support in 2.2 can use either '.' or 
> '/' without getting confused with the subdomain parts.

oh, cool.. guess I can start wreaking havoc on Evolutions poor IMAP
namespace support again.

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: using imap LIST to retrieve list of domains in 2.2.3

[Edward Rudd]

On Tue, 2004-08-17 at 12:16, Erik Norgaard wrote:
> On Tue, 17 Aug 2004, Edward Rudd wrote:
> 
[snip]

> A few questions:
> 1) Have you tried adding wildcard '*' to your queries?

I don't want a list of "ALL" of the folders. just the mailboxes.

> 2) Are you using unix separator instead of '.'?

virtual domains don't work unless you are using the unix separator.
so I am using unix hierarchy separator.

> 3) Are you using the commandline cyradm util?

direct IMAP.. not the cyradm utility, which the cyradm utility does
direct IMAP anyway through a perl module so the same results occur with
cyradm.

> 4) Have you tried to list all by simply typing "list" ?
Again, I do not want a list of all of the folders, as this will
eventually get to be a large number. 

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

using imap LIST to retrieve list of domains in 2.2.3

[Edward Rudd]

I've been looking at trying to retrieve a list of all the accounts on my
mail server that is using the 2.2.3 style name based virtual domains.
However it doesn't seem to work "correct"

list "" "user/%"
returns and empty result as nothing belongs to the "default domain"
(default domain isn't used in my setup)

list "" "%"
returns a list of "second level" /NonExistent domains (but only the 2nd
level part of the domain)

list "" "example/%"
returns a /NonExistent [EMAIL PROTECTED]


Is this the intended "way" of retrieving domains? it seems rather
cumbersome. The end result of this is to update my CyrusAdmin php class
to support version 2.2.3.  However it seems as though I have to run MANY
queries to retrieve this information.

Is there any simpler way via IMAP to retrieve a list of domains/users?


-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: mailboxes.db insists on using Berkeley ??

[Edward Rudd]

On Sat, 2004-08-14 at 13:21, J. W.Andersen, Falster System Teknik wrote:
> Ever since cyrus 2.0 I dragged along the mailboxes.db in berkeley 
> format, but finally decided to change to skiplist.
> I converted mailboxes.db to skiplist format, and changed imapd.conf  
> entry mboxlist_db from berkeley to
> skiplist and attempted to start cyrus, which failed.

> This first happened in 2.2.6 - I upgraded to 2.2.8 - no difference.
> 
> I then reconfigured cyrus imapd with

> --with-mboxlist-db=skiplist- no difference.
This is no longer supported in cyrus 2.2.x dB formats are specified only
in the configuration file.

> Does the "db4" in the log indicate, that ctl_cyrusdb still thinks, it is 
> a berkeley database, and attempts to

> access it accordingly ? Looks to me, as if the "mboxlist_db: skiplist" 
> in imapd.conf is not understood at all ?
You need to run cvt_cyrusdb_all after changing the configuration.

This is what I would to do convert the format if the cyrsus convert db
app isn't working..

as the cyrus user run

ctl_mboxlist -d > mboxlist.txt

then change the configuration for the mboxlist in the cyrus
configuration file..
delete the mailboxes.db (would be wise to have cyrus  NOT running at
this point)
then run

ctl_mboxlist -u < mboxlist.txt

That will dump and undump the database and change formats.

> Any help highly appreciated - TNX i advance.
> 
> Regards, Joern.
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: wildcard quota setting

[Edward Rudd]

On Mon, 2004-08-02 at 21:32, TN wrote:

> I presume therefore that I can't use wildcards for quota setting ? If 
> not, how do people do without doing it by hand ?
Wildcards are only supported on list.

Personally I use the autocreate patch for cyrus. But this only autoadds
a quote for new created accounts upon user first login or first message
sent to a user. (no cyradm cm required)

http://email.uoa.gr/projects/cyrus/autocreate/

The only other way I see of doing it is to get a list of users that need
a quota set and create a script and pipe it into cyradm.

> 
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: upgrade 2.0.9 => 2.1.15

[Edward Rudd]

On Sun, 2004-07-04 at 12:13, David Schmitter wrote:
> Hi all
> 
> I am upgrading our mail server from 2.0.9 on redhat to 2.1.15 on debian. 
>   I have noticed that I can't use the cyrus.* files in the mailboxes, if 
> I do the imap server will tell me there's no such mailbox. I can use 
> cyrreconstruct to generate them. But ain't I losing some information 
> here: flags and seen state?
> 
the no such mailbox error is most likely generated because the
mailboxes.db wasn't transfered over..  the cyrus.* files should transfer
perfectly file. but you need to make sure you also copy the mailboxes.db
from the cyrus imap config directory (/var/lib/imap)

Also it is recommended to use 2.2.3 now, (or 2.2.6, but I'd wait until
2.2.7 comes out as there are a few quirks with quota in 2.2.6)

> Any suggestions?
> 
> Thanks
> 
> David
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Create Mailboxes on Delivery

[Edward Rudd]

On Wed, 2004-06-23 at 19:50, [EMAIL PROTECTED] wrote:
> When I tried this patch a month or so ago, it would create INBOXs, but 
> not other mailboxes. For instance, I tried posting a message to a 
> nonexistent mailbox, INBOX.new-mailbox; it ended up in INBOX. Possibly 
> I misused the patch, and possibly it now does what it didn't before. I 
> would be glad to hear about it!

> I think the other patch from the University of Athens, the Auto Sieve 
> Folder patch, is intended to create arbitrary mailboxes - but from the 
> context of sieve. I'm not using sieve; I need to create arbitrary 
> mailboxes from the context of an authenticated delivery.
> 
Have you asked the author of those patches??  I'm sure he'd be able to
clear up exactly what the patch does and doesn't do. Also if it doesn't
do, adding to that patch would probably be better since the
infrastructure already exists to handle the core "create on post" stuff.

> Please let me know if I'm mistaken, and really should be using the UoA 
> patches!
> 
> Thanks,
> 
> Jack
> 
> On Jun 23, 2004, at 11:03 AM, Edward Rudd wrote:
> 
> > On Wed, 2004-06-23 at 12:16, [EMAIL PROTECTED] wrote:
> >> It is essential to me to create the mailboxes for which incoming
> >> messages are intended when they don't exist. To this end, I am writing
> >> a patch.
> > The auto create patch located http://email.uoa.gr/projects/cyrus/
> > already does this functionality.  Just enable the createonpost option?
> > or am I misreading what you are trying to accomplish?
> >
> >> Jack
> >>
> >> PS - I found the University of Athens Autocreate INBOX & Auto Sieve
> >> Folder projects a bit helpful.
> > -- 
> > Edward Rudd <[EMAIL PROTECTED]>
> > Website http://www.outoforder.cc/
> >
> >
> 
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Create Mailboxes on Delivery

[Edward Rudd]

On Wed, 2004-06-23 at 12:16, [EMAIL PROTECTED] wrote:
> It is essential to me to create the mailboxes for which incoming 
> messages are intended when they don't exist. To this end, I am writing 
> a patch.
The auto create patch located http://email.uoa.gr/projects/cyrus/
already does this functionality.  Just enable the createonpost option?
or am I misreading what you are trying to accomplish?

> Jack
> 
> PS - I found the University of Athens Autocreate INBOX & Auto Sieve 
> Folder projects a bit helpful.
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: State on shared folders

[Edward Rudd]

On Wed, 2004-06-23 at 05:06, Mike Brodbelt wrote:
> Hi,
> 
> I've just set up shared folders on my Cyrus server, and Cyrus is
> maintaining per-user state for these folders. For my purposes, it would
> be useful to be able to have state information maintained per folder, as
> opposed to per user. Is it possible to have Cyrus do this - I can't see
> any obvious references to it after some googling?
> 
There is a way to do it, i'm not sure off the top of my head how. But
search for bulletin boards and shared folders.

I found this posting to this list about the issue

http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&searchterm=bulletin&msg=3187


> TIA,
> 
> Mike.
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: lmtp via unix socket and user+mbox@domain syntax

[Edward Rudd]

On Fri, 2004-06-18 at 13:32, Andreas wrote:
> On Fri, Jun 18, 2004 at 03:01:41PM -0300, Andreas wrote:
> > the [EMAIL PROTECTED] syntax to work, but to no avail: all messages
> > end up in INBOX (I have set "recipient_delimiter = +" in postfix's main.cf).
> 
> Hmm, answering to myself... Adding the "p" right to "anyone" fixed it. But
> "anyone" is a bit too broad... What is the user that the lmtp unix socket
> is seeing and using for delivery?
> 
anonymous p
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: System-wide sieve filter

[Edward Rudd]

On Fri, 2004-06-18 at 12:05, Tore Anderson wrote:
> * Tore Anderson
> 
>  >   Hi.  I need to make SpamAssassin-tagged messages to be by
>  > default filtered into a spam-folder.  I figured I could do this
>  > either by a global sieve script, or some default script that was
>  > copied in place whenever a new user mailbox was created.
> 
> * Luca Olivetti
> 
>  > in /etc/amavisd.conf
>  >
>  > $addr_extension_spam   = 'spam';
>  >
>  > then when I create an user, I create a "spam" folder and give it an
>  > "anonymous p" acl.
> 
>   Hm, amavis, did I post to the wrong list?  :-)  I don't use amavis, so
>  I'm don't really know what this does..  Does it mean you can tell Cyrus
>  to filter a message into a folder, by adding a extension to the RCPT TO
>  address?  Like <[EMAIL PROTECTED]>?
amavisd-new  => http://www.ijs.si/software/amavisd/
amavisd is a perl daemon that runs as a filter for an MTA. In my setup I
have postfix configured to use amavisd as a content filter and amavisd
then runs all the messages through spamassassin and through clamav (or
any number of about 20 antivirus programs it supports)

What are you currently using to have spamassassin tag messages?

>   I use the autocreate patch, so a folder named "Spam" is automatically
>  created when the user is.  But I didn't figure out how I could make the
>  suspected spam messages be automatically filed into that folder,
>  without patching Cyrus.  Could you elaborate on how your method works?

Cyrus currently does not support any global sieve filter rule sets.. So
the options you have it to have the filter add an "address extension" to
the e-mail.. ([EMAIL PROTECTED]). and make sure that the folder has
the anonymous p ACLs on it. the +folder is case sensitive.

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: System-wide sieve filter

[Edward Rudd]

On Fri, 2004-06-18 at 11:01, Eddy Beliveau wrote:
> Hi!  Luca,
> 
> I like your solution  ;-)
> 
> Do you know if it work with the following environment:
> cyrus 2.1.16, amavisd-new 20030616-p9 and spamassassin 2.60-1
> 
It will work in that environment perfectly. You just have to make sure
correct permissions are on the spam folder in the users account in cyrus
(the anonymous p) as messages are delivered as anonymous. Also you need
to make sure that your MTA doesn't strip the + address extension.
Postfix by default does this and you need to add "recipient_delimiter =
+" to the main.cf. I'm not sure about other MTAs

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Refuse over quota mail

[Edward Rudd]

The sendmail bounce is being generated because Cyrus-IMAPd refused the
message.  Are you wanting to have sendmail drop the message if the
mailbox is overquota? In most cases this is usually undesirable as there
would be no notification to the sender of the message why the mail
failed.. I'm not sure how/if you can get sendmail to check cyrus' quota,
but that is most likely the direction you are needing to go toward,
google should be of help now.

On Wed, 2004-06-16 at 22:39, Adi Linden wrote:
> How can I configure cyrus-imapd to refuse over quota mail instead of 
> having sendmail generate a bounce message. Is this possible?
> 
> Thanks,
> Adi
> 
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Cyrus IMAPd 2.2.5 Released

[Edward Rudd]

Andrew,
You're source RPM patches cyrus with the autocreate patch from
http://email.uoa.gr/projects/cyrus/autocreate/
You need to download the latest version for Cyrus IMAP 2.2.5 and update
the Spec file to use the new patch.

Regards,
Edward
On Sat, 2004-05-29 at 06:11, Andrew Koros wrote:
> Hello Simon,
> 
> I can't get your new cyrus-imap-2.2.5 to build on Fedora. I get this
> errror:
> 
> mailbox.c: In function `mailbox_updatequota':
> mailbox.c:2769: warning: passing arg 1 of `quota_commit' from
> incompatible pointer type
> gcc -c -I.. -I./../lib  -I./../sieve -I/usr/include/db4
> -I/usr/include/et -I/usr/kerberos/include -I/usr/include 
> -DHAVE_CONFIG_H  -O2 -g -march=i386 -mcpu=i686 -fPIC \
> mboxlist.c
> mboxlist.c:2581:21: missing terminating " character
> mboxlist.c: In function `mboxlist_changequota':
> mboxlist.c:2582: error: syntax error before "Command"
> mboxlist.c:2583:49: missing terminating " character
> mboxlist.c: In function `mboxlist_autosubscribe_sharedfolders':
> mboxlist.c:3192: warning: assignment makes integer from pointer without
> a cast
> make[1]: *** [mboxlist.o] Error 1
> make[1]: Leaving directory
> `/home/koros/rpm/BUILD/cyrus-imapd-2.2.5/imap'
> make: *** [all] Error 1
> error: Bad exit status from /var/tmp/rpm-tmp.88793 (%build)
>  
> 
> RPM build errors:
> Bad exit status from /var/tmp/rpm-tmp.88793 (%build)
> 
>  
> Regards,
> 
> Andrew Koros.
> 
> On Fri, 2004-05-28 at 22:18, Rob Siemborski wrote:
> > I'm pleased to announce the release of Cyrus IMAPd 2.2.5.  This release 
> > corrects a number of issues that were identified in the release of 2.2.4. 
> > It contains no new features.
> > 
> > A full list of changes is available in doc/changes.html in the 
> > distribution.
> > 
> > Download the release at:
> > ftp://ftp.andrew.cmu.edu/pub/cyrus/cyrus-imapd-2.2.5.tar.gz
> > or
> > http://ftp.andrew.cmu.edu/pub/cyrus/cyrus-imapd-2.2.5.tar.gz
> > 
> > I'd also like to specifically thank Simon Matter 
> > <[EMAIL PROTECTED]> for his help in debugging and testing this 
> > release.
> > 
> > -Rob
> > 
> > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> > Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
> > Research Systems Programmer * /usr/contributed Gatekeeper
> > 
> > 
> > ---
> > Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> > Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Does a Cyrus GUI exist?

[Edward Rudd]

There is my PHP class, which still needs to update for cyrus 2.2.3 which
does most of what you need. but it is only a backend to ease the process
of making a GUI frontend.
All cyradm does is send IMAP commands to the server. If you can find an
IMAP client that supports setting quotas and ACLs you can use it to
administer a cyrus server..

My PHP class is located here
http://www.outoforder.cc/projects/php/

On Wed, 2004-05-12 at 15:30, Eric B. wrote:
> Hi,
> 
> I searched the web to find an answer to this question, but the lack of hits
> makes me think that no one has yet bothered to develop a GUI for cyrus-imap.
> Is this true?  While working with cyradm does the job, I can only imagine
> how much easier it would be to administer if there was a nice GUI developed
> to allow you to manage the system.  Is asking about something like this a
> complete pipe dream?
> 
> I know there is web-cyradm which is a great interface for basic
> administration, but from what i can tell, I haven't been able to actually
> find any true cyradm GUI tool (that allows you to administer individual user
> mailboxes, assign group boxes, etc...).
> 
> 
> Thanks!
> 
> Eric
> 
> 
> 
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Cyrus RPM Build for RHEL3

[Edward Rudd]

I have successfully build and am running Simon's RPMS on WBEL (A RHEL3
clone).  And on an Athlon 650 w/o running into the annoying DB4 bug with
the NPTL issues..

On Fri, 2004-04-30 at 18:28, Simon Matter wrote:
> > Hi,
> >
> > I'm new to Cyrus, and too lazy to build cyrus from source.  Is there an
> > RPM
> > created for RHEL3 out on the net somewhere?  I haven't been able to find
> > it
> > anywhere.
> 
> I'm maintaining cyrus-imapd rpms which build on almost every RedHat
> release (at least from 6.2 to FC1). It's here
> http://www.invoca.ch/pub/packages/cyrus-imapd/
> 
> Simon
> 
> >
> > Thanks!
> >
> > Eric
> >
> >
> >
> > ---
> > Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> > Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
> >
> 
> 
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Writing directly to email

[Edward Rudd]

First of all. you should NOT be altering the mail store directly.. That
is cyrus' internal format and it should not be messed with.. If you need
to send logs to the cyrus mail store, use the MAILTO feature of
logrotate, or use something like logwatch, or write your own script to
mail the logs to the user.. That is the only SAFE and sane way to change
the messages in the mail store. Mail them! or use IMAP to add new
messages to a folder.. But do NOT directly alter the mail store.

On Thu, 2004-04-29 at 08:49, François LECOLIER wrote:
> Hi,
> I made a little test on my machine modifying a mail using vim, when I then
> read the message from my mail client it appears unchanged.
> 
> Then I used reconstruct on the mailbox and the text I added to the message
> appeared in my mail client.
> 
> regards
> françois
> 
> > Theoretically that would work, but unfortunately every client cdoes
> > things differently - especially caching.  Therefore any "nonstandard"
> > behavior is likely to cause different results for different clients.
> > 
> > -Brenden
> > 
> > On Wed, 2004-04-28 at 20:32, Eli Cantu wrote:
> > > Quoting [EMAIL PROTECTED]:
> > > 
> > > > I was wondering if it was at all possible to pipe text form something like
> > > > logging into an email file with out screwing things up for Cyrus.
> > > >
> > > > For example, say i have a crown tab that appends new mail.err data to the
> > > > file /var/spool/imap/m/user/me/1. with just simple stdout redirection >>.
> > > >
> > > 
> > > 
> > > I just tried it on a message in my Trash directory. I appended using >>
> > > 
> > > I did not see the additional text I appended when I checked the message. 
> I then
> > > opened up the file in vi. I can see the appended text, it just doesn't show up
> > > in the mail client (imp). So I added two '^M's at the bottom, just as there
> > > originally was. Still no luck.  I deleted the message, and it deleted
> normally.
> > > 
> > > h.
> > > 
> > > e
> > > 
> > > -
> > > This mail sent through IMP: http://horde.org/imp/
> > > 
> > > ---
> > > Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> > > Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> > > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
> > -- 
> > Brenden Conte
> > System Programmer, C&CT
> > Rensselaer Polytechnic Institute
> > (518)276-2540
> > 
> > ---
> > Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> > Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
> > 
> 
> 
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Upgrading to cyrus-imapd-2.2.3-8 using Simon's RPM's

[Edward Rudd]

the cvt_cyrusdb-all is being run at the startup of Simon's init.d script
to convert the databases.

Check the /var/lib/imap/rpm/cvt_cyrusdb_all.log to see the error.



On Sun, 2004-04-11 at 10:21, Douglas Koobs wrote:
> Edward Rudd said:
> > You could try rpm -e db4-4.1.25-4 db4-devel-4.1.25-4 --nodeps
> > then make sure that db4-4.0.14 and db4-devel-4.0.14 are installed from
> > RH9 and then rebuild cyrus-sasl, install it and then install cyrus-imapd
> > you may need to remove all of the cyrus-sasl cyrus-imapd with --nodeps
> > to make sure everything gets installed as the correct version after
> > rebuilding.
> >
> 
> Edward,
> 
> OK, I think I'm getting somewhere :) I followed the above instructions,
> everything went well with no erros at all. But when I try to start
> cyrus-imapd, I run into trouble:
> 
> [EMAIL PROTECTED] log]# service cyrus-imapd start
> Starting cyrus-imapd: preparing databases... error![FAILED]
> 
> I did a quick Google for that problem, but didn't find anything...
> imapd.log is empty. Where do I go next?
> 
> Doug
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Upgrading to cyrus-imapd-2.2.3-8 using Simon's RPM's

[Edward Rudd]

You could try rpm -e db4-4.1.25-4 db4-devel-4.1.25-4 --nodeps
then make sure that db4-4.0.14 and db4-devel-4.0.14 are installed from
RH9 and then rebuild cyrus-sasl, install it and then install cyrus-imapd
you may need to remove all of the cyrus-sasl cyrus-imapd with --nodeps
to make sure everything gets installed as the correct version after
rebuilding.

On Sun, 2004-04-11 at 09:04, Douglas Koobs wrote:
> > My first question is why you want to upgrade db4 just for cyrus-imapd? Did
> > you have problems with the 4.0.14 package?
> > If you really want another db4 than the one from RedHat 9, you could edit
> > the .spec file and change the _dbver macro to fit your needs. Maybe you
> > should also change the line with
> > '--with-bdb-incdir=%{_includedir}/%{_dbver}' but I don't know, you have to
> > find out yourself.
> >
> > Simon
> 
> I installed db4-4.1.25 to resolve dependiencies so I could install the
> cyrus packages. If I try to remove it, I get:
> 
> [EMAIL PROTECTED] SPECS]# rpm -e db4-4.1.25-4
> error: Failed dependencies:
> libdb-4.1.so is needed by (installed) cyrus-sasl-2.1.18-1
> libdb-4.1.so is needed by (installed) cyrus-imapd-2.2.3-8
> libdb-4.1.so is needed by (installed) cyrus-imapd-utils-2.2.3-8
> 
> I am not sure what to do with the lines in the spec file, I'm having
> trouble finding documentation on it. Is there any way to revert back to
> the cyrus-imapd-2.1 pacjkages? I'll try again after I have a better
> understanding of the spec file.
> 
> Thanks again!
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Upgrading to cyrus-imapd-2.2.3-8 using Simon's RPM's

[Edward Rudd]

And you can't remove the db4-4.0.14??

and to see where libdb.so is pointing use ls -l
  ls -l /usr/lib/libdb.so

that will show where the symbolic link is pointing..

do a find / -name "libdb.so" and find any other libdb.so.. but it could
be that configure wasn't able to link against your libdb-4.1.so file.


On Sat, 2004-04-10 at 21:34, Douglas Koobs wrote:
> Edward Rudd wrote:
> 
> >You need to remove the Devel package for the other DB..
> >the issue is cyrus links against libdb.so and the /usr/lib/libdb.so file
> >is pointing to the db4.0.14 file instead of the 4.1.25.
> >
> >So check the libdb.so and make sure it points to libdb-4.1.so. Then
> >cyrus will compile with the correct libs..
> >
> 
> Mmm, I don't have the devel package for the older DB package...
> 
> [EMAIL PROTECTED] lib]# rpm -qa |grep db4
> db4-utils-4.0.14-20
> db4-4.0.14-20
> db4-devel-4.1.25-4
> gpg-pubkey-db42a60e-37ea5438
> db4-4.1.25-4
> 
> the libdb.so file is binary, not text, how do I check which .so file it is
> pointing to? Also, shouldn't I point it to the newer db4, not the older? I
> am so confused... Thanks again for helping out!
> 
> Doug
> 
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Upgrading to cyrus-imapd-2.2.3-8 using Simon's RPM's

[Edward Rudd]

You need to remove the Devel package for the other DB..
the issue is cyrus links against libdb.so and the /usr/lib/libdb.so file
is pointing to the db4.0.14 file instead of the 4.1.25.

So check the libdb.so and make sure it points to libdb-4.1.so. Then
cyrus will compile with the correct libs..

On Sat, 2004-04-10 at 17:51, Doug Koobs wrote:
> Edward Rudd wrote:
> 
> >This is because cyrus imapd compiled against the 4.0.14 headers and
> >linked against the 4.1.25 library..
> >you need to install the devel package for your db2-4.1.25 package so
> >that the headers for that release will be found.
> >
> >  
> >
> 
> Ed,
> 
> I installed the db4-devel-4.1.25 rpm, and rebuilt the cyrus-sasl RPM's, 
> did a "rpm -Fvh" on all the sasl packages, then rebuilt all the 
> cyrus-imapd RPM, and did a "rpm -Fvh" on them also, restarted 
> cyrus-imapd, but still getting the same errors. I do still have the 
> older version db4 installed, when I try to uninstall it, there are other 
> packages depending on it. Is there some file I can edit to make sure I 
> am linking and compiling against the new db4 package?
> 
> thanks!
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Upgrading to cyrus-imapd-2.2.3-8 using Simon's RPM's

[Edward Rudd]

This is because cyrus imapd compiled against the 4.0.14 headers and
linked against the 4.1.25 library..
you need to install the devel package for your db2-4.1.25 package so
that the headers for that release will be found.

On Sat, 2004-04-10 at 16:41, Doug Koobs wrote:
> >You took the wrong cyrus-sasl package. Take this one
> >http://www.invoca.ch/pub/packages/cyrus-sasl/rh-9/cyrus-sasl-2.1.18-1.src.rpm
> >for redhat 9. Then, after rebuilding it, you have to upgrade the existing
> >oackages with 'rpm -Fvh cyrus-sasl*2.1.18-1.i386.rpm', which does
> >'freshen' the currently installed packages.
> >
> >The you can rebuild cyrus-imapd-2.2.3-8.src.rpm and 'rpm -Fvh' the
> >resulting binary rpms.
> >  
> >
> Simon,
> 
> Thanks for the quick reply! I was able to build and install the rpms 
> following these instructions. However, when I try restart cyrus-imapd, I 
> get the following in /var/maillog:
> 
> Apr 10 17:32:57 mail master[15405]: process started
> Apr 10 17:32:57 mail master[15406]: about to exec 
> /usr/lib/cyrus-imapd/ctl_cyrusdb
> Apr 10 17:32:57 mail ctl_cyrusdb[15406]: incorrect version of Berkeley 
> db: compiled against 4.0.14, linked against 4.1.25
> Apr 10 17:32:57 mail master[15405]: process 15406 exited, signaled to 
> death by 11
> Apr 10 17:32:57 mail master[15405]: ready for work
> Apr 10 17:32:57 mail master[15414]: about to exec 
> /usr/lib/cyrus-imapd/ctl_cyrusdb
> Apr 10 17:32:57 mail master[15415]: about to exec /usr/lib/cyrus-imapd/imapd
> Apr 10 17:32:57 mail ctl_cyrusdb[15414]: incorrect version of Berkeley 
> db: compiled against 4.0.14, linked against 4.1.25
> Apr 10 17:32:57 mail master[15416]: about to exec /usr/lib/cyrus-imapd/imapd
> 
> and it goes on and on...
> 
> I installed the db2-4.1.25 rpm, and rebuilt and re-installed all the 
> sasl and imapd rpm's using the -Fvh options, but still getting the same 
> errors. What am I missing?
> 
> Thanks,
> 
> Doug
> 
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://www.outoforder.cc/

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Compiling cyrus imapd w/ new DB version that the system core.

[Edward Rudd]

I'm running White box Linux which has DB 4.1.25 as the Core DB (db4,
db4-devel RPM packages)

I have compiled a db42 package (db 4.2.52 w/ the 2 patches) on the
system and am wanting to use that instead for all my DB needs..
(apache,subversion,cyrus-sasl,cyrus-imapd,openldap, etc..) 

Am I asking for linking *ell and trouble by doing this? 


-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: lower casing in 2.2.3

[Edward Rudd]

Ooops, sorry about that, I misread your original e-mail. 
You should definitely add your resolution (documentation about the
username_tolower option) to the cyrus wiki so that others may benefit.
That is why the lmtp_downcase_rcpt documentation is in there, because I
was hunting around for an answer to that problem and added the
resolution to the wiki when i found it.

On Wed, 2004-03-31 at 01:48, Philip Chambers wrote:
> On Tue, 30 Mar 2004 13:29:59 -0600 Edward Rudd <[EMAIL PROTECTED]> wrote:
> 
> > http://cyruswiki.andrew.cmu.edu/
> > 
> > Then click on Cyrus FAQ under Common operational questions.
> > CyrusLMTpCaseSensitivity..
> > 
> > Basically put this in your imapd.conf
> > 
> > lmtp_downcase_rcpt: true
> > 
> 
> Two points (if my reading of the documents is correct):
> 
> First, my problem is with authentication in IMAPD, not with downcasing of recipient 
> addresses in LMTP.
> 
> Second, this option does exactly the opposite of what my problem is.  It forces 
> downcasing when I want to prevent it.
> 
> Phil.
> -------
> Phil Chambers ([EMAIL PROTECTED])
> University of Exeter
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: lower casing in 2.2.3

[Edward Rudd]

http://cyruswiki.andrew.cmu.edu/

Then click on Cyrus FAQ under Common operational questions.
CyrusLMTpCaseSensitivity..

Basically put this in your imapd.conf

lmtp_downcase_rcpt: true

On Tue, 2004-03-30 at 09:29, Philip Chambers wrote:
> I have just started testing version 2.2.3 as an upgrade from 2.1.13 on Solaris 8.
> 
> I still have some legacy usernames which have mixed case, but that was Ok with 
> 2.1.13.  However, 2.2.3 appears to be downcasing the username when calling saslauthd 
> and the plaintext password check fails.  IMAPD logs the username with uppercase in 
> the badlogin: line in syslog, but saslauthd is logging it all lower case in the 
> corresponding syslog message.
> 
> I have not changed saslauthd, so the problem must be in imapd.
> 
> I have had a quick look at the code but cannot see where this is happening.  Any 
> suggestions?
> 
> Phil.
> ---
> Phil Chambers ([EMAIL PROTECTED])
> University of Exeter
> 
> ---
> Home Page: http://asg.web.cmu.edu/cyrus
> Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: converting sppol and config dirs from 2.1.x to 2.2.x (WAS: cyrus 2.2.3 & virtual)

[Edward Rudd]

if you set "virtdomains: on", then when a user logs in w/o the @FQDN
Cyrus automatically adds it on before authenticating.. if you set
"virtdomains: userid" then Cyrus will pass exactly the username the user
sent in to SASL for authentication.

On Wed, 2004-03-24 at 16:27, Paul Dorneanu wrote:
> yes, I have added it to the database...
> maybe there is something with the sasl which is stripping off the domain 
> after @... possible? I don't remember exactly...
> but right now I do see in logs [EMAIL PROTECTED]
> 
> I will test first on a non production enviroment...
> 
> Edward Rudd wrote:
> 
> >Probably has to do w/ the SQL query and database.. did you add
> >[EMAIL PROTECTED] into your database? You may want to search through the
> >archives about the SQL sasl plugin in both this list and the cyrus-sasl
> >list as I know it has been brought up since 2.2.3 has been released.
> >
> >And I was only mentioning perdition for temporary use during the
> >transition, though you lose CRAM-MD5, and DIGEST-MD5 auth methods with
> >perdition.
> >  
> >
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: converting sppol and config dirs from 2.1.x to 2.2.x (WAS: cyrus 2.2.3 & virtual)

[Edward Rudd]

Probably has to do w/ the SQL query and database.. did you add
[EMAIL PROTECTED] into your database? You may want to search through the
archives about the SQL sasl plugin in both this list and the cyrus-sasl
list as I know it has been brought up since 2.2.3 has been released.

And I was only mentioning perdition for temporary use during the
transition, though you lose CRAM-MD5, and DIGEST-MD5 auth methods with
perdition.
On Wed, 2004-03-24 at 14:32, Paul Dorneanu wrote:
> No, I don't use perdition and I would not like to use it.
> 
> so, having virtdomains: userid I will be able to login with 
> use_domaintld (which are mapped to the default domain) without the need 
> to manually convert the accounts.
> also i will be able to convert account to [EMAIL PROTECTED]
> 
> still, there remains one unanswered question: when I created a user in 
> the new format: [EMAIL PROTECTED] with the virtdomains: on I was not able 
> to login. do you know why?
> 
> Edward Rudd wrote:
> 
> >If you use perdition, then yes..
> >http://www.vergenet.net/linux/perdition/
> >I was using perdition for a while when I had my usernames in cyrus like
> >user_domain_tld, and wanted the users to login with [EMAIL PROTECTED], but
> >they could login with user_domain_tld as well..
> >
> >Perdition acts as a proxy in front of cyrus and maps the usernames
> >according to Databases lookups(db, flat file, mysql, postgresql, ldap)
> >or regular expressions.
> >This is what you will want to setup..
> >and if you setup virtdomains: userid (instead of virtdomains: on), then
> >a login of user_domaintld will be mapped to the default domain (w/o the
> >defdom.com! in the mailbox db) so your current userbase will be able to
> >login while converted users will able to access the new system..
> >
> >  
> >
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: converting sppol and config dirs from 2.1.x to 2.2.x (WAS: cyrus 2.2.3 & virtual)

[Edward Rudd]

If you use perdition, then yes..
http://www.vergenet.net/linux/perdition/
I was using perdition for a while when I had my usernames in cyrus like
user_domain_tld, and wanted the users to login with [EMAIL PROTECTED], but
they could login with user_domain_tld as well..

Perdition acts as a proxy in front of cyrus and maps the usernames
according to Databases lookups(db, flat file, mysql, postgresql, ldap)
or regular expressions.
This is what you will want to setup..
and if you setup virtdomains: userid (instead of virtdomains: on), then
a login of user_domaintld will be mapped to the default domain (w/o the
defdom.com! in the mailbox db) so your current userbase will be able to
login while converted users will able to access the new system..

On Wed, 2004-03-24 at 04:46, Paul Dorneanu wrote:
> hmmm
> so I understand that either I use [EMAIL PROTECTED] (with virtdomains 
> enabled) or use the my old naming convention and have the virtdomains 
> set to off;
> 
> I would like to still use the old naming (username_domaincom) convention 
> I had while migrating slowly to the new convention.
> I don't think I afford to convert all the account to the new virtual 
> domain style ([EMAIL PROTECTED]).
> 
> is there any way to have my old accounts and add new accounts with the 
> new account ([EMAIL PROTECTED]) and convert slowly old accounts?
> 
> is it wise to have hasimapspool on?
> 
> Edward Rudd wrote:
> 
> >First shutdown cyrus-imapd.
> >
> >The current directory structure for user jon_doecom is like this (with
> >hashimapspool: off)
> >  
> >
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re:converting sppol and config dirs from 2.1.x to 2.2.x (WAS: cyrus 2.2.3 & virtual)

[Edward Rudd]

First shutdown cyrus-imapd.

The current directory structure for user jon_doecom is like this (with
hashimapspool: off)

seendb: /var/lib/imap/user/j/jon_doecom.seen
subdb: /var/lib/imap/user/j/jon_doecom.sub
spool: /var/spool/imap/user/jon_doecom/
quota: /var/lib/imap/quota/j/user.jon_doecom
sieve: /var/lib/imap/sieve/j/jon_doecom/

For the virtual domain support to find everything.. The directory
structures need to be like this.. (mapping jon_doecom -> [EMAIL PROTECTED])

seendb: /var/lib/imap/domain/d/doe.com/user/j/jon.seen
subdb: /var/lib/imap/domain/d/doe.com/user/j/jon.sub
spool: /var/spool/imap/domain/doe.com/user/jon/
quota: /var/lib/imap/domain/d/doe.com/quota/j/user.jon
sieve: /var/lib/imap/sieve/domain/d/doe.com/j/jon/

Now a few files need to have their data updated as well.
the mailboxes.db needs to be dumped by using the ctl_mboxlist 9which
needs to be run as the cyrus user).. Now i'm assuming Simon Matter's RPM
here.. you may have to find the ctl_mboxlist program on  your system..

su - cyrus
/usr/lib/cyrus-imapd/ctl_mboxlist -d > mailboxes.txt

Then you need to edit the mailboxes.txt file so that it goes from this

user.jon_doecom default jon_doecom  lrswipcda   
user.jon_doecom.somefolder  default jon_doecom  lrswipcda   

To this

doe.com!user.jondefault [EMAIL PROTECTED]   lrswipcda   
doe.com!user.jon.somefolder default [EMAIL PROTECTED]   lrswipcda   

Note that there are tabs between everything not spaces. and a trailing
tab at the end of the line, and an exlamation mark between the domain
and the user.

Next you will have to update the jon_doecom.sub file (renaming to
jon.sub in the new directory) so that it goes from this

user.jon_doecom
user.jon_doecom.somefolder

To this

doe.com!user.jon
doe.com!user.jon.somefolder

Once all that is done for all the users.. set the virtdomains: userid in
imapd.conf and start up cyrus-imapd.

You will probably have to fix up your SQL database so that the full
username ([EMAIL PROTECTED]) is stored in the username field.. OR split it up
into username and domain.. then you'll have to change your query to use
%p for the part before the @ and %r for the part after the @.. Make sure
you are using the 2.1.17 release of cyrus-sasl as well.

If you follow all of the instructions above,every should go smoothly,
with a few exceptions.. domains that begin with a number do not end up
in a numbered hash directory.. ie..
3somesite.tld does not go in a 3/3somesite.tld.. it actually goes into
the q directory q/3somesite.tld.. I haven't investigated that much
further to figure out where all of the numbers go..

If you adept at perl programming you may download my partially started
conversion script here
http://svn.outoforder.cc/svn/mailserver/trunk/cyrus-spool.pl
Note it currently doesn't actually make any changes.. it only shows what
would be done. It still has a bit of work to do before it's finished.

On Tue, 2004-03-23 at 01:36, Paul Dorneanu wrote:
> Hello Edward,
> 
> finally someone answered to my problem.
> 
> Here's what I have:
> configdirectory: /var/lib/imap
> partition-default: /var/spool/imap
> sievedir: /var/lib/imap/sieve
> sendmail: /usr/sbin/sendmail
> lmtpsocket: /var/spool/postfix/lmtp
> 
> admins: cyrus
> allowanonymouslogin: no
> sieveuserhomedir: no
> hashimapspool: no
> allowplaintext: yes
> servername: ns1.holman.net
> 
> sasl_pwcheck_method: auxprop
> sasl_sql_engine: mysql
> sasl_sql_hostnames: 127.0.0.1
> sasl_sql_user: user
> sasl_sql_passwd:  ***
> sasl_sql_database: mail_db
> sasl_sql_select: select password from users where username='%u'
> sasl_sql_verbose: yes
> sasl_verbose: yes
> sasl_mysql_verbose: yes
> sasl_mech_list: PLAIN
> 
> tls_cert_file: /usr/share/ssl/certs/cyrus-imapd.pem
> tls_key_file: /usr/share/ssl/certs/cyrus-imapd.pem
> tls_ca_file: /usr/share/ssl/certs/ca-bundle.crt
> 
> deleteright: c
> poptimeout: 3
> verbose: yes
> 
> ---
> I use something like user_domaintld and I want to be able to have 
> [EMAIL PROTECTED]
> 
> An update script will be great. Although, I did not found what there is 
> to convert.
> 
> Thanks for the help.
> 
> 
> Edward Rudd wrote:
> 
> >Oh yeah. this is a fun problem to solve..
> >I went through this on my systems a few weeks ago..
> >you need to move all your mailboxes around, quota files, subscription
> >files, and sieve scripts, update the mailboxes.db, and update each users
> >.sub (subscription) file. And of course this all depends on how you have
> >your mailboxes currently setup.
> >  
> >
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: cyrus 2.2.3 & virtual

[Edward Rudd]

Oh yeah. this is a fun problem to solve..
I went through this on my systems a few weeks ago..
you need to move all your mailboxes around, quota files, subscription
files, and sieve scripts, update the mailboxes.db, and update each users
.sub (subscription) file. And of course this all depends on how you have
your mailboxes currently setup.

I have a perl script that is partially written to accomplish this task..
But as I only had less than a dozen accounts at the time I just did it
manually..

So, first give me some more information on how you system is setup..
your current working imapd.conf file
what usernames you use currently (just plain user, user_domain_tld, or
[EMAIL PROTECTED])

And I'm assuming you are wanting to have it so the user logs in with
their full e-mail address. ([EMAIL PROTECTED]).

Replay with some more info and i shall see what I can do for you in
getting things converted..

On Fri, 2004-03-19 at 08:51, Paul Dorneanu wrote:
> Hello all.
> 
> I still have some unanswered question and I would like a solution.
> I have recently upgraded to version 2.2.3 from 2.1.12  (I think) and if 
> I do activate vritual domains in imapd.conf my old accounts are unusable 
> (I can login, but can not read emails). Some error about maildrop not 
> being located.
> 
> More than that, if I add a new user using cyradm using cm 
> [EMAIL PROTECTED] and set up a password for it (in an sql table using 
> sasl 2)  I can NOT login using [EMAIL PROTECTED]
> 
> I have try many different configuration and what I could find on 
> wikipages and on the list archives but no problem encountered so far as 
> mine.
> 
> I will be happy with any solution or workaround so I can use the 
> virtdomains feature of the cyrus-imapd for which I've been waiting 
> almost 1 year.
> 
> Thanks.
> 
> --
> Paul Dorneanu
> ---
> Home Page: http://asg.web.cmu.edu/cyrus
> Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Webmail?

[Edward Rudd]

I'm running horde 2.2.4 and IMP 3.2.2, and RELENG_1 release of Ingo (for
sieve support).

On Fri, 2004-03-12 at 19:11, Kendrick Vargas wrote:
> Etienne Goyer wrote:
> 
> > I run Horde/IMP with Cyrus-imapd successfully, but I would not dare call
> > it "fairly simple".  Config is actually quite complicated, but it
> > support most of Cyrus features (Sieve, ACL, quota, etc).
> > 
> > Feel free to ask any question you might have about my setup.
> 
> Ok... what version of Horde/IMP are you using that has Sieve support? :-) 
> I've been meaning to get Horde/IMP CVS up and running just for that feature. 
> Well, maybe a couple more, but the important one is Sieve!
>   -peace
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: creating mailboxes

[Edward Rudd]

try running this
telnet localhost imap
123 logout

and see what shows up from the IMAP server.. That will tell you if you
are connecting to Cyrus or another mail service on the computer..
It should show up something like this..
* OK myhost.mydomain.tld Cyrus IMAP4 v2.2.3 server ready

As it looks like you are not actually connecting to Cyrus.. that would
be the reason for mboxish files in your home directory. 

On Tue, 2004-03-09 at 23:26, Ian Beyer wrote:
> Wil Cooley wrote:
> > On Tue, 2004-03-09 at 17:36, Ian Beyer wrote:
> > 
> >>|> |  From the installation docs: "everyday users should not be
> >>|> | administrators".  Do not create an INBOX for an admin (user.foo).
> >>|> |
> >>|>
> >>|> Since i'm using shadow as my SASL auth mechanism, how do I do this
> >>|> without creating a user?
> >>|
> >>|
> >>| Having a user/password defined is different from creating an INBOX for
> >>| that user.  You can put 'foo' and foo's password in /etc/shadow, just
> >>| don't create 'user.foo' via cyradm if you define 'foo' as an admin in
> >>| imapd.conf.
> >>|
> >>|
> >>So how do I go about creating the INBOX for them? do I need to put it in
> >>/etc/skel for new users and manually create a directory for existing
> >>users? THe documentation would lead me to believe that cm inside cyradm
> >>is the way to do it, but that's not jiving with reality.
> > 
> > 
> > You don't.  The Cyrus admin user(s) should be a special, separate
> > account that does not receive mail directly.  I think there are some
> > fundamental issues you're misunderstanding.  Most people use the 'cyrus'
> > user, but that user usually fills two roles:
> > 1. Provide a non-priviledged "system" account to run the system under,
> > much like Postfix running under 'postfix' and MySQL running under
> > 'mysql'.
> > 2. Act as a priviledged user for managing mailboxes.
> 
> I understand this. I need to create INBOXes for my *regular users*, not 
> for the mailadm account. cyradm isn't doing that.
> 
> > Generally, there can only be one of #1, but several of #2, although
> > usually there's only one and it's the same for both users.  What that
> > account should /not/ be is a regular user account--one that is expected
> > to actually have a mailbox.
> 
> Right, cyrus runs as user cyrus, mailadm is the mail administrator account.
> 
> How do I get a login to cyradm without having a user account? I'm very 
> confused about this. It's got to be an account, but it can't be an 
> account. See why I'm confused?
> 
> > Why you saw directories in the administrative user's home directory is
> > rather mysterious.  Do you have '/home/mailadm' set as
> > 'partition-default' in imapd.conf?  BTW, the directories are not
> > actually Maildir, although they are similar in some ways (but totally
> > incompatible).
> 
> imapd.conf is pointing to /var/imap for partition-default. My point 
> about the "directories" was that they're not in fact directory entries, 
> but regular files - presumably something mboxish.
> 
> 
> ---
> Home Page: http://asg.web.cmu.edu/cyrus
> Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: global sieve script?

[Edward Rudd]

nope.. It's not in there.
Not sure when it will be either, as it's a little more involved than
just adding it in to cyrus imapd.. one has to figure out how a global
script will interact with a users local script, including having one
override another. Which AFAIK is not documented in the RFC..

On Thu, 2004-03-04 at 17:22, Joe Hrbek wrote:
> This was posted in reference to a global sieve script:
> 
> http://www.irbs.net/internet/info-cyrus/0112/0133.html
> 
> It dates back to 2001.  Is this capability now present in the latest cyrus
> package?  I use simon matter's RPM.
> 
> If so, this would be very cool.
> 
> -j
> 
> ---
> Home Page: http://asg.web.cmu.edu/cyrus
> Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Mixed case incoming e-mail addresses being bounced.

[Edward Rudd]

I have my mail server setup using postfix 2.0.16 and cyrus imapd 2.2.3
using the virtdomains: userid in cyrus and the virtual_transport in
postfix using virtual_mailbox_maps and virtual_mailbox_domains for
allowed mail account lookups. One of the accounts on the system has been
having e-mail delivered to it bounce, with an "no mailbox found" error
for cyrus' lmtp, but only with some e-mails.. and from the logs it seems
it is the e-mails that have mixed case.. ie. [EMAIL PROTECTED], get
bounced but not the *normal* [EMAIL PROTECTED] case..

Is there anyway I can have either postfix or cyrus lower the case on the
e-mail address? (but not the + recipient_delimiter information)

Here are my logs..

Feb 29 10:03:45 ns3 lmtpunix[8837]: append_check() of
'mydomain.com!user.User' failed (Mailbox does not exist)
Feb 29 10:03:45 ns3 lmtpunix[8846]: executed
Feb 29 10:03:45 ns3 postfix/lmtp[8845]: 064161A4003:
to=<[EMAIL PROTECTED]>,
relay=/var/lib/imap/socket/lmtp[/var/lib/imap/socket/lmtp], delay=1,
status=bounced (host
/var/lib/imap/socket/lmtp[/var/lib/imap/socket/lmtp] said: 550-Mailbox
unknown.  Either there is no mailbox associated with this 550-name or
you do not have authorization to see it. 550 5.1.1 User unknown (in
reply to RCPT TO command))
Mar  2 20:52:40 ns3 lmtpunix[12474]: accepted connection
Mar  2 20:52:40 ns3 lmtpunix[12474]: lmtp connection preauth'd as
postman
Mar  2 20:52:40 ns3 lmtpunix[12474]: append_check() of
'MyDomain.com!user.User' failed (Mailbox does not exist)
Mar  2 20:52:40 ns3 master[12483]: about to exec
/usr/lib/cyrus-imapd/lmtpd
Mar  2 20:52:40 ns3 lmtpunix[12483]: executed
Mar  2 20:52:40 ns3 postfix/lmtp[12482]: B24DE1A4003:
to=<[EMAIL PROTECTED]>,
relay=/var/lib/imap/socket/lmtp[/var/lib/imap/socket/lmtp], delay=0,
status=bounced (host
/var/lib/imap/socket/lmtp[/var/lib/imap/socket/lmtp] said: 550-Mailbox
unknown.  Either there is no mailbox associated with this 550-name or
you do not have authorization to see it. 550 5.1.1 User unknown (in
reply to RCPT TO command))

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Cyrus imap 2.2.3 and virtual domain sieve folders.

[Edward Rudd]

I remember reading about that.. but the issue I was commenting about was
the fact that the sieve scripts were in a directory I did not expect..
and seemed *out of norm* with everything else..

On Mon, 2004-03-01 at 22:09, Igor Brezac wrote:
> On Mon, 1 Mar 2004, Edward Rudd wrote:
> 
> > I am curious as to whether this is a bug or by design..
> > I just upgraded my main server to cyrus imapd 2.2.3 from 2.1.15, and
> > went through the nice fun of moving all the accounts around in the spool
> > from a full username of "[EMAIL PROTECTED]" to the virtual domain system
> > in 2.2.3... And though I had everything all good and finished until I
> > noted that sieve scripts weren't running.. and found this out..
> >
> 
> Check doc/install-upgrade.html.  sieve scripts are now compiled to
> bytecode, so you need to 'recompile' all your scripts.  See
> tools/masssievec
> 
> > (I have full hash off and hash spool off)
> >
> > File locations for [EMAIL PROTECTED]
> > spool - /var/spool/imap/domain/domain.tld/user/joe
> > seendb - /var/lib/imap/domain/d/domain.tld/user/j/joe.seen
> > subscribe - /var/lib/imap/domain/d/domain.tld/user/j/joe.sub
> > quota - /var/lib/imap/domain/d/domain.tld/quota/j/user.joe
> > sieve - /var/lib/imap/sieve/domain/d/domain.tld/j/joe/default.script
> >
> > Why is the sieve script directory not following the same setup as the
> > quota and seen/sub directories??
> >
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Cyrus imap 2.2.3 and virtual domain sieve folders.

[Edward Rudd]

I am curious as to whether this is a bug or by design..
I just upgraded my main server to cyrus imapd 2.2.3 from 2.1.15, and
went through the nice fun of moving all the accounts around in the spool
from a full username of "[EMAIL PROTECTED]" to the virtual domain system
in 2.2.3... And though I had everything all good and finished until I
noted that sieve scripts weren't running.. and found this out.. 

(I have full hash off and hash spool off)

File locations for [EMAIL PROTECTED]
spool - /var/spool/imap/domain/domain.tld/user/joe
seendb - /var/lib/imap/domain/d/domain.tld/user/j/joe.seen
subscribe - /var/lib/imap/domain/d/domain.tld/user/j/joe.sub
quota - /var/lib/imap/domain/d/domain.tld/quota/j/user.joe
sieve - /var/lib/imap/sieve/domain/d/domain.tld/j/joe/default.script

Why is the sieve script directory not following the same setup as the
quota and seen/sub directories??  

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: mailboxes.db?

[Edward Rudd]

mailboxes.db is the list of all existing mailboxes and folders in
cyrus..  it is initially empty and as you create accounts and folders on
the mails server it is populated with the names of the folders and the
permissions assigned to them..  you can use the ctl_mboxlist program
included with cyrus to dump and undump the contents of this database..
However, if you mailboxes.db is completely corrupt then you will need to
recreate it.. You should consider implementing a backup procedure for
this file..
I've attached a script I wrote a while ago when I upgraded my cyrus imap
from 1.6 to 2.x and ended up having my mailboxes.db deleted
accidentally. First edit the file and change the path to the imap spool
user/ directory. Then run the script like this.

./conv.sh > mailboxes.txt
you can then adjust the contents to your liking.
The format of the *dump* file is 
foldername partition username permissionlist username permissionlist ...
There can be as many username permissionlist combos as needed.
Note that there are NO SPACES in the file.. they are all TABS.
My little bash script adds in all of the folders in the user directory
with ownership on the folder by the mailbox owner and the cyrus
administrator.
To actually import this into cyrus you need to run this command
su - cyrus
/usr/lib/cyrus-imapd/ctl_mboxlist -u < mailboxes.txt

The program needs to run as the user cyrus.. And you may need to locate
where the ctl_mboxlist binary is on your system as it may not be in that
location.

I am currently in the middle of writing a perl version of this script,
except with many more features (ie. converting to the virtual domain
system in 2.2.x) and auto-detection of the cyrus installation.

Hope this helps some..

On Wed, 2004-02-25 at 23:08, Ian Beyer wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> 
> I must have royally screwed up something with the installation. SASL
> fails to initialize, and I also see this in the logs:
> 
> Feb 25 22:46:05 schizo imap[16198]: [ID 639319 local6.error] skiplist:
> invalid magic header: /var/imap/mailboxes.db
> Feb 25 22:46:05 schizo imap[16198]: [ID 729713 local6.error] DBERROR:
> opening /var/imap/mailboxes.db: cyrusdb error
> Feb 25 22:46:05 schizo imap[16198]: [ID 637875 local6.error] Fatal
> error: can't read mailboxes file
> Feb 25 22:46:05 schizo master[14053]: [ID 310780 local6.debug] process
> 16198 exited, status 75
> 
> Am I correct in assuming that these two are related?
> 
> I can't seem to find any documentation on how to create mailboxes.db. Is
> it supposed to be created initially?
> 
> in /var/imap is:
> 
> - -rw---   1 cyrusmail   16384 Feb 25 20:27 mailboxes.db
> 
> 
> Additionally, cyradm pukes on me:
> 
> Can't locate Cyrus/IMAP/Shell.pm in @INC (@INC contains:
> /usr/local/lib/perl5/5.8.0/sun4-solaris /usr/local/lib/perl5/5.8.0
> /usr/local/lib/perl5/site_perl/5.8.0/sun4-solaris
> /usr/local/lib/perl5/site_perl/5.8.0 /usr/local/lib/perl5/site_perl .).
> BEGIN failed--compilation aborted.
> 
> and I can't install Cyrus::IMAP::Shell via CPAN.pm.
> 
> Where in the heck did I go wrong?
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.2.1 (MingW32)
> 
> iD8DBQFAPX9WRGycTB/It0gRAuwoAKD7PuHxqkWKJehJ3uWg+9kLz2JJfgCeJrcs
> 55xvCjqgUBVMBNg+L2tcZ4U=
> =kv7v
> -END PGP SIGNATURE-
> 
> ---
> Home Page: http://asg.web.cmu.edu/cyrus
> Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/
#!/bin/sh

TAB=`echo -e \\\t`
cd /var/spool/imap/user
find . -type d  | grep ./ |
sed -e "s/\.\///" |
sed -e "s/\//\./g" |
sed -e "s/\([a-z]*\)\(.*\)/user\.\1\2${TAB}default${TAB}\1${TAB}lrswipcda${TAB}cyrus${TAB}lrswipcda${TAB}/"
cd -

Re: cyrus-imapd 2.2.3 and saslauthd/ldap domainless logins.

[Edward Rudd]

MY cyrus admin user IS in the ldap.  The issue was with how cyrus was
auto appending the machine's domain to the username if it did not
contain an @ which i do not want it to do.. So the virtdomains: userid
is the solution for my setup..


On Tue, 2004-02-24 at 16:56, TN wrote:
> Another option which I use is I just add the cyrus admin as a regular 
> user in the ldap db, so it just gets looked up as usual.
> 
> This might have the advantage of working for people who want ip-bound 
> virtual domains (ie. virtualdomains: yes) instead of userid.
> 
> cheers
> -Trevor.
> 
> 
> 
> Edward Rudd wrote:
> 
> >Aha, Thanks very much that did it..
> >Setting virtdomains to 'userid' instead of 'true' fixed the issue.. 
> >On Tue, 2004-02-24 at 15:54, Igor Brezac wrote:
> >  
> >
> >>On Tue, 24 Feb 2004, Edward Rudd wrote:
> >>
> >>
> >>
> >>>I have a cyrus-imapd 2.2.3 installation and am using saslauthd from my
> >>>cyrus-sasl 2.1.15 installation, normal authentication to my virtual
> >>>domain users works fine.. ([EMAIL PROTECTED], [EMAIL PROTECTED],
> >>>etc...)
> >>>However I can not login as the administrator (cyrus) which has no domain
> >>>component to the username.. Logging in fails every time and the auth.log
> >>>shows that saslauthd is being sent [EMAIL PROTECTED] instead of just
> >>>cyrus.. And creating an entry in my ldap to handle [EMAIL PROTECTED]
> >>>only has cyrus log the user into a mailbox in the virtual domain system
> >>>(ie not a super user)..
> >>>Is there a way to get cyrus imapd to NOT add on the domain to a user w/o
> >>>it?
> >>>Otherwise I can not administer my domains at all..
> >>>and running the testsaslauthd program tests perfectly fine.. so it is
> >>>cyrus-imapd sending the data
> >>>  
> >>>
> >>Did you specify defaultdomain param?  You will need to use
> >>[EMAIL PROTECTED] userid when you want to administer your cyrus
> >>installation.
> >>
> >>Alternatively, you can use 'virtdomains: userid'.  Cyrus will not attempt
> >>to resolve unqualified userids and it will assume that unqualified userids
> >>belong to 'defaultdomain' if specified.
> >>
> >>
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: cyrus-imapd 2.2.3 and saslauthd/ldap domainless logins.

[Edward Rudd]

Aha, Thanks very much that did it..
Setting virtdomains to 'userid' instead of 'true' fixed the issue.. 
On Tue, 2004-02-24 at 15:54, Igor Brezac wrote:
> On Tue, 24 Feb 2004, Edward Rudd wrote:
> 
> > I have a cyrus-imapd 2.2.3 installation and am using saslauthd from my
> > cyrus-sasl 2.1.15 installation, normal authentication to my virtual
> > domain users works fine.. ([EMAIL PROTECTED], [EMAIL PROTECTED],
> > etc...)
> > However I can not login as the administrator (cyrus) which has no domain
> > component to the username.. Logging in fails every time and the auth.log
> > shows that saslauthd is being sent [EMAIL PROTECTED] instead of just
> > cyrus.. And creating an entry in my ldap to handle [EMAIL PROTECTED]
> > only has cyrus log the user into a mailbox in the virtual domain system
> > (ie not a super user)..
> > Is there a way to get cyrus imapd to NOT add on the domain to a user w/o
> > it?
> > Otherwise I can not administer my domains at all..
> > and running the testsaslauthd program tests perfectly fine.. so it is
> > cyrus-imapd sending the data
> 
> Did you specify defaultdomain param?  You will need to use
> [EMAIL PROTECTED] userid when you want to administer your cyrus
> installation.
> 
> Alternatively, you can use 'virtdomains: userid'.  Cyrus will not attempt
> to resolve unqualified userids and it will assume that unqualified userids
> belong to 'defaultdomain' if specified.
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

cyrus-imapd 2.2.3 and saslauthd/ldap domainless logins.

[Edward Rudd]

I have a cyrus-imapd 2.2.3 installation and am using saslauthd from my
cyrus-sasl 2.1.15 installation, normal authentication to my virtual
domain users works fine.. ([EMAIL PROTECTED], [EMAIL PROTECTED],
etc...)
However I can not login as the administrator (cyrus) which has no domain
component to the username.. Logging in fails every time and the auth.log
shows that saslauthd is being sent [EMAIL PROTECTED] instead of just
cyrus.. And creating an entry in my ldap to handle [EMAIL PROTECTED]
only has cyrus log the user into a mailbox in the virtual domain system
(ie not a super user)..
Is there a way to get cyrus imapd to NOT add on the domain to a user w/o
it?
Otherwise I can not administer my domains at all..
and running the testsaslauthd program tests perfectly fine.. so it is
cyrus-imapd sending the data

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: cyrus-imapd-2.2.3-4 auxprop sql whats missing?

[Edward Rudd]

In your imapd.conf
pwcheck_method: auxprop is supposed to be sasl_pwcheck_method: auxprop..
In Cyrus' imapd.conf file you need to prefix ALL sasl parameters with
sasl. You don't do this with the separate config files in /usr/lib/sasl2
(ie for smtpd).

On Fri, 2004-02-20 at 04:36, Khalid Mehmood wrote:
> >From the last one week I have been trying setup this
> thing, but nothing seems to be working properly. This
> is what I'm trying to setup:
> 
> RH 9
> cyrus-imapd-2.2.3-4 rpm
> cyrus-sasl-2.1.17-2 rpm
> postfix-2.0.18-1.mysql.rh9 rpm
> web-cyradm
> mysql-3.23.58-1.9 rpm
> 
> ##
> imapd.conf
> #
> postmaster: postmaster
> configdirectory: /var/lib/imap
> partition-default: /var/spool/imap
> admins: cyrus
> virtdomains: yes
> defaultdomain: xxx.com
> allowanonymouslogin: no
> autocreateinboxfolders: Sent | Drafts | Templates |
> Trash
> createonlogin: yes
> allowplaintext: yes
> servername: xxx.xxx.com
> autocreatequota: 1
> reject8bit: no
> quotawarn: 90
> timeout: 30
> poptimeout: 10
> dracinterval: 0
> drachost: localhost
> sievedir: /var/lib/imap/sieve
> sendmail: /usr/sbin/sendmail
> hashimapspool: true
> #loginrealms: xxx.com.xx
> sasl_pwcheck_method: auxprop
> sasl_mech_list: login plain
> sasl_sql_engine: mysql
> sasl_auxprop_plugin: sql sasldb
> sasl_db_path: /etc/sasldb2
> sasl_sql_user: mail
> sasl_sql_passwd: xxx
> sasl_sql_hostnames: localhost:3306
> sasl_sql_database: mail
> sasl_sql_select: SELECT password FROM accountuser
> WHERE username = '%u'
> sasl_sql_verbose: yes
> sieve_maxscriptsize: 32
> sieve_maxscripts: 5
> #unixhierarchysep: yes
> tls_cert_file: /usr/share/ssl/certs/cyrus-imapd.pem
> tls_key_file: /usr/share/ssl/certs/cyrus-imapd.pem
> #
> smtpd.conf
> #
> pwcheck_method: auxprop
> sasl_mech_list: login plain
> sasl_sql_engine: mysql
> sasl_auxprop_plugin: sql sasldb
> sasl_db_path: /etc/sasldb2
> sasl_sql_user: mail
> sasl_sql_passwd: xxx
> sasl_sql_hostnames: localhost:3306
> sasl_sql_database: mail
> sasl_sql_select: SELECT password FROM accountuser
> WHERE username = '%u'
> sasl_sql_verbose: yes
> ###
> /etc/sysconfig/saslauthd
> ###
> MECH="pam -n 0"
> #SASL_AUTH_MECH="pam"
> ###
> /var/log/maillog
> #
> Feb 20 14:33:02 ns imap[25139]: accepted connection
> Feb 20 14:33:02 ns imap[25139]: badlogin: xxx.xxx.com
> [127.0.0.1] plaintext cyrus SASL(-13): authentication
> failure: checkpass failed
> 
> /usr/lib/sasl2 contents
> #
> libanonymous.a  libdigestmd5.la
> liblogin.so libsasldb.la
> libanonymous.la libdigestmd5.so
> liblogin.so.2   libsasldb.so
> libanonymous.so libdigestmd5.so.2  
> liblogin.so.2.0.17  libsasldb.so.2
> libanonymous.so.2   libdigestmd5.so.2.0.17 
> libntlm.a   libsasldb.so.2.0.17
> libanonymous.so.2.0.17  libgssapiv2.a  
> libotp.alibsql.a
> libcrammd5.alibgssapiv2.la 
> libplain.a  libsql.la
> libcrammd5.la   libgssapiv2.so 
> libplain.la libsql.so.2
> libcrammd5.so   libgssapiv2.so.2   
> libplain.so libsql.so.2.0.17
> libcrammd5.so.2 libgssapiv2.so.2.0.17  
> libplain.so.2   smtpd.conf
> libcrammd5.so.2.0.17liblogin.a 
> libplain.so.2.0.17
> libdigestmd5.a  liblogin.la
> libsasldb.a
> ##
> /usr/sbin/saslauthd -v results
> ###
> saslauthd 2.1.17
> authentication mechanisms: getpwent kerberos5 pam
> rimap shadow ldap
> ###
> 
> Looks like sasl auxprop function is the issue here,
> somehow cyrus-imapd can't talk to mysql. I have tried
> different combinations, but couldn't get this thing
> up. Web-cyradm works fine if I add
> sasl_pwcheck_method: auxprop saslauthd, but if I
> remove saslauthd I can't authenticate to imapd server.
> I did saslpasswd2 -c cyrus, but still can't
> authenticate to server if I remove the saslauthd from
> pwcheck_method. The question is why imapd can't use
> auxprop sql function for authentication or if there is
> something else missing in my configurations? Any help
> would be greatly appreciated.
> 
> Thanks
> 
> Khan
> 
> 
> _

Re: db.spec.patch not successful :-(

[Edward Rudd]

all versions of DB use the same symbols (really annoying) so an
executable can only be linked against one version of DB..
the easiest way to convert from DB3 to DB4 is to dump and load the
databases..
if you have the db3-utils and db4-utils packages installed you can do
this..
mv mailboxes.db mailboxes.db3
db3_dump mailboxes.db3 | db4_load mailboxes.db4
cp mailboxes.db4 mailboxes.db

To figure out what version a DB is in use the file command
file mailboxes.db
DB3 is Version 7, DB4 is version 8,
skiplist should say "data" unless you add the skiplist file magic..

On Thu, 2004-02-19 at 00:50, Ruth Ivimey-Cook wrote:
> On Thu, 19 Feb 2004, Simon Matter wrote:
> 
> >There are some more things to mention:
> >
> >1) The rpms are using FHS compliant directories (/var/spool/imap and
> >/var/lib/imap). Everything should work with different configdir's but I
> >have never tested it.
> >
> >2) The only db magic which the rpms don't do is converting db3 database
> >files to db4. IIRC their binary format differs and one can not just move
> >the db3 files to a box with db4 and expect it to work.
> >
> >Simon
> 
> I suspect, then, (2) is my problem; I think the db's are v3 format, not v4. I
> had hoped that db4 could at least read v3 :-(
> 
> What is my best course of action to get a v3-based imapd that I can use to
> convert to v4? Can I have v3 and v4 in the same executables, or do I have to
> use two sets with, e.g., skiplist as the intermediary?
> 
> Thanks,
> 
> Ruth
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: db.spec.patch not successful :-(

[Edward Rudd]

Skiplist is Cyrus' own DB format that is better for certain types of
data access.. (mailbox lists is one of them)..
Is the /imap/conf/db directory created? Does it have the correct
permissions? (owned by cyrus, group mail)?
And you may need to run the cvt_cyrusdb or cvt_cyrusdb_all programs to
convert the databases if you had used different formats for the various
databases? (ie.. DB4 for the mailboxes instead of skiplist). You need to
run these programs as the user cyrus (su - cyrus -c).
This is what Simon Matter's start up script does in his RPM package..

 echo -n $"preparing databases... "
su - cyrus -c "umask 166 ; /usr/lib/cyrus-imapd/cvt_cyrusdb_all >
/var/lib/imap/rpm/cvt_cyrusdb_all.log 2>&1"

On Wed, 2004-02-18 at 16:44, Ruth Ivimey-Cook wrote:
> Folks,
> 
> I applied the db.spec.patch for FC1 db4 to the FC1 source RPM spec file,
> rebuilt db4, installed all 3 components (rpm -Uhv), reconfigured and rebuilt
> imapd 2.2.3 and installed that on top of my first attempt. I then tried:
> 
> % ctl_mboxlist -d /imap/conf/mailboxes.db
> fatal error: can't read mailboxes file
> 
> In the imapd.log, I get
> Feb 18 22:36:58 gatemaster ctl_mboxlist[20708]: DBERROR db4: unable to join the 
> environment
> Feb 18 22:36:58 gatemaster ctl_mboxlist[20708]: DBERROR: dbenv->open '/imap/conf/db' 
> failed: Resource temporarily unavailable
> Feb 18 22:36:58 gatemaster ctl_mboxlist[20708]: DBERROR: init() on berkeley
> Feb 18 22:36:58 gatemaster ctl_mboxlist[20708]: DBERROR: reading 
> /imap/conf/db/skipstamp, assuming the worst: No such file or directory
> Feb 18 22:36:58 gatemaster ctl_mboxlist[20708]: skiplist: invalid magic header: 
> /imap/conf/mailboxes.db
> Feb 18 22:36:58 gatemaster ctl_mboxlist[20708]: DBERROR: opening 
> /imap/conf/mailboxes.db: cyrusdb error
> 
> What's up? Why is it looking for skiplist stuff when it seems it knows to use
> db4?
> 
> Ruth
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Help moving/updating Cyrus installation

[Edward Rudd]

49118)
>   prev:0 next:3 entries:   70 offset: 2044
>   [000] 4080 len:  11 data: Junk E-mail
>   [001] 4056 len:  21 data: 0 default anyone0x09rwi...
>   [002] 4044 len:   8 data: user.cbs
>   [003] 4004 len:  34 data: 0 default cbs0x09lrswip...
>   [004] 3984 len:  14 data: user.cbs.Admin
>   [005] 3944 len:  34 data: 0 default cbs0x09lrswip...
> ..snip...
>   [060] 2296 len:  22 data: user.ruthc.wotug-ctt...
>   [061] 2264 len:  26 data: 0 default ruthc0x09lrsw...
> db_dump: close: Permission denied
> 
> 
> The /etc/imap.conf file [note I'm not using the mysql stuff - it
> was an experiment]:
> 
> configdirectory: /imap/conf
> sievedir: /imap/sieve
> sieveusehomedir: false
> sendmail: /usr/exim/bin/exim
> partition-default: /imap/spool
> admins: root ruthc
> srvtab: /imap/srvtab
> defaultacl: anyone write
> allowanonymouslogin: yes
> allowplaintext: yes
> auxprop_plugins: mysql digest-md5 cram-md5 plain
> #sasl_pwcheck_method: pwcheck
> sasl_pwcheck_method: saslauthd
> sasl_mech_list: mysql
> sasl_mysql_user: cyrus
> sasl_mysql_database: saslmail
> sasl_mysql_statement: select password from users where username = %u 
> #sasl_mysql_statement: select %p from users where username = %u and realm = %r
> sasl_mysql_verbose:  true
> 
> 
> ---
> Home Page: http://asg.web.cmu.edu/cyrus
> Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: upgrade from Cyrus 2.1.15 to cyrus 2.2.3 breaks LDAP auxprop authentication.

[Edward Rudd]

I'm not getting the "no worthy mechs" error since I installed cyrus.c
patch.. But their are other errors with the authentication..
I'm going to try and debug ldapdb when I get a chance.. Or try upgrading
openldap to 2.1.25 and the newer ldapdb release.

Oh What release of Cyrus SASL are you using?? 

I'm probably just going to "fall back" to saslauthd for now and give up
on "better authentication" for clients until I get this resolved, as I
really want the newer versions of postfix and cyrus imapd installed on
the "live servers"..

Now it's time to write scripts to update my mail spools for the upgrade.


On Thu, 2004-02-12 at 00:25, Igor Brezac wrote:
> On Wed, 11 Feb 2004, Edward Rudd wrote:
> 
> > OpenLDAP 2.1.22, LDAP AuxProp CVS release 1.1.2.3, I had tried updating
> > to a newer release but it broke things due to the handling of the LDAP
> > v4 PROXY_AUTHZ control in openldap (you directed me to the bug report
> > about it), Cyrus SASL 2.1.15 (2.1.17 causes SLAPD to crash completely).
> > sample client and server work fine, as does postfix. It's just cyrus
> > IMAPd 2.2.3.
> 
> Your cyrus.c looks good.  My guess is that if you debug ldapdb.c you'll
> find 'no worthy mechs' error which means that the ldapdb auxprop is not
> using your new libldap.
> 
> > What did they change from 2.1.x to 2.2.x? Can I roll back those changes?
> 
> I have to look, but my guess is that too many changes took place.  I can
> write a quick patch for this, but the libldap fix works just as well.
> 
> >
> > On Wed, 2004-02-11 at 19:51, Igor Brezac wrote:
> > > Hmm... Can you email me your libraries/libldap/cyrus.c?  What version of
> > > openldap do you use?  I use the latest ldapdb  auxprop and
> > > OPENLDAP_REL_ENG_2_1 (which is 2.1.26 + some patches)
> > > Does ldapdb auxprop work with sample(client|server)?
> > >
> > > -Igor
> > >
> > > On Wed, 11 Feb 2004, Edward Rudd wrote:
> > >
> > > > OK I patched my OpenLDAP and recompiled, installed restarted postfix,
> > > > cyrus imapd, and started up ldap. And it still retuns "user not found"
> > > > when I try to login to cyrus imap. But the auth.log now shows something
> > > > different..
> > > > --- auth.log ---
> > > > Feb 11 19:19:46 devel imtest: DIGEST-MD5 client step 2
> > > > Feb 11 19:19:53 devel imtest: DIGEST-MD5 client step 2
> > > > Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 server step 2
> > > > Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 client step 2
> > > > Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 client step 2
> > > > Feb 11 19:19:53 devel imap[2282]: bad userid authenticated
> > > > Feb 11 19:19:53 devel imap[2282]: no secret in database
> > > > 
> > > > And my ldap.log shows this (loglevel 255)
> > > > --- ldap.log ---
> > > > Feb 11 19:19:53 devel slapd[2053]: daemon: read activity on 12
> > > > Feb 11 19:19:53 devel slapd[2053]: connection_get(12)
> > > > Feb 11 19:19:53 devel slapd[2053]: connection_get(12): got connid=5
> > > > Feb 11 19:19:53 devel slapd[2053]: connection_read(12): checking for
> > > > input on id=5
> > > > Feb 11 19:19:53 devel slapd[2053]: ber_get_next on fd 12 failed errno=11
> > > > (Resource temporarily unavailable)
> > > > Feb 11 19:19:53 devel slapd[2065]: connection_operation: error: SASL
> > > > bind in progress (tag=66).
> > > > Feb 11 19:19:53 devel slapd[2053]: daemon: select: listen=6
> > > > active_threads=1 tvp=NULL
> > > > Feb 11 19:19:53 devel slapd[2065]: send_ldap_result: conn=5 op=1 p=3
> > > > Feb 11 19:19:53 devel slapd[2053]: daemon: activity on 1 descriptors
> > > > Feb 11 19:19:53 devel slapd[2065]: send_ldap_result: err=1 matched=""
> > > > text="SASL bind in progress"
> > > > Feb 11 19:19:53 devel slapd[2053]: daemon: activity on:
> > > > Feb 11 19:19:53 devel slapd[2065]: send_ldap_response: msgid=0 tag=48
> > > > err=1
> > > > Feb 11 19:19:53 devel slapd[2053]:  12r
> > > > Feb 11 19:19:53 devel slapd[2065]: connection_closing: readying conn=5
> > > > sd=12 for close
> > > > Feb 11 19:19:53 devel slapd[2053]:
> > > > Feb 11 19:19:53 devel slapd[2065]: connection_resched: attempting
> > > > closing conn=5 sd=12
> > > > Feb 11 19:19:53 devel slapd[2053]: daemon: read activity on 12
> > > > Feb 11 19:19:53 devel slapd[2065]: connection_c

RE: upgrade from Cyrus 2.1.15 to cyrus 2.2.3 breaks LDAP auxpropauthentication.

[Edward Rudd]

Here is the "nohup slapd -d 255" file. and the entries from auth.log
when running
"imtest -a cyrus -u cyrus -m login devel"

Feb 11 20:48:13 devel slapd[2927]: auxpropfunc error -7 
Feb 11 20:48:13 devel slapd[2927]: _sasl_plugin_load failed on
sasl_auxprop_plug_init for plugin: ldapdb 
Feb 11 20:48:20 devel imap[2922]: DIGEST-MD5 client step 2
Feb 11 20:48:20 devel imap[2922]: DIGEST-MD5 client step 2
Feb 11 20:48:20 devel imap[2922]: bad userid authenticated

There is no step 1 in there.. How odd..

On Wed, 2004-02-11 at 19:58, Howard Chu wrote:
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] Behalf Of Edward Rudd
> 
> > OK I patched my OpenLDAP and recompiled, installed restarted postfix,
> > cyrus imapd, and started up ldap. And it still retuns "user not found"
> > when I try to login to cyrus imap. But the auth.log now shows
> > something different..
> > --- auth.log ---
> > Feb 11 19:19:46 devel imtest: DIGEST-MD5 client step 2
> > Feb 11 19:19:53 devel imtest: DIGEST-MD5 client step 2
> > Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 server step 2
> > Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 client step 2
> > Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 client step 2
> > Feb 11 19:19:53 devel imap[2282]: bad userid authenticated
> > Feb 11 19:19:53 devel imap[2282]: no secret in database
> > 
> 
> What happened to step 1?
> 
> > And my ldap.log shows this (loglevel 255)
> > --- ldap.log ---
> > Feb 11 19:19:53 devel slapd[2053]: daemon: read activity on 12
> > Feb 11 19:19:53 devel slapd[2053]: connection_get(12)
> > Feb 11 19:19:53 devel slapd[2053]: connection_get(12): got connid=5
> > Feb 11 19:19:53 devel slapd[2053]: connection_read(12): checking for
> > input on id=5
> 
> OpenLDAP's syslog output is not useful for debugging; it's mainly for
> reporting normal operational status. You need to run slapd in debug mode and
> save the output from stderr when you actually want to chase a bug.
> 
> In this case, both your auth.log and your ldap.log indicate that a SASL Bind
> has been performed in an improper sequence (i.e., step 1 doesn't appear in
> the log, and it seems that some other request has been made before the SASL
> Bind properly completed.). To see exactly what happened, you'll need the
> debug trace from slapd.
> 
>   -- Howard Chu
>   Chief Architect, Symas Corp.   Director, Highland Sun
>   http://www.symas.com   http://highlandsun.com/hyc
>   Symas: Premier OpenSource Development and Support
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/


ldaplog.gz
Description: GNU Zip compressed data

Re: upgrade from Cyrus 2.1.15 to cyrus 2.2.3 breaks LDAP auxprop authentication.

[Edward Rudd]

OpenLDAP 2.1.22, LDAP AuxProp CVS release 1.1.2.3, I had tried updating
to a newer release but it broke things due to the handling of the LDAP
v4 PROXY_AUTHZ control in openldap (you directed me to the bug report
about it), Cyrus SASL 2.1.15 (2.1.17 causes SLAPD to crash completely).
sample client and server work fine, as does postfix. It's just cyrus
IMAPd 2.2.3.
What did they change from 2.1.x to 2.2.x? Can I roll back those changes?

On Wed, 2004-02-11 at 19:51, Igor Brezac wrote:
> Hmm... Can you email me your libraries/libldap/cyrus.c?  What version of
> openldap do you use?  I use the latest ldapdb  auxprop and
> OPENLDAP_REL_ENG_2_1 (which is 2.1.26 + some patches)
> Does ldapdb auxprop work with sample(client|server)?
> 
> -Igor
> 
> On Wed, 11 Feb 2004, Edward Rudd wrote:
> 
> > OK I patched my OpenLDAP and recompiled, installed restarted postfix,
> > cyrus imapd, and started up ldap. And it still retuns "user not found"
> > when I try to login to cyrus imap. But the auth.log now shows something
> > different..
> > --- auth.log ---
> > Feb 11 19:19:46 devel imtest: DIGEST-MD5 client step 2
> > Feb 11 19:19:53 devel imtest: DIGEST-MD5 client step 2
> > Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 server step 2
> > Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 client step 2
> > Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 client step 2
> > Feb 11 19:19:53 devel imap[2282]: bad userid authenticated
> > Feb 11 19:19:53 devel imap[2282]: no secret in database
> > 
> > And my ldap.log shows this (loglevel 255)
> > --- ldap.log ---
> > Feb 11 19:19:53 devel slapd[2053]: daemon: read activity on 12
> > Feb 11 19:19:53 devel slapd[2053]: connection_get(12)
> > Feb 11 19:19:53 devel slapd[2053]: connection_get(12): got connid=5
> > Feb 11 19:19:53 devel slapd[2053]: connection_read(12): checking for
> > input on id=5
> > Feb 11 19:19:53 devel slapd[2053]: ber_get_next on fd 12 failed errno=11
> > (Resource temporarily unavailable)
> > Feb 11 19:19:53 devel slapd[2065]: connection_operation: error: SASL
> > bind in progress (tag=66).
> > Feb 11 19:19:53 devel slapd[2053]: daemon: select: listen=6
> > active_threads=1 tvp=NULL
> > Feb 11 19:19:53 devel slapd[2065]: send_ldap_result: conn=5 op=1 p=3
> > Feb 11 19:19:53 devel slapd[2053]: daemon: activity on 1 descriptors
> > Feb 11 19:19:53 devel slapd[2065]: send_ldap_result: err=1 matched=""
> > text="SASL bind in progress"
> > Feb 11 19:19:53 devel slapd[2053]: daemon: activity on:
> > Feb 11 19:19:53 devel slapd[2065]: send_ldap_response: msgid=0 tag=48
> > err=1
> > Feb 11 19:19:53 devel slapd[2053]:  12r
> > Feb 11 19:19:53 devel slapd[2065]: connection_closing: readying conn=5
> > sd=12 for close
> > Feb 11 19:19:53 devel slapd[2053]:
> > Feb 11 19:19:53 devel slapd[2065]: connection_resched: attempting
> > closing conn=5 sd=12
> > Feb 11 19:19:53 devel slapd[2053]: daemon: read activity on 12
> > Feb 11 19:19:53 devel slapd[2065]: connection_close: conn=5 sd=12
> > Feb 11 19:19:53 devel slapd[2065]: daemon: removing 12
> > Feb 11 19:19:53 devel slapd[2053]: connection_get(12)
> > Feb 11 19:19:53 devel slapd[2053]: connection_get(12): connection not
> > used
> > Feb 11 19:19:53 devel slapd[2053]: connection_read(12): no connection!
> > Feb 11 19:19:53 devel slapd[2053]: daemon: removing 12
> > Feb 11 19:19:53 devel slapd[2053]: daemon: closing 12
> >
> > On Wed, 2004-02-11 at 07:56, Igor Brezac wrote:
> > > Check
> > > http://www.openldap.org/its/index.cgi/Software%20Bugs?id=2926;selectid=2926
> > >
> > > Cyrus-imap needs to be fixed, but it was easier to change openldap api.
> > >
> > > -Igor
> > >
> > > On Wed, 11 Feb 2004, Edward Rudd wrote:
> > >
> > > > I'm using the ldapdb auxprop plugin that comes with OpenLDAP 2.1.22 with
> > > > cyrus sasl 2.1.15, which works perfectly with the sasl2 sample server
> > > > and client programs, postfix 1.1.12, postfix 2.0.16, and cyrus imapd
> > > > 2.1.13 to cyrus imapd 2.1.15..   However when I upgraded to cyrus imapd
> > > > 2.2.3 (all of these are using Simon Matter's wonderful RPMS), I always
> > > > get user not found when trying to login as any user.. (fully qualified
> > > > user like [EMAIL PROTECTED] or the "cyrus" admin user).
> > > >
> > > > And my ldap logs show nothing going on.. literally.. I see a connection
> > > > coming in from sasl, and then disconnecting.. no other activity is
> > > >

RE: upgrade from Cyrus 2.1.15 to cyrus 2.2.3 breaks LDAP auxpropauthentication.

[Edward Rudd]

Step one is there just before the imtest: DIGEST-MD5 client step 2..
forgot to copy it in there..


On Wed, 2004-02-11 at 19:58, Howard Chu wrote:
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] Behalf Of Edward Rudd
> 
> > OK I patched my OpenLDAP and recompiled, installed restarted postfix,
> > cyrus imapd, and started up ldap. And it still retuns "user not found"
> > when I try to login to cyrus imap. But the auth.log now shows
> > something different..
> > --- auth.log ---
> > Feb 11 19:19:46 devel imtest: DIGEST-MD5 client step 2
> > Feb 11 19:19:53 devel imtest: DIGEST-MD5 client step 2
> > Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 server step 2
> > Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 client step 2
> > Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 client step 2
> > Feb 11 19:19:53 devel imap[2282]: bad userid authenticated
> > Feb 11 19:19:53 devel imap[2282]: no secret in database
> > 
> 
> What happened to step 1?
> 
> > And my ldap.log shows this (loglevel 255)
> > --- ldap.log ---
> > Feb 11 19:19:53 devel slapd[2053]: daemon: read activity on 12
> > Feb 11 19:19:53 devel slapd[2053]: connection_get(12)
> > Feb 11 19:19:53 devel slapd[2053]: connection_get(12): got connid=5
> > Feb 11 19:19:53 devel slapd[2053]: connection_read(12): checking for
> > input on id=5
> 
> OpenLDAP's syslog output is not useful for debugging; it's mainly for
> reporting normal operational status. You need to run slapd in debug mode and
> save the output from stderr when you actually want to chase a bug.
> 
> In this case, both your auth.log and your ldap.log indicate that a SASL Bind
> has been performed in an improper sequence (i.e., step 1 doesn't appear in
> the log, and it seems that some other request has been made before the SASL
> Bind properly completed.). To see exactly what happened, you'll need the
> debug trace from slapd.
> 
>   -- Howard Chu
>   Chief Architect, Symas Corp.   Director, Highland Sun
>   http://www.symas.com   http://highlandsun.com/hyc
>   Symas: Premier OpenSource Development and Support
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: upgrade from Cyrus 2.1.15 to cyrus 2.2.3 breaks LDAP auxprop authentication.

[Edward Rudd]

OK I patched my OpenLDAP and recompiled, installed restarted postfix,
cyrus imapd, and started up ldap. And it still retuns "user not found"
when I try to login to cyrus imap. But the auth.log now shows something
different..
--- auth.log ---
Feb 11 19:19:46 devel imtest: DIGEST-MD5 client step 2
Feb 11 19:19:53 devel imtest: DIGEST-MD5 client step 2
Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 server step 2
Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 client step 2
Feb 11 19:19:53 devel imap[2282]: DIGEST-MD5 client step 2
Feb 11 19:19:53 devel imap[2282]: bad userid authenticated
Feb 11 19:19:53 devel imap[2282]: no secret in database

And my ldap.log shows this (loglevel 255)
--- ldap.log ---
Feb 11 19:19:53 devel slapd[2053]: daemon: read activity on 12 
Feb 11 19:19:53 devel slapd[2053]: connection_get(12) 
Feb 11 19:19:53 devel slapd[2053]: connection_get(12): got connid=5 
Feb 11 19:19:53 devel slapd[2053]: connection_read(12): checking for
input on id=5 
Feb 11 19:19:53 devel slapd[2053]: ber_get_next on fd 12 failed errno=11
(Resource temporarily unavailable) 
Feb 11 19:19:53 devel slapd[2065]: connection_operation: error: SASL
bind in progress (tag=66). 
Feb 11 19:19:53 devel slapd[2053]: daemon: select: listen=6
active_threads=1 tvp=NULL 
Feb 11 19:19:53 devel slapd[2065]: send_ldap_result: conn=5 op=1 p=3 
Feb 11 19:19:53 devel slapd[2053]: daemon: activity on 1 descriptors 
Feb 11 19:19:53 devel slapd[2065]: send_ldap_result: err=1 matched=""
text="SASL bind in progress" 
Feb 11 19:19:53 devel slapd[2053]: daemon: activity on:
Feb 11 19:19:53 devel slapd[2065]: send_ldap_response: msgid=0 tag=48
err=1 
Feb 11 19:19:53 devel slapd[2053]:  12r
Feb 11 19:19:53 devel slapd[2065]: connection_closing: readying conn=5
sd=12 for close 
Feb 11 19:19:53 devel slapd[2053]:  
Feb 11 19:19:53 devel slapd[2065]: connection_resched: attempting
closing conn=5 sd=12 
Feb 11 19:19:53 devel slapd[2053]: daemon: read activity on 12 
Feb 11 19:19:53 devel slapd[2065]: connection_close: conn=5 sd=12 
Feb 11 19:19:53 devel slapd[2065]: daemon: removing 12 
Feb 11 19:19:53 devel slapd[2053]: connection_get(12) 
Feb 11 19:19:53 devel slapd[2053]: connection_get(12): connection not
used 
Feb 11 19:19:53 devel slapd[2053]: connection_read(12): no connection! 
Feb 11 19:19:53 devel slapd[2053]: daemon: removing 12 
Feb 11 19:19:53 devel slapd[2053]: daemon: closing 12 

On Wed, 2004-02-11 at 07:56, Igor Brezac wrote:
> Check
> http://www.openldap.org/its/index.cgi/Software%20Bugs?id=2926;selectid=2926
> 
> Cyrus-imap needs to be fixed, but it was easier to change openldap api.
> 
> -Igor
> 
> On Wed, 11 Feb 2004, Edward Rudd wrote:
> 
> > I'm using the ldapdb auxprop plugin that comes with OpenLDAP 2.1.22 with
> > cyrus sasl 2.1.15, which works perfectly with the sasl2 sample server
> > and client programs, postfix 1.1.12, postfix 2.0.16, and cyrus imapd
> > 2.1.13 to cyrus imapd 2.1.15..   However when I upgraded to cyrus imapd
> > 2.2.3 (all of these are using Simon Matter's wonderful RPMS), I always
> > get user not found when trying to login as any user.. (fully qualified
> > user like [EMAIL PROTECTED] or the "cyrus" admin user).
> >
> > And my ldap logs show nothing going on.. literally.. I see a connection
> > coming in from sasl, and then disconnecting.. no other activity is
> > logged. And I have the loglevel for openldap set to 255.
> >
> > My auth.log shows "no worthy mechs found" and nothing in my imapd.log
> >
> > What changed in relation to SASL configuration from Cyrus IMAPD 2.1.x to
> > 2.2.x??
> >
> > Here is my relavent imapd.conf
> >
> > sasl_pwcheck_method: auxprop
> > sasl_auxprop_plugin: ldapdb
> > sasl_mech_list:  plain digest-md5 cram-md5 ntlm
> >
> > sasl_ldapdb_uri: ldap:///
> > sasl_ldapdb_id: auxprop_user
> > sasl_ldapdb_pw: password_for_said_user
> > sasl_ldapdb_mech: DIGEST-MD5
> >
> > Which is the same configuration as sample.conf (for the sample server
> > and client) and smtpd.conf (for postfix). Except those files don't have
> > the sasl_ prefix to the configuration directives..
> >
> >
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

upgrade from Cyrus 2.1.15 to cyrus 2.2.3 breaks LDAP auxprop authentication.

[Edward Rudd]

I'm using the ldapdb auxprop plugin that comes with OpenLDAP 2.1.22 with
cyrus sasl 2.1.15, which works perfectly with the sasl2 sample server
and client programs, postfix 1.1.12, postfix 2.0.16, and cyrus imapd
2.1.13 to cyrus imapd 2.1.15..   However when I upgraded to cyrus imapd
2.2.3 (all of these are using Simon Matter's wonderful RPMS), I always
get user not found when trying to login as any user.. (fully qualified
user like [EMAIL PROTECTED] or the "cyrus" admin user).

And my ldap logs show nothing going on.. literally.. I see a connection
coming in from sasl, and then disconnecting.. no other activity is
logged. And I have the loglevel for openldap set to 255.

My auth.log shows "no worthy mechs found" and nothing in my imapd.log

What changed in relation to SASL configuration from Cyrus IMAPD 2.1.x to
2.2.x??

Here is my relavent imapd.conf

sasl_pwcheck_method: auxprop
sasl_auxprop_plugin: ldapdb
sasl_mech_list:  plain digest-md5 cram-md5 ntlm

sasl_ldapdb_uri: ldap:///
sasl_ldapdb_id: auxprop_user
sasl_ldapdb_pw: password_for_said_user
sasl_ldapdb_mech: DIGEST-MD5

Which is the same configuration as sample.conf (for the sample server
and client) and smtpd.conf (for postfix). Except those files don't have
the sasl_ prefix to the configuration directives..

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: postfix 2.0.16 and cyrus w/ full e-mail usernames.

[Edward Rudd]

My postfix 1.112 configuration is this

virtual_maps = ldap:ldapvuser
ldapvuser_query_filter = (&(objectclass=virtualinetmailuser)(uid=%s))
ldapvuser_lookup_wildcards = no
ldapvuser_result_attribute = virtualmail

mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp

 I am not using relay_transport or relay_domains at all. And I'm not
sure if that solution would work well, as I can/will be hosting an
undetermined number of domains, and don't want to update the
configuration file and restart postfix every time. I'm using what was
labeled the "postfix style "virtual domains.. so for an e-mail delivered
to [EMAIL PROTECTED] postfix looks up nowhere.org in the virtual_map and
if it exists then it searches for [EMAIL PROTECTED], @nowhere.org until
it finds a mapping for that address and delivers the mail. And if not
found denies the message as that user is unknown.  (this happens at RCPT
TO: stage).   I escaped the \@ so the entire e-mail address would be
sent to the LMTP for delivery.  I saw this method "many moons ago" on
this mailing list.

Is there a different transport I need to use to get the mail to post
with the full e-mail address to the LMTP? As don't I need postfix to do
that so I can get cyrus imap 2.2.x style virtual domains working?


On Sat, 2004-02-07 at 04:06, Cristian Mitrana wrote:
> Edward Rudd wrote:
> > I am currently testing an upgraded postfix from 1.1.12 to 2.0.16. and I
> > had postfix delivering mail correctly to the Cyrus LMTP socket when
> > cyrus IMAP has usernames in the form of [EMAIL PROTECTED] (a virtual map
> > from [EMAIL PROTECTED] to [EMAIL PROTECTED])  But with 2.0.16 this no
> > longer works, it tries to deliver mail to domain.com again.. and bounces
> > the message.. I posted this on the postfix users mailing list and the
> > only response I got back was that this functionality was a "bug" in
> > 1.1.12 and has been fixed in 2.0.16 (ie doesn't work on purpose).. Does
> > anyone else have a similar setup to this? and how do you have it
> > configured?  Eventually I will be moving up to cyrus-imapd 2.2.3 and
> > using the native name based virtual hosting feature..
> 
> Show us the configuration of postfix. How do you deliver the mail
> to Cyrus' lmtp socket (i.e what 'transport' do you use) ?
> My config has domain.org in relay_domains and I use
> relay_transport to point to the ltmp socket.
>   Alternatively you could use a transport map ( see transport_maps)
> and not touch the relay_transport and in the map file you just
> point domain.org to the lmtp socket.
> 
> mitu
> 
> 
> ---
> Home Page: http://asg.web.cmu.edu/cyrus
> Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

postfix 2.0.16 and cyrus w/ full e-mail usernames.

[Edward Rudd]

I am currently testing an upgraded postfix from 1.1.12 to 2.0.16. and I
had postfix delivering mail correctly to the Cyrus LMTP socket when
cyrus IMAP has usernames in the form of [EMAIL PROTECTED] (a virtual map
from [EMAIL PROTECTED] to [EMAIL PROTECTED])  But with 2.0.16 this no
longer works, it tries to deliver mail to domain.com again.. and bounces
the message.. I posted this on the postfix users mailing list and the
only response I got back was that this functionality was a "bug" in
1.1.12 and has been fixed in 2.0.16 (ie doesn't work on purpose).. Does
anyone else have a similar setup to this? and how do you have it
configured?  Eventually I will be moving up to cyrus-imapd 2.2.3 and
using the native name based virtual hosting feature..

-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: checking for db_create in RH9

[Edward Rudd]

Did you try Upgrading the RPMS to the nonptl ones?
rpm -Uvh db4-*
the list of db4's should be 
db4-4.0.14-20_nonptl
db4-devel-4.0.14-20_nonptl
db4-utils-4.0.14-20_nonptl

if you installed the RPMS built from simon's updated spec file for RH 9.

also make sure you don't have any other db -devel packages
running 'rpm -qa db\*-devel' should only list the db4 devel packages.
if there are others try removing them (ie. rpm -e db3-devel)

Forcing installation OVER another package is always bad.. Always do an
upgrade (-U) or a freshen (-F), never use (--force)

Try looking at the config.log file in the cyrus-imapd source directory
(where the configure script is) and see what the error message it has
when it checks for db_create. then post that to the mailing list..

On Fri, 2004-02-06 at 05:39, Francesc Guasch Ortiz wrote:
> Simon Matter wrote:
> >>Simon Matter wrote:
> >>
> >>
> >>>>So I tried to install from source. I read redhat db4 was
> >>>>buggy so I built a new one with the db4.spec file from
> 
> > Do you also have db3 packages installed? This can confuse the build
> > process. The rpms are made to build on stock RedHat x distributions. I
> > don't know what causes your problems, sorry.
> 
> Well, I have gdbm-1.8.0-20, but I think it's ok.
> 
> Thank you for trying. I wanted to keep the rpms, but
> now I tried to build from tar.gz and it won't work either.
> 
> Someone has any clue ?
> 
> Summary: I can't configure cyrus-imapd-2.1.16 in a RH 9.
> I tried db4 from redhat, db4 nonptl and db4.2 installed
> from source in /usr/local/BerkeleyDB4.2.
> 
> I always get:
> checking for db.h... yes
> checking for db_create in -ldb-4.2... no
> ...
> checking for db_create in -ldb3... no
> checking for db_create in -ldb... no
> checking for db_open in -ldb... no
> configure: error: this version requires Berkeley DB 3.x or later.
> 
> ---
> Home Page: http://asg.web.cmu.edu/cyrus
> Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: CYRUS = GARBAGE

[Edward Rudd]

That's not correct.. You can use mysql and have accounts automatically
created..
If you install the autocreate patches..
http://email.uoa.gr/download/cyrus/cyrus-imapd-2.2.3/
You can have account automatically created when the user first logs in
and a quota set (a default quota is a prerequisite for auto-creation of
accounts with the patch).. 
Plus you don't have to use the command line cyradm to remove accounts..
You can use many of the frontends available or write one yourself..
If you are handy with PHP you can goto my website
http://urklesphp.sf.net/ and download my PHP class for accessing a cyrus
imap server and administering accounts..


On Mon, 2004-02-02 at 18:20, David Grant wrote:
> I've been working with Garbage-2.2.3 for almost two weeks now, based on some
> lame programmer etiquette I've searched the net for howto and tutorials and
> found stuff I thought would work before I sent mailling lists question after
> question. 
> 
> Now I'm down to the last tiny little thing, and I found out Garbage won't
> work, thanks to the mailling lists. Apparently, you CANNOT use mysql to
> retain email address data and add and drop email accounts.
> 
> You must use cyradm to add and drop user and their mailboxes? There is no
> other way around this, and there is no way to get a database to do this work
> for me?
> 
> I'm sick of this Garbage. I never should have wasted my time with Garbage
> from CMU!
> 
> David Grant - Genuinely impatient
> 
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/


signature.asc
Description: This is a digitally signed message part

RE: New rpms of Cyrus IMAPd 2.2.3

[Edward Rudd]

Yup.
go up a directory on his website..
http://www.invoca.ch/pub/packages/
He has several RPMS of various packages.. including cyrus-sasl

On Wed, 2004-01-28 at 16:47, Harris Landgarten wrote:
> Simon,
> 
> Your 2.2.3 src.rpm have a dependency on cyrus-sasl-devel >= 2.1.15-1. Do you
> have a src.rpm for that. I am trying to build on Redhat 9.
> 
> Harris
> 
> -Original Message-
> From: Simon Matter [mailto:[EMAIL PROTECTED] 
> Sent: Wednesday, January 28, 2004 9:30 AM
> To: [EMAIL PROTECTED]
> Subject: New rpms of Cyrus IMAPd 2.2.3
> 
> 
> I'm pleased to announce new source rpms of the new stable release of Cyrus
> IMAPd 2.2.3.
> 
> I've successfully rebuilt the source rpm on the following Linux
> distributions:
> RedHat 6.2, 7.2, 7.3 and 9
> Fedora Core 1
> 
> Sucessful rebuilds have also been reported by others for: RedHat AS 2.1 and
> 3.0 Fedora Core 2 beta
> 
> The rpms should do all the steps needed for a successful upgrade from a
> previous Invoca rpm 2.1 install to the new 2.2 release. It's however highly
> recommended to create backups of your data before upgrading.
> 
> Download the source rpms at: http://www.invoca.ch/pub/packages/cyrus-imapd/
> 
> Have fun!
> Simon
> 
> 
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/


signature.asc
Description: This is a digitally signed message part

Re: New rpms of Cyrus IMAPd 2.2.3

[Edward Rudd]

Awesome!!. I was actually just getting ready to test the beta RPMS.. But
this is awesome.
Thanks Simon, and keep up the good work..

On Wed, 2004-01-28 at 08:29, Simon Matter wrote:
> I'm pleased to announce new source rpms of the new stable release of Cyrus
> IMAPd 2.2.3.
> 
> I've successfully rebuilt the source rpm on the following Linux
> distributions:
> RedHat 6.2, 7.2, 7.3 and 9
> Fedora Core 1
> 
> Sucessful rebuilds have also been reported by others for:
> RedHat AS 2.1 and 3.0
> Fedora Core 2 beta
> 
> The rpms should do all the steps needed for a successful upgrade from a
> previous Invoca rpm 2.1 install to the new 2.2 release. It's however
> highly recommended to create backups of your data before upgrading.
> 
> Download the source rpms at:
> http://www.invoca.ch/pub/packages/cyrus-imapd/
> 
> Have fun!
> Simon
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Website http://outoforder.cc/


signature.asc
Description: This is a digitally signed message part

Re: more shared folder problems

[Edward Rudd]

A shared folder is any folder NOT in the user. directory..
there is no "naming convention".  so they do not need to start with
shared.. as if you do start with shared then you have to mail to
+shared.deposit, which can get cumbersome to users.

On Thu, 2003-12-18 at 14:48, Prentice Bisbal wrote:
> Thanks, but that didn't work either:
> 
> Dec 18 15:48:50 pdb-linux-7 sendmail[17228]: hBIKhc917225: 
> to=bb+shared.deposit, ctladdr=root (0/0), delay=00:00:00, 
> xdelay=00:00:00, mailer=cyrus, pri=30042, relay=localhost, dsn=5.1.1, 
> stat=User unknown
> Dec 18 15:48:50 pdb-linux-7 sendmail[17228]: hBIKhc917225: hBIKhc817228: 
> DSN: User unknown
> Dec 18 15:48:50 pdb-linux-7 sendmail[17228]: hBIKhc817228: to=root, 
> delay=00:00:00, xdelay=00:00:00, mailer=cyrus, pri=30142, 
> relay=localhost [[UNIX: /var/lib/imap/socket/lmtp]], dsn=2.0.0, stat=Sent
> 
> Looks like I'll have to open the "bat" book (shudder). Bur if come up 
> with any ideas, feel free to keep sending them my way...
> 
> What is the naming convention for shared folders, anyway? Should they 
> always start w/ "shared" or no prefix?
> 
> Ken Murchison wrote:
> > 
> > 
> > Prentice Bisbal wrote:
> > 
> >> I'm still having problem with shared folders. I'm using Simon's RPMs 
> >> (latest version, just installed ysterday).
> >>
> >> Instead of "deposit" (as I posted yesterday), I created the shared 
> >> folder "shared.deposit" on my system. I removed the default acl for 
> >> anyone and did
> >>
> >> sam shared.deposit anonymous p
> >> sam shared.deposit prentice all
> >>
> >> When I send mail to bb+deposit, sendmail says the user is unknown:
> > 
> > 
> > 'shared' is part of the name, so try:
> > 
> > bb+shared.deposit
> > 
> > 
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part

Re: Shared folders?

[Edward Rudd]

In cyrus's imapd.conf set the postuser to the user you want to use to
post to shared folders.. The default is empty, so to send a message to
the shared folder deposit you would send a message to +deposit.  You
must also make sure that the user anonymous has "p" rights on the
deposit shared folder as well..  read the manpage for imapd.conf.

On Wed, 2003-12-17 at 15:55, Prentice Bisbal wrote:
> I've created a shared folder at the top-level of my mailbox hierarchy 
> (doesn't include prefix "user"):
> 
> localhost> lm
> deposit (\HasNoChildren)
> user.prentice.Trash (\HasNoChildren)
> user.prentice (\HasChildren)
> user.prentice.pdb-l (\HasNoChildren)
> user.prentice.Drafts (\HasNoChildren)
> 
> But when I send mail to it, I get the following error:
> 
> Dec 17 14:36:58 pdb-linux-7 sendmail[8842]: hBHJVls08839: to=deposit, 
> ctladdr=prentice (32220/12026), delay=00:00:00, xdelay=00:00:00, 
> mailer=cyrus, pri=30032, relay=localhost, dsn=5.1.1, stat=User unknown
> 
> Do I have to create an alias that pipes these messages to deliver? Do I 
> have to somehow tell sendmail/cyrus to treat this folder differently? Am 
> I going about this all wrong?
> 
> Prentice
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part

Re: upgrade 2.0.16 to 2.1.16 - ctl_cyrusdb hangs

[Edward Rudd]

you may need to upgrade your databases if cyrus is compiled with a
different version of DB.

On Wed, 2003-12-17 at 13:31, Sam Smith wrote:
> The upgrade seemed to go OK, but when I start the master process it 
> starts ctl_cyrusdb. I get the following messages:
> 
> Dec 17 14:16:05 newimap.ece.gatech.edu master[9932]: [ID 392559 
> local6.debug] about to exec /usr/cyrus/bin/ctl_cyrusdb
> Dec 17 14:16:05 newimap.ece.gatech.edu ctl_cyrusdb[9932]: [ID 702911 
> local6.notice] recovering cyrus databases
> 
> and that's all. ctl_cyrusdb never seems to finish recovering, imapd 
> never starts, etc.
> 
> We do have over 100G of email... Should ctl_cyrusdb take hours?
> 
> Sam Smith
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part

Re: Redhat RPM Build Problem

[Edward Rudd]

Did you make sure you have the latest errata installed for RH 7.3?
And have you tried compiling the RPM as non-root? goto
http://www.freshrpms.net/ and view his document called "the fight" for
setting up a non-root RPM build environment.   
I just compiled Simon Matter's latest 2.1.16 RPMS successfully on my RH
7.3 server fine.
On Mon, 2003-12-15 at 14:28, Vernon A. Fort wrote:
> With the Simon Matter RPMS, currently attempting to rebuild the latest
> src rpm.  Getting the following error:
> 
> + find
> /var/tmp/cyrus-imapd-2.1.16-root/usr/lib/perl5/site_perl/5.6.1/i386-linux/Cyrus 
> /var/tmp/cyrus-imapd-2.1.16-root/usr/lib/perl5/site_perl/5.6.1/i386-linux/auto/Cyrus 
> -type f -print
> find:
> /var/tmp/cyrus-imapd-2.1.16-root/usr/lib/perl5/site_perl/5.6.1/i386-linux/Cyrus: No 
> such file or directory
> find:
> /var/tmp/cyrus-imapd-2.1.16-root/usr/lib/perl5/site_perl/5.6.1/i386-linux/auto/Cyrus:
>  No such file or directory
> + /bin/sed '[EMAIL PROTECTED]/var/tmp/cyrus-imapd-2.1.16-root@@g'
> + /bin/grep -v perllocal.pod
> + /bin/grep -v '\.packlist'
> error: Bad exit status from /var/tmp/rpm-tmp.28406 (%install)
> 
> 
> RPM build errors:
> Bad exit status from /var/tmp/rpm-tmp.28406 (%install)
> 
> Version 2.1.10 currently install and no rebuild issues.  I can get this
> thing to rebuild on a 9.0 box - this is a 7.3 Redhat install.
> 
> Any ideas
> 
> Vernon Fort
> 
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part

Re: Plus Addressing

[Edward Rudd]

make sure the user anonymous as p rights on the folder..
in cyradm
sam user.myuser.myfolder anonymous p


On Mon, 2003-12-15 at 14:32, Wander wrote:
> Hi list,
> 
> I´m using Postfix with "recipient_delimiter = +" and cyrus imapd and plus 
> addressing doesn´t work. When sending mail to [EMAIL PROTECTED] it goes 
> to user Inbox instead of direct to user´s folder.
> 
> Please any light?
> 
> Thanks
>  
> Wander
> 
> 
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part

Re: Use of "@" how login in the name

[Edward Rudd]

Yes you can..
But you must make sure you have the unixheirachysep set to true
in/etc/imapd.conf. And you have to make sure your backend has the users
stored with the appropriate realm, as you will be doing multi-realm
authentication.. The realm is everything after the @ sign.. I am
currently using this setup using the ldap auxprop plugin from openldap
2.1.x.  If you are using sasldb just make sure you add the users with
the correct realm.

saslpasswd2 -c -u mydomain.com username
will create a user entry for [EMAIL PROTECTED]

You also have to make sure your MTA can deliver to the mailbox
correctly.. This requires escaping the @ in the e-mail address when your
MTA sends it to the LMTP.. in postfix this is done by \\'ing the @ in
the virtual tables..
[EMAIL PROTECTED]: [EMAIL PROTECTED]
In reality postfix will add a @mylocalhostname to the end of that so the
end result will look like this
[EMAIL PROTECTED]@mylocalhostname

Hope this helps get you started..
Search through the archives as this has been discussed before.. And
search the archives for you MTA of choice..

On Sun, 2003-12-14 at 22:07, Boletim GMX wrote:
> Hi all,
>  
> I have a question regarding cyrus authentication:
>  
> If I create a user with the Web-cyradm, the email address is
> [EMAIL PROTECTED] but for the login with IMAP/POP/SMTP, the user must
> use "name.domain.com".
>  
> Can I change this so the user can log in with your email address
> exactly - @?
>  
> Thanks for any help.
> Julio
-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part

Re: Delivery to non-user mailbox

[Edward Rudd]

From the imapd.conf man page.
postuser: 
   
Userid used to deliver messages to shared folders. For example, if set
to "bb", email sent to "bb+shared.blah" would be delivered to the
"shared.blah" folder. By default, an email address of "+shared.blah"
would be used.

You create the shared folders at the same level as user. not in a
subdirectory of shared.


On Wed, 2003-11-26 at 01:25, Nikola Milutinovic wrote:
> Hi all.
> 
> One simple question. How do I form e-mail address so that it gets delivered to a 
> non-user mailbox?
> 
> Suppose that I should create a "SHARED" hierarchy, alongside "USER" hierarchy. I 
> know how to deliver to a user mailbox ([EMAIL PROTECTED]). I know how to deliver 
> to subfolder of a user mailbox ([EMAIL PROTECTED]). But how do I deliver to 
> "shared.info" folder?
> 
> Nix.
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part

Re: postfix, cyrus imap, and plus notation delivery.

[Edward Rudd]

Hack?
I am using the unix hierarchy separator.. so yes the users do look like
[EMAIL PROTECTED] on the disk, but that has nothing to do with this
issue.. And that's a standard part of cyrus so, i wouldn't consider it a
hack anymore.  I was remapping username at one point, but I am not now,
as I am using the ldap auxprop so I can support digest-md5
authentication.

someone else e-mailed me directly the solution to the problem.. 
I had to set "recipient_delimiter = +" in postfix's main.cf.. and all
works find now..well except for postfix lowercasing the mailbox name so
I can't deliver to +Sent as it gets mapped to +sent..  but I can fix
that one.

On Fri, 2003-11-14 at 17:34, Ken Murchison wrote:
> Edward Rudd wrote:
> > On Fri, 2003-11-14 at 14:42, Ken Murchison wrote:
> > 
> >>Edward Rudd wrote:
> >>
> >>
> >>>I am currently using Cyrus IMAPd,
> >>
> >>Which version of Cyrus?
> >>
> > 
> > Cyrus 2.1.15 sorry
> > 
> >>  and postfix 1.1.12, using the virtual
> >>
> >>>mailer in postfix (via LDAP).  I am wanting to try and get the "plus
> >>>folder delivery" to work with this setup.. Currently users are mapped
> >>>like this
> >>>incoming e-mail => Cyrus mailbox name (with \\ escaping)
> >>>[EMAIL PROTECTED] => [EMAIL PROTECTED]
> >>
> >>What's with the \\ escaping?
> >>
> > 
> > For postfix to deliver to the correct mailbox.. As the user's mailbox IS
> 
> Are you using a virtdomains hack for 2.1.15 (so that use mailboxes look 
> like [EMAIL PROTECTED]), or are you just rewriting the incoming address?
> 
> > [EMAIL PROTECTED] so postfix has to have it escaped so it delivers to
> > [EMAIL PROTECTED] to cyrus server instead of trying to "redeliver" it to
> > user on mail server domain.com.
-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part

Re: postfix, cyrus imap, and plus notation delivery.

[Edward Rudd]

On Fri, 2003-11-14 at 14:42, Ken Murchison wrote:
> Edward Rudd wrote:
> 
> > I am currently using Cyrus IMAPd,
> 
> Which version of Cyrus?
> 
Cyrus 2.1.15 sorry
>   and postfix 1.1.12, using the virtual
> > mailer in postfix (via LDAP).  I am wanting to try and get the "plus
> > folder delivery" to work with this setup.. Currently users are mapped
> > like this
> > incoming e-mail => Cyrus mailbox name (with \\ escaping)
> > [EMAIL PROTECTED] => [EMAIL PROTECTED]
> 
> What's with the \\ escaping?
> 
For postfix to deliver to the correct mailbox.. As the user's mailbox IS
[EMAIL PROTECTED] so postfix has to have it escaped so it delivers to
[EMAIL PROTECTED] to cyrus server instead of trying to "redeliver" it to
user on mail server domain.com.

> > 
> > Now I tried creating a new alias for [EMAIL PROTECTED] and tried to map it
> > like this
> > [EMAIL PROTECTED] => [EMAIL PROTECTED]
> > 
> > however that did not work.
> > I receive a bounce from the mail server with a
> > bad address syntax: [EMAIL PROTECTED]@mail.sever.host
> > 
> > Does any one have any ideas on how to get this to work?
> > 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part

postfix, cyrus imap, and plus notation delivery.

[Edward Rudd]

I am currently using Cyrus IMAPd, and postfix 1.1.12, using the virtual
mailer in postfix (via LDAP).  I am wanting to try and get the "plus
folder delivery" to work with this setup.. Currently users are mapped
like this
incoming e-mail => Cyrus mailbox name (with \\ escaping)
[EMAIL PROTECTED] => [EMAIL PROTECTED]

Now I tried creating a new alias for [EMAIL PROTECTED] and tried to map it
like this
[EMAIL PROTECTED] => [EMAIL PROTECTED]

however that did not work.
I receive a bounce from the mail server with a
bad address syntax: [EMAIL PROTECTED]@mail.sever.host

Does any one have any ideas on how to get this to work?

-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part

Re: Hot backups

[Edward Rudd]

Actually I do have a perl script that I wrote that recreates the
mailboxes.db file if it is lost.. I had this happen when I was upgrading
from 2.0 to 2.1 on my system (my personal mail box only).. 
The script only does the user directory and just adds in all the folders
with the permissions of cyrus all and the user all for all folders into
a text file and runs the ctl_mailbox command to take the plain text
version of mailboxes that the script generates to cyrus's DB.

huh. for some reason I can't find that script..hmm. Well, if anyone
needs it I'll hunt for it.. it's on one of my systems..

On Fri, 2003-11-14 at 01:22, Craig Ringer wrote:
> > Certainly one can just copy the entire mail spool... getting MOST of hte
> > messages, and the .headers, .cache, .index, etc. Is this safe?
> 
> Personally, I wouldn't just copy the spool from beginning to end while 
> cyrus was running - all your indexes etc will become out of sync if mail 
> is delivered to a mailbox while it's being copied. *ick*. You also run 
> the risk of a mangled mailboxes.db if it's being modified while it's 
> being copied.
> 
> What I'm doing here is using LVM on linux to take a snapshot of the mail 
> spool (actually all of /var). I make a plain-text copy of the 
> mailboxes.db then take the snapshot. I mount the snapshot on a temporary 
> mountpoint, add imap/, spool/imap/, /etc/imapd.conf, /etc/cyrus.conf and 
> /usr/local/cyrus (where all the binaries etc live on my system) into a 
> CPIO archive, gzip it, and scp that to another host. That host later 
> writes the cyrus backup archive to tape.
> 
> This is automated and happens nightly. Additionally, both the most 
> recent and second-most-recent backup files are stored live on the other 
> server, so I can quickly recover from a failure of the primary cyrus 
> server that doesn't affect anything else.
> 
> Note that my method does /not/ ensure that Cyrus isn't modifying the 
> mail spools as I take the snapshot, nor does it ensure that mailboxes 
> aren't changed between the conversion of the mailboxes.db to text and 
> the snapshot. It's not perfect. For my site, however, it's quite 
> sufficient - at worst I'll have an AWOL mailbox or two, a mailbox 
> slightly out of sync with it's indexes, or a truncated message.
> 
> I'm also running into an issue where occasionally the snapshot fails - 
> it's taken while reiserfs is in the middle of a transaction, and the 
> journal can't be replayed on mount because the snapshot is read-only. 
> This is more of an LVM issue than anything else. I get around it by 
> syncing the disk before taking the snapshot, and by deleting the 
> snapshot and trying again if it's not useable.
> 
> I'd love to know of a way to ask cyrus to defer message delivery briefly 
> and make sure everything is in sync. That way I could signal cyrus to 
> "sync up and pause", do the db conversions, snapshot the volume, and 
> resume cyrus. I'd prefer to avoid killing and restarting the master 
> during the normal backup process.
> 
> > What about the databases? Are they save to just copy? are they
> > recoverable? Can they be rebuilt from the plain messages?
> 
> My understanding is that the mailbox contents can be rebuilt from the 
> messages, though I seem to remember you'll lose all your flags like 
> read, etc. The mailboxes.db _can not_ be reconstructed easily and must 
> be backed up; the rest, I just don't know enough about. I understand 
> that you can afford to lose the rest of the DBs.
> 
> > Isn't that
> > what matters most, the messages?
> 
> The messages and and your mailboxes DB, yes. Though users will be /very/ 
> unhappy if you lose their subscriptions and/or read status. Recovery 
> without a copy of your mailboxes db  is, I understand, a total 
> nightmare. I make a plaintext copy so that if I'm restoring the mail 
> spools etc onto a host with a different berkley DB environment I can get 
> up and running quickly and easily.
> 
> Anyway, I'm extremely far from an expert on this, having been running a 
> Cyrus server for only a few months. If I'm wrong on some points, please 
> let me know folks.
> 
> This area is one where I'm going to try to add some info to the wiki. 
> There's some there, but it seems a little sparse and maybe I can help.
> 
> Craig Ringer
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part

Re: Courier SASL and auxprop

[Edward Rudd]

This list is for cyrus-IMAP not courier IMAP, you may want to try
directing your question on the courier imap mailing list, or possibly
the cyrus-sasl mailing list..
On Fri, 2003-10-31 at 17:47, Murat Ergur wrote:
> Hi all,
> 
> I would like to use Postfix, Cyrus Sasl and Courier IMAP. How can I
> configure courier so that it authenticates virtual users using sasl's
> /etc/sasldb2 file? Is there anyone who did this before or can you give a
> URL for a HOW-TO?
> 
> Murat Ergur
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part

Re: Cyrus IMAPd 2.2.2-BETA Released

[Edward Rudd]

When you run automake run
automake-1.5
and to run autoconf run
autoconf253

these are provided on RH 7.3 as automake15 and autoconf253.. hopefully
those are *new* enough. But probably not..  Someone probably needs to
provide some newer releases for RH 7.3.  Another solution is to modify
the patches that you apply that modify the configure.in to only modify
the configure script.. That way you don't need to run
automake/autoconf..

On Wed, 2003-10-29 at 02:17, Simon Matter wrote:
> > Full changes are available in doc/changes.html in the distribution, sites
> > that are upgrading to this version will also want to read
> > doc/install-upgrade.html.
> 
> Thanks for the new BETA release. I have already released new beta rpms in
> the usual place. They are tested to build on RedHat 7.2 and 9. Please note
> that the beta rpms are work in progress and they still lack some important
> features like on the fly sieve script conversion on upgrade. So, they are
> meant for testing, NOT for production. USE AT YOUR OWN RISK!
> 
> I have a simple question regarding the change to the support for automake
> 1.7 and autoconf 2.57. Older RedHat releases like 7.2, 7.3 are using
> automake 1.4 and autoconf 2.13. cyrus-imapd-2.2.2-BETA and
> cyrus-sasl-2.1.16-BETA don't like those older autoconf/automake. My
> question is, is this expected behaviour or should it be possible to use
> the old autoconf/make tools? I even don't remember why I call autoconf in
> the cyrus-imapd build process but I'm sure there was a reason I used to
> call it.  Upgrading autoconf/automake is not an option here, so is there
> another way to do it or do I usually not nees to run automake/autoconf on
> the released tarballs to build on Linux.
> 
> TIA
> Simon
> 
> >
> > I'd personally like to thank Christian Schulte, Henrique de Moraes
> > Holschuh, David Carter, and Ken Murchison for their extensive
> > contributions to this release.  Almost all of the fixes and new features
> > in this release are a direct result of their efforts.
> >
> > Download the release at:
> > ftp://ftp.andrew.cmu.edu/pub/cyrus/cyrus-imapd-2.2.2-BETA.tar.gz
> > or
> > http://ftp.andrew.cmu.edu/pub/cyrus/cyrus-imapd-2.2.2-BETA.tar.gz
> >
> > -Rob
> >
> > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> > Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
> > Research Systems Programmer * /usr/contributed Gatekeeper
> >
> >
> >
> 
> 
-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part

Re: Cyrus and RH9

[Edward Rudd]

Try using Simon Matter's RPMS.
http://home.teleport.ch/simix/
Then you don't have to worry about dependency issues..

But as your problem, most likely you don't have the devel package
installed for cyrus-sasl.

But using the RPMS will avoid that as they are already built.

On Mon, 2003-10-27 at 12:16, arturo.mardones wrote:
> Hi to all!
> 
> I've been trying install Cyrus and really can't.  Always appear error what
> can't link library libsasl2 and i install from CMU tarball.
> 
> any idea??
-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part

Re: saslauthd, Realms, Cyrus-Imap and LDAP

[Edward Rudd]

Huh, this is odd. as in my tests and live usage of cyrus IMAPd
2.1.14/2.1.15. I am using realms with plain,crammd5, and digestmd5
authentication.. the user logs in as [EMAIL PROTECTED]and the
information gets passed to the ldap server perfectly find and split on
the '@'..  Though I am not using the saslauthd anymore, I am using the
ldapdb auxprop backend that is in the openldap 2.1.x contrib directory.

On Sun, 2003-09-28 at 21:01, Diego Rivera wrote:
> Hello all
> 
> I'm attempting a setup which allows me to have multiple completely
> separate mail domains in my server (separate IMAP boxes, separate
> delivery via Postfix, etc...).
> 
> I've run into one snag though - probably because I don't understand SASL
> as well as I'd like, but please gimme a hand here.
> 
> As it turns out, many different copies of imapd will be running - each
> with their own little (and different configuration).
> 
> I had it all working "fine" with one exception: PLAIN authentication
> doesn't support realms (this I found both in the docs and my testing).
> 
> SASLAUTHD DOES work with the LDAP tree I have, so I'm happy with that. 
> My issue becomes:  How do I tell each Cyrus-IMAP (and its accompanying
> Postfix) instance that ALL its users are in realm X, and that it should
> always FORCE the use of that realm for authentication against saslauthd?
> 
> Since ALL the users that hit a particular IMAP instance will be in the
> same realm (no cross-realm or anything like that), I don't see much of a
> problem with this kind of approach.
> 
> Would a patch for this be too difficult to hack together?  (for me to do
> I mean).
> 
> What other advice can you offer me?
> 
> Best wishes.
> 
> Diego
-- 
Edward Rudd <[EMAIL PROTECTED]>
Home Page <http://urkle.drip.ws/>


signature.asc
Description: This is a digitally signed message part