Re: rename bunch of folders [auf Viren überprü ft]

2007-08-02 Thread Hans Moser
Robert Banz schrieb:

> If you're re-importing the entire mailboxes.db, you have to delete  
> the database file itself and let it re-create it.
> 
> -u "updates" it, but doesn't remove things.
Thanks for making this clear. :)


Hans

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: rename bunch of folders [auf Viren überprü ft]

2007-08-01 Thread Hans Moser
Hans Moser schrieb:

> If I do this outside IMAPd (i.e. by shell's mv command), I have to run
> reconstruct to repair mailboxes.db, right?
First I remove the Spam dir in the file system.
# rm -rf /var/imap/users/foo/Spam

When I dump mailbox.db
# /opt/mail/cyrus/ctl_mboxlist -d > file
, edit dump file and delete the Spam folder row, restore mailbox.db
# /opt/mail/cyrus/ctl_mboxlist -u < file
and dump again
# /opt/mail/cyrus/ctl_mboxlist -d
, the row is still in.

How do I get rid of the Spam folder?


Hans

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: rename bunch of folders [auf Viren überprü ft]

2007-08-01 Thread Hans Moser
Hans Moser schrieb:

> Every user account here by default is created with a "Spam"-folder.
> Now we like to rename all the users' Spam-folder to "Junk".
> (Because Thunderbird by default uses the Junk-folder for this junk filter.)
> 
> What is the best way to do this?
> Has anyone a shell / perl script for this?
> 
> If I do this outside IMAPd (i.e. by shell's mv command), I have to run
> reconstruct to repair mailboxes.db, right?
I was wrong here.
If I do it this way, recontruct creates an Junk entry in mailboxes.db, 
but also recovers the (not more existing) folder Spam.
So I have to edit mailboxes.db "by hand". :(

Hans

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


rename bunch of folders

2007-07-31 Thread Hans Moser
Hi!

Every user account here by default is created with a "Spam"-folder.
Now we like to rename all the users' Spam-folder to "Junk".
(Because Thunderbird by default uses the Junk-folder for this junk filter.)

What is the best way to do this?
Has anyone a shell / perl script for this?

If I do this outside IMAPd (i.e. by shell's mv command), I have to run
reconstruct to repair mailboxes.db, right?


Hans


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


default acl user mailbox

2007-07-31 Thread Hans Moser
Hi!

  - imapd 2.2.12 -

If I create a user's mailbox in cyradm,
# cm user.bla
in some cases the acl is set to
# lam user.bla
bla lrswipcda
and in some other cases there is no acl set.
# cm user.bla1
# lam user.bla1
{nothing}

All our users are in LDAP with ptsloader and sasl ldapdb.

IMAPd checks the existence of the user, right?
If the user exists, acl is set, otherwise not!?


Hans



Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


error if a user never used sieve before?

2007-07-31 Thread Hans Moser
Hi!

If mail arrives for a user via lmtp the log of IMAPd 2.2.12 shows an error:

Jul 11 11:57:13 hsus099 local6:debug lmtpunix[901356]: IOERROR: fstating
sieve script /mail/daten/sieve/v/vkuhn/defaultbc: No such file or directory

The user never used sieve before. So there is no dir under
/mail/daten/sieve/v/vkuhn und no file /mail/daten/sieve/v/vkuhn/defaultbc

So this should not be an error, should it?


Hans



Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Migration from Courier-IMAP to Cyrus [auf Viren überprüft]

2007-07-25 Thread Hans Moser
Mogens Melander schrieb:

> I would like to migrate users from one cyrus-imap to another cyrus-imap,
> source having 'users\name' to destination having '[EMAIL PROTECTED]'.
imapsync does not care about about internals like that.
Provide user credentials, prefixes and delimiters to imapsync - that's 
all. Everything not visible via imap is not of interest.

> Just to make it interresting, i have one UW and one Cyrus server that has
> to get merged into one Cyrus-imap.
Same thing.

> I have been looking at imapsync, but i'm not shure about how to attack
> this problem, having different sub-folders for the same user, on different
> servers.
The system directory structure "around" a user's mailbox is of no 
interest to imap.


Hans

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: sieve vacation with postfix [au f Viren überprüft]

2007-07-25 Thread Hans Moser
Jeffrey McDonald schrieb:
>  Here is the sieve vacation instruction:
> 
> # Vacation
> vacation :days 7 :addresses ["[EMAIL PROTECTED]",  
> "[EMAIL PROTECTED]", "[EMAIL PROTECTED]",  
> "[EMAIL PROTECTED]"] :subject "not here" "I'm away.  I will  
> return in 7 days. ";
Did you use "require vacation"?

The following works for me (2.2.12 + postfix 2.3.x)

--

require "vacation";

vacation
:addresses [ "[EMAIL PROTECTED]", "[EMAIL PROTECTED]" ]
:subject "test"
   "away";

--

Note: One of the addresses in :addresses [] must be in the To:-, CC:- or 
BCC:-header of the mail to activate vacation.


Hans

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


backup imapd with TSM

2007-05-24 Thread Hans Moser

Hi!

Does anyone actually backup and restore Cyrus IMAPd with Tivoli Storage 
Manager (TSM)?


As far as my backup admin told me, the restore tool only shows file 
names, I cannot see file content. So if user comes and tells

"I lost my email x from user y, which arrived 2 weeks ago."
I (obviously) cannot ask him about the filename. And cannot search the 
backup store for user b's email address. :(


A workaround would be to restore the complete folder to /tmp/ and grep 
there for the right mail file. hm...


Any advice?

Hans

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Sieve vacation does not catch alias-address es? [auf Viren überprüft]

2007-05-14 Thread Hans Moser

[EMAIL PROTECTED] schrieb:


5. Select "Vacation", set the Addresses-textfield to
'[EMAIL PROTECTED],[EMAIL PROTECTED]'. Click Move on to Step 4

> [...]

["[EMAIL PROTECTED]","[EMAIL PROTECTED]"] text:
I'm not sure. Maybe you have to put more than a address into brackets 
("addr","addr") to group them.


I think sieve checks the mail header (to:, cc:, bcc:). So the address in 
the header must match the one in the vacation statement.




Hand

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: cyrus postfix [auf Viren überprüft]

2007-05-09 Thread Hans Moser

Zoran Kikic schrieb:


is saslauthd running?
/usr/local/sbin/saslauthd -a pam &
then crate your DB:
/usr/local/sbin/saslpasswd2 -f /etc/sasldb2 -u localhost -c cyrus
chown root:mail /etc/sasldb2
chmod 660 /etc/sasldb2

If saslauthd uses pam, I pretty sure, it will not use a sasldb2.

sasldb is a auxprop plugin, where saslauthd is an password verfication 
service itself. So it is auxprop _or_ saslauthd.


You have to check imapd.conf first.



Hans

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: how to enable digestmd5 and crammd5 ? [ auf Viren überprüft]

2007-04-25 Thread Hans Moser

Hi!

JOYDEEP schrieb:


I am using cyrus with ldap basded authentication. I am usin PLAIN and
LOGIN mechanism in /etc/imapd.conf.
How can I enable digestmd5 and crammd5 now ?
Shared secret mechs in SASL2 are only available with sasldb or ldapdb 
(do I forget any?) not with saslauthd.
So if you want ldap (with is possible with saslauthd, probably you do 
that) _and_ shared secret mechs, you should go with ldapdb. It is 
available from SASL 2.1.21 and above.

I think, I posted an example conf here a while ago.

Shared secret mechs need an unencrypted password to build and check the 
challenge. So you need unencrypted passwords in ldap, which is not a 
problem at all with proper acls.



Hans

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Pop3 [auf Viren überprüft]

2007-02-02 Thread Hans Moser

lars ebeling schrieb:

I have 2 mailservers, host1 and host2. Host1 is my main server. On host1 
I run qpopper and postfix. On host2 I am running Cyrus Imap and postfix.
How do I configure cyrus imapd.conf on host2 to connect host1 and fetch 
a copies of the mails?
imapd is not an pop/imap-client/mua. so it cannot fetch mails out of an 
pop3 box.



Hans

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Cyrus Imapd shared folders question [auf Viren überprüft]

2007-02-01 Thread Hans Moser

[EMAIL PROTECTED] schrieb:


Jan 31 17:59:37 imaptest ptloader[726]:
ldap_sasl_interactive_bind() failed 16 (No such attribute).
Jan 31 17:59:37 imaptest imap[727]: ptload(): bad response
from ptloader server: ptsmodule_connect() failed
Jan 31 17:59:37 imaptest imap[727]: ptload completely failed:
unable to canonify identifier: toto2
Jan 31 17:59:37 imaptest imap[727]: badlogin: [10.1.45.1]
plaintext toto2 invalid user

Please show the toto2 entry from your ldap server.

# ldapsearch -x -h ldap.mydomain.com  -b ou=users,o=myorg,dc=fr uid=toto2

you must have anonymous read access to uid.

I use this in imapd 2.2.12 (ldapdb and pts):

sasl_log_level: 5
sasl_pwcheck_method: auxprob
sasl_auxprob_plugin: ldapdb
sasl_ldapdb_uri: ldap://foo
sasl_ldapdb_id: human
sasl_ldapdb_pw: pw
sasl_ldapdb_mech:  PLAIN DIGEST-MD5 CRAM-MD5 LOGIN
allowplaintext: yes
sasl_minimum_layer: 0
sasl_ldapdb_starttls: Demand
sasl_ldap_search_base: ou=humans,ou=bar
sasl_ldap_search_filter: maildrop=%U
tls_cert_file: foo.pem
tls_key_file: foo6.pem
tls_ca_file: foo06.pem
tls_ca_path: ssl/ca
#
# ptloader ldap:
ldap_id: human
ldap_sasl: 1
ldap_password: pw
ldap_uri: ldap://foo
ldap_mech: PLAIN DIGEST-MD5 CRAM-MD5 LOGIN
ldap_start_tls: 1
ldap_tls_cacert_file: foo.pem
ldap_tls_cert: foo6.pem
ldap_tls_key: foo06.pem
ldap_base: ou=humans,ou=bar
ldap_group_base: ou=gruppen,ou=humans,ou=bar
ldap_group_filter: ou=%U
ldap_member_attribute: member
ldap_group_scope: sub
ldap_member_method: attribute


Hans

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Delivering mail to remote mailbox (cyrus imapd) [auf Viren überprüft]

2007-02-01 Thread Hans Moser

Raul Dias schrieb:


For some users I would like to deliver the mail to a remote cyrus imapd.

"For some users" means you cannot use a global configuration.
In postfix I would say you could define some kind of condition and if 
this is true use a lmtp transport to imapd box. [first clue]



Forwarding to a MTA in the cyrus box is not an option, as it is really
common to have to reprocess email in a baysian database.  If the message
is forwarded to another mta, this can confuse the learning leading to
false positives and negatives.

Really?


I know that lmtp can listen to a tcp port which solves the cyrus side of
the problem.  However I need to deliver the message to the lmtp server.
If it was local I could use "deliver", but deliver does not work over
tcp (am I wrong?).

IMHO yes, it cannot.


So, what are my possibilities?  Should I write my own MDA for this?

I think you should ask at MTA side -> sendmail.



Hans

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: ldap lookup with different search_base' s? [auf Viren überprüft]

2007-01-04 Thread Hans Moser

Andreas Winkelmann schrieb:

Hmm, you can use ldapdb. Then you can specify multiple authz-regexp In 
slapd.conf. Seperate them somehow in the Matching-Pattern.

That's what I would recommend too.


I havn't tested this, but I think it's a try worth.

It works.
Slapd converts the the SASL uid for u. Create a general regexp for the 
user, which points to something like cn=$1,ou=users,dc=mailservices
and a special regexp for uid admin (or cyrus ...), which points to 
cn=admin,dc=mailservices.


>> What do I have to enter at "admins" in /etc/imapd.conf?
Something that matches your special regexp. In my following example it 
is cyrus.


I.e. 
authz-regexp uid=cyrus,cn=[^,]*,cn=auth
dn:cn=admin,dc=mailservices
authz-regexp uid=([^,]*),cn=[^,]*,cn=auth
dn.regex:cn=$1,ou=users,dc=mailservices


Ask man slap.conf for "authz-policy" and "authz-regexp". And man 
slapd.access.



Hans


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


IMAPd on AIX 5.3 / make it compile [auf Viren üb erprüft]

2006-09-26 Thread Hans Moser

Hi!

To make IMAPd compile on AIX 5.3, we have to make some changes (the same 
for 2.2.12 and 2.3.7):


aix> cd $SOURCE
aix> cd cyrus-imapd-2.3.7/perl/imap
aix> Edit file ‚Makefile.PL’
'MYEXTLIB'  => '../../lib/libcyrus.a ../../lib/libcyrus_min.a’,
extend to:
'MYEXTLIB'  => '../../lib/libcyrus.a ../../lib/libcyrus_min.a 
/opt/freeware/lib/gcc-lib/powerpc-ibm-aix5.3.0.0/3.3.2/libgcc.a',


aix> cd $SOURCE
aix> cd cyrus-imapd-2.3.7/perl/sieve/managesieve
aix> Edit file ‘Makefile.PL’
'MYEXTLIB'  => '../lib/isieve.o ../lib/lex.o ../lib/mystring.o 
../lib/request.o ../../../lib/libcyrus.a ../../../lib/libcyrus_min.a

extend to:
'MYEXTLIB'  => '../lib/isieve.o ../lib/lex.o ../lib/mystring.o 
../lib/request.o ../../../lib/libcyrus.a ../../../lib/libcyrus_min.a 
/opt/freeware/lib/gcc-lib/powerpc-ibm-aix5.3.0.0/3.3.2/libgcc.a',


aix> cd cyrus-imapd-2.3.7
aix> Edit file ‘configure.in’

LDAP_LIBS=""
to  
LDAP_LIBS="-lldap -llber"
 (two times!)

I compiled everthing (BDB, SASL, OpenLDAP) with
--prefix=/opt/mail \
--libdir=/opt/freeware/lib \
--includedir=/opt/freeware/include \


Is this realy the simplest way to get IMAPd compiled in this configuration?


Hans


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Integrted tool for adminstering Cyrus IMAP and LDAP. [auf Viren überprüft]

2006-09-22 Thread Hans Moser

Rafael Alcalde schrieb:

Suse (NOVELL) give up SLOX, there is no new releases for a year, and now 
the only way is to migrate to OX. But, it still have not a development 
environment, connectors to other systems like outlook or palm..., 

Do you speak about the community or commercial version of OX?
Do you know OXTender?
-> http://www.open-xchange.com/EN/product/oxtender.html

Hans


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Howto migrate from postfix-cyrus to Exchang e [auf Viren überprüft]

2006-09-20 Thread Hans Moser

Rafael Alcalde schrieb:

we are going to migrate (most likely) to Exchange and the main reason 
are the shared calendars, resource booking, connections to pal, mobile 
devices...and JAVA APIS to integrate this system to our ERP.


So, someone has another idea?

-> http://www.open-xchange.com/EN/
-> http://www.kolab.org/index.html

can you tell me the procedure to migrate the postfix accounts and 
mailboxes to exchange?

Wrong direction! Go back! :-)

Hans


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


german IMAPd consultant wanted! [body in german] [auf Viren überprüft]

2006-09-12 Thread Hans Moser

Hi!

I'm searching for a competent IMAPd consultant in germany.


Scheinbar ist es gar nicht so einfach in Deutschland einen fähigen 
Consultant zum Thema IMAPd aufzutreiben, der einen Workshop dazu bei uns 
macht.


Die Fähigkeiten sollten über das Aufrufen von cyradm und "cm mailbox" 
hinausgehen. :-) Erfahrungen beim Kompilieren, Konfigurieren und im 
täglichen Betrieb in größeren und großen Umgebungen werden 
vorausgesetzt. Erfahrungen in Umgebungen mit LDAP und SASL ldapdb sind 
wünschenswert.


Bei Interesse bitte eine PN.

Danke!


Hans


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

bugzilla / compile error 2.3.7 / compile 2.2.12 with pts/ldap [auf Viren überprüft]

2006-09-07 Thread Hans Moser

I tried 2.3.7 and run into different errors.

So I wanted to open a bugzilla account. But I got a blank page after 
pressing the "create account" button and got no email.


[I send a mail to "the maintainer" of andrew bugzilla, but got no response.]

AIX 5.3 with gcc-3.3.2 and "This is perl, v5.8.2 built for 
aix-thread-multi".


export CC=gcc
export CFLAGS="-O2"
export CXXFLAGS="-O2"
export MAKE=gmake
export PATH=$PATH:/usr/vac/bin

./configure \
--prefix=/opt/mail/ \
--with-cyrus-prefix=/opt/mail/cyrus \
--with-service-path=/opt/mail/cyrus \
--libdir=/opt/freeware/lib \
--includedir=/opt/freeware/include \
--mandir=/opt/freeware/man \
--with-bdb-libdir=/opt/freeware/lib \
--with-bdb-incdir=/opt/freeware/include \
--with-sasl=/opt/freeware/lib \
--with-openssl=/opt/freeware \
--with-ldap=/opt/freeware \
--with-pidfile=/opt/mail/var/imap/imap-master.pid \
--with-idle=idled



--- make.log: ---

gmake[1]: Leaving directory 
`/SOURCE/mail/2006-09/cyrus-imapd-2.3.7/ptclient'

### Making all in /SOURCE/mail/2006-09/cyrus-imapd-2.3.7/perl
gmake[1]: Entering directory `/SOURCE/mail/2006-09/cyrus-imapd-2.3.7/perl'
### Making all in /SOURCE/mail/2006-09/cyrus-imapd-2.3.7/perl/imap
Checking if your kit is complete...
Looks good
Writing Makefile for Cyrus::IMAP
gmake[2]: Entering directory 
`/SOURCE/mail/2006-09/cyrus-imapd-2.3.7/perl/imap'

cp IMAP/Admin.pm blib/lib/Cyrus/IMAP/Admin.pm
cp IMAP.pm blib/lib/Cyrus/IMAP.pm
cp IMAP/Shell.pm blib/lib/Cyrus/IMAP/Shell.pm
cp IMAP/IMSP.pm blib/lib/Cyrus/IMAP/IMSP.pm
/usr/bin/perl -e 'use ExtUtils::Mksymlists; \
Mksymlists("NAME" => "Cyrus::IMAP", "DL_FUNCS" => {  }, "FUNCLIST" => 
[], "DL_VARS" => []);'
/usr/bin/perl /usr/opt/perl5/lib/5.8.2/ExtUtils/xsubpp  -typemap 
/usr/opt/perl5/lib/5.8.2/ExtUtils/typemap -typemap typemap  IMAP.xs > 
IMAP.xsc

 && mv IMAP.xsc IMAP.c
cc_r -c  -I../../lib -I../.. -I../../et -I/opt/freeware/lib/include 
-I/opt/freeware/include -D_ALL_SOURCE -D_ANSI_C_SOURCE -D_POSIX_SOURCE -qma
xmem=16384 -qnoansialias -DUSE_NATIVE_DLOPEN -DNEED_PTHREAD_INIT -q32 
-D_LARGE_FILES -qlonglong -O   -DVERSION=\"1.00\" -DXS_VERSION=\"1.00\"

"-I/usr/opt/perl5/lib/5.8.2/aix-thread-multi/CORE"  -DPERL_POLLUTE IMAP.c
"IMAP.xs", line 635.23: 1506-280 (W) Function argument assignment 
between types "void(*)(struct imclient*,void*,struct imclient_reply*)" 
and "v

oid*" is not allowed.
Running Mkbootstrap for Cyrus::IMAP ()
chmod 644 IMAP.bs
rm -f blib/arch/auto/Cyrus/IMAP/IMAP.so
LD_RUN_PATH="" ld  -bhalt:4 -bM:SRE 
-bI:/usr/opt/perl5/lib/5.8.2/aix-thread-multi/CORE/perl.exp -bE:IMAP.exp 
-bnoentry -lpthreads -lc_r IMAP.o
 -o blib/arch/auto/Cyrus/IMAP/IMAP.so ../../lib/libcyrus.a 
../../lib/libcyrus_min.a  -L/opt/freeware/lib -ldb-4.2 -lsasl2 
-L/opt/freeware/lib -

L/opt/freeware/lib -lssl -lcrypto
ld: 0711-317 ERROR: Undefined symbol: .__udivdi3
ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more 
information.

gmake[2]: *** [blib/arch/auto/Cyrus/IMAP/IMAP.so] Error 8
gmake[2]: Leaving directory 
`/SOURCE/mail/2006-09/cyrus-imapd-2.3.7/perl/imap'

gmake[1]: *** [all] Error 1
gmake[1]: Leaving directory `/SOURCE/mail/2006-09/cyrus-imapd-2.3.7/perl'
gmake: *** [all] Error 1
make.log: ENDE
--- make.log: ---


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


compile 2.2.12 with pts/ldap [auf Viren überpr üft]

2006-09-06 Thread Hans Moser

Hi!

I compiled 2.2.12 successfully before without ldap/pts (on AIX):
--- 1. -
export CC=gcc
export CFLAGS="-O2"
export CXXFLAGS="-O2"
export MAKE=gmake
export PATH=$PATH:/usr/vac/bin

./configure \
--prefix=/opt/mail \
--with-cyrus-prefix=/opt/mail/cyrus \
--with-service-path=/opt/mail/cyrus \
--libdir=/opt/freeware/lib \
--includedir=/opt/freeware/include \
--mandir=/opt/freeware/man \
--with-bdb-libdir=/opt/freeware/lib \
--with-bdb-incdir=/opt/freeware/include \
--with-sasl=/opt/freeware/lib \
--with-openssl=/opt/freeware \
--with-idle=idled
--- 1. -

Now I want to add ldap/pts. ldap*.h is in /opt/freeware/include.

--- 2. -
export CC=gcc
export CFLAGS="-O2"
export CXXFLAGS="-O2"
export MAKE=gmake
export PATH=$PATH:/usr/vac/bin

./configure \
--prefix=/opt/mail \
--with-cyrus-prefix=/opt/mail/cyrus \
--with-service-path=/opt/mail/cyrus \
--libdir=/opt/freeware/lib \
--includedir=/opt/freeware/include \
--mandir=/opt/freeware/man \
--with-bdb-libdir=/opt/freeware/lib \
--with-bdb-incdir=/opt/freeware/include \
--with-sasl=/opt/freeware/lib \
--with-openssl=/opt/freeware \
--with-idle=idled \
--with-ldap=/opt/freeware \
--with-pts=ldap \
--with-auth=pts
--- 2. -

It does not compile.
--- make -
### Making all in /SOURCE/mail/cyrus-imapd-2.2.12/ptclient
gmake[1]: Entering directory `/SOURCE/mail/cyrus-imapd-2.2.12/ptclient'
gcc -c -I.. -I./../imap -I./../lib -I../et -I/opt/freeware/include 
-I/opt/freeware/include -I/opt/freeware/include 
-I/opt/freeware/include/include -DHAVE_CONFIG_H -O2 ptexpire.c
gcc -L/opt/freeware/lib -L/opt/freeware/lib  -o ptexpire ptexpire.o 
../imap/mutex_fake.o ../imap/cli_fatal.o ../imap/libimap.a 
../lib/libcyrus.a ../lib/libcyrus_min.a  -L/opt/freeware/lib/lib 
-lsasl2 -L/opt/freeware/lib/lib  -lsasl2-L/opt/freeware/lib 
-ldb-4.2 -lssl -lcrypto  ../et/libcom_err.a
gcc -c -I.. -I./../imap -I./../lib -I../et -I/opt/freeware/include 
-I/opt/freeware/include -I/opt/freeware/include 
-I/opt/freeware/include/include -DHAVE_CONFIG_H -O2 ptloader.c
gcc -c -I.. -I./../imap -I./../lib -I../et -I/opt/freeware/include 
-I/opt/freeware/include -I/opt/freeware/include 
-I/opt/freeware/include/include -DHAVE_CONFIG_H -O2 ldap.c

ldap.c: In function `ptsmodule_make_authstate_attribute':
ldap.c:909: warning: assignment makes pointer from integer without a cast
ldap.c: In function `ptsmodule_make_authstate_filter':
ldap.c:1052: warning: assignment makes pointer from integer without a cast
gcc -L/opt/freeware/lib -L/opt/freeware/lib  -o ptloader ptloader.o 
ldap.o ../imap/mutex_fake.o ../master/service-thread.o 
-L/opt/freeware/lib  -L/opt/freeware/include/lib   ../imap/libimap.a 
../lib/libcyrus.a ../lib/libcyrus_min.a  -L/opt/freeware/lib/lib 
-lsasl2 -L/opt/freeware/lib/lib  -lsasl2-L/opt/freeware/lib 
-ldb-4.2 -lssl -lcrypto  ../et/libcom_err.a

ld: 0711-317 ERROR: Undefined symbol: .ldap_initialize
ld: 0711-317 ERROR: Undefined symbol: .ldap_set_option
ld: 0711-317 ERROR: Undefined symbol: .ldap_unbind
ld: 0711-317 ERROR: Undefined symbol: ber_pvt_opt_on
ld: 0711-317 ERROR: Undefined symbol: .ldap_get_option
ld: 0711-317 ERROR: Undefined symbol: .ldap_sasl_interactive_bind_s
ld: 0711-317 ERROR: Undefined symbol: .ldap_err2string
ld: 0711-317 ERROR: Undefined symbol: .ldap_simple_bind_s
ld: 0711-317 ERROR: Undefined symbol: .ldap_start_tls_s
ld: 0711-317 ERROR: Undefined symbol: .ldap_whoami_s
ld: 0711-317 ERROR: Undefined symbol: .ber_bvfree
ld: 0711-317 ERROR: Undefined symbol: .ber_free
ld: 0711-317 ERROR: Undefined symbol: .ldap_memfree
ld: 0711-317 ERROR: Undefined symbol: .ldap_value_free
ld: 0711-317 ERROR: Undefined symbol: .ldap_msgfree
ld: 0711-317 ERROR: Undefined symbol: .ldap_search_st
ld: 0711-317 ERROR: Undefined symbol: .ldap_first_entry
ld: 0711-317 ERROR: Undefined symbol: .ldap_first_attribute
ld: 0711-317 ERROR: Undefined symbol: .ldap_get_values
ld: 0711-317 ERROR: Undefined symbol: .ldap_next_attribute
ld: 0711-317 ERROR: Undefined symbol: .ldap_count_entries
ld: 0711-317 ERROR: Undefined symbol: .ldap_next_entry
ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more 
information.

collect2: ld returned 8 exit status
gmake[1]: *** [ptloader] Error 1
gmake[1]: Leaving directory `/SOURCE/mail/cyrus-imapd-2.2.12/ptclient'
gmake: *** [all] Error 1
--- make -


What is missing?


Hans


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Cyrus Homepage [auf Viren überprüft]

2006-09-05 Thread Hans Moser

Frank Richter schrieb:

if you follow the link "Cyrus Home Page" at the bottom --> Not found
think correct adress is: http://cyrusimap.web.cmu.edu/

Even there is no link to the wiki
-> http://cyrusimap.web.cmu.edu/twiki/bin/view/Cyrus/WebHome
Behind "Documentation" there is no content. ("coming soon" since feb 2006?)

I think the web site needs a redesign...


Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: sieve doesn't work [auf Viren überprüft]

2006-08-30 Thread Hans Moser

Hi!

Martin G.H. Minkler schrieb:

After reloading and even restarting cyrus with the changes to the 
sieveshell die line and the imapd.conf in place as suggested, I still

 get the same (slighty longer but unfortunately no more informative)
 error message from sieveshell:

unable to connect to server () at /usr/bin/sieveshell line 174.

Can you doublecheck your changes to managesieve?


Do I need to restart saslauthd to re-read the config from
/etc/imapd.conf?

You don't use saslauthd at all, as I can see from your config, you use
auxprop + sasldb2...
With this you could use CRAM-MD5 and DIGEST-MD5 as well.
Perhaps you could change sasl_mech_list:
sasl_mech_list: DIGEST-MD5 CRAM-MD5 PLAIN LOGIN


Is there maybe an alternative to sieveshell? Telneting sieve seems to
 return such a correct response...

In you first post I can't see information about "sasl" and/or "STARTTLS"
Here is what I get:

"IMPLEMENTATION" "Cyrus timsieved v2.2.12"
"SASL" "LOGIN PLAIN DIGEST-MD5 CRAM-MD5"
"SIEVE" "fileinto reject envelope vacation imapflags notify subaddress 
relational comparator-i;ascii-numeric regex"

"STARTTLS"
OK


Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Good book on Cyrus? [auf Viren überprüft ]

2006-07-18 Thread Hans Moser

Michael Menge schrieb:


I found the hint to the following German Book


POP3 und IMAP
Mailserver mit Courier und Cyrus
[...]
but it is not yet in the shops and i don't know if there is an english  
version or if it is useful

It will be published (hopefully) in "November 2006"
-> https://www.opensourcepress.de/178.html

Just ask for a translation everyone ... :-)
-> https://www.opensourcepress.de/11.html


Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: debian etch, ldap, and cyrus 2.2 [a uf Viren überprüft]

2006-07-07 Thread Hans Moser

Warren Turkal schrieb:

Is it possible to run cyrus 2.2 on Debian Etch with LDAP auth and allow 
something other than plaintext auth methods? I am using saslauthd (thus 
limiting myself to plaintext), but I see something called pts in the 
imapd.conf man page that seems to be able to use ldap. However, I am not 
really sure how to set it up or if it is what I am looking for.

Try ldapdb (sasl 2.1.21 or above) instead of saslauthd.
You cannot use shared secret mechanisms with saslauthd.



Hans



Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Virtual emails at login [auf Viren überprü ft]

2006-06-28 Thread Hans Moser

Marten Lehmann schrieb:

web.de (a German freemail service) allows freemail users to login 
through pop3 only once in 5 minutes (while you can login as often as you 
want through the webmail interface). If I'm logging in more often, I get 
a message that appears as a usual email, informing me that I can only 
login once in 5 minutes and that I have exceeded this limit. No matter 
if I'm deleting it or if I don't: If I'm logging in after 5 minutes it 
has disappeared.
IIRC I got a pop-up message for that, when I used mozilla mail with pop3 
and web.de, not an eMail.


Maybe you want to display too much information, otherwise you could have 
a look at setinfo in cyradm.



Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Some cyrus installation problems [auf Vir en überprüft]

2006-05-15 Thread Hans Moser

David Korpiewski schrieb:

(3) I tried running cyradm to build a mailbox, but it failed because 
some directories were not in the right place originally.  After moving 
the Cyrus/IMAP directory up a level it got rid of those initial errors 
about not finding the .pm files and now I get this error:


Can't locate loadable object for module Cyrus::IMAP in @INC (@INC 
contains: /usr/lib/perl5/5.8.5/i386-linux-thread-multi 

> [...]

Can anyone help me?  Is this this right list for this?
Check the location of the cyradm perl files (find a directory named 
"Cyrus"). Check PERL5LIB.

Add the perl files' place to PERL5LIB.

I've the perl files in
/opt/mail/lib/site_perl/5.8.2/aix-thread-multi/Cyrus
and
PERL5LIB=/opt/mail/lib/site_perl/5.8.2


Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Auth methods [auf Viren überprüft]

2006-05-15 Thread Hans Moser

Cristi Mitrana schrieb:


 It's possible. Authentication for cyrus-imapd is handled by the
cyrus-sasl library, which can authenticate users out of /etc/sasldb2,
mysql, postgresql (sqlite ?) and with the help of saslauthd  from
/etc/passwd, GSSAPI, ldap or any pam stack setup. See the docs for more
options (docs from cyrus-sasl and from cyrus-imapd) and search the list
archive for setup pointers.

Or the auxprop-plugin ldapdb (sasl 2.1.21 or above).


Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Delete a user from all ACLs [auf Viren überprü ft]

2006-04-21 Thread Hans Moser

Hi!

Is there a simple way to figure out all the mailboxes a user is in the 
ACLs and delete him?


Normaly one user has one own mailbox, it is easy to delete this 
(including the ACL). But when I delete the user from my ldap, he has to 
disappear from all the mailboxes' ACLs, where someone gave rights to 
him. (i.e. user-a gave permission to user-b to read mailbox 
user-a.project and now user-b has to be deleted.)


I have to add this to an automatic process for deleting a mail user.


Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: setinfo: System I/O error [auf Viren überpr üft]

2006-04-13 Thread Hans Moser

Hans Moser schrieb:


I can't set an info with setinfo in cyradm (as cyrus which is in "admins"):

localhost.foo.de> setinfo motd foo
setinfo: System I/O error

The log files say nothing...

There was no var/imap/msg directory. I created it and touch(ed) a motd file.
Now it works.

"make install" did not create any directory structure, such as
var/spool/imap
var/sieve
var/imap
I had to create it manually. Is this normal?

I wonder what other directories are still missing ...


Hans



Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Stress testing Cyrus + postfix [auf Viren überprüft]

2006-04-13 Thread Hans Moser

Ow Mun Heng schrieb:

Anyone knows any scripts for stress testing an email system I just
brought up??

Would appreciate pointers to some if possible.

-> http://www.slamd.com
SLAMD should be able do stress test on SMTP and IMAP too - I never tried 
it so far.


Hans



Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


setinfo: System I/O error [auf Viren überprüft ]

2006-04-10 Thread Hans Moser

Hi!

I can't set an info with setinfo in cyradm (as cyrus which is in "admins"):

localhost.foo.de> setinfo motd foo
setinfo: System I/O error

The log files say nothing...


Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Allow plaintext and TLS [auf Viren überprü ft]

2006-04-04 Thread Hans Moser

Hi!

Patrick H Radtke schrieb:


Have you tried imtest?
imtest -m PLAIN -t ""  hostname

This should do a CAPABILITY call, AUTH=PLAIN won't be advertised, and 
then it should to a STARTTLS and then another CAPABILITY call and 
AUTH=PLAIN will now be advertised since the connection is secure.


When I use
#imtest -a user -v hostname
the mech is DIGEST-MD5 and it works.

When I use
#imtest -t "" -a user -v hostname
the mech is DIGEST-MD5 and it works. IMAPd offers PLAIN after TLS is 
established.
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS 
NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND 
BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE 
AUTH=LOGIN AUTH=PLAIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5 SASL-IR

S: C01 OK Completed
C: A01 AUTHENTICATE DIGEST-MD5
S: A01 OK Success (tls protection)
Authenticated.
Security strength factor: 256

When I use
#imtest -a user -v -m plain hostname
IMAPd complains about not using encrytion:
Apr  4 12:42:12 rzhs050 local6:notice imap[21750]: badlogin: 
rzhs050.ofd-h.de [10.49.6.20] PLAIN [SASL(-16): encryption needed to use 
mechanism: security flags do not match required]


When I use
#imtest -t "" -a user -v -m plain hostname
IMAPd says this:
Apr  4 12:39:36 rzhs050 local6:notice imap[21750]: starttls: TLSv1 with 
cipher AES256-SHA (256/256 bits new) no authentication
Apr  4 12:39:42 rzhs050 auth|security:err|error imap[21750]: unknown 
password verifier
Apr  4 12:39:42 rzhs050 auth|security:notice imap[21750]: Password 
verification failed
Apr  4 12:39:42 rzhs050 local6:notice imap[21750]: badlogin: 
rzhs050.ofd-h.de [10.49.6.20] PLAIN [SASL(-4): no mechanism available: 
Password verification failed]

No action on slapd at all!
Why is that, some config error?

# imapd.conf:
configdirectory: /opt/mail/var/imap
partition-default: /opt/mail/var/spool/imap
sievedir: /opt/mail/var/sieve
admins: cyrus root
allowanonymouslogin: no
autocreatequota: 1
reject8bit: no
quotawarn: 90
timeout: 30
poptimeout: 10
dracinterval: 0
drachost: localhost
sasl_log_level: 5
sasl_pwcheck_method: auxprob
sasl_auxprob_plugin: ldapdb
sasl_ldapdb_uri: ldap://rzhs050.ofd-h.de
sasl_ldapdb_id: human
sasl_ldapdb_pw: nothing
sasl_ldapdb_mech:  PLAIN DIGEST-MD5 CRAM-MD5 LOGIN
sasl_mech_list: PLAIN DIGEST-MD5 CRAM-MD5 LOGIN
allowplaintext: yes
sasl_minimum_layer: 0
sasl_ldapdb_starttls: Demand
sasl_ldap_search_base: ou=humans,ou=foo,c=de
sasl_ldap_search_filter: uid=%U
lmtp_overquota_perm_failure: no
#
# if you want TLS, you have to generate certificates and keys
#
tls_cert_file: /opt/mail/etc/openldap/ssl/ldapcert.pem
tls_key_file: /opt/mail/etc/openldap/ssl/ldapkey.pem
tls_ca_file: /opt/mail/etc/openldap/ssl/ldapca.pem
tls_ca_path: /opt/mail/etc/openldap/ssl/ca

Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: IMAPd does not start [auf Viren überprüft ]

2006-04-03 Thread Hans Moser

Hans Moser schrieb:

I installed IMAPd 2.2.12 from source (on AIX 5.3). Everything seems to 
be fine, but the server doesn't start at all. When I start "master", I'm 
back at the command prompt immediatly. The same with "master -D".
There is no process running. (Even with -C /path/to/where/no/file/is it 
says nothing)

How can I get more (any!) information what's wrong?

I had to restart syslogd, then IMAPd logged und I saw the pid file
problem. So I solved this.

So BTW: A --prefix has no effect on files' pathes. Other than OpenLDAP
or Postfix Cyrus IMAPd searches for /etc/cyrus.conf, /etc/cyrus.conf and
/var/run/cyrus-master.pid instead of prefix/etc/cyrus.conf,
prefix/etc/imapd.conf and prefix/var/run/cyrus-master.pid. Why is that?
Is there no other way to configure this than using the commandline
options -C -M -p?

Hans




Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


IMAPd does not start [auf Viren überprüft]

2006-04-03 Thread Hans Moser

Hi!

I installed IMAPd 2.2.12 from source (on AIX 5.3). Everything seems to 
be fine, but the server doesn't start at all. When I start "master", I'm 
back at the command prompt immediatly. The same with "master -D".
There is no process running. (Even with -C /path/to/where/no/file/is it 
says nothing)

How can I get more (any!) information what's wrong?


Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


man links dead [auf Viren überprüft]

2006-03-23 Thread Hans Moser

Hi!

The links unter
-> http://asg.web.cmu.edu/cyrus/download/imapd/man.html
are dead.


Cheers

Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: cyrus + sasl + pam + mysql problem [auf V iren überprüft]

2006-03-22 Thread Hans Moser

Rudy Gevaert schrieb:


My cyradm password is set and can be found in the /etc/sasldb2 file.

If you have your users in mysql, you don't need anything in /etc/sasldb2.
You have to set your admin accounts for cyradm in the mysql db.
Ok: I removed /etc/sasldb2 and added a user cyradm in my mysql db.  With 
a password.


opening an imap connection for a user and using the password of the 
cyradm user doesn't work.


Neighter does
sieveshell  -a cyrus -u rgevaert localhost
(Before with the sasldb2 file I could get logged in)

Is the username "cyrus" (like in "-a cyrus") or "cyradm"?

Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


IMAPd / SASL / LDAP [auf Viren überprüft]

2006-03-21 Thread Hans Moser

Hi!

I have a (dirty) testinstall on SuSE 9.2. I changed SASL with v. 2.1.21
for ldapdb. Works so far.

I installed a AIX server with OpenLDAP, SASL und IMAPd und copied the
conf. and LDAP data from SuSE server.
OpenLDAP works as on SuSE.
I took imapd.conf and cyrus.conf and changed the paths to fit the AIX
server. IMAPd starts.
Now I cannot connect as with cyradm. IMAPd / SASL does not connect to
the ldap server at all.

IMAPd 2.2.12
./configure \
--prefix=/opt/mail/imap \
--exec-prefix=/opt/freeware \
--libdir=/opt/freeware/lib \
--includedir=/opt/freeware/include \
--with-cyrus-prefix=/opt/mail/cyrus \
--with-service-path=/opt/mail/cyrus \
--mandir=/opt/freeware/man \
--with-bdb-libdir=/opt/freeware/lib \
--with-bdb-incdir=/opt/freeware/include \
--with-sasl=/opt/freeware/lib \
--with-openssl=/opt/freeware

SASL 2.1.21 (2nd after installing LDAP)
./configure \
--prefix=/opt/mail/sasl \
--exec-prefix=/opt/mail \
--libdir=/opt/freeware/lib \
--with-plugindir=/opt/mail/sasl/lib/sasl2 \
--mandir=/opt/freeware/man \
--enable-sample \
--enable-anon \
--enable-plain \
--disable-krb4 \
--disable-otp \
--enable-cram \
--enable-digest \
--with-bdb-libdir=/opt/freeware/lib \
--with-bdb-incdir=/opt/freeware/include \
--enable-ldapdb \
--with-ldap=/opt/freeware/ldap \
--with-openssl=/opt/freeware/include/openssl

imapd.conf
configdirectory: /opt/mail/imap/var/lib/imap
partition-default: /opt/mail/var/spool
sievedir: /opt/mail/var/sieve
admins: cyrus root
allowanonymouslogin: no
autocreatequota: 1
reject8bit: no
quotawarn: 90
timeout: 30
poptimeout: 10
dracinterval: 0
drachost: localhost
sasl_log_level: 2
sasl_pwcheck_method: auxprob
sasl_auxprob_plugin: ldapdb
sasl_ldapdb_uri: ldap://rzhs050.ofd-h.de
sasl_ldapdb_id: human
sasl_ldapdb_pw: nothing
sasl_ldapdb_mech:  PLAIN
# sasl_mech_list: PLAIN DIGEST-MD5 CRAM-MD5
sasl_mech_list: CRAM-MD5
allowplaintext: yes
sasl_minimum_layer: 0
# sasl_ldapdb_mech: DIGEST-MD5
# sasl_ldapdb_starttls: Demand
sasl_ldap_search_base: ou=humans,ou=steuer,o=foo,c=de
sasl_ldap_search_filter: uid=%U
lmtp_overquota_perm_failure: no

IMAPd log
Mar 21 16:53:12 rzhs050 local6:debug imap[12902]: accepted connection
Mar 21 16:53:16 rzhs050 local6:notice imap[12902]: badlogin: 
rzhs050.ofd-h.de [10.49.6.20] plaintext cyrus SASL(-4): no mechanism 
available: checkpass failed


cyradm
# cyradm -u cyrus rzhs050.ofd-h.de
IMAP Password:

Login failed: no mechanism available at 
/opt/mail/imap/lib/site_perl/5.8.2/aix-thread-multi//Cyrus/IMAP/Admin.pm 
line 118

cyradm: cannot authenticate to server with  as cyrus




Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Start with cyrus 2.3.1? [auf Viren überprü ft]

2006-02-27 Thread Hans Moser

Andreas Hasenack schrieb:

We're starting a new test with cyrus imapd, which will end up in a 
production setup in the next few month.


Shall we test with the stable 2.2.12 or 2.3.1?
In general I would prefer "stable", but if 2.3.x will become stable in 
the next time (before we'll get in production), it will be better to 
test with 2.3.1 to minimize later update dependancies, won't it?



There are some fixes in CVS for 2.3.1, perhaps if you could wait for
2.3.2?

"Waiting for the next version" is a game you can play your whole life... ;-)

This doesn't answer my question.
Are there scrupulosities to now start with 2.3.x yet or 2.2.x still?


Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Start with cyrus 2.3.1? [auf Viren überprüft ]

2006-02-24 Thread Hans Moser

Hi!

We're starting a new test with cyrus imapd, which will end up in a 
production setup in the next few month.


Shall we test with the stable 2.2.12 or 2.3.1?
In general I would prefer "stable", but if 2.3.x will become stable in 
the next time (before we'll get in production), it will be better to 
test with 2.3.1 to minimize later update dependancies, won't it?


Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Groups in LDAP [auf Viren überprüft]

2005-09-08 Thread Hans Moser

Hi!

My Cyrus users are in LDAP - via sasl ldapdb.
Does this work with LDAP-groups too?
Do I have to configure something else?


Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


configure error on AIX 5.1 [auf Viren überprüf t]

2005-09-06 Thread Hans Moser

Hi!

I can't configure imapd 2.2.12 on AIX 5.1. BDB 4.2 is installed.
db.h is in /usr/local/include.
libs are in /usr/local/lib.
configure.log shows the following errors (excerpt):

It was created by configure, which was
generated by GNU Autoconf 2.57.  Invocation command line was
  $ ./configure CFLAGS=-I /usr/local/include --prefix=/opt/mail 
--with-cyrus-user=cyrus --with-cyrus-group=mail 
--with-sasl-dir=/opt/mail --enable-netscapehack 
--with-openssl=/usr/local/ssl --with-auth=unix --enable-murder 
--with-mboxlist_db=skiplist --enable-annotatemore --with-perl=PERL 
--without-ucdsnmp --with-syslogfacility=DAEMON --with-com_err=yes 
--enable-nntp --with-idle=idled --with-bdb=/usr/local 
--with-bdb-libdir=/usr/local/lib --with-bdb-incdir=/usr/local/include

[...]

configure:6635: gcc -o conftest -I /usr/local/include 
-I/usr/local/include -L/u

sr/local/lib  conftest.c   -ldb-4.2 >&5
ld: 0711-317 ERROR: Undefined symbol: .pthread_mutex_destroy
ld: 0711-317 ERROR: Undefined symbol: .pthread_mutex_lock
ld: 0711-317 ERROR: Undefined symbol: .pthread_cond_signal
ld: 0711-317 ERROR: Undefined symbol: .pthread_mutex_unlock
ld: 0711-317 ERROR: Undefined symbol: .pthread_mutex_trylock
ld: 0711-317 ERROR: Undefined symbol: .pthread_cond_wait
ld: 0711-317 ERROR: Undefined symbol: .pthread_mutexattr_init
ld: 0711-317 ERROR: Undefined symbol: .pthread_mutexattr_setpshared
ld: 0711-317 ERROR: Undefined symbol: .pthread_mutex_init
ld: 0711-317 ERROR: Undefined symbol: .pthread_mutexattr_destroy
ld: 0711-317 ERROR: Undefined symbol: .pthread_condattr_init
ld: 0711-317 ERROR: Undefined symbol: .pthread_condattr_setpshared
ld: 0711-317 ERROR: Undefined symbol: .pthread_cond_init
ld: 0711-317 ERROR: Undefined symbol: .pthread_condattr_destroy
ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more 
information.

collect2: ld returned 8 exit status
configure:6638: $? = 1
configure: failed program was:
| #line 6618 "configure"
| /* confdefs.h.  */
|
| #define PACKAGE_NAME ""
| #define PACKAGE_TARNAME ""
| #define PACKAGE_VERSION ""
| #define PACKAGE_STRING ""
| #define PACKAGE_BUGREPORT ""
| #define CYRUS_PATH "/usr/cyrus"
| #define SERVICE_PATH "/usr/cyrus/bin"
| #define CYRUS_USER "cyrus"
| #define SYSCONFDIR "/etc"
| #define _ALL_SOURCE 1
| #define HAVE_LONG_FILE_NAMES 1
| #define HAVE___ATTRIBUTE__ 1
| #define STDC_HEADERS 1
| #define HAVE_SYS_TYPES_H 1
| #define HAVE_SYS_STAT_H 1
| #define HAVE_STDLIB_H 1
| #define HAVE_STRING_H 1
| #define HAVE_MEMORY_H 1
| #define HAVE_STRINGS_H 1
| #define HAVE_INTTYPES_H 1
| #define HAVE_UNISTD_H 1
| #define HAVE_UNISTD_H 1
| #define HAVE_SYS_SELECT_H 1
| #define HAVE_SYS_PARAM_H 1
| #define HAVE_STDARG_H 1
| #define HAVE_MEMMOVE 1
| #define HAVE_STRCASECMP 1
| #define HAVE_FTRUNCATE 1
| #define HAVE_STRERROR 1
| #define HAVE_DIRENT_H 1
| #define HAVE_DN_EXPAND 1
| #define HAVE_GETADDRINFO
| #define HAVE_GETNAMEINFO
| #define HAVE_SOCKADDR_SA_LEN
| #define HAVE_SYS_TIME_H 1
| #define TIME_WITH_SYS_TIME 1
| #define HAVE_TZNAME 1
| #define HAVE_VPRINTF 1
| #define HAVE_DOPRNT 1
| /* end confdefs.h.  */
| #include 
| int
| main ()
| {
| db_create(NULL, NULL, 0);
|   ;
|   return 0;
| }
configure:6635: gcc -o conftest -I /usr/local/include 
-I/usr/local/include -L/u

sr/local/lib  conftest.c   -ldb4.2 >&5
collect2: library libdb4.2 not found




Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: sendmail + cyrus-imapd + cyrus-sasl +ldap [auf Viren überprüft]

2005-08-17 Thread Hans Moser

Hi!

Jesus Ruiz schrieb am 16.08.2005 23:42:

Hi, i have been trying to install the cyrus-imapd to authenticate
through sasl and i need sasl read it data from a ldap server. I'm
running redhat AS 4



#authentication ldap
sasl_pwcheck_method: saslauthd

Why don't you use ldapdb here
sasl_pwcheck_method: auxprob
sasl_auxprob_plugin: ldapdb


sasl_ldap_servers: ldap://localhost/ ldaps://localhost/
sasl_ldap_bind_dn: cn=someone,dc=mydomain,dc=com
sasl_ldap_password: xxx
sasl_ldap_basedn: ou=mail_users,dc=mydomain,dc=c­om
sasl_ldapdb_mech: DIGEST-MD5

You mix ldap and ldapdb. Just take ldapdb.

Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: sieveshell to remote server [auf Viren überprüft]

2005-08-16 Thread Hans Moser

Alan Thew schrieb am 12.08.2005 14:43:


Have you tried sivtest and did it allow a login?

Same here.
Without "--authname" after the proxyauth with the ldapdb-saslid the 
local unix account is communicated as saslid, no change to the 
"--user=username" is done.
[I thought, with "--authname" I can use sieveshell/sivtest unix account 
independently.]
With "--authname=aname" after the proxyauth with the ldapdb-saslid 
proxyauth switches to this "aname", but then no switch to 
"--user=username" is done.

If I want to switch to "username", I have to put it in "--authname".

Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


sieveshell to remote server [auf Viren überprü ft]

2005-08-12 Thread Hans Moser

Hi!

I use IMAPd with SASL ldapdb.
Why could I (only) connect to the server by sieveshell with
   # sieveshell --authname=username hostname
?

   # sieveshell --user=username hostname
ends up in
"unable to connect to server at /usr/bin/sieveshell line 169,  
line 1."

[  #cyradm --user username --server hostname
works as expected.]
When I do
   # sieveshell --user=username --authname=someone hostname
I see SASL to DN-maping (in slapd.log) for the sasl id defined in 
imapd.conf and the authname-sasl id. No mapping for username is done.

   # sieveshell --authname=username hostname
maps the username-sasl id to the appropriate DN, after the 
ldapdb-Proxyauth, and I could use sieveshell for "username".


Actual "username" should be in "--user=", not in "--authname="?

Hans


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Auth with ldapdb [auf Viren überprüft]

2005-08-03 Thread Hans Moser

Hi!

1. Chapter - "as is"
- I set up the "comes along with" Cyrus IMAPd on SuSE 9.2.
- I compiled SASL 2.1.21 with ldapdb.
- I connect to cyrus with cyradm and did "cm user.ck".
- I added a unix account ck.
-> ck can use IMAP

2. Chapter "ldapdb"
= There is an ldap-user cn=human,ou=mgr,o=foo, who should do the 
authtifications. The real users are in ou=humans,o=foo.

= TLS works with ldap. I could ldapsearch with "-Z -x"
- I changed imapd.conf to
# sasl_pwcheck_method: saslauthd
sasl_pwcheck_method: auxprob
sasl_auxprob_plugin: ldapdb
sasl_ldapdb_uir: ldap://sartre.ador.no
sasl_ldapdb_id: cn=human,ou=mgr,o=foo
sasl_ldapdb_pw: secret
sasl_ldapdb_mech: PLAIN
# sasl_ldapdb_mech: DIGEST-MD5
sasl_ldapdb_starttls: Demand
sasl_ldap_search_base: ou=humans,o=foo
sasl_ldap_search_filter: uid=%U
- I added authzTo attribute to cn=human,ou=mgr,o=foo in my ldap
- I added authzTo-Policy in slapd.conf to map cn=human,... in 
ou=humans,o=foo.

- I stuck. I don't see anything going on, when I try to log in.

3. Chapter "The questions"
a) How to test with ldapsearch, what cyrus with ldapdb does?
b) Is sasl_ldapdb_id a SASL-id (cn=.*,cn=auth) or a ldap-id?
c) sasl_ldapdb_mech - If possible, all mech should be PLAIN or with 
hashed passwords.

d) How to see what's going on? Logging?


Hans

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Dedendencies eMailadress - login [auf Viren überprüft]

2004-10-08 Thread Hans Moser
Hi!
I would like to move from "a few" Domino-Servers to a Cyrus-IMAPD 
containing environment (e.g. the Kolab-distribution).

Our eMailadresses are pretty long (as you can see :-). To log onto the 
Domino-server normally "fristname lastname" or the "shortname" is used.

Too handle multiple subdomains on several servers, I consider to use 
Postfix-virtualtables to map
[EMAIL PROTECTED] -> [EMAIL PROTECTED]
This is all in der person's LDAP Entry.

An LDAP-Entry could look kind of this:
mail: [EMAIL PROTECTED]
alias: [EMAIL PROTECTED]
uid: sub1user1
How do I get Cyrus to deliver mail to the appropriate mailbox for user1 
on server1, using a shorter login name from the person's LDAP entry 
(uid?) than one of the emailadresses shown above?


Hans
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Migrating from Domino on AIX [auf Viren überprüft]

2004-07-29 Thread Hans Moser
Hi!
We are planning to move away from Lotus Domino.
We run AIX 4.3.3 on our RS/6000 servers.
What we want, is LDAP authentfication, so we plan with Postfix, Cyrus, 
OpenLDAP. Additionally a Web-Interface for "Vacation", Sieve etc.

We easiest way to migrate the mail data seems to be a IMAP-to-IMAP-copy 
script. IMAP ist configured on Domino.

Has anyone done something like this before? Any suggestions?
Bye
Hans
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html