Re: trouble settting up cyrus
Does your imapd.conf have the parameter 'servername' configured? If so, you must specify that particular domain name while creating users. Try this before you change anything: imtest -a cyrus -m login localhost *** I can't get cyrus working. I'm trying to install version 2.1.12 with SASLv2 on a debian 3.0 system. I don't want to create debian users for every imap user so I'd like to use the sasldb athentication. I don't want to use PAM/mySQL. I've got the cyrus daemon running but I can't login either with cyradm nor imtest. I've already created a sasl user with saslpasswd2, but the log still says: badlogin: X.XXX[XXX.XXX.XXX.XXX] DIGEST-MD5 [SASL(-13): user not found: no secret in database] imtest says: imtest -u cyrus localhost S: * OK SF111 Cyrus IMAP4 v2.1.12-Debian-2.1.12-6 server ready C: C01 CAPABILITY S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES IDLE AUTH=NTLM AUTH=DIGEST-MD5 AUTH=CRAM-MD5 LISTEXT LIST-SUBSCRIBED ANNOTATEMORE S: C01 OK Completed C: A01 AUTHENTICATE DIGEST-MD5 [...] Please enter your password: C: [...] S: A01 NO user not found Authentication failed. generic failure Security strength factor: 128 entries in imapd.conf: sasl_pwcheck_method: auxprop sasl_auxprop_plugin: sasldb sasl_sasldb_path: /etc/sasldb2 I have no clue about auxprop. Do I have to conifigure it separately? Am I missing something? regards
Re: Cyrus configure help
Did you make use of the --with-bdb-libdir or --with-bdb-incdir configure options? Mine's installed in /usr/local as well and this is what I specified: --with-dbdir=/usr/local/BerkeleyDB.4.0 You might want to try pointing the configure script to the exact locations of the include and library files using LDFLAGS and CPPFLAGS if all else fails, ie.: LDFLAGS="-L/usr/local/berkeley_installation_dir/lib" CPPFLAGS="-I/usr/local/berkeley_installation_dir/include" * Dan Post wrote: I'm installing Cyrus IMAP 2.1.12 on a Solaris 8 machine and I get the following error: configure: error: this version requires Berkeley DB 3.x or later. You may need to supply the --with-bdb-libdir or --with-bdb-incdir configure options I have installed Berkeley DB 4.1.25 in /usr/local/ but it still tells me that I have to install it. Do I need to install DB in a specific place or tell IMAP where I installed it? Thank you for your time and help, Dan Post Unix Systems Administrator LDMI Telecommunications (313)965-8125 x632 [EMAIL PROTECTED]
Re: Unable to auth...
Kevin Hanna wrote: hehe, yup I have an older version of sasl installed. But now the question is... Why don't I have sasl 2 files installed? It should be found in /usr/local/bin or something like that. Execute this command @ the root level: find |grep saslpasswd2 to search for that file. If it isn't around then it's time to reinstall! I have the cyrus-sasl-2.1.12. I did the configure (below) make make install (created symbolic like for the library). But saslpasswd2 and sasldblistuse binaries are nowhere to be found.
Re: Authenticating Mail Users
Was this error present before you opted to authenticate from sasldb2 or did it appear after you did that? I've not encountered this problem before so I cannot comment. Sorry...perhaps you might find an answer on the web. * Krishna wrote: Hi, I am using Cyrus version cyrus-imapd-2.1.12-4 , I installed it from an rpm. I did what you said and it worked. Users got authenticated via sasldb2 file. Now I can't send mails through sendmail, I have configured it as was written in the How-To but I get "Data format error" Mar 5 18:18:51 linux sendmail[3923]: h25CmpH03923: to=<[EMAIL PROTECTED]>, delay=00:00:00, xdelay=00:00:00, mailer=cyrus, pri=30392, dsn=5.6.0, stat=Data format error Mar 5 18:18:51 linux sendmail[3923]: h25CmpH03923: h25CmpI03923: return to sender: Data format error Mar 5 18:18:51 linux sendmail[3923]: h25CmpI03923: to=root, delay=00:00:00, xdelay=00:00:00, mailer=cyrus, pri=30492, dsn=5.6.0, stat=Data format error Mar 5 18:18:51 linux sendmail[3923]: h25CmpH03923: Losing ./qfh25CmpH03923: savemail panic Mar 5 18:18:51 linux sendmail[3923]: h25CmpH03923: SYSERR(root): savemail: cannot save rejected email anywhere regards Krishna http://www.KrisinDigitalAge.com
Re: Authenticating Mail Users
Hi, I am using Horde/IMP on RedHat 7.3 with Cyrus IMAP. I am having problems authenticatin users. I folowed the Cyrus howto and added users. The problem is that it is authenticating users from the /etc/passwd and shadow file and not from sasldb and mails go to the Cyrus Imap mail directories, which works ok. With this method I have to create the user both from cyradm and useradd. I want to get users authenticated from the sasldb file and not /etc/passwd and shadow. Which version of Cyrus IMAP are you using? These instructions are for Cyrus IMAP v2.1. If you want users to be auth-ed from the sasldb2 file, the parameter sasl_pwcheck_method: auxprop must be defined in this manner. Then create users using the saslpasswd2 mechanism. This is what my imapd.conf shows [EMAIL PROTECTED] /]# cat /etc/imapd.conf configdirectory: /var/lib/imap partition-default: /var/spool/imap admins: cyrus allowanonymouslogin: no sieveuserhomedir: no sievedir: /var/lib/imap/sieve sendmail: /usr/sbin/sendmail hashimapspool: true sasl_sasldb_path: /etc/sasldb sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN tls_cert_file: /usr/share/ssl/certs/cyrus-imapd.pem tls_key_file: /usr/share/ssl/certs/cyrus-imapd.pem [EMAIL PROTECTED] /]# regards Krishna http://www.KrisinDigitalAge.com
Re: unable to send emails to Yahoo
Same here. I used to get it pretty often a couple of months ago but I don't encounter them anymore. I've no idea why this happens. Eugene Andreas Freyvogel wrote: I am having a weird situation in the fact that on occasion we are unable to send emails to recipients at Yahoo. The error we are getting is: host mx2.mail.yahoo.com[64.156.215.6] said: 552 Put ,E=\r\n at the end of Mether, Mtcp, or Msmtp in sendmail.cf if you are using Solaris 2.5 (fixed in 2.5.1). I cannot accept messages with stray newlines. Many SMTP servers will time out waiting for \r\n.\r\n. We are running on RedHat with Cyrus and Postfix. Anyone ideas from anyone would be greatly appreciated. The tough thing is that it does not happen every time. Thanks for any help, -Andreas
Re: Permission Problem
Steve Moro wrote: Message Hi All, I installed the Cyrus based on V1.2 of Postfix-Cyrus-Web-cyradm-HOWTO from Luc de Louw on startup when Cyrus startup script run I am getting the following in messages log: Feb 1 09:29:28 mail master[534]: about to exec /usr/cyrus/bin/imapd Feb 1 09:29:28 mail master[534]: couldn't exec /usr/cyrus/bin/imapd: Permissio n denied The master process is owned by user cyrus, group mail. The user cyrus has to have the permission to execute the file, imapd. Check to see if the file and its parent directories have the appropriate permissions. Feb 1 09:29:28 mail master[264]: unrecognized message for service 'imap': 0 Feb 1 09:29:28 mail master[264]: process 534 exited, status 71 Any help would be appreciated. Thanks Steve
Re: Sendmail configuration
I think you're asking this question in the wrong place but anyway, what is the log output when you try to send email to other domains? Yosvany Llerena Rodríguez wrote: This is my firt experience with sendmail. I have installed and listening SendMail V9 in the 25 port. I have isntalled and astarted de pop3 and imap Now i want to configurate this server to relay all external mail with a HUB sendmail V9. my domain is (inf.dom.dp) i have permision to delivery in de HUB sendmail with (domain dom.dp) and this HUB is DNS too and he know my name and all data. With the actual configuration i can send mail to my domain (inf.dom.dp) and all the domain managed by de HUB, but a can't i send mails to Internet or externals domains and don't recieved yet nothing from the HUB domains. please help me . regards.
Re: cyrus imapd+netscape mail client
Hi there, I'm using both IMP and Mozilla 1.1 which is very similar to yours. I have that 'problem' as well but if you take a look at IMP's Trash after deleting your email in Netscape, you'll notice that the email is both in Trash and striked out in Inbox at the same time. Only after you close Netscape mail, the email will be actually deleted off (provided that you set the option in your mail client settings). I'm not too sure how the IMAP protocol is supposed to work but this may not be a bug after all. -- << Eugene Chow >> == xyrik at == -=ecentrenet dot kom=- *** Toomas Vann wrote: Hi! I am new to Cyrus imapd and i recall reading somewhere that Cyrus has problems with Netscape Mail Client deleting mail, but dont recall from where i saw that? OK, problem is that when deleting mail with Netscape Mail, mail is moved to Trash folder but if i use a webmail client (IMP) then i see that it was also left in INBOX and was never deleted from there. Maybe someone know how to resolve this. I am using Cyrus Imapd 2.1.9 and Netscape 7.0 Regards, Toomas
Re: pop3d unstable
Stephen Carr wrote: Dear Eugene Could I ask if a pop3d process is left "running"? Sorry... I don't get what you mean by "left running". If master is killed, the processes that it spawned will still remain and will not die immediately until after a predefined period of time passes without any activity. That's what I observed; at least in my experience. So if I have to restart master for some perculiar reason, I'll kill off all the other processes it spawned rather than wait for it to timeout and die a natural death. Hope I answered your question. I had a similar problem using cyrus-imap 2.0.16 on Solaris 2.5 and by changing the following at the bottom of service.h in the master directory the problem vanished. Never used 2.0.16 before. So I can't comment on it. enum { MAX_USE = 1, REUSE_TIMEOUT = 10 }; What happens is a new pop3d process id launched for each pop3 connection. Regards Stephen Carr
Re: pop3d unstable
Do you have the line that starts pop3d in cyrus.conf? Check the imapd/messages logs when you connect to the pop3 port to see if any errors appear. Also, try killing and restarting master. Don't forget to kill all the processes that were started by master before restarting it. -- << Eugene Chow >> == xyrik at == -=ecentrenet dot kom=- Felix Cuello wrote: Hello, i'm using cyrus-2.1.9 and sasl 2.1.9, and pop3d sometimes doesn't respond. That means, when I do this: [root@sinclair tmp]# telnet localhost 110 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. pop3d does't respond... but [root@sinclair tmp]# telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK sinclair Cyrus IMAP4 v2.1.9 server ready quickly show me OK. --- This problem only occurs into my production server, in fact in my desktop computer all works fine... with exactly the same configuration and packages Do you know where can I start? Thanks a lot, Sorry for my poor english, Felix ___ http://www.palermo.edu _
Re: Problems with POP
In my experience, the processes will not die if you kill the master process. You have to kill all the extra processes manually before re-running master again. -- << Eugene Chow >> == xyrik at == -=ecentrenet dot kom=- *** Felix Cuello wrote: You have a different pop3d running. If you kill master, it kills all running processes. What does ps -aux tell you? [...] No, I don't have a different pop3d running, but when I kill master, pop3d keeps alive for 1 or 2 minutes and after this period of time the process pop3d die. The problem is that when I restart cyrus quickly, pop doesn't work because there are another process (old pop3d) running. Do you have a script to start and stop cyrus to put in /etc/rc.d./init.d, a little bit "soft" than: if stop killall -9 /usr/cyrus/bin/master if start /usr/cyrus/bin/master & :-) [obviously, this script is an example, in fact I don't have any script to do that] Thanks a lot, Félix
Re: deleting mailbox...
Read the docs. You have to give the user cyrus the 'c' permission in the ACLs of the mailbox before you can delete it. Robert Sweet wrote: >I have running system with Cyrus/Procmail/Postifix, but in >my late night configuration mode I created a mailbox without >the user extension i.e., asweet instead of user.asweet. How >do I delete it? I log into the system a cyradmin, here are >some details: > >lam asweet >anyone lrs >localhost.localdomain> dm asweet >deletemailbox: Permission denied > >localhost.localdomain> dam asweet anyone >deleteaclmailbox: anyone: System I/O error > >All I want to do is delete the mailbox.TIA. > > -- << Eugene Chow >> == xyrik at == -=ecentrenet dot kom=-
Re:
That's weird... Why would you want to do that? Anyway, you might like to try this. Since the daemons pop3d and imapd can accept parameters to use different config files, you could create two config files in /etc for imapd and pop3d (ie. pop3d.conf and imapd.conf). Then in each config file, specify a different path for the sasldb2 user database using this parameter: sasl_sasldb_path: /etc/sasldb2 You could have one db file called pop3db and another imapdb if you like. Then in cyrus.conf, change the following line from this: pop3 cmd="/usr/local/cyrus/pop3d" listen="pop3" prefork=0 to: pop3 cmd="/usr/local/cyrus/pop3d -C /etc/pop3d.conf" listen="pop3" prefork=0 The command used in the second line tells pop3d to read pop3d.conf instead of the default imapd.conf. Tell me if it works 'coz I never tested it out before. Hope it helped! Cheers, Eugene Issac Simchayof wrote: >I have a Cyrus IMAP installed and I need just realized that users could >access their account through POP3. > >My question is, > >Is it possible to disable POP3 access to some accounts and leave it >enabled to others? If not how could I disable POP3 access to the IMAP >accounts? > >Any help would be appreciated!! >
Re: Murder
Hi, Could you post your imapd.conf file for me to look at? Thanks. -- << Eugene Chow >> ==--==--== -=ecentrenet dot kom=- http://www.ecentrenet.com ** Willem van den Oord wrote: >here are the relevant mail.log entries: > >Sep 28 22:58:35 jef cyrus/imapd[19626]: login: >kerberos.jef.ahk.nl[193.67.24.49] cyrus plaintext >Sep 28 22:58:38 jef cyrus/imapd[19626]: myfetch: starting txn 2147483666 >Sep 28 22:58:38 jef cyrus/imapd[19626]: mystore: reusing txn 2147483666 >Sep 28 22:58:38 jef cyrus/imapd[19626]: mycommit: committing txn >2147483666 >Sep 28 22:58:38 jef cyrus/mupdate[19612]: accepted connection >Sep 28 22:58:38 jef cyrus/mupdate[19612]: telling master 3 >Sep 28 22:58:38 jef cyrus/mupdate[19628]: starting cmdloop() on fd 13 >Sep 28 22:58:38 jef cyrus/master[19604]: got weird response from child: >9 >Sep 28 22:58:38 jef cyrus/mupdate[19628]: login: mupdate from >kerberos.jef.ahk.nl[193.67.24.49] >Sep 28 22:58:38 jef cyrus/mupdate[19628]: cmd_set(fd:13, qwerqwer) >Sep 28 22:58:38 jef cyrus/imapd[19626]: mupdate NO response: mailbox >already exists >Sep 28 22:58:38 jef cyrus/imapd[19626]: MUPDATE: can't reserve mailbox >entry for 'qwerqwer' >Sep 28 22:58:38 jef cyrus/imapd[19626]: mydelete: starting txn >2147483667 >Sep 28 22:58:38 jef cyrus/imapd[19626]: mydelete: committing txn >2147483667 >Sep 28 22:58:38 jef cyrus/mupdate[19628]: ending cmdloop() on fd 13 > > >I also have a question about authenticating to a mupdate server. >To use a kerberos 5 ticket for authenticating to the mupdate server (and >to the backend servers) i su to cyrus and do a: kinit -k mupdate > >I noticed that i also had to add the mupdate/kerberos.jef.ahk.nl service >ticket to the keytab. This isn't ideal because the tickets it uses >expire. Isn't it possible for clients of mupdate to read their tickets >from the krb5.keytab? > >I allready tried DIGEST-MD5 and other shared secret methods, but i kept >getting messages like: > >Sep 28 21:13:56 jef cyrus/imapd[18882]: badlogin: >kerberos.jef.ahk.nl[193.67.24.49] DIGEST-MD5 [SASL(-13): user not found: >no secret in database] > >I wasn't able to add MD5 tickets with: saslpasswd2 -c -n mupdate. That >doesn't seem to do anything (allthough it doesn't complain about >anything either). Only userPasswords seem to have effect. That's why i >decided to try GSSAPI in the first place. > > >Thanks, > >Willem van den Oord >
Re: Moving cyrus from one machine to another
Okay, I'm confused. Are you using SASLv2 or v1? You seem to be able to execute both saslpasswd and saslpasswd2. Anyway, if you wish to use the auxprop plugin, the parameter 'sasl_pwcheck_method' should be set to 'auxprop' FYI, there's no option 'shadow' for 'sasl_pwcheck_method'. sasl_pwcheck_method: auxprop If you're using auxprop, then you have to have a sasldb2 file in your /etc directory. To create it (if it isn't present), you could start by adding the user cyrus: saslpasswd2 -c cyrus If you wish to have PLAINTEXT authentication only, then add a parameter 'sasl_mech_list' and have 'plain' as its only option, like this: sasl_mech_list: plain Then test your configuration by typing in the following command: imtest -m login -a cyrus localhost Regarding the error message you received while executing saslpasswd2, I'm not sure as to what it is trying to imply but if you don't have any userIDs residing in the file, you could try deleting it and then use saslpasswd2 to recreate the file. Hope this helps... -- << Eugene Chow >> ==--==--== -=ecentrenet dot kom=- http://www.ecentrenet.com Su Li wrote: I am using Linux redhat 7.2. Yes the root partition is located on the mirrored disk. I did saslpasswd cyrus sccucessfully. I login as root to Linux and su to cyrus. When I do: [cyrus@bwc-imap-01 cyrus-sasl-2.1.7]$ cyradm localhost Password: cyradm: cannot authenticate to server with as cyrus I got: Sep 16 12:27:41 bwc-imap-01 imapd[6893]: no OTP secret in database Sep 16 12:27:41 bwc-imap-01 imapd[6893]: badlogin: web4[127.0.0.1] OTP [SASL(-13): user not found: no OTP secret in database] Sep 16 12:27:45 bwc-imap-01 perl: No worthy mechs found When I do: [cyrus@bwc-imap-01 cyrus-sasl-2.1.7]$ cyradm -auth login localhost I got: Login failed: user not found at /usr/lib/perl5/site_perl/5.6.0/i386-linux/Cyrus/IMAP/Admin.pm line 114 cyradm: cannot authenticate to server with login as cyrus Thanks, Su