sasl_mech_list documentation?
The sasl_mech_list documentation seems to have disappeared from the imapd.conf documentation, any idea what happened to it? -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
annoying and broken libdes check in configure.in
So, this bit of code in configure.in looks rather broken, at least when you are building with MIT kerberos. if test $with_krb != no; then dnl Do we need DES for kerberos? AC_ARG_WITH(krbdes,[ --with-krbdes use Kerberos DES implementation [ yes]]], with_krbdes=$withval, with_krbdes=yes) if test $with_krbdes = yes; then AC_CHECK_LIB(des,des_ecb_encrypt, if test $with_statickrb = yes; then KRB_LIBS=$with_krb/lib/libdes.a else KRB_LIBS=-ldes fi, AC_MSG_ERROR([The Kerberos DES library is required for Kerberos support. You might want --with-auth=unix.])) fi fi First, --with-krbdes is not documented in configure --help at all. Second, the with_krbdes defaults to yes and does a test link against libdes, which last existed in kth krb4 but certainly doesn't exist in in MIT Kerberos 1.3 and newer (not sure if it exists in Heimdal K5). Also, the error message when the link fails suggests --with-auth=unix, which is also not documented in configure --help and is probably obsolete. Can we just get this entire check ripped out? -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
unified murder and GSSAPI
Has anyone gotten a unified Murder and GSSAPI configuration working? The documentation is lacking, to say the least. This is what I'm trying to do: 1 master mupdate server 8 unified frontend/backend servers I want all the servers to authenticate with each other via K5 GSSAPI. Ideally, I would like them to use a shared K5 keytab with the principle name service/murder to communicate with each other. On the mupdate server, in the cyrus.conf file, I have: authcmd=/usr/bin/k5start -H 60 -l 10h -f /etc/keytab.murder -k /var/tmp/murder.k5.tgt service/murder mupdate cmd=mupdate -m listen=3905 prefork=1 (k5start is similar to ksrvtgt.) In imapd.conf, I have admins: service/murder On the initial testing backend server, I have the following in imapd.conf: mupdate_server: mupdate master mupdate_config: unified mupdate_port: 3905 force_sasl_client_mech: GSSAPI Yet when I switch over the cyrus user, set my KRB5CCNAME to the correctly generated service/murder ticket and try to run ctl_mboxlist -mw, I get the following in my syslog: ctl_mboxlist[13748]: couldn't authenticate to backend server: generic failure ctl_mboxlist[13847]: GSSAPI Error: Miscellaneous failure (Server not found in Kerberos database) Any ideas or pointers at better documentation on how to get this working? -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Merging Cyrus installations
On 6/5/06, Andre Nathan [EMAIL PROTECTED] wrote: Has anyone done some similar migration scheme and would like to share any hints? Is there anything obvious I'm missing with the plan above? If you have a lot of POP users who like to leave their mail on the server (for backup purposes or reading mail from multiple machines), they'll download duplicate copies of their mail from the new server that was already downloaded from the old server. Other than that, your plan is fine and should be much much faster than using imapsync. -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: any chance of a coverity scan?
On 5/2/06, Henrique de Moraes Holschuh [EMAIL PROTECTED] wrote: On Tue, 02 May 2006, Huaqing Zheng wrote: Any chance that we can submit cyrus-imapd to Coverity for a scan? The squatter will probably flag so many reds we won't be able to see anything else ;-) On a more seriously note, does anyone run Cyrus under valgrind or the like often? Well, I was thinking that we should submit Cyrus as a summer of code project and kill two birds with one stone. Let some CS undergrad fix all the problems that coverity turns up. -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
any chance of a coverity scan?
Any chance that we can submit cyrus-imapd to Coverity for a scan? http://scan.coverity.com/ -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: reoccuring DBERRORs
On 2/23/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I've run cyrreconstruct. I've wandered through the mailing list archive and found countless posts mentioning DB errors, but no real solution. Documentation seems to be outdated, wrong, or non-existant. I feel lost. Is there *any* way to make this setup work again reliably or is there no other solution than to switch to a less fragile software?! Upgrade to version 2.2.12 and switch your databases to using skiplist works fairly reliably. -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus newbie questions
On 2/22/06, Elver Loho [EMAIL PROTECTED] wrote: Hi! We're in the process of replacing a proprietary Microsoft Outlook based setup (that includes shared mail folders) with a Fetchmail/Postfix/Cyrus/Thunderbird based rollout. I've got a test system set up that works nicely, but I've come across a few issues that I'd like to get some more info (or just helpful pointers) on. 1. Cyrus does not allow the creation of new folders at the same level as the Inbox folder. Is there any way to change that? See the documentation for altnamespace in the man page for imapd.conf. 2. We would like to have real-time status updates in mailboxes. That is, if there are two users looking at the same mailbox and one of them marks a message as read, then the other user should also see the message marked read. Is this possible with Cyrus? (The main e-mail address to which orders arrive is shared between four people.) Yes, see how idled works. Note that currently, only Thunderbird 1.5 really supports the IDLE command. -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: compilation error in cyrus-imapd-2.2.12
On 2/17/06, r mani [EMAIL PROTECTED] wrote: and we got the following error while make pop3d.c: In function `kpop': pop3d.c:593: error: incompatible type for argument 10 of `krb_recvauth' make[1]: *** [pop3d.o] Error 1 make[1]: Leaving directory `/usr/src/cyrus-imapd-2.2.12/imap' make: *** [all] Error 1 First of all, unless you are supporting the kpop protocol currently, you really don't want to turn it on. You should just comment out all the kpop kruft in cyrus-imapd. The problem is probably some conflict between the des prototypes between openssl and heimdal. -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: configure error: can't find DES library
On 1/27/06, Mark Hannessen [EMAIL PROTECTED] wrote: hi list, I am trying to compile cyrus imap with kerberos support. but the configure script fails with the warning that the kerberos DES library's are not installed. configure: error: The Kerberos DES library is required for Kerberos support. I assume you are compiling with the MIT Kerberos libraries instead of KTH/Heimdal that CMU uses. The cyrus-imapd autoconf scripts are very confused when it comes to building with the MIT libraries and OpenSSL. See the attached patch to fix the autoconf issues. Note that you'll have to rerun autoconf after applying the patch. -- Huaqing Zheng Beer and Code Wrangler at Large 01_config.dpatch Description: Binary data Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus imapd : ACL of a subdirectory
On 1/24/06, Benoit Guguin [EMAIL PROTECTED] wrote: Hi, I use cyrus 2.1 on debian sarge. I'm working with shared imap folders. So when a user create a sub directory in a shared imap folders, I would (want ?) that the sub directory got the same ACL that the parent directory ... (multiple user etc...) Is there any way to force this ? That should be the default behavior. Are you seeing something different? -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus IMAPd 2.3.0 Released
On 12/12/05, Ken Murchison [EMAIL PROTECTED] wrote: I am pleased to announce the release of Cyrus IMAPd 2.3.0. This is an BETA-quality release, reflecting that it has significant numbers of new features that have not been tested on a wide-scale basis, although earlier versions of this code have been running at two sites for quite some time. Some of the new features include mailspool replication (based on David Carter's work), unified Murder code, separate meta-data partitions, several new IMAP and Sieve extensions, and many more visible and invisible changes. I've got a couple of Kerberos related bugs I ran into while compiling. They are fairly simple define bugs. Patch attached below. -- Huaqing Zheng Beer and Code Wrangler at Large krb.patch Description: Binary data Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: mail transfer to gmail?
On 12/12/05, Jason Fesler [EMAIL PROTECTED] wrote: We use cyrus-imapd-2.2.10. A user asked to transfer his mail to gmail in a batch mode. Anybody have ever done things like that? Is it even possible? If this is not an appropriate list for such a question, I'd appreciate any pointers. They can do that with their imap client. Select-all, and then (depending on the client,bounce or redirect) should be able to forward the entire message, attachments and all, and preserve all existing headers (and gain a few new ones). Note that this method will not preserve the email status or annotations associated with the message. Also, depending on how many emails you are bouncing, gmail will likely stutter through the transactions by blocking your smtp servers after a certain number of messages for a while. -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus IMAPd 2.3.0 Released
On 12/12/05, Ken Murchison [EMAIL PROTECTED] wrote: I am pleased to announce the release of Cyrus IMAPd 2.3.0. This is an BETA-quality release, reflecting that it has significant numbers of new features that have not been tested on a wide-scale basis, although earlier versions of this code have been running at two sites for quite some time. Some of the new features include mailspool replication (based on David Carter's work), unified Murder code, separate meta-data partitions, several new IMAP and Sieve extensions, and many more visible and invisible changes. Awesome! Just a note though, can you make sure to purge the CVS directories out of the releases in the future? The CVS directories are of a kind of a pain for those us who maintain our own ports in another revision control system like subversion. Thanks. -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: cyrus IMAP mail reverting to unread
On 11/30/05, Adm-Serv [EMAIL PROTECTED] wrote: Hi, im having this problem, cyrus IMAP mail reverting to unread. I try executing a reconstruct, but it did'nt work… It's a problem with the user.seen file. Try deleting that file or restore a backup of the file. You should also see an error message like this in your imap log file: DBERROR: skiplist recovery /var/spool/cyrus/user/u/user.seen: ADD at 0828 exists I actually have a swatch process running on servers to track down these instances. -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus WebMail
On 11/30/05, Joseph Brennan [EMAIL PROTECTED] wrote: This is a very good question and the responses I've seen so far are missing the point. The optimal web mail system would run on the Cyrus server and would access mail directly without using imap protocol at all. It would use many of the same program modules, but the interface would be with web pages instead of with imap protocol. That's why Stanford is looking fairly seriously at Zimbra since that's the architecture they've implemented (albeit with their own mail engine). They've promised us Kerberos 5 support in the near future at which point we'll probably start doing a pilot with them. -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus WebMail
On 11/29/05, Andrzej Kwiatkowski [EMAIL PROTECTED] wrote: Hello I was wondering if someone tried to write some webmail application for Cyrus IMAPD. Using IMAP connection for Webmail are not this, what i want for today. Is there some documentation about Cyrus internal databases, or maybe API about this stuff ? Any other ideas about dedicated webmail? You can use SquirrelMail or IMP to access the Cyrus IMAP server. I would recommend IMP since the Horde suite of applications includes a calendaring program (Kronolith) and a Sieve rules editor (INGO). Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Migration from Solaris to Linux
On 11/5/05, Peter P. Benac [EMAIL PROTECTED] wrote: Any one have a script that will migrate ALL mail boxes on one server to another. I know this question has been asked a million time, but I don't recall any answers. Why not just rsync the imap spool and the config directory? Sure, you'll lose the UIDL to inode matching for the POP users but it'll be faster and probably more reliable. I've done a couple of upgrades this way and it works pretty well. -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: improving concurrency/performance
On 11/4/05, John Madden [EMAIL PROTECTED] wrote: I've had great experience with the performance of Cyrus thus far, but I'm testing a migration at the moment (via imapcopy) and I'm having some pretty stinky results. There's no iowait (4 stripes on a 2Gbps SAN), no cpu usage, nothing waiting on the network, and still I'm seeing terrible performance. I assume this points to something internal, such as concurrency on the db files. Have you tried running something like postmark http://packages.debian.org/stable/utils/postmark to benchmark your filesystem? -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: db4 problems with cyrus 2.1.16
On 10/22/05, Febo Aristots [EMAIL PROTECTED] wrote: The BerkeleyDB code in cyrus-imapd has a number of issues that I've never been able to work out fully. I ended up switching to skiplist (despite of its performance penalty for random lookups) which pretty much solved all my problems. I'd recommend that you look at doing the same. Is it possible to switch from berkeley db to skiplist with 2.1 ? How ? Do I need to recompile or modify a configuration file ? Modifying the imap.conf file should be sufficient. Though you may need a newer version of cyrus-imapd. See the imap.conf man page. -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: db4 problems with cyrus 2.1.16
On 10/17/05, Febo Aristots [EMAIL PROTECTED] wrote: From: Febo Aristots [EMAIL PROTECTED] Date: Oct 17, 2005 6:16 PM Subject: db4 problems with cyrus 2.1.16 To: info-cyrus@lists.andrew.cmu.edu I have had a bad problem with a seemingly corrupted mailboxes.db with cyrus-imap 2.1.16 I seem to have solved the problem this way: - stopping cyrus - I deleted tls_session.db and deliver.db - I used ctl_mboxlist -d to convert mailboxes.db into text form - deleted mailboxes.db and /var/imap/db/* - recreated mailboxes.db with ctl_mboxlist -u textformfile - restarting cyrus The BerkeleyDB code in cyrus-imapd has a number of issues that I've never been able to work out fully. I ended up switching to skiplist (despite of its performance penalty for random lookups) which pretty much solved all my problems. I'd recommend that you look at doing the same. -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: mv virus infected mail files behind cyrus's back.
On 10/11/05, Dan MacNeil [EMAIL PROTECTED] wrote: We're moving from courier to cyrus. Right now, when a new clamav virus signature comes we rescan /var/mail and move any infected messages we missed on the way in. Courier is fine w/ this. Cyrus doesn't seem to like it. Would would it be clean to replace the file with another message file containing a notice? Not unless your replacement message file has the exact same headers, mime segments and boundaries as the original message. That information is stored in the cyrus.cache file. You could just remove the original file and then reconstruct the mailbox. Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: perl script for sieve filter
On 9/21/05, Ana Ribas/Upcnet [EMAIL PROTECTED] wrote: Hi, I need to write a perl script to activate automatically a sieve filter every time I create a new mailbox. The filter is a sieve script that I have already written and that works perfectly. I have not worked too much with the perl language and the Cyrus::SIEVE::managesieve module man does not help me either. Has someone a similar script or some perl code that can I use as guide? You don't really need a perl script. Assuming that you have a proxyservers set in your imapd configurations. Just create a file upload-sieve that looks something like this: put sieve-file activate sieve-file and then run sieveshell --user=new-user --authname=proxyserver -exec=upload-sieve host:port after the account creation. You might have to pipe the proxyserver password to it depending on your auth mechanism. Alternatively, you can just look at how sieveshell works and write your own perl script. -- Huaqing Zheng Beer and Code Wrangler at Larg Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: plus addressing
On 9/21/05, Zachariah Mully [EMAIL PROTECTED] wrote: Hello all- I'm in the process of moving from a qmail/uw-imap installation to a postfix/Cyrus-2.2 and I've one last problem to solve before I can start moving people onto the new system. We make heavy use of qmail's extension addressing, which uses a dash as the default delimiter. In Postfix this is configurable, but I've not been able to find any place in the Cyrus config files where I can change this from + to -. Is this even possible? If it's not, has anybody come up a good workaround that they can suggest? This is not really a Cyrus issue but a MTA issue. Most MTAs use + as the mailbox delimiter and simply send mail to the part before the + sign. The part after the plus sign is used by the mail delivery agent. One thing you can try is to use postfix regex rewrite maps to rewrite the - into a +. -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Solaris to Linux move
On 9/20/05, Scott [EMAIL PROTECTED] wrote: Right now I have a Sun box that has been running Cyrus for about 4 years. The box has 8 Sparc v9 @ 400MHz and 6GB of memory. About 2 years ago we put all of the mail queue, DB, seen and sub files onto a 2GB solid state drive. This setup has been running fine, supporting about 20K webmail users. The mail store is on a NetApp that has a 1TB LUN direct FC connection. I just did a similar migration at work myself. I assume you are planning on using Linux instead of Solaris x86. I did not run into major gotchas though getting the software to work will largely depend on distribution and whether you are building the software yourself. If you are running into a lot of I/O wait issues, I'd recommend getting a faster mail store. Also, I'd recommend breaking up the server into multiple servers. I'm averaging about 5000 accounts per dual processor Dell 1850 with 4 GB of RAM each with a Nexsan ATABeast as the storage per four servers. Your mileage may vary depending on your user base and their habits. -- Huaqing Zheng Beer and Code Wrangler at Large Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
major slowdown after upgrading to 2.2.10 from 2.1.17
After upgrading to cyrus-imapd 2.2.10 yesterday on my pilot server, I've noticed a major slowdown in how the server responds to the LIST command. Previously, when running 2.1.17, the LIST * command usually returned all the mailboxes I have access to within a few seconds. After upgrading to 2.2.10, it looks like it is now taking about 30 seconds to return the mailbox list on a server with 12000 mailboxes, with about 1500 of them shared. Has anyone else noticed the slow down? Any suggestions? I grokked through the source code but didn't notice anything majorly different in the mailboxes.c or mboxlist.c. I didn't bother going through the database backend since I am using the same database (skiplist) format as my mboxlist backend. --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
