Re: Upgrade 2.4 -> 3: status 75, clean shutdown file missing

[Mark]

On 2020-01-02 16:22, Mark wrote:
> 
> 
> Then, when starting up again, I get a message about skiplist shutdown
> file being missing:
> 
> ctl_cyrusdb[29750]: skiplist: clean shutdown file missing, updating
> recovery stamp
> 

Digging into the code a bit, I find this (below) in cyrusdb_skiplist.c.
 Unless I'm mistaken, it seems that the file skipcleanshutdown is never
actually created in the code, so this notice will always be generated.
So I'd say that the 'clean shutdown file missing' message is benign.  Am
I correct that this file is never actually created?
snprintf(cleanfile, sizeof(cleanfile), "%s/skipcleanshutdown", dbdir);

/* if we had a clean shutdown, we don't need to run recovery on
 * everything */
if (stat(cleanfile, ) == 0) {
syslog(LOG_NOTICE, "skiplist: clean shutdown detected, starting
normally");
unlink(cleanfile);
goto normal;
}
Change introduced here:
https://github.com/cyrusimap/cyrus-imapd/commit/54f3cc4555f888072e3310aa481e51cba401b9fb#diff-d92d37e9b648c1bad26ee7f6e473bd5c

Disclaimer: http://www2.peralex.com/disclaimer.html



Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Upgrade 2.4 -> 3: status 75, clean shutdown file missing

[Mark]

Good day,

I'm busy testing a change from Cyrus imapd version 2.4 -> 3.0.11

Everthing seems to be working, but there are a few things in the logs
that I'm mildly concerned about when shutting down:

imap[29733]: graceful shutdown
imap[29732]: graceful shutdown
imap[29724]: graceful shutdown
idled[29725]: graceful shutdown
imap[29735]: graceful shutdown
master[29721]: process type:DAEMON name:idled
path:/usr/local/cyrus/libexec/idled age:77.647s pid:29725 exited, status 75
master[29721]: process type:SERVICE name:imap
path:/usr/local/cyrus/libexec/imapd age:4.806s pid:29735 exited, status 75
master[29721]: process type:SERVICE name:imap
path:/usr/local/cyrus/libexec/imapd age:14.751s pid:29732 exited, status 75
master[29721]: process type:SERVICE name:imap
path:/usr/local/cyrus/libexec/imapd age:5.437s pid:29734 exited, status 75
master[29721]: process type:SERVICE name:imap
path:/usr/local/cyrus/libexec/imapd age:6.171s pid:29733 exited, status 75
master[29721]: process type:SERVICE name:imap
path:/usr/local/cyrus/libexec/imapd age:77.648s pid:29724 exited, status 75
master[29721]: All children have exited, closing down

In particular, is status 75 standard when shutting down?



Then, when starting up again, I get a message about skiplist shutdown
file being missing:

ctl_cyrusdb[29750]: skiplist: clean shutdown file missing, updating
recovery stamp

Is this an issue?  Is it normal?  I'm not using skiplist for any of my
databases:

annotation_db: twoskip
backup_db: twoskip
conversations_db: twoskip
duplicate_db: twoskip
mboxkey_db: twoskip
mboxlist_db: twoskip
ptscache_db: twoskip
quota_db: quotalegacy
search_indexed_db: twoskip
seenstate_db: twoskip
sortcache_db: twoskip
subscription_db: flat
statuscache_db: twoskip
tlscache_db: twoskip
tls_sessions_db: twoskip
userdeny_db: flat
zoneinfo_db: twoskip

Thanks,
Mark




Disclaimer: http://www2.peralex.com/disclaimer.html



Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Is there any to reconstruct a mailbox, if used just have the email files, but none of the original cyrus.* files?

[Mark London]

Hi - Is there any to reconstruct a mailbox, if you just have the email 
files, but none of the original cyrus.* files?   Don't ask me why, it's 
a very long story.


As an aside, has anyone ever had a situation where emails were los,t 
when someone used Apple Mail to transfer a lot of files from one folder 
to another?   We had this happen.   Someone tried to move a years worth 
of emails,  22K or so, to a new folder.   Only a few files emails ended 
up in the new folders, and the rest were totally deleted.  I confirmed 
via my backup logs, that this was the case. The same user tried the same 
operation the year before, and the same thing happened.   i tried using 
Thunderbird, and had no problems. Just curious.  Thanks.


Mark London
m...@psfc.mit.edu


Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: Patch for adding tls_honor_cipher_order

[Mark Blackman]

 On 17 Oct 2014, at 11:34, Jeroen van Meeuwen (Kolab Systems) 
 vanmeeu...@kolabsys.com wrote:
 
 On 2014-10-16 19:32, Kristian Kræmmer Nielsen wrote:
 Hi,
 
 Patch attached.
 
 
 Something similar is already in cyrus-imapd-2.4:
 
 
 http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4id=4b26d2d7244eeaa481871c337e57cd393fd76dfe

Is this commit considered part of the stable 2.4 version yet? or only with some 
upcoming 2.4.18 tag?

Regards,
Mark

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

lmtpd: Trying to unput wrong character

[Mark]

Good day,

I've recently received some emails (from Nokia's mailing list) that give
me the following error when handed over to cyrus lmtpd for delivery:

4.3.0 lmtpd: Trying to unput wrong character (in reply to end of DATA
command)

The emails are then stuck in the queue until manually deleted.

I haven't debugged it in detail, but it looks like it's probably
triggered by innovative end-of-lines characters in the incoming email.
The end-of-line character sequence is  0d 00 0a (looking at the Postfix
queue).

Presumably this is non-standard. Should it be something that Cyrus
handles better, or should be something that Postfix repairs or rejects?

Thanks
Mark

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: lmtpd: Trying to unput wrong character

[Mark]

On 2014-02-15 14:17, Bron Gondwana wrote:
 On Sat, Feb 15, 2014, at 10:55 PM, Mark wrote:
 I haven't debugged it in detail, but it looks like it's probably
 triggered by innovative end-of-lines characters in the incoming email.
 The end-of-line character sequence is  0d 00 0a (looking at the Postfix
 queue).
 Wow, that's innovative alright!

 Do you have a nice reproducable testcase for me by any chance? (just lazy).
 I'd like to throw this into our testing framework - makes it easier to
 test the fix :)

Sure.  I'll zip the email body and email it to you in a separate message.

Mark

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: lmtpd: Trying to unput wrong character

[Mark]

 Presumably this is non-standard. Should it be something that Cyrus
 handles better, or should be something that Postfix repairs or rejects?


 Should this one work?

 http://www.postfix.org/postconf.5.html#message_strip_characters

Thanks.  That looks like it should do the job. 

message_strip_characters = \0

I'll try it out (although so far only one message out of hundreds of
thousands has caused trouble).

Mark



Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: Protecting message files acess even from root

[Mark Blackman]

On 31 Jan 2014, at 16:10, Fabio S. Schmidt fa...@improve.inf.br wrote:

 Hello! 
 Considering that Cyrus stores messages in files, does anyone have any 
 experience on the protection of access to these files, even for the root 
 user? 
 
 I researched about SELINUX and found no conclusive documentation.
 

http://en.wikipedia.org/wiki/Public-key_cryptography

- Mark


Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Long delays when using running separate instances on external and internal interfaces

[Mark]

Since I've resolved this issue, this is more to help others who may
experience the same problem than to ask a question.

While debugging a strange connection issues (frequent very slow
connections) when running Cyrus imapd and pop3d with different
configurations on different interfaces on the same machine, I found out
the service names in cyrus.conf file don't allow hyphens, and that they
silently discard the part after the hyphen, and the hype itself.

So I had something vaguely like this in cyrus.conf:

  pop3-eth0  cmd=pop3d listen=192.168.0.1:pop3 prefork=0
  pop3-eth1  cmd=pop3d listen=10.0.0.1:pop3 prefork=0

The parser interprets pop3-eth0 and pop3-eth1 as the same thing, which
means that it tries to use the same lock files for both interfaces,
which is bad (trust me).  It turns out that something like this is
better. Much better:

  pop3eth0  cmd=pop3d listen=192.168.0.1:pop3 prefork=0
  pop3eth1  cmd=pop3d listen=10.0.0.1:pop3 prefork=0

After a lot of debugging and digging through the source, I found that
the service names can only contain alphanumeric characters, truncating
the service name at the first non-alphanumeric character.  There are no
warnings of duplicate service names if the duplicates result from
service name truncation.

Thanks
Mark

Disclaimer: http://www.peralex.com/disclaimer.html



Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: IOERROR: locking index ... Unknown code ____ 255

[Mark Nipper]

On 17 Jul 2012, Bron Gondwana wrote:
 Oooh.  Ok, so you're running virtdomains: off.

Yes.  It seemed the best way to do it at the time (I
can't even remember which version of Cyrus I originally started
with now; it's been that long).

 I'm really not happy about the way virtdomains: off interacts with things.  
 There's
 all sorts of mess around mailbox names.  But of course, your username really 
 is
 actually ni...@bitgnome.net rather than just nipsy.
 
 Yes, I think this is OK.  But I'm not surprised there's a bug, because it's a 
 weird
 configuration.

I'm open to suggestion.  I have a number of virtual
domains but basically only one IP address for all of them.  I
never understood (obviously) the functionality of virtdomains as
an option since you can still host multiple virtual domains
without it and all of my users specify a fully qualified user
name during login anyway.

But if there are good reasons to use it, I'd be happy to
switch it on, assuming the work at this point in possibly
converting everyone's mailbox over somehow doesn't take too long.

 Can you please file a bug in bugzilla for it.  It will assign to me by 
 default anyway,
 and I'll have a look at it when I'm back from holidays.

Will do, once I wake up in the morning.  Thanks again.

-- 
Mark Nipper
ni...@bitgnome.net (XMPP)
+1 979 575 3193
-
JESUS IS THE BEST RADIO PRODUCER IN THE BEANS. WE NEED SOME
SALIVA AND PICKLES TO GET MAD.
 -- MegaHAL

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

IOERROR: locking index ... Unknown code ____ 255

[Mark Nipper]

I'm running cyrus from the Debian/testing repository
which is currently at 2.4.16 (2.4.16-1 on the Debian side).  I'm
seeing this problem where messages aren't being correctly handled
by sieve.  I have a bunch of logwatch messages flooding in from
different systems around the same time every morning.  Most of
them end up in the correct folder, but a decent number of them
slip into my INBOX every day.  I don't think it's related to the
32 or 64-bit hash problem that I found in searching for
information about these errors messages.

Anyway, my sieve rule looks like this:
---
if allof (header :contains from utexas.edu, header :contains subject 
logwatch for) {fileinto INBOX/utexas/laitsadmin/lw; stop;}

And the error messages coming from cyrus/lmtpunix look like:
---
Jul 16 04:04:05 king cyrus/lmtpunix[17285]: IOERROR: locking index for 
user.nipsy@bitgnome^net.utexas.laitsadmin.lw: Unknown code  255
Jul 16 04:04:05 king cyrus/lmtpunix[17285]: IOERROR: locking index 
user.nipsy@bitgnome^net.utexas.laitsadmin.lw: System I/O error
Jul 16 04:04:05 king cyrus/lmtpunix[17285]: sieve runtime error for 
nipsy@bitgnome^net id 
201207160902.q6g922jq012...@image-lab-server.psy.utexas.edu: Fileinto: System 
I/O error
Jul 16 04:04:06 king cyrus/lmtpunix[17285]: Delivered: 
201207160902.q6g922jq012...@image-lab-server.psy.utexas.edu to mailbox: 
user.nipsy@bitgnome^net
Jul 16 04:04:07 king cyrus/lmtpunix[17285]: USAGE nipsy@bitgnome^net user: 
0.00 sys: 0.004000

And here are two messages coming in right around the same time
which are delivered without any problems to the correct folder:
---
Jul 16 04:03:14 king cyrus/lmtpunix[17822]: Delivered: 
201207160902.q6g925fu018...@topcat.laits.utexas.edu to mailbox: 
user.nipsy@bitgnome^net.utexas.laitsadmin.lw
Jul 16 04:04:37 king cyrus/lmtpunix[17868]: Delivered: 
201207160902.q6g922eo025...@vm-cake.la.utexas.edu to mailbox: 
user.nipsy@bitgnome^net.utexas.laitsadmin.lw
Jul 16 04:03:40 king cyrus/lmtpunix[17822]: USAGE nipsy@bitgnome^net user: 
0.00 sys: 0.008000
Jul 16 04:04:42 king cyrus/lmtpunix[17868]: USAGE nipsy@bitgnome^net user: 
0.004000 sys: 0.00

Sorry if this has already been reported.  This has been
happening now for awhile since I upgraded to 2.4 (from 2.2).  But
I'm not sure if it's been happening ever since I upgraded to 2.4
or only somewhat recently.

-- 
Mark Nipper
ni...@bitgnome.net (XMPP)
+1 979 575 3193
-
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?
 -- signature seen on openbsd-misc from Vadim Zhukov

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: IOERROR: locking index ... Unknown code ____ 255

[Mark Nipper]

On 16 Jul 2012, Bron Gondwana wrote:
 On Mon, Jul 16, 2012, at 01:29 PM, Mark Nipper wrote:
  Jul 16 04:03:14 king cyrus/lmtpunix[17822]: Delivered: 
  201207160902.q6g925fu018...@topcat.laits.utexas.edu to mailbox: 
  user.nipsy@bitgnome^net.utexas.laitsadmin.lw
  Jul 16 04:04:37 king cyrus/lmtpunix[17868]: Delivered: 
  201207160902.q6g922eo025...@vm-cake.la.utexas.edu to mailbox: 
  user.nipsy@bitgnome^net.utexas.laitsadmin.lw
 
 Thanks Mark - can you tell us what's in your mailboxes.db for 
 ni...@bitgnome.net?
 You may very well have a bug - even those successful deliveries look wrong - I
 would expect to be seeing user/nipsy/utexas/laitsadmin/l...@bitgnome.net or
 bitgnome.net!user.nipsy.utexas.laitsadmin.lw
 
 It's more likely that this configuration is buggy, since we don't run unixhs 
 at
 FastMail, so I haven't used it as much.

So, running (let me know if this isn't right):
---
cyr_dbtool /var/lib/cyrus/mailboxes.db skiplist show | grep ni...@bitgnome.net

shows me things like:
---
user.nipsy@bitgnome^net 0 default ni...@bitgnome.netlrswipcda   admin   
lrswipcda   
user.nipsy@bitgnome^net.Deleted Items   0 default ni...@bitgnome.net
lrswipcda   admin   lrswipcda   
user.nipsy@bitgnome^net.Drafts  0 default ni...@bitgnome.netlrswipcda   
admin   lrswipcda   
user.nipsy@bitgnome^net.Junk0 default ni...@bitgnome.netlrswipcda   
admin   lrswipcda   
user.nipsy@bitgnome^net.Sent0 default ni...@bitgnome.netlrswipcda   
admin   lrswipcda   
user.nipsy@bitgnome^net.Sent Items  0 default ni...@bitgnome.net
lrswipcda   admin   lrswipcda   
user.nipsy@bitgnome^net.Trash   0 default ni...@bitgnome.netlrswipcda   
admin   lrswipcda   
user.nipsy@bitgnome^net.bitgnome0 default ni...@bitgnome.net
lrswipcda   admin   lrswipcda   
user.nipsy@bitgnome^net.cyrus.info  0 default ni...@bitgnome.net
lrswipcda   admin   lrswipcda   
user.nipsy@bitgnome^net.nagios  0 default ni...@bitgnome.netlrswipcda   
admin   lrswipcda   
user.nipsy@bitgnome^net.utexas  0 default ni...@bitgnome.netlrswipcda   
admin   lrswipcda   
user.nipsy@bitgnome^net.utexas.laitsadmin   0 default ni...@bitgnome.net
lrswipcda   admin   lrswipcda   
user.nipsy@bitgnome^net.utexas.laitsadmin.lw0 default ni...@bitgnome.net
lrswipcda   admin   lrswipcda   
user.nipsy@bitgnome^net.utexas.laitsadmin.monit 0 default ni...@bitgnome.net
lrswipcda   admin   lrswipcda   

That's not nearly all of them, but a decent subset anyway.

Let me know if you need me to check anything else.
Should I be worried about potential mail loss?  It looks like the
default behavior is to dump messages into the root INBOX at
least, so it seems safe enough for now.

-- 
Mark Nipper
ni...@bitgnome.net (XMPP)
+1 979 575 3193
-
There is infinite hope, but not for us. -- Kafka

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: Failover for business continuity

[Mark Blackman]

On Wed, 30 May 2012, Ram wrote:
 So if not DNS based fail over , what is the other alternative.
 I cant move the IP , or re-announce BGP
 I cant have both servers in active-active mode

DNS failover is your best overall option for this case unless
you an exceptionally large budget to spend on this.

You would need to do some research on how many of your
end-user clients suffer from non-conforming DNS resolution
behaviours and just send them instructions on how to
manually refresh the DNS records when they complain they
can't reach the email server.

Depending on which failure modes you regard as most likely
or damaging, you could announce via DNS a proxy IP which
redirects to a working back-end. You would need to be confident
that proxy IP would provide higher availability than your
mail server though.

- Mark



Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Compiling latest version for Redhat 6.

[Mark London]

Hi - I'm about to try installing the latest version of Cyrus on Redhat 
6, and wanted to get any feedback from anyone, about any problems that I 
might run into.

The reason I'm dgo this, is that we've recently been experiencing a 
problem with the older supplied version of cyrus that comes with 
redhat.  Occasionally, a user's account will get stuck.  It appears it 
might involve the user's .seen file, as attempts to access the user's 
account gets stuck in the code that tries to open that file.  The 
problem might have not be new, but we're only seeing it now, because 
of much heavier usage of the mail server.

I don't have the time right now to fully debug the problem, so I figured 
it might be easier to first simply install the latest version.  I have 
compiled it on a test redhat 6 server, and it seems to work fine.  I'll 
be porting to our real server tonight, but I wonder if there are any 
gotchas, that I might run into, that won't be noticable until it 
actually starts to heavy use.

Thanks. - Mark


Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: Problem with folder subscriptions and LIST/LSUB

[Mark Cave-Ayland]

On 02/02/12 02:04, Anthony L. Awtrey wrote:

 On 02/01/2012 08:47 PM, Dave McMurtrie wrote:
 Quick workaround (assuming that you have root access to the server):

 1) using your mail client, create a new folder named newfolder.

 2) log in to your server and from a root shell, su to your cyrus user.

 3). Navigate the filesystem and cp all the mail files from the directory 
 with the funky name that Cyrus won't list to newfolder.

 4) reconstruct newfolder.

 Hth,

 Dave


 Thanks Dave, I'll give it a shot.

 T

Just to confirm: is commit 1f0faf282cc918132957d25e8a099105035670c6 
(http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4id=1f0faf282cc918132957d25e8a099105035670c6)
 
the fix for this problem? I think we may be seeing it here.


ATB,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: Cyrus imap server and filesystem type.

[Mark Blackman]

On 4 Oct 2011, at 09:13, Bron Gondwana wrote:

 On Monday, October 03, 2011 2:09 PM, Vincent Fox vb...@ucdavis.edu wrote:
 
 I have btrfs on my desktop and hope it will mature.
 
 It did a lot early, but seems to have stagnated getting the last bit 
 finished.  Now... btrfs is sponsored by Oracle.  And the owner of ZFS is...
 
 ... which raises the real question of just how committed they are to actually 
 shipping a stable GPL competitor to ZFS now.  So I'm not holding my breath.

Well, you've got ZFS v28 on FreeBSD if you want to steer clear of 
Oracle's influence.

http://lists.freebsd.org/pipermail/freebsd-stable/2011-June/062900.html

- Mark

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: Bulk deletion of mailbox ACLs under Cyrus 2.4.4

[Mark Cave-Ayland]

On 06/09/11 13:29, Jeroen van Meeuwen (Kolab Systems) wrote:

 Uch, mind where I said just that, I neglected to mention the attached
 script only removes ACL entries for which the identifier (assuming it's
 an individual identifier, admittedly) has no corresponding mailbox.


 My apologies for pressing send too fast!

Hi Jeroen,

No worries - thanks a lot for taking a look and it's interesting to see 
another approach to the same problem. Were you able to take a look at my 
cyradm patch at https://bugzilla.cyrusimap.org/show_bug.cgi?id=3550 at 
all? Note that I was trying to remove ACLs for accounts which still 
existed but needed to be removed so they could be replaced with group 
permissions instead rather than removing dead ACLs entries.


Many thanks,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: Bulk deletion of mailbox ACLs under Cyrus 2.4.4

[Mark Cave-Ayland]

On 03/09/11 12:50, Mark Cave-Ayland wrote:

 Thanks for the heads up. Does that mean I should invoke reconstruct on
 all the mailboxes whose permissions I've changed in this way in order to
 bring the backup ACLs back in line with the mailboxes.db changes?

Sigh. So as soon as I ran reconstruct on the parts of the tree I had 
changed using my previous approach, it noticed that the backup ACLs 
weren't included in mailboxes.db and hence added them all back in again :/

Following on from your previous email, I ended up patching cyradm in 
order to allow a wildcard ACL deletion which worked really well, 
although some mailboxes were still confused to the point where I had to 
remove individual ACLs from the mailbox as a bulk deletion didn't work 
(I guess again this was confusion caused by a combination of different 
backup ACLs, reconstruct and mailboxes.db). Since these problem ACLs 
were removed, everything now works fine so I can recursively drop and 
rebuild all ACLs on our shared folder tree using a small bash script :)

 Also is there any reason why cyradm couldn't be modified to accept
 wildcards for uids in order to remove all of them? It strikes me that
 this is almost a bug given that I can sam an entire mailbox hierarchy
 but not do the same with dam.

The perl code seemed reasonably easy to follow with a good API design 
and so the resulting patch is quite neat. I've created a new bug in 
bugzilla and attached the patch there as it would be very useful to have 
this included within the main cyrus codebase: 
https://bugzilla.cyrusimap.org/show_bug.cgi?id=3550.


Many thanks,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: Bulk deletion of mailbox ACLs under Cyrus 2.4.4

[Mark Cave-Ayland]

On 03/09/11 06:16, Bron Gondwana wrote:

 Just for the archives: I managed to find an alternative solution to my
 problem. I ended up analysing the output of ctl_mboxlist -d and then
 writing a bit of perl to generate an output file with the same format
 for just the mailboxes I was interested in changing but with no ACLs. I
 then fed the resulting file into ctl_mboxlist -u and as if by magic the
 job was done :)

 FYI - while that kinda works, it is slightly skanky, and leaves the
 mailboxes.db and the backup copy of the ACL in the mailbox header
 out of sync.  It's also going to break in future when the content
 of mailboxes.db changes.  It's also somewhat incompatible with
 replication, murder, etc.

 The correct way[tm] is to iterate over all the mailboxes and do a
 setacl for each one you want to change, probably using an external
 script that talks IMAP.

Hi Bron,

Thanks for the heads up. Does that mean I should invoke reconstruct on 
all the mailboxes whose permissions I've changed in this way in order to 
bring the backup ACLs back in line with the mailboxes.db changes?

Also is there any reason why cyradm couldn't be modified to accept 
wildcards for uids in order to remove all of them? It strikes me that 
this is almost a bug given that I can sam an entire mailbox hierarchy 
but not do the same with dam.


Many thanks,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: Bulk deletion of mailbox ACLs under Cyrus 2.4.4

[Mark Cave-Ayland]

On 31/08/11 16:20, Mark Cave-Ayland wrote:

 Hi all,

 I'm currently trying to recursively remove all ACLs from part of a Cyrus
 tree so I can replace them with newer ones based upon group membership
 rather than individual users. However I can't seem to get this to work
 at the moment using a wildcard under cyradm:

 localhost  cm public.mcatest
 localhost  lam public.mcatest
 user1 lrs
 user2 lrs
 localhost  dam public.mcatest *
 localhost  lam public.mcatest
 user1 lrs
 user2 lrs
 localhost  dam public.mcatest user1
 localhost  lam public.mcatest
 user2 lrs

 I've also tried using the anyone/all aliases instead of * but that
 doesn't seem to work either - is anyone able to point me in the right
 direction as to the correct syntax to completely remove all ACLs for all
 users from a mailbox?

Just for the archives: I managed to find an alternative solution to my 
problem. I ended up analysing the output of ctl_mboxlist -d and then 
writing a bit of perl to generate an output file with the same format 
for just the mailboxes I was interested in changing but with no ACLs. I 
then fed the resulting file into ctl_mboxlist -u and as if by magic the 
job was done :)


HTH,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Bulk deletion of mailbox ACLs under Cyrus 2.4.4

[Mark Cave-Ayland]

Hi all,

I'm currently trying to recursively remove all ACLs from part of a Cyrus 
tree so I can replace them with newer ones based upon group membership 
rather than individual users. However I can't seem to get this to work 
at the moment using a wildcard under cyradm:

localhost cm public.mcatest
localhost lam public.mcatest
user1 lrs
user2 lrs
localhost dam public.mcatest *
localhost lam public.mcatest
user1 lrs
user2 lrs
localhost dam public.mcatest user1
localhost lam public.mcatest
user2 lrs

I've also tried using the anyone/all aliases instead of * but that 
doesn't seem to work either - is anyone able to point me in the right 
direction as to the correct syntax to completely remove all ACLs for all 
users from a mailbox?


Many thanks,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: crc32_buf

[Mark Cave-Ayland]

On 18/06/11 20:14, Bron Gondwana wrote:

 Yeah, I screwed up.  We require zlib at the moment.

 My plan is to embed a basic crc32 algorithm directly into that file for
 the case where zlib is not available, but I haven't done it yet.

 Regards,

 Bron.

Hi Bron,

What is zlib used for in Cyrus? Is it actually used for mailbox 
compression or was it just a quick solution for adding a CRC32 
implementation?

If it is the latter, then it should be fairly easy to add a CRC32 
algorithm and remove that dependency. Do you have a preferred generator 
polynomial?


ATB,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Scipt to delete duplicate messages in Sent and Inbox?

[Mark London]

Hi - We have a lot of users who send themselves files or message
reminders, that of course also get stored in their Sent folder.  I would
like a script that checks for such duplicate messages using the
Message-ID line, and delete the message in the Sent folder.  Has anyone
written such a script, or is there a better way to do what I want?
Thanks. - Mark


Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

List of Cyrus 2.4 access rights?

[Mark Cave-Ayland]

Hi all,

Having recently upgraded from Cyrus 2.2 to 2.4 it seems that more access 
rights have been defined. For example:

On Cyrus 2.2:

localhost sam user.foo foo all
localhost lam user.foo
foo lrswipcda

On Cyrus 2.4:

localhost sam user.foo foo all
localhost lam user.foo
foo lrswipkxtecda

I've had a look at the documentation here: 
http://www.cyrusimap.org/docs/cyrus-imapd/2.4.6/overview.php#acl and I 
can't see any of these new flags listed. Can anyone tell me what they 
actually do?


ATB,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Incorrect support URL in Cyrus 2.4 ver output

[Mark Cave-Ayland]

Hi all,

Also while I remember from our new Cyrus 2.4 installation:

localhost ver
name   : Cyrus IMAPD
version: v2.4.6-Debian-2.4.6-1~6.gbpd84454 35e0e72f 2010-12-21
vendor : Project Cyrus
support-url: http://cyrusimap.web.cmu.edu
os : Linux
os-version : 2.6.32-5-xen-amd64
environment: Built w/Cyrus SASL 2.1.23
  Running w/Cyrus SASL 2.1.23
  Built w/Berkeley DB 4.8.30: (April  9, 2010)
  Running w/Berkeley DB 4.8.30: (April  9, 2010)
  Built w/OpenSSL 0.9.8o 01 Jun 2010
  Running w/OpenSSL 0.9.8o 01 Jun 2010
  Built w/zlib 1.2.3.4
  Running w/zlib 1.2.3.4
  CMU Sieve 2.4
  TCP Wrappers
  NET-SNMP
  mmap = shared
  lock = fcntl
  nonblock = fcntl
  idle = poll

Looks like the support-url in imap/version.c needs to be updated to 
point to the new website.


ATB,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: List of Cyrus 2.4 access rights?

[Mark Cave-Ayland]

On 31/01/11 17:42, Andrew Morgan wrote:

 I've had a look at the documentation here:
 http://www.cyrusimap.org/docs/cyrus-imapd/2.4.6/overview.php#acl and I
 can't see any of these new flags listed. Can anyone tell me what they
 actually do?

 The manpage for cyradm has a good description under the command
 setaclmailbox. These are all described in RFC 4314 as well, which is
 the standard that has changed since Cyrus 2.2.

 Andy

Hi Andy,

That's great - thanks for the references.


ATB,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: Updated 2.4.6 with autocreate for those who need it

[Mark Cave-Ayland]

On 20/01/11 18:53, Bron Gondwana wrote:

 I hope this is useful for those who want to upgrade to 2.4 and can't wait
 until the auto* feature is implemented upstream - Bron, thanks for looking
 into it _after_ moving your home and what else :)

 :)

FWIW us at Sirius are very interested in this functionality, and since 
I'm a dab hand with a C compiler would be happy to help out with patch 
review, testing etc.

Out of interest, what are the objections to the current patch? And would 
it be applied to the 2.4.x series or wait until 2.5?


ATB,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: Updated 2.4.6 with autocreate for those who need it

[Mark Cave-Ayland]

On 21/01/11 14:53, Reinaldo de Carvalho wrote:

 Out of interest, what are the objections to the current patch? And would
 it be applied to the 2.4.x series or wait until 2.5?

 A (commonly) bad MTA configuration that not reject unknown recipients,
 and try to deliver the message to cyrus will generate thounsands of
 mailboxes. If this feature will be implemented must have a option to
 disable it. And, IMHO autocreatemailbox should be disable by default.

Oh that's interesting. I must admit I haven't done much with the patches 
other than noted that they exist within our internal builds, but surely 
the account auto creation only happens if the recipient exists within a 
directory somewhere, e.g. LDAP?

Can saslauthd be used to determine whether an account exists or not as 
opposed to just being used for authentication?


ATB,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Migrating from Cyrus 2.2 to Cyrus 2.4 - preserving seen db for public folders

[Mark Cave-Ayland]

Hi folks,

I'm currently testing a migration script for migrating across from Cyrus 
2.2 to Cyrus 2.4 based on the recipe here: 
http://cynici.wordpress.com/2010/12/06/how-to-migrate-32-bit-cyrus-imapd-mailboxes-to-64-bit/.

This is currently working well, and I have added some extra copy 
commands to ensure that the seen db information is copied across from 
/var/imap/user.

However, while the seen db information for my personal folders is being 
transferred across fine, all of the shared folders are currently marked 
as unread.

So I have 2 questions:

1) Where is the seen db information held for the shared (public) 
folders? It doesn't seem to be under /var/imap/user.

2) Once I find it, how can I migrate it across from the 2.2 server to 
the 2.4 server?


Many thanks,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: How to migrate away from BDB

[Mark Nipper]

On 28 Sep 2010, Simon Matter wrote:
  Are these Debian specific? Or is there something missing from my
  installation?
  Or do these only exist when Cyrus is not running? (Which I would find
  strange)
 
 I don't know the Debian packages but I'm quite sure it's Debian specific.
 Looks like their way to remember the current state of backends somehow.

Definitely Debian specific.  I was referring you to those
instructions as a general guideline.  You'll need to substitute
the appropriate information as needed.  But basically, since
you're probably not switching between versions, your cvt_cyrusdb
will work without having to divine the version of your BDB files
or worrying about converting them between versions.

So I think, unless I'm horribly mistaken, all you need to
do is dump the BDB versions of your files into skiplist format
and you're golden!

-- 
Mark Nipper
ni...@bitgnome.net (XMPP)
+1 979 575 3193
-
Puritanism: The haunting fear that someone, somewhere, may be
happy.
 -- H. L. Mencken, _A Book of Burlesques_, Sententiae, 1920

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: How to migrate away from BDB

[Mark Nipper]

On 27 Sep 2010, J. Roeleveld wrote:
 I wasn't able to find a specific howto for this during a brief Google-search.

I recalled that the Debian package for Cyrus had some
decent instructions on this.  You can see them at:
---
https://mail.incase.de/svn/cyrus22/trunk/cyrus-imapd-2.2.13/debian/README.Debian.database

That will get you started.  I have this at the bottom of
my imapd.conf:
---
# bypass BDB hell
annotation_db: skiplist
duplicate_db: skiplist
mboxlist_db: skiplist
ptscache_db: skiplist
quota_db: skiplist
seenstate_db: skiplist
subscription_db: skiplist
tlscache_db: skiplist
---

So those were all of the different databases I converted
to skiplist to avoid any potential problems.

-- 
Mark Nipper
ni...@bitgnome.net (XMPP)
+1 979 575 3193
-
He hoped and prayed that there wasn't an afterlife. Then he
realized there was a contradiction involved here and merely
hoped that there wasn't an afterlife.
 -- Douglas Adams

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: New Cyrus project site and bugzilla

[Mark Cave-Ayland]

Dave McMurtrie wrote:

 We're very interested in growing the Cyrus project and attracting new 
 volunteers to contribute to the project, and that desire is at the core 
 of why this migration is taking place.  The biggest change is that we're 
 trying to separate the environment from Carnegie Mellon University 
 infrastructure as much as possible.  Previously, contributions of any 
 kind would end up requiring us to create a CMU computer account for a 
 willing volunteer.  We can now simply create local shell accounts as 
 required.  Almost the entire website has been created using MediaWiki 
 software, so anyone who is willing to register for an account may update 
 the website content.

Wow - this looks really good :)

The main criticism I have from a developer point of view is, well, CVS. 
Enough said. Please please can we have an official git mirror? It makes 
maintaining out-of-tree patches so much easier in the long run, and 
therefore much more likely that we can pass the patches back upstream.

(On a separate note, if I go to Downloads - Getting Started and click 
on the AnonymousCVS wiki link then I get redirected back to the front 
page rather than to a page giving information on how to access CVS)


ATB,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: New Cyrus project site and bugzilla

[Mark Cave-Ayland]

Bron Gondwana wrote:

 The main criticism I have from a developer point of view is, well, CVS. 
 Enough said. Please please can we have an official git mirror? It makes 
 maintaining out-of-tree patches so much easier in the long run, and 
 therefore much more likely that we can pass the patches back upstream.
 
 We're working on it!  I'm hoping to chat with Jeroen from Kolab about it
 again tonight.  We've got a partial merge into git - but we just want to
 make sure all the tags and authors and stuff are imported properly before
 cutting over.  And to give people enough warning to change :)

Excellent news! FWIW the PostgreSQL team have been trying to switch to 
git for the past month, and in the process have involved the cvs2git 
maintainers and had some fixes committed over the past few weeks to 
improve the migration process (note that they have also suffered from 
having to hand-tweak the repository to fix various bugs in CVS).

The thread about the entire process is very long, but for those 
interested the latest summary is here: 
http://archives.postgresql.org/pgsql-hackers/2010-09/msg00636.php.


HTH,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: CVS to GIT

[Mark Cave-Ayland]

Jeroen van Meeuwen (Kolab Systems) wrote:

 We have a working sample, with a documented procedure, to move three CVS 
 modules (cmulocal, cyrus and sieve) into one GIT repository:
 
   
 http://www.cyrusimap.org/mediawiki/index.php/Drafts/CVS_to_GIT_Conversion#Stab_.232
 
 There some about branch and tag conversions as well. You can find the result 
 (which is preliminary!!) at http://git.kolabsys.com/cyrus-imapd.git.
 
 I'll be working with Dave to get this setup over on cyrusimap.org as soon as 
 possible as well, but meanwhile, feedback is more then welcome!
 
 Kind regards,

Oooh very nice. It seems to be a common issue that projects have to 
tweak their CVS repositories by hand to get a reasonable conversion to 
git. I'll try and take a closer look when I get a spare moment.

My other point, of course, was that since the PostgreSQL guys worked to 
fix a couple of bugs in cvs2git over the past couple of weeks, you may 
get a better result if you grab the tip version of cvs2git and re-run 
the conversion.


ATB,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

Re: New Cyrus project site and bugzilla

[Mark Cave-Ayland]

Dave McMurtrie wrote:

 (On a separate note, if I go to Downloads - Getting Started and click
 on the AnonymousCVS wiki link then I get redirected back to the front
 page rather than to a page giving information on how to access CVS)
 
 Thanks for pointing this out, Mark.  I made that link more useful.
 
 Dave

Thanks Dave, that looks fixed now.


ATB,

Mark.

-- 
Mark Cave-Ayland - Senior Technical Architect
PostgreSQL - PostGIS
Sirius Corporation plc - control through freedom
http://www.siriusit.co.uk
t: +44 870 608 0063

Sirius Labs: http://www.siriusit.co.uk/labs

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/

user_deny.db, very high load and Apple-Spotlight

[Mark Heisterkamp]

Hi,

we graded up to cyrus 2.3.16 a few weeks ago and since then the load 
average showed values from 200 to 300 a few times per day. The server 
has 16 cores, 64GB RAM an is attached to a SAN. This machine is quite 
powerfull. It serves about 5000 mailboxes.


First we touched user_deny.db to get rid of these annoying 
IOERROR-messages. These messages where replaced by (annoying) 'fetching 
user_deny.db'-entries. A normal IMAP-user causes about 500 to 1500 of 
such messages in eight hours.


But we found two users who 'generated' 500 (!) and 25 of such 
messages in this period. After phoning them we found out, that they 
where using Mac OS X and Thunderbird 3 (the one with 5 Mio messages) and 
Mail.app (the other one). Turning off the spotlight-search on 
IMAP-folders immediately turned the load average down to a normal value 
(about 0.2).


I think we shouldn't advise 5000 users not to use Spotlight, we should 
deactivate user_deny.db. By the way, what is this database really good 
for? If we want someone not to use cyrus-service we deny this person by 
ldap for example. Kenneth Murchison stated in some mail on this list 
that user_deny.db is used once per login, that's definitely not true, it 
is used every time the client 'uses' an IMAP-folder and that can be 
pretty often! Maybe we can change this behaviour by some config?


Is it possible to deactivate fetching user_deny.db-entries by some 
config-option or do we have to patch the sources?


Regards,
Mark

--
Mark HeisterkampRRZN
Tel: +49 511 762-5134   Schlosswender Str.5
Fax: +49 511 762-3003   D-30159 Hannover



smime.p7s
Description: S/MIME Cryptographic Signature

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Migrating mailbox from cyrus-imapd-2.2.10 to 2.3.7

[Mark Gibson]

Thanks, that worked.


--- On Fri, 12/19/08, Adam Tauno Williams awill...@whitemice.org wrote:

 From: Adam Tauno Williams awill...@whitemice.org
 Subject: Re: Migrating mailbox from cyrus-imapd-2.2.10 to 2.3.7
 To: Cyrus Mailing List info-cyrus@lists.andrew.cmu.edu
 Date: Friday, December 19, 2008, 2:06 PM
  A server of mine crashed.  I'm brought up another
 new server that's
 running cyrus-imapd 2.3.7.  I copied my backup of
 /var/spool/imap to
   the new server.  
 
 Did you copy the metadata?  /var/lib/imap?
 
  When I connect, I can see all of the mail in my Inbox,
 but none of the
  subfolders show up.  The first time I tried to connect
 with
  Thunderbird, I got a message to the effect that the
 folder could not
  be found.
  Any idea why this is happening and what I can do to
 fix the problem?
 
 Running a reconstruct wouldn't hurt.
 
 P.S. Please try to post without HTML as it makes replying a
 pain.
 
 
 Cyrus Home Page: http://cyrusimap.web.cmu.edu/
 Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
 List Archives/Info:
 http://asg.web.cmu.edu/cyrus/mailing-list.html


  


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Migrating mailbox from cyrus-imapd-2.2.10 to 2.3.7

[Mark Gibson]

A server of mine crashed.  I'm brought up another new server that's running 
cyrus-imapd 2.3.7.  I copied my backup of /var/spool/imap to the new server.  
When I connect, I can see all of the mail in my Inbox, but none of the 
subfolders show up.  The first time I tried to connect with Thunderbird, I got 
a message to the effect that the folder could not be found.

Any idea why this is happening and what I can do to fix the problem?

Thanks,
mark




  
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Return order of Fetch items in 2.3.13

[Mark Stover]

I've upgraded a server from 2.3.7 to 2.3.13 (both were from Invoca RPMs) and
we've noticed that when fetching specific messages on 2.3.13 that the return
order is not in the same order as we requested.
In 2.3.7 that return order was in the order we asked to fetch items.

For example on 2.3.7:

. UID SORT (REVERSE DATE) US-ASCII ALL
* SORT 6 5 4 3 2 1
. OK Completed (6 msgs in 0.000 secs)
. UID FETCH 5,4 (UID FLAGS INTERNALDATE RFC822.SIZE ENVELOPE
BODY[HEADER.FIELDS (CONTENT-TYPE)])
* 5 FETCH (FLAGS (\Recent) UID 5 INTERNALDATE 12-Nov-2008 08:37:09 -0500
RFC822.SIZE 699 ENVELOPE (Wed, 12 Nov 2008 08:37:09 -0500 (EST) Test
Message ((NIL NIL test237 domain.local)) ((NIL NIL test237
domain.local)) ((NIL NIL test237 domain.local)) ((NIL NIL test237
domain.local)) NIL NIL NIL
[EMAIL PROTECTED]) BODY[HEADER.FIELDS
(CONTENT-TYPE)] {2}

)
* 4 FETCH (FLAGS (\Recent) UID 4 INTERNALDATE 12-Nov-2008 08:37:07 -0500
RFC822.SIZE 699 ENVELOPE (Wed, 12 Nov 2008 08:37:07 -0500 (EST) Test
Message ((NIL NIL test237 domain.local)) ((NIL NIL test237
domain.local)) ((NIL NIL test237 domain.local)) ((NIL NIL test237
domain.local)) NIL NIL NIL
[EMAIL PROTECTED]) BODY[HEADER.FIELDS
(CONTENT-TYPE)] {2}

)
. OK Completed (0.000 sec)



Example on 2.3.13:

. UID SORT (REVERSE DATE) US-ASCII ALL
* SORT 5 4 3 2 1
. OK Completed (5 msgs in 0.000 secs)
. UID FETCH 5,4 (UID FLAGS INTERNALDATE RFC822.SIZE ENVELOPE
BODY[HEADER.FIELDS (CONTENT-TYPE)])
* 4 FETCH (FLAGS (\Recent) UID 4 INTERNALDATE 12-Nov-2008 12:56:36 -0600
RFC822.SIZE 750 ENVELOPE (Wed, 12 Nov 2008 12:56:39 -0600 subj test
subject ((NIL NIL test2313 domain.local)) ((NIL NIL test2313
domain.local)) ((NIL NIL test2313 domain.local)) ((NIL NIL test2313
domain.local)) NIL NIL NIL NIL) BODY[HEADER.FIELDS (CONTENT-TYPE)] {95}
Content-Type: multipart/alternative;
boundary==_NextPart_000_66D8_D9376028.6CA0E718

)
* 5 FETCH (FLAGS (\Recent) UID 5 INTERNALDATE 12-Nov-2008 12:56:36 -0600
RFC822.SIZE 750 ENVELOPE (Wed, 12 Nov 2008 12:56:40 -0600 subj test
subject ((NIL NIL test2313 domain.local)) ((NIL NIL test2313
domain.local)) ((NIL NIL test2313 domain.local)) ((NIL NIL test2313
domain.local)) NIL NIL NIL NIL) BODY[HEADER.FIELDS (CONTENT-TYPE)] {95}
Content-Type: multipart/alternative;
boundary==_NextPart_000_6551_DF97AA18.3ED767D6

)
. OK Completed (0.000 sec)

Is this something that changed? Was it just chance that it worked before?
The IMAP spec doesn't mention a return order for items fetched, so I'm not
sure if the return is something we can count on.

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Return order of Fetch items in 2.3.13

[Mark Stover]

I found this item in the release notes for 2.3.10:

 *  Improve the performance of commands that operate on sequence-sets. The
sequence-set is now parsed only once, and the commands operate on a
sorted
list of seq-ranges.


Does this mean that any sequence sets now passed in are acted upon in a
sorted order? Does this mean we can no longer rely upon the results of an
operation utilizing a sequence-set to be returned in the order in which they
were presented?

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Cyrus 2.3.13 RC2

[Mark Cave-Ayland]

Kenneth Marshall wrote:

 There have been 5 major releases of PostgreSQL since 7.2 was released
 and 7.2 is EOL in the next few months. I think it is completely reasonable
 to not support version 7.1/7.2 in a new system considering that 7.1 is
 EOL and 7.2 will be shortly.

 Cheers,
 Ken

Oh seriously, don't even waste time worrying about it. 7.2 died a long 
time ago, 7.3 was EOL the beginning of this year [1], and 7.4 is about 
to go the same way real soon now. Normally adding 7.3 support is fairly 
easy if required, whereas going back to 7.2 is often a complete pain, 
plus you have to live with several unfixable data loss bugs...


HTH,

Mark.

[1] http://www.postgresql.org/about/news.905

-- 
Mark Cave-Ayland
Sirius Corporation - The Open Source Experts
http://www.siriusit.co.uk
T: +44 870 608 0063


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Cyrus 2.3.8 imapd process periodically sticks at 100% CPU

[Mark Cave-Ayland]

Hi there,

I'm experiencing a problem with Cyrus 2.3.8 interacting with an Outlook 
client and was hoping this would be the right place to get some advice.

What happens is that periodically (maybe around once a month?) we have 
one particular user who contacts us complaining that they are unable 
access their mailbox. Generally we always find the same thing: there is 
an imapd process accessing his seen DB which is running at 100% CPU. 
Once this process is killed then things go back to normal and the user 
can log in.

The latest report we had of this problem happening again was this 
morning, and fortunately I was in a position to attack it with gdb and a 
file of debug symbols. This showed that the process in question was 
getting stuck in a loop in index_expungeuidlist(). I've uploaded the 
transcript of my gdb session to 
http://pastebin.siriusit.co.uk/cyrus-imapd-gdb.txt for people who are 
familiar with cyrus internals.

The short story appears to be that newseenuids (new) points to an empty 
string ('\0') and so the code gets stuck because of the following at 
line 532 of imap/index.c in index_checkseen():

oldseen = (*old == ':');

Since *old is an empty string, oldseen will always be 0, and so the 
while() loop never exits. Unfortunately this is the first time I've ever 
looked at cyrus internals, so am not really sure what the seen list 
should look like normally.

The confusing thing is that we have been using these packages for 
several clients and this is the *only* particular server and the *only* 
user on this server experiencing this problem. The one thing we have 
noticed is that this particular user has a larger mailbox compared to 
the other users (~1GB) but then it doesn't seem so large as if it would 
cause any problems.

Finally, one more thing to add is that we have already gone through the 
steps of rebuilding the seen DB skiplist using the skiplist.py script 
several times when this has happened in the past, and it has made no 
difference.


Many thanks,

Mark.

-- 
Mark Cave-Ayland
Sirius Corporation - The Open Source Experts
http://www.siriusit.co.uk
T: +44 870 608 0063

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Cyrus 2.3.8 imapd process periodically sticks at 100% CPU

[Mark Cave-Ayland]

Bron Gondwana wrote:

 No, it won't.  You need to fix the mailbox or patch the code to not be
 put into an infinite loop by a bogus index file.
 
 The attached patch might do the trick for you.  I just slapped it
 together on spec.  It compiles, that's about all I can offer about
 it :)

Hi Bron,

Thanks for taking the time to respond, it is greatly appreciated. My 
colleague Duncan has taken a look at this (see separate email) and found 
  a corrupted index file which have now been rebuilt. Fingers crossed 
that the problem is now resolved (I guess we'll find out in a month or 
so) ;)


Many thanks,

Mark.

-- 
Mark Cave-Ayland
Sirius Corporation - The Open Source Experts
http://www.siriusit.co.uk
T: +44 870 608 0063

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

IMAP Date-Time format for Append

[Mark Stover]

Hello,

We are running Cyrus IMAP 2.3.7 from the Centos RPM cyrus-imapd-2.3.7-2.el5
. We are doing some testing with a client that is sending an APPEND command
with the format:

APPEND user.testuser.Folder () Thu, 13 Mar 2008 08:13:13 GMT {358}

The response from the Cyrus IMAP server is:

BAD Invalid date-time in Append command

We're pretty sure this is related to the timezone being represented as a
short name, as opposed to in numeric format (+0400, etc.). The IMAP spec is
vague on whether or not this format should be accepted. I believe that this
has to do with the way the function from the C Library converts the string,
but am not sure.

Is this a function of this RPM version? Is the client out of spec with the
RFC? Could recompiling this from source with a different C Library fix this?

Any thoughts would be appreciated.

Thanks,
Mark

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Help with bulletin board functionality

[Mark Clarke]

Hi all,

We are experimenting with using cyrus imap bulletin boards. Our imap
server hosts several domains and we figured out how to create bulletin
board folders for the different domains, in cyradm, by going cm
[EMAIL PROTECTED]. 

The issues we are having is

1) How to post to the bulletin board?
I have read about using a syntax like [EMAIL PROTECTED] At
first the smtp server was refusing to deliver to this address until we
added it to the allowed virtual domain addresses. (We are using postfix
for smtp). Now the message gets to cyrus but we get a 500 error about
the mailbox not existing or not having sufficient rights to post. I have
given myself all  rights to the mailbox.

2)How do you delete an entry from the bulletin board folder?
Since I had all rights I deleted a test mail I got into the folder by
dragging and dropping it in evolution. On my machine the folder is
empty. On other users who has lr rights to the mailbox the mail is still
showing. How do I delete it from everyones view?


thanks




===
Cyber Connect - More than just broadband
http://www.CyberConnect.co.za - Vodacom 3G R99/month

Cyber Designs - Put your business on the net
http://www.CyberDesigns.co.za

Jumping Bean - Your Java and Linux Experts
http://www.JumpingBean.co.za

Tel: 011-781 80 14
Fax: 011-781 80 15
===
Disclaimer

Any views or opinions presented in this email are solely those of the author 
and do not necessarily represent those of the company. Employees of Cyber 
Designs are expressly required not to make defamatory statements and not to 
infringe or authorize any infringement of copyright or any other legal right by 
email communications. Any such communication is contrary to company policy and 
outside the scope of the employment of the individual concerned. The company 
will not accept any liability in respect of such communication, and the 
employee responsible will be personally liable for any damages or other 
liability arising.

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Zero length mails

[Mark Cooper]

I'm trying to debug why I'm getting zero length files generated in the
IMAP spool.

[root ~]# find /var/spool/imap/a/user/at/ -size 0 -exec ls -ld {} \;
-rw--- 1 cyrus mail 0 Aug 13 18:33 /var/spool/imap/a/user/at/823777.
-rw--- 1 cyrus mail 0 Aug 13 18:32 /var/spool/imap/a/user/at/823591.
-rw--- 1 cyrus mail 0 Aug 13 18:31 /var/spool/imap/a/user/at/823590.
-rw--- 1 cyrus mail 0 Aug 13 18:33 /var/spool/imap/a/user/at/823744.

I'm using Thunderbird 2.0.0.6 to move certain mails into cyrus imapds.
Not sure if it's Thunderbird causing the problem or cyrus.

I've enabled local6.debug but I'm not getting any logging from cyrus.

Any idea's what the zero length problem or how I can debug this??

-- 

Mark Cooper



Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Cyrus imapd 2.3.7 mupdate - getaddrinfo: service not supported for ai_socktype

[Mark]

Greetings,

I'm in the process of setting up Cyrus imapd 2.3.7 on OpenBSD 4.0
server.
This is a back end server, to be part of 2.2.12 murder setup already in
place. master starts fine, then when it executes ctl_mboxlist -m it
failes with this error in syslog:
Nov  3 03:00:26 testimap ctl_mboxlist[90]: getaddrinfo(192.168.20.8)
failed: service not supported for ai_socktype

Version 2.2.12 works fine and connect to murder master without errors.

Does anyone have any ideas what might be happening?

Thanks a lot.

Mike



 

We have the perfect Group for you. Check out the handy changes to Yahoo! Groups 
(http://groups.yahoo.com)


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Cyrus imapd 2.3.7 mupdate - getaddrinfo: service not supported for ai_socktype

[Mark]

--- Phil Pennock [EMAIL PROTECTED] wrote:

 On 2006-11-03 at 06:14 -0800, Mark wrote:
  I'm in the process of setting up Cyrus imapd 2.3.7 on OpenBSD 4.0
  server.
  This is a back end server, to be part of 2.2.12 murder setup
 already in
  place. master starts fine, then when it executes ctl_mboxlist -m it
  failes with this error in syslog:
  Nov  3 03:00:26 testimap ctl_mboxlist[90]:
 getaddrinfo(192.168.20.8)
  failed: service not supported for ai_socktype
  
  Version 2.2.12 works fine and connect to murder master without
 errors.
 
 On the same system?

Yes.


 
  Does anyone have any ideas what might be happening?
 
 That error message is a complaint that the service (port) name can't
 be
 mapped, so getaddrinfo() is returning EAI_SERVICE.
 
 Are you sure that imap is listed in /etc/services as a tcp service?
 
 Checking the OpenBSD source for 4.0,
 URL:http://www.openbsd.org/cgi-bin/
 cvsweb/src/lib/libc/net/getaddrinfo.c?rev=1.56content-type=text/
 x-cvsweb-markup, there are four places which can return EAI_SERVICE.
 The first three don't apply, since imapd isn't asking for a raw
 socket
 and isn't specifying a number (and even if it were it's SOCK_STREAM
 so
 numbers are allowed).  That just leaves a failure of getservbyname().
 
 getservbyname() does no fancy stuff, it just asks for the various
 services, looping through them all until it finds the right item.
 AFAIK, OpenBSD doesn't support nsswitch; I could be wrong.  So
 there's
 just a file lookup.
 
 So it looks like an /etc/services issue.  OpenBSD's services includes
 imap by default; has it been removed?

Thanks a lot (and to Dennis). That was it, and I know you replied again
saying mupdate has to be in /etc/services but even this email triggered
the thought and connected the dots. It is trying to connect now, to
mupdate, tested without starting master itself and just by running
ctl_mboxlist -m. That is great. Thanks again. I'm having another error:

ctl_mboxlist[10222]: failed to bind to address 0.0.0.0: Invalid
argument

but I remember seeing it even with 2.2.12, and I will double check
that.

Mike



 

Cheap Talk? Check out Yahoo! Messenger's low PC-to-Phone call rates 
(http://voice.yahoo.com)


Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Performance and cheap storage

[Mark Hellman]

Robert Banz wrote:

 The second thing to consider is that the performance on modern SATA
 drives, if you're using a driver for the SATA interface that supports
 advanced features such as command queueing, are going to show you
 performance akin to SCSI drives -- even more so if you place them
 behind a 'quality' RAID subsystem that provides read/write caching.

Thank you for explanations, Robert.
Do you think a RAID array like this one:
http://www.infortrend.com/main/2_product/a08u-c2412.asp
would be adequate for storing Cyrus mailboxes?


Mark


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Performance and cheap storage

[Mark Hellman]

I have noticed that mail delivery (from Postfix to Cyrus using LMTP) can be
harsh in terms of I/O when several hundreds of messages are being delivered
at once. I have local mailing-lists with more than 1 thousand members and
when a 500 KB email is sent to the list, the server's load average
increases dramatically. This why I use SCSI disks for the Cyrus partition
directories, instead of SATA or ATA disks.

Now I would like to increase my users mailbox quota from 200 MB to 1 GB. 
The problem is that SCSI disks are expensive... So I though about the
following solution:
- Keeping mailboxes default partition mounted on a SCSI disk
- Putting each user's sub-mailbox on cheap IDE storage (with symlinks in
  the mailboxes partition directory) since access to sub-mailboxes is
  less frequent and less bursty. 
- Having a cron job that moves messages older than X days from the user's
  Inbox to a sub-mailbox (on IDE storage) to prevent SCSI disk getting full.

Is this symlinking feasible? Or is there another more efficient way to
achieve the same goal?


Mark


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Performance and cheap storage

[Mark Hellman]

I have noticed that mail delivery (from Postfix to Cyrus using LMTP) can be
harsh in terms of I/O when several hundreds of messages are being delivered
at once. I have local mailing-lists with more than 1 thousand members and
when a 500 KB email is sent to the list, the server's load average
increases dramatically. This why I use SCSI disks for the Cyrus partition
directories, instead of SATA or ATA disks.

Now I would like to increase my users mailbox quota from 200 MB to 1 GB.
The problem is that SCSI disks are expensive... So I though about the
following solution:
- Keeping mailboxes default partition mounted on a SCSI disk
- Putting each user's sub-mailbox on cheap IDE storage (with symlinks in
  the mailboxes partition directory) since access to sub-mailboxes is
  less frequent and less bursty.
- Having a cron job that moves messages older than X days from the user's
  Inbox to a sub-mailbox (on IDE storage) to prevent SCSI disk getting full.

Is this symlinking feasible? Or is there another more efficient way to
achieve the same goal?


Mark


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Best available version for use from 2.3.x branch

[Mark Nipper]

On 07 Jun 2006, Andrzej Kwiatkowski wrote:
 Which from versions of cyrus are now the best for production ?
 2.3.6 have problems with deleting
 2.3.3 had problems with mupdate ...
 
 2.3.1 ??

I think the standard answer would always be the latest
version or possibly even CVS, as with any beta software.  If you
want stability, stick with 2.2.12 for now.

-- 
Mark Nippere-contacts:
832 Tanglewood Drive[EMAIL PROTECTED]
Bryan, Texas 77802-4013 http://nipsy.bitgnome.net/
(979)575-3193  AIM/Yahoo: texasnipsy ICQ: 66971617

-BEGIN GEEK CODE BLOCK-
Version: 3.1
GG/IT d- s++:+ a- C++$ UBL$ P---+++ L+++$ !E---
W++(--) N+ o K++ w(---) O++ M V(--) PS+++(+) PE(--)
Y+ PGP t+ 5 X R tv b+++@ DI+(++) D+ G e h r++ y+(**)
--END GEEK CODE BLOCK--

---begin random quote of the moment---
Well, if we told you how we did it, then it very well wouldn't
be unbreakable, would it?  You need to trust us with your data.
These are not the backdoors you are looking for.
 -- random /. quote
end random quote of the moment

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: migrating to a different db

[Mark Edwards]

On May 1, 2006, at 8:32 AM, Andrew Morgan wrote:


On Sun, 30 Apr 2006, Mark Edwards wrote:

Can someone tell me what the repercussions of rebuilding cyrus  
with a different db, say db43 instead of db41, and starting the  
new one up with the same data and configuration?  Will it run?   
Will there be data corruption of any kind?


The safest and most reliable way to perform that upgrade is to use  
cvt_cyrusdb to convert your databases to plaintext using the old  
binaries. Then upgrade the software and use cvt_cyrusdb again to  
convert back into berkeley DB.


An alternative, but somewhat risky, method is to simple delete  
(rename might be safer) the contents of configdirectory/db/.  The  
files in that directory are the Berkeley DB transaction logs, etc,  
and can be safely deleted in my experience.  Also, everytime I have  
changed Berkeley DB versions, I would get DB corruption warnings  
when I start Cyrus if I did not empty that directory.


It would be smart to have backups too, just in case. :)


Just the answers I was looking for.  Thanks guys!

--
Mark Edwards



Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: migrating to a different db

[Mark Edwards]

On May 1, 2006, at 8:32 AM, Andrew Morgan wrote:


On Sun, 30 Apr 2006, Mark Edwards wrote:

Can someone tell me what the repercussions of rebuilding cyrus  
with a different db, say db43 instead of db41, and starting the  
new one up with the same data and configuration?  Will it run?   
Will there be data corruption of any kind?


The safest and most reliable way to perform that upgrade is to use  
cvt_cyrusdb to convert your databases to plaintext using the old  
binaries. Then upgrade the software and use cvt_cyrusdb again to  
convert back into berkeley DB.


Can I assume that only files with a .db extension are in BDB format,  
or might other files be as well, such as .seen .sub or .index?


Thanks!

--
Mark Edwards



Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

migrating to a different db

[Mark Edwards]

Can someone tell me what the repercussions of rebuilding cyrus with a  
different db, say db43 instead of db41, and starting the new one up  
with the same data and configuration?  Will it run?  Will there be  
data corruption of any kind?


Thanks!

--
Mark Edwards



Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Trouble building 2.2.13 on FreeBSD 4.11

[Mark Edwards]

I am having trouble compiling cyrus-imapd 2.2.13 on a FreeBSD 4.11p16  
machine.  I can compile 2.2.12 just fine, and have been using it for  
many months.


I have tried from the FreeBSD port, as well as downloading and  
compiling myself, with this configure statement:


./configure --with-bdb-incdir=/usr/local/include/db41/ --with-bdb- 
libdir=/usr/local/lib/ --with-sasl=/usr/local/

make

Both methods result in the output below.  I don't use Kerberos nor do  
I have it installed, although I did also try installing the Kerberos4  
and Kerberos5 ports, neither of which changed my results.


Thanks for any help!

.
.
.
gcc -c -I.. -I./../lib  -I./../sieve -I/usr/local/include/db41/  -I/ 
usr/local/include -I/usr/local//include -DHAVE_CONFIG_H -g -O2   
quota_db.c
gcc -c -I.. -I./../lib  -I./../sieve -I/usr/local/include/db41/  -I/ 
usr/local/include -I/usr/local//include -DHAVE_CONFIG_H -g -O2   
seen_db.c
gcc -c -I.. -I./../lib  -I./../sieve -I/usr/local/include/db41/  -I/ 
usr/local/include -I/usr/local//include -DHAVE_CONFIG_H -g -O2   
idle_poll.c

rm -f libimap.a
ar cr libimap.a append.o mailbox.o mboxlist.o mupdate-client.o  
mboxname.o message.o  global.o imap_err.o mupdate_err.o proc.o  
setproctitle.o  convert_code.o duplicate.o saslclient.o saslserver.o  
signals.o  annotate.o search_engines.o squat.o squat_internal.o  
mbdump.o  imapparse.o telemetry.o user.o notify.o protocol.o  
quota_db.o  seen_db.o idle_poll.o

ranlib libimap.a
gcc -L/usr/local/lib/ -R/usr/local/lib/ -o imapd  ../master/service.o  
pushstats.o backend.o imapd.o index.o tls.o version.o mutex_fake.o   
libimap.a ../lib/libcyrus.a ../lib/libcyrus_min.a -L/usr/local//lib  - 
R/usr/local//lib -lsasl2  -lssl -lcrypto   -lfl   -L/usr/local/lib/  - 
R/usr/local/lib/ -ldb41 -lmd -lcom_err -lwrap

../lib/libcyrus.a(auth_krb5.o): In function `mycanonifyid':
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:122: undefined  
reference to `krb5_init_context'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:129: undefined  
reference to `krb5_parse_name'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:137: undefined  
reference to `krb5_get_default_realm'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:140: undefined  
reference to `krb5_build_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:141: undefined  
reference to `krb5_free_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:142: undefined  
reference to `krb5_free_context'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:149: undefined  
reference to `krb5_realm_compare'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:154: undefined  
reference to `krb5_free_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:159: undefined  
reference to `krb5_unparse_name'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:160: undefined  
reference to `krb5_free_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:161: undefined  
reference to `krb5_free_context'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:172: undefined  
reference to `krb5_free_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:173: undefined  
reference to `krb5_free_context'

*** Error code 1

Stop in /usr/home/paimin/cyrus-imapd-2.2.13/imap.
*** Error code 1

Stop in /usr/home/paimin/cyrus-imapd-2.2.13.

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Trouble building 2.2.13 on FreeBSD 4.11

[Mark Edwards]

On Apr 29, 2006, at 4:33 PM, Mark Edwards wrote:

I am having trouble compiling cyrus-imapd 2.2.13 on a FreeBSD  
4.11p16 machine.  I can compile 2.2.12 just fine, and have been  
using it for many months.


I have tried from the FreeBSD port, as well as downloading and  
compiling myself, with this configure statement:


./configure --with-bdb-incdir=/usr/local/include/db41/ --with-bdb- 
libdir=/usr/local/lib/ --with-sasl=/usr/local/

make

Both methods result in the output below.  I don't use Kerberos nor  
do I have it installed, although I did also try installing the  
Kerberos4 and Kerberos5 ports, neither of which changed my results.


Thanks for any help!

.
.
.
gcc -c -I.. -I./../lib  -I./../sieve -I/usr/local/include/db41/  -I/ 
usr/local/include -I/usr/local//include -DHAVE_CONFIG_H -g -O2   
quota_db.c
gcc -c -I.. -I./../lib  -I./../sieve -I/usr/local/include/db41/  -I/ 
usr/local/include -I/usr/local//include -DHAVE_CONFIG_H -g -O2   
seen_db.c
gcc -c -I.. -I./../lib  -I./../sieve -I/usr/local/include/db41/  -I/ 
usr/local/include -I/usr/local//include -DHAVE_CONFIG_H -g -O2   
idle_poll.c

rm -f libimap.a
ar cr libimap.a append.o mailbox.o mboxlist.o mupdate-client.o  
mboxname.o message.o  global.o imap_err.o mupdate_err.o proc.o  
setproctitle.o  convert_code.o duplicate.o saslclient.o  
saslserver.o signals.o  annotate.o search_engines.o squat.o  
squat_internal.o mbdump.o  imapparse.o telemetry.o user.o notify.o  
protocol.o quota_db.o  seen_db.o idle_poll.o

ranlib libimap.a
gcc -L/usr/local/lib/ -R/usr/local/lib/ -o imapd  ../master/ 
service.o pushstats.o backend.o imapd.o index.o tls.o version.o  
mutex_fake.o  libimap.a ../lib/libcyrus.a ../lib/libcyrus_min.a -L/ 
usr/local//lib  -R/usr/local//lib -lsasl2  -lssl -lcrypto   -lfl   - 
L/usr/local/lib/  -R/usr/local/lib/ -ldb41 -lmd -lcom_err -lwrap

../lib/libcyrus.a(auth_krb5.o): In function `mycanonifyid':
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:122: undefined  
reference to `krb5_init_context'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:129: undefined  
reference to `krb5_parse_name'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:137: undefined  
reference to `krb5_get_default_realm'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:140: undefined  
reference to `krb5_build_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:141: undefined  
reference to `krb5_free_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:142: undefined  
reference to `krb5_free_context'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:149: undefined  
reference to `krb5_realm_compare'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:154: undefined  
reference to `krb5_free_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:159: undefined  
reference to `krb5_unparse_name'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:160: undefined  
reference to `krb5_free_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:161: undefined  
reference to `krb5_free_context'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:172: undefined  
reference to `krb5_free_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:173: undefined  
reference to `krb5_free_context'

*** Error code 1

Stop in /usr/home/paimin/cyrus-imapd-2.2.13/imap.
*** Error code 1

Stop in /usr/home/paimin/cyrus-imapd-2.2.13.


Just adding to the fun here, I have tried manually compiling 2.2.12,  
2.2.13, and 2.3.3.  2.2.12 suceeds, whereas the other two fail with  
the above output.


Interestingly, ./configure generates the following output in 2.2.13  
and 2.3.3, which is NOT present in 2.2.12:


I also tried 2.3.3, just to experiment, which also fails with the  
same error.


One thing I notice is that 2.2.13 has the following in its ./ 
configure output, which is not present in 2.2.12:


checking for res_search in -lresolv... no
checking krb.h usability... yes
checking krb.h presence... yes
checking for krb.h... yes
checking for krb_mk_priv in -lkrb... no
configure: WARNING: No Kerberos V4 found

I wonder if that the root of the problem?

--
Mark Edwards



Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Trouble building 2.2.13 on FreeBSD 4.11

[Mark Edwards]

Thanks for the suggestion.  My system has:

/usr/include/krb-protos.h
/usr/include/krb.h
/usr/include/krb5-protos.h
/usr/include/krb5-types.h
/usr/include/krb5.h
/usr/include/krb5_err.h
/usr/include/krb_db.h
/usr/include/krb_err.h

The configure script seems to be finding them okay, but then it  
complains about no Kerberos4:


checking krb.h usability... yes
checking krb.h presence... yes
checking for krb.h... yes
checking for krb_mk_priv in -lkrb... no
configure: WARNING: No Kerberos V4 found

Moreover, I wonder why this is any different between 4.2.12 and  
4.2.13...


On Apr 29, 2006, at 5:36 PM, Raymond T. Sundland wrote:

This is due to the location of krb5.h which is not in your normal  
include path.  I believe on a 4.x system, it's in /usr/include/ 
kerberos/krb5.h  but since the Cyrus configure/make scripts  
doesn't look here by default, you need to do something like ln -s / 
usr/include/kerberos/krb5.h /usr/include/.  Then run make again.



Mark Edwards wrote:
I am having trouble compiling cyrus-imapd 2.2.13 on a FreeBSD  
4.11p16 machine.  I can compile 2.2.12 just fine, and have been  
using it for many months.


I have tried from the FreeBSD port, as well as downloading and  
compiling myself, with this configure statement:


./configure --with-bdb-incdir=/usr/local/include/db41/ --with-bdb- 
libdir=/usr/local/lib/ --with-sasl=/usr/local/

make

Both methods result in the output below.  I don't use Kerberos nor  
do I have it installed, although I did also try installing the  
Kerberos4 and Kerberos5 ports, neither of which changed my results.


Thanks for any help!

.
.
.
gcc -c -I.. -I./../lib  -I./../sieve -I/usr/local/include/db41/  - 
I/usr/local/include -I/usr/local//include -DHAVE_CONFIG_H -g -O2   
quota_db.c
gcc -c -I.. -I./../lib  -I./../sieve -I/usr/local/include/db41/  - 
I/usr/local/include -I/usr/local//include -DHAVE_CONFIG_H -g -O2   
seen_db.c
gcc -c -I.. -I./../lib  -I./../sieve -I/usr/local/include/db41/  - 
I/usr/local/include -I/usr/local//include -DHAVE_CONFIG_H -g -O2   
idle_poll.c

rm -f libimap.a
ar cr libimap.a append.o mailbox.o mboxlist.o mupdate-client.o  
mboxname.o message.o  global.o imap_err.o mupdate_err.o proc.o  
setproctitle.o  convert_code.o duplicate.o saslclient.o  
saslserver.o signals.o  annotate.o search_engines.o squat.o  
squat_internal.o mbdump.o  imapparse.o telemetry.o user.o notify.o  
protocol.o quota_db.o  seen_db.o idle_poll.o

ranlib libimap.a
gcc -L/usr/local/lib/ -R/usr/local/lib/ -o imapd  ../master/ 
service.o pushstats.o backend.o imapd.o index.o tls.o version.o  
mutex_fake.o  libimap.a ../lib/libcyrus.a ../lib/libcyrus_min.a -L/ 
usr/local//lib  -R/usr/local//lib -lsasl2  -lssl -lcrypto   -lfl
-L/usr/local/lib/  -R/usr/local/lib/ -ldb41 -lmd -lcom_err -lwrap

../lib/libcyrus.a(auth_krb5.o): In function `mycanonifyid':
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:122: undefined  
reference to `krb5_init_context'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:129: undefined  
reference to `krb5_parse_name'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:137: undefined  
reference to `krb5_get_default_realm'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:140: undefined  
reference to `krb5_build_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:141: undefined  
reference to `krb5_free_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:142: undefined  
reference to `krb5_free_context'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:149: undefined  
reference to `krb5_realm_compare'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:154: undefined  
reference to `krb5_free_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:159: undefined  
reference to `krb5_unparse_name'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:160: undefined  
reference to `krb5_free_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:161: undefined  
reference to `krb5_free_context'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:172: undefined  
reference to `krb5_free_principal'
/usr/home/paimin/cyrus-imapd-2.2.13/lib/auth_krb5.c:173: undefined  
reference to `krb5_free_context'

*** Error code 1

Stop in /usr/home/paimin/cyrus-imapd-2.2.13/imap.
*** Error code 1

Stop in /usr/home/paimin/cyrus-imapd-2.2.13.

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html




--
Mark Edwards



Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: squatter on virtual domains

[Mark Nipper]

On 13 Apr 2006, Ow Mun Heng wrote:
 I would like to run squatter to get indexes up. I run a virtual system
 using virtdomains. As such, I would like to know what to use for the
 users 
 
 running squatter with the cyrus default 
 
 /usr/lib/cyrus/squatter -r -v user/%
 
 doesn't work

Assuming you want to index all mailboxes, why not just
use something like squatter -s by itself?  And if you end up
going this route, you should probably look at setting this up
under your EVENTS section in cyrus.conf.

-- 
Mark Nippere-contacts:
832 Tanglewood Drive[EMAIL PROTECTED]
Bryan, Texas 77802-4013 http://nipsy.bitgnome.net/
(979)575-3193  AIM/Yahoo: texasnipsy ICQ: 66971617

-BEGIN GEEK CODE BLOCK-
Version: 3.1
GG/IT d- s++:+ a- C++$ UBL$ P---+++ L+++$ !E---
W++(--) N+ o K++ w(---) O++ M V(--) PS+++(+) PE(--)
Y+ PGP t+ 5 X R tv b+++@ DI+(++) D+ G e h r++ y+(**)
--END GEEK CODE BLOCK--

---begin random quote of the moment---
Information flows into the public domain as water to the sea.
Copyright is an increasingly ineffectual dam.
end random quote of the moment

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

SYSLOG problem. Can't seperate sendmail from cyrus.

[Mark London]

I have cyrus installed via redhat 4 rpms.  I thought I could separate 
all cyrus messages from sendmail, by doing the following in syslog.conf:


*.info;mail.none;news.none;authpriv.none;cron.none;local6.* 
/var/log/messages


mail.*;local6.none  
-/var/log/maillog


I thought that should make all the cyrus messages go into 
/var/log/messages, but they still go into maillog (see below).  I 
confirmed my changes to syslog.conf were being accepted, because I 
changed the filename of maillog to foo in syslog.conf and restarted it, 
and then everything was getting logged into foo instead.  Any 
suggestions?  Thanks!



Apr 12 18:51:57 mail2 sendmail[6449]: k3CMpvpv006449: Milter add: 
header: X-Scanned-By: MIMEDefang \

2.54 on 198.125.176.77
Apr 12 18:51:57 mail2 sendmail[6448]: k3CMpvQ4006448: to=news, 
ctladdr=news (9/13), delay=00:00:00,\
xdelay=00:00:00, mailer=relay, pri=30112, relay=[127.0.0.1] 
[127.0.0.1], dsn=2.0.0, stat=Sent (k3C\

Mpvpv006449 Message accepted for delivery)
Apr 12 18:51:57 mail2 lmtpunix[6250]: accepted connection
Apr 12 18:51:57 mail2 lmtpunix[6250]: lmtp connection preauth'd as postman
Apr 12 18:51:57 mail2 master[6453]: about to exec /usr/lib/cyrus-imapd/lmtpd
Apr 12 18:51:57 mail2 lmtpunix[6453]: executed
Apr 12 18:51:58 mail2 lmtpunix[6250]: duplicate_check: 
[EMAIL PROTECTED]

edu user.mrl 0
Apr 12 18:51:58 mail2 lmtpunix[6250]: mystore: starting txn 2147483651
Apr 12 18:51:58 mail2 lmtpunix[6250]: mystore: committing txn 2147483651
Apr 12 18:51:58 mail2 lmtpunix[6250]: duplicate_mark: 
[EMAIL PROTECTED]

du user.mrl 1144882318 32233
Apr 12 18:51:58 mail2 lmtpunix[6250]: mystore: starting txn 2147483652
Apr 12 18:51:58 mail2 lmtpunix[6250]: mystore: committing txn 2147483652
Apr 12 18:51:58 mail2 lmtpunix[6250]: duplicate_mark: 
[EMAIL PROTECTED]

du [EMAIL PROTECTED]1144882318 0
Apr 12 18:51:58 mail2 sendmail[6451]: k3CMpvpv006449: to=mrl, 
delay=00:00:01, xdelay=00:00:01, mail\

er=cyrus, pri=30734, relay=localhost, dsn=2.0.0, stat=Sent



Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: How to delete a corpse Mailbox

[Mark Schwarz]

i have a user corpse in my cyrus mailboxes.
How i can delete a user like this?
The Problem is the user doesn't exist as a file.
If i try to delete them trough cyradm the following message says:

localhost info user/rene.*
{user/rene.DOMAIN.org}:
 partition: default

localhost dm user/rene.DOMAIN.org
deletemailbox: System I/O error


Try reconstructing the mailbox (you may need the -x option), then delete it.


Yes, that was successfully :-)
I also had try to reconstruct but without the -x option.

Thanks a million



This message was sent using IMP, the Internet Messaging Program.


Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Mixing 2.2.12 and 2.3.x in murder environment

[Mark]

Aleksandar Milivojevic [EMAIL PROTECTED] wrote: Mark wrote: Hello,  I'm looking for a (conservative) upgrade path from 2.2.12 to 2.3.3, and  was wondering if anyone ran cyrus murder with mixed imapd versions. For  example, 2.2.12 back ends, 2.3.3 mupdate server (it is 2.2.12 now) and  2.2.12 front ends. Or, if anyone did the upgrades from 2.2.x to 2.3.x in  another way, would you mind sharing your thoughts. Thanks for any suggestions.I'd wait till 2.3.4 is out.  There's bug with mupdate which more or less renders it useless (well, at least it was in my configuration).  It was fixed after 2.3.3 was released.  The fix should be in CVS, and I guess 2.3.4 will have usable mupdate.  There's couple of other usefull fixes and enhancements currently in !
 CVS, and
 my guess is that they will be included in 2.3.4 (like added TLS support in mupdate client code).Thanks, I will wait for 2.3.4, or use CVS.Mark
		Brings words and photos together (easily) with 
PhotoMail  - it's free and works with Yahoo! Mail.
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Mixing 2.2.12 and 2.3.x in murder environment

[Mark]

--- Patrick H Radtke [EMAIL PROTECTED] wrote:

 2.2.12 backends should work with a 2.3 murder master. I don't think
 there 
 have been changes to the mupdate protocol.

OK thanks.

 
  What mupdate problems are you seeing with 2.3?
 
 
 Pretty much what Alek said, but on a less frequent basis. We'd see it
 when 
 there were too many simultanious mailbox creations and/or a frontend
 was 
 restarted when the murder master was under load.

I will wait for 2.3.4 as Aleksandar suggested, I wrote some scripts to
automate stopping/waiting/starting of front ends until mupdate unlocks,
at least that helps a little for now.
Thanks guys.

Mark


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Mixing 2.2.12 and 2.3.x in murder environment

[Mark]

Hello,  I'm looking for a (conservative) upgrade path from 2.2.12 to 2.3.3, and was wondering if anyone ran cyrus murder with mixed imapd versions. For example, 2.2.12 back ends, 2.3.3 mupdate server (it is 2.2.12 now) and 2.2.12 front ends. Or, if anyone did the upgrades from 2.2.x to 2.3.x in another way, would you mind sharing your thoughts. Thanks for any suggestions.  Mark  
		Brings words and photos together (easily) with 
PhotoMail  - it's free and works with Yahoo! Mail.
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Mixing 2.2.12 and 2.3.x in murder environment

[Mark]

Thanks Patrick. The reason we want to speed up the upgrades is because of the 2.2.12 threading problems - high cpu, locked up mupdate. Ideally we would upgrade mupdate to 2.3.x and then upgrade the front ends and back ends a little later. Do you think 2.3 mupdate would work well with 2.2.12 backends?What mupdate problems are you seeing with 2.3?MarkPatrick H Radtke [EMAIL PROTECTED] wrote: We have 2.2.12 frontends, 2.3 backends and 2.3 murder master.Only reason we went with 2.2.12 for frontends is that when we first installed 2.3 it was in the summer and 2.3 didn't work as a frontend. That has been fixed now. Only reason we haven't changed the frontends to 2.3 is that we're busy with other stuff at the moment.There are some problems with the murder master in 2.3. We use it anyways
 since it fixes some threading problems that would occur in 2.2.12-PatrickOn Sat, 18 Mar 2006, Mark wrote: Hello, I'm looking for a (conservative) upgrade path from 2.2.12 to 2.3.3, and was wondering if anyone ran cyrus murder with mixed imapd versions. For example, 2.2.12 back ends, 2.3.3 mupdate server (it is 2.2.12 now) and 2.2.12 front ends. Or, if anyone did the upgrades from 2.2.x to 2.3.x in another way, would you mind sharing your thoughts. Thanks for any suggestions. Mark
		Brings words and photos together (easily) with 
PhotoMail  - it's free and works with Yahoo! Mail.
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: cyrus-imapd 2.3.3-1

[Mark]

Ken Murchison [EMAIL PROTECTED] wrote: Aleksandar Milivojevic wrote: Quoting Scott Russell :  Can anyone comment on how the cyrus-imapd 2.3.3-1 RPM is working for  them? I remember there were some stability problems in imapd after  2.3.1-3 which was tracking CVS bug fixes and it was recommended to  back down to 2.3.1-2. I'm not sure what became of those reports or if  they have resurfaced again under 2.3.3-1.   I had it installed on couple of testing boxes.  It worked OK for  "single-server" installation.  However, cluster (Murder) type of  installation was unusable.  The mupdate process would just suck CPU and  get stuck eventually.  I've wrote about this problem on the list, and it 
 seems at least one more person hit the same problem (see the thread with  subject "cyrus murder, mupdate sucking up CPU").  I also opened bugzilla  entry (bug# 2806).  I had same problem with all 2.3.x that were released  so far.I've verified that a problem exists in mupdate due to some code changes that I made in prot_select().  I haven't fixed it yet, but I'm working on it (debugging threaded code sucks).  Thank you. I just wanted to say that I was seeing this as well, for weeks, and have been trying to narrow it down (before writing to list to ask), making mostly system changes. I was wondering, later on, if there would be a patch for 2.2.12, we cannot upgrade yet to 2.3 because we need to upgrade backend first. Take care guys,  Mike 
		Yahoo! Mail
Bring photos to life! New PhotoMail  makes sharing a breeze. 

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Cyrus autocreate mailboxes

[Mark Schwarz]

Hi,

i search for a way to autocreate submailboxes in cyrus imap 2.2.14!
My users are managed in Web-cyradm with a MySQL backend.
I have tried to patch the cyrus-ebuild on my gentoo server, that was 
successful.

But with the options...

---zap---
autocreateinboxfolders: sent|drafts|spam|templates
autosubscribeinboxfolders: sent|spam
---zap---

nothing happened.
Only the INBOX is there if i try to add a user through web-cyradm.
Did I make an error?

Thanks
P. Schwarz

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

configure error: can't find DES library

[Mark Hannessen]

hi list,

I am trying to compile cyrus imap with kerberos support.
but the configure script fails with the warning that the kerberos DES 
library's are not installed.

configure: error: The Kerberos DES library is required for Kerberos support.

ls /usr/lib/libdes* -lh
-rw-r--r--  1 root root 18K Jul 13  2005 /usr/lib/libdes425.a
lrwxrwxrwx  1 root root  16 Jan 27 16:42 /usr/lib/libdes425.so - 
libdes425.so.3.0
lrwxrwxrwx  1 root root  16 Jan 27 16:42 /usr/lib/libdes425.so.3 - 
libdes425.so.3.0
-rw-r--r--  1 root root 11K Jul 13  2005 /usr/lib/libdes425.so.3.0

cat config.log | tail -n14
configure:3547: gcc -o conftest -g -O2 -I/usr/local/include  -L/usr/lib 
-Wl,-rpath,/usr/lib  conftest.c -ldes  -lcrypt -lresolv -lcrypt  15
/usr/bin/ld: cannot find -ldes
collect2: ld returned 1 exit status
configure: failed program was:
#line 3536 configure
#include confdefs.h
/* Override any gcc2 internal prototype to avoid an error.  */
/* We use char because int might match the return type of a gcc2
builtin and then its argument prototype would still apply.  */
char des_ecb_encrypt();

int main() {
des_ecb_encrypt()
; return 0; }

any hints on how to get this fixed?

thanks, Mark

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

cyrus imap proxy?

[Mark Hannessen]

hi list,

In our network we are currently running two Cyrus imap servers in our local 
network.

imap.nperfection.com on 10.4.8.1
imap.khadgarsrage.com on 10.4.8.2

these two where made available to the internet using webmail.

now I would like imap itself to be available to the internet as well.
but I only have one internet ip.
for various reasons I cannot merge both servers into one server. (mainly 
because of internal policy)

now I thought perhaps it would be possible to do this through some sort of 
proxy, but I haven't found any information about this.

does anyone know if such a thing is doable?

thanks,

Mark Hannessen

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Folder sizes on server larger than in original PST

[Mark]

Hello,

Perhaps not related to Cyrus, but maybe you guys know why this would be
like this. I've imported a 650MB .PST file made from Exchange server
into the Cyrus imapd, who now reports about 870MB. In fact not only
Cyrus reports it, but it really us that big, according to the OS. I've
not seen this before, usually the size of a .PST roughly matches the
size on the Cyrus server after an import. Any idea what could cause a
missmatch? There is nothing obvious, it seems each email is a bit
larger than in PST, all adding up to over 200MB of difference. Import
was done in Outlook by opening a PST as a personal folder, then
connecting to Cyrus, then dragging and dropping the folders+email.
Thanks for any insights.

Mark




Start your day with Yahoo! - make it your home page 
http://www.yahoo.com/r/hs 
 

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: 2.2 and 2.3 imapd

[Mark]

Patrick, all,

--- Patrick Radtke [EMAIL PROTECTED] wrote:

 We had the same problem a few weeks back.
 I filed a bug at
 https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2669

Ah, who would think to check there. :)

 
 Our solution was to have the backends and murder master run the 2.3  
 code, and the frontends run the 2.2 code.
 This works for us since the 2.3 features that we want (replication,  
 unexpunge) are only needed on the backend.

Yes, that is where we want to be also. The reason I tried with front
end first was to try not to break something as our testing ability is
limited (not much hardware). Thank you, I will then skip the front end
for now. Do you know or remember if both back end and murder master
needed to be upgraded to 2.3 at the same time, or if it can be done one
by one? I'm only asking to see how much room there is to move around.

 
 Another alternative is to try the unified murder (backends and  
 frontends are the same machine), but I do not know what state that  
 code is in.

Yeah, that would be nice, but it would probably be a little easier to
do it in steps.

Thanks for your help.

Mark


 
 On Jun 22, 2005, at 12:29 AM, Mark wrote:
 
  Hello,
 
  There is a 2.2-imapd (2.2.12) murder enabled environment (front
 ends,
  murder master, back ends) working nice, and so I set up another
 front
  end with the 2.3 cvs code for testing. After setting it all up, I'm
  having problems fetching mail through it. What happens is, a mail
  client (tried mutt and Thunderbird) connects to 2.3 proxy fine,
  authenticates, and then fetches INBOX and gets stuck, mail headers
  never arrive. I'm a bit out of ideas, and in fact wanted to know if
  this kind of setup should work, and if it is recommended at all. If
 it
  should work, and anyone has an idea where I should look, that would
 be
  great help. And if not, what is a good way to upgrade to 2.3?
 
  Here are cyrus logs from both 2.3 front end that gets stuck, and  
  also a
  working one (2.2.12) just in case it helps.
 
  Lines will probably be broken..
 
  - start 2.3 that gets stuck -
 
 
  1119119387a0003 OK User logged in
 
  1119119387a0004 LIST  
 
  1119119387* LIST (\Noselect) / 
 
  a0004 OK Completed (0.000 secs 0 calls)
  1119119387a0005 SELECT INBOX
 
  1119119387* FLAGS (\Answered \Flagged \Draft \Deleted \Seen Junk
 
  $MDNSent)
  * OK [PERMANENTFLAGS (\Answered \Flagged \Draft \Deleted \Seen Junk
  $MDNSent \*)
  ]
  * 831 EXISTS
  * 0 RECENT
  * OK [UNSEEN 827]
  * OK [UIDVALIDITY 1101173713]
  * OK [UIDNEXT 18056]
  a0005 OK [READ-WRITE] Completed
 
  - end of 2.3 -
 
 
 
  - start 2.2 that works ok -
 
 
  1119116500a0003 OK User logged in
 
  1119116500a0004 LIST  
 
  1119116500* LIST (\Noselect) / 
 
  a0004 OK Completed
  1119116500a0005 SELECT INBOX
 
  1119116500* FLAGS (\Answered \Flagged \Draft \Deleted \Seen Junk
 
  $MDNSent)
  * OK [PERMANENTFLAGS (\Answered \Flagged \Draft \Deleted \Seen Junk
  $MDNSent \*)
  ]
  * 833 EXISTS
  * 0 RECENT
  * OK [UNSEEN 827]
  * OK [UIDVALIDITY 1101173713]
  * OK [UIDNEXT 18053]
  a0005 OK [READ-WRITE] Completed
  1119116500a0006 MYRIGHTS INBOX
 
  1119116500* MYRIGHTS INBOX lrswipcda
 
  a0006 OK Completed
  1119116500a0007 FETCH 1:833 (UID FLAGS INTERNALDATE RFC822.SIZE
  BODY.PEEK[HEAD
  ER.FIELDS (DATE FROM SUBJECT TO CC MESSAGE-ID REFERENCES
 CONTENT-TYPE
  IN-REPLY-T
  O REPLY-TO LINES X-LABEL)])
 
  1119116500* 1 FETCH (FLAGS (\Answered \Seen) UID 8 INTERNALDATE
 
  16-Dec-2004 1
  0:14:28 -0500 RFC822.SIZE 1765 BODY[HEADER.FIELDS (DATE FROM
 SUBJECT
  TO CC MESS
  AGE-ID REFERENCES CONTENT-TYPE IN-REPLY-TO REPLY-TO LINES X-LABEL)]
  {268}
  Message-ID: ...
  [ and so on, it fetches it all ]
 
  - end of 2.2 log -
 
  Thanks for any help and pointers.
 
  Mark
 
 
 
  
  Yahoo! Sports
  Rekindle the Rivalries. Sign up for Fantasy Football
  http://football.fantasysports.yahoo.com
  ---
  Cyrus Home Page: http://asg.web.cmu.edu/cyrus
  Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
  List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
 
 
 ---
 Cyrus Home Page: http://asg.web.cmu.edu/cyrus
 Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
 List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
 


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: 2.2 and 2.3 imapd

[Mark]

Thanks Christos for the info!


--- Christos Soulios [EMAIL PROTECTED] wrote:

 I fell into the same bug and from what I found using gdb was that
 after a
 SELECT command, the function cmdloop() of imapd calls
 proxy_check_input().
 
 
 Then the following function calls are performed :
 proxy_check_input() - prot_read() - prot_fill() - read()
 
 Then read() blocks while waiting from input from the backend. This
 results
 in blocking the whole imapd.
 
 I am not sure what kind of input from the backend should be waited
 for. I
 tried changing the configuration several times but no success.
 
 Christos
 
 
 
 Mark wrote:
  Hello,
 
  There is a 2.2-imapd (2.2.12) murder enabled environment (front
 ends,
  murder master, back ends) working nice, and so I set up another
 front
  end with the 2.3 cvs code for testing. After setting it all up, I'm
  having problems fetching mail through it. What happens is, a mail
  client (tried mutt and Thunderbird) connects to 2.3 proxy fine,
  authenticates, and then fetches INBOX and gets stuck, mail headers
  never arrive. I'm a bit out of ideas, and in fact wanted to know if
  this kind of setup should work, and if it is recommended at all. If
 it
  should work, and anyone has an idea where I should look, that would
 be
  great help. And if not, what is a good way to upgrade to 2.3?
 
  Here are cyrus logs from both 2.3 front end that gets stuck, and
 also a
  working one (2.2.12) just in case it helps.
 
  Lines will probably be broken..
 
  - start 2.3 that gets stuck -
 
 1119119387a0003 OK User logged in
  1119119387a0004 LIST  
 1119119387* LIST (\Noselect) / 
  a0004 OK Completed (0.000 secs 0 calls)
  1119119387a0005 SELECT INBOX
 1119119387* FLAGS (\Answered \Flagged \Draft \Deleted \Seen Junk
  $MDNSent)
  * OK [PERMANENTFLAGS (\Answered \Flagged \Draft \Deleted \Seen Junk
  $MDNSent \*)
  ]
  * 831 EXISTS
  * 0 RECENT
  * OK [UNSEEN 827]
  * OK [UIDVALIDITY 1101173713]
  * OK [UIDNEXT 18056]
  a0005 OK [READ-WRITE] Completed
 
  - end of 2.3 -
 
 
 
  - start 2.2 that works ok -
 
 1119116500a0003 OK User logged in
  1119116500a0004 LIST  
 1119116500* LIST (\Noselect) / 
  a0004 OK Completed
  1119116500a0005 SELECT INBOX
 1119116500* FLAGS (\Answered \Flagged \Draft \Deleted \Seen Junk
  $MDNSent)
  * OK [PERMANENTFLAGS (\Answered \Flagged \Draft \Deleted \Seen Junk
  $MDNSent \*)
  ]
  * 833 EXISTS
  * 0 RECENT
  * OK [UNSEEN 827]
  * OK [UIDVALIDITY 1101173713]
  * OK [UIDNEXT 18053]
  a0005 OK [READ-WRITE] Completed
  1119116500a0006 MYRIGHTS INBOX
 1119116500* MYRIGHTS INBOX lrswipcda
  a0006 OK Completed
  1119116500a0007 FETCH 1:833 (UID FLAGS INTERNALDATE RFC822.SIZE
  BODY.PEEK[HEAD
  ER.FIELDS (DATE FROM SUBJECT TO CC MESSAGE-ID REFERENCES
 CONTENT-TYPE
  IN-REPLY-T
  O REPLY-TO LINES X-LABEL)])
 1119116500* 1 FETCH (FLAGS (\Answered \Seen) UID 8 INTERNALDATE
  16-Dec-2004 1
  0:14:28 -0500 RFC822.SIZE 1765 BODY[HEADER.FIELDS (DATE FROM
 SUBJECT
  TO CC MESS
  AGE-ID REFERENCES CONTENT-TYPE IN-REPLY-TO REPLY-TO LINES X-LABEL)]
  {268}
  Message-ID: ...
  [ and so on, it fetches it all ]
 
  - end of 2.2 log -
 
  Thanks for any help and pointers.
 
  Mark
 
 
 
  
  Yahoo! Sports
  Rekindle the Rivalries. Sign up for Fantasy Football
  http://football.fantasysports.yahoo.com
  ---
  Cyrus Home Page: http://asg.web.cmu.edu/cyrus
  Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
  List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
 
 
 
 -- 
 Did you visit http://email.uoa.gr?
 
 




 
Yahoo! Sports 
Rekindle the Rivalries. Sign up for Fantasy Football 
http://football.fantasysports.yahoo.com
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

2.2 and 2.3 imapd

[Mark]

Hello,

There is a 2.2-imapd (2.2.12) murder enabled environment (front ends,
murder master, back ends) working nice, and so I set up another front
end with the 2.3 cvs code for testing. After setting it all up, I'm
having problems fetching mail through it. What happens is, a mail
client (tried mutt and Thunderbird) connects to 2.3 proxy fine,
authenticates, and then fetches INBOX and gets stuck, mail headers
never arrive. I'm a bit out of ideas, and in fact wanted to know if
this kind of setup should work, and if it is recommended at all. If it
should work, and anyone has an idea where I should look, that would be
great help. And if not, what is a good way to upgrade to 2.3?

Here are cyrus logs from both 2.3 front end that gets stuck, and also a
working one (2.2.12) just in case it helps.

Lines will probably be broken..

- start 2.3 that gets stuck -

1119119387a0003 OK User logged in
1119119387a0004 LIST  
1119119387* LIST (\Noselect) / 
a0004 OK Completed (0.000 secs 0 calls)
1119119387a0005 SELECT INBOX
1119119387* FLAGS (\Answered \Flagged \Draft \Deleted \Seen Junk
$MDNSent)
* OK [PERMANENTFLAGS (\Answered \Flagged \Draft \Deleted \Seen Junk
$MDNSent \*)
]  
* 831 EXISTS
* 0 RECENT
* OK [UNSEEN 827]  
* OK [UIDVALIDITY 1101173713]  
* OK [UIDNEXT 18056]  
a0005 OK [READ-WRITE] Completed

- end of 2.3 -



- start 2.2 that works ok -

1119116500a0003 OK User logged in
1119116500a0004 LIST  
1119116500* LIST (\Noselect) / 
a0004 OK Completed
1119116500a0005 SELECT INBOX
1119116500* FLAGS (\Answered \Flagged \Draft \Deleted \Seen Junk
$MDNSent)
* OK [PERMANENTFLAGS (\Answered \Flagged \Draft \Deleted \Seen Junk
$MDNSent \*)
]  
* 833 EXISTS
* 0 RECENT
* OK [UNSEEN 827]  
* OK [UIDVALIDITY 1101173713]  
* OK [UIDNEXT 18053]  
a0005 OK [READ-WRITE] Completed
1119116500a0006 MYRIGHTS INBOX
1119116500* MYRIGHTS INBOX lrswipcda
a0006 OK Completed
1119116500a0007 FETCH 1:833 (UID FLAGS INTERNALDATE RFC822.SIZE
BODY.PEEK[HEAD
ER.FIELDS (DATE FROM SUBJECT TO CC MESSAGE-ID REFERENCES CONTENT-TYPE
IN-REPLY-T
O REPLY-TO LINES X-LABEL)])
1119116500* 1 FETCH (FLAGS (\Answered \Seen) UID 8 INTERNALDATE
16-Dec-2004 1
0:14:28 -0500 RFC822.SIZE 1765 BODY[HEADER.FIELDS (DATE FROM SUBJECT
TO CC MESS
AGE-ID REFERENCES CONTENT-TYPE IN-REPLY-TO REPLY-TO LINES X-LABEL)]
{268}
Message-ID: ... 
[ and so on, it fetches it all ]

- end of 2.2 log -

Thanks for any help and pointers.

Mark



 
Yahoo! Sports 
Rekindle the Rivalries. Sign up for Fantasy Football 
http://football.fantasysports.yahoo.com
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

saslpasswd2: Couldn't update db

[Mark Edwards]

I'm running the latest versions of cyrus-imap2, cyrus-sasl2, and 
cyrus-saslauthd on FreeBSD 4.11.


When I use saslpasswd2 to set or change a password, I always get a log 
item saying that saslpasswd2 Coudn't update db even though the 
password is changed successfully, the db file is modified, and 
subsequent authentication with the new password succeeds just fine.


An example:

May 30 03:46:13 lilbuddy saslpasswd2: setpass succeeded for 
[EMAIL PROTECTED]

May 30 03:46:13 lilbuddy saslpasswd2: Couldn't update db

I don't see these errors when cyrus-imap sets a password as part of 
sasl_auto_transition (I am authenticating imap via saslauthd).  So, in 
that case the password update occurs with no error in the log.


In either case, password updates are occurring successfully, but I am 
trying to figure out what is causing these seemingly inconsequential 
errors.  I have seen numerous references to this problem in Google 
searches, but no evidence of a solution.


Any ideas?  I tried posting about this to the cyrus-sasl list, but got 
no response.  Thanks!


--
Mark Edwards
[EMAIL PROTECTED]
cell: +46704070332

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

EMBARRASSING TO THE LIST: Re: *WARNING* Your Email Account Will Be Closed

[Mark Nernberg]

This, along with other similar such things, should be a total embarrassment
to the list administrators and operators.

I am a member of about 40 different mailing lists dealing with different
open-source software.  Why is it that this is the only one which allows this
crap to make it through?

Considering that Project Cyrus aims to produce secure software, the total
lack of even basic anti-virus screening on the listserve (or, if there is
screening, the total failure of it), reeks of laziness on the part of the
system operators.

As such, I now question the validity of the claims that Cyrus IMAPD and SASL
are relatively secure.  If the programmers are as lazy as the system
operators, then IMAPD and SASL must be full of holes.

On 5/30/05 3:26 AM, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:

 We attached some important information regarding your account.
 


---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: EMBARRASSING TO THE LIST: Re: *WARNING* Your Email Account Will Be Closed

[Mark Nernberg]

The problem is that this crap comes through the Cyrus lists all the time!

If it were once, I'd keep my mouth shut.

And, don't give me that TrendMicro/ClamAV crap -- quality attachment
filtering and simply disallowing attachments to the list would nip
that in the bud.

On 5/30/05, Andreas S. Kerber [EMAIL PROTECTED] wrote:
 On Mon, May 30, 2005 at 11:44:24AM -0400, Mark Nernberg wrote:
  Considering that Project Cyrus aims to produce secure software, the total
  lack of even basic anti-virus screening on the listserve (or, if there is
  screening, the total failure of it), reeks of laziness on the part of the
  system operators.
  As such, I now question the validity of the claims that Cyrus IMAPD and SASL
  are relatively secure.  If the programmers are as lazy as the system
  operators, then IMAPD and SASL must be full of holes.
 
 Nonsense.
 
 At the time of the arrival of those mails neither Trendmicro nor ClamAV
 recognized those virii, so keep you rant, thanks.
 
 
 


---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

compile problems with imap-2.2.10

[Mark Nernberg]

I'm attempting to compile/install IMAP-2.2.10 from source using FreeBSD
5.4/RELEASE on Sparc64.

I am getting the following output from make:

gcc -L/usr/local/ssl/lib -R/usr/local/ssl/lib -L/usr/local/bdb/lib
-R/usr/local/bdb/lib -o imapd  ../master/service.o pushstats.o backend.o
imapd.o index.o tls.o version.o mutex_fake.o  libimap.a ../lib/libcyrus.a
../lib/libcyrus_min.a -L/usr/local/lib  -R/usr/local/lib -lsasl2  -lfl
-L/usr/local/bdb/lib  -R/usr/local/bdb/lib -ldb-4.2 -lssl -lcrypto -lmd
-lcom_err -lwrap
libimap.a(imap_err.o)(.text+0x10): In function
`initialize_imap_error_table_r':
/usr/local/warez/cyrus-imapd-2.2.10/imap/imap_err.c:68: undefined reference
to `initialize_error_table_r'
libimap.a(imap_err.o)(.text+0x14):/usr/local/warez/cyrus-imapd-2.2.10/imap/i
map_err.c:68: undefined reference to `initialize_error_table_r'
libimap.a(imap_err.o)(.text+0x30): In function
`initialize_imap_error_table':
/usr/local/warez/cyrus-imapd-2.2.10/imap/imap_err.c:73: undefined reference
to `init_error_table'
libimap.a(imap_err.o)(.text+0x34):/usr/local/warez/cyrus-imapd-2.2.10/imap/i
map_err.c:73: undefined reference to `init_error_table'
libimap.a(mupdate_err.o)(.text+0x10): In function
`initialize_mupd_error_table_r':
/usr/local/warez/cyrus-imapd-2.2.10/imap/mupdate_err.c:23: undefined
reference to `initialize_error_table_r'
libimap.a(mupdate_err.o)(.text+0x14):/usr/local/warez/cyrus-imapd-2.2.10/ima
p/mupdate_err.c:23: undefined reference to `initialize_error_table_r'
libimap.a(mupdate_err.o)(.text+0x30): In function
`initialize_mupd_error_table':
/usr/local/warez/cyrus-imapd-2.2.10/imap/mupdate_err.c:28: undefined
reference to `init_error_table'
libimap.a(mupdate_err.o)(.text+0x34):/usr/local/warez/cyrus-imapd-2.2.10/ima
p/mupdate_err.c:28: undefined reference to `init_error_table'
*** Error code 1

Stop in /usr/local/warez/cyrus-imapd-2.2.10/imap.
*** Error code 1

Stop in /usr/local/warez/cyrus-imapd-2.2.10.


For ./configure, I used:

./configure --with-sasl=/usr/local \
--with-perl --with-auth=unix  \
--with-bdb=/usr/local/bdb \
--with-bdb-libdir=/usr/local/bdb/lib  \
--with-bdb-incdir=/usr/local/bdb/include \
--with-openssl=/usr/local/ssl \
--disable-gssapi \
--without-ucdsnmp


Any assistance or information would be appreciated.  There is a lack of
information regarding any of this anywhere on the internet (via Google,
etc).  I found a few references to it, but no solutions.

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: compile problems with imap-2.2.10

[Mark J. Nernberg]

 From: Derrick J Brashear [EMAIL PROTECTED]
 Date: Mon, 23 May 2005 13:27:15 -0400 (EDT)
 To: info-cyrus@lists.andrew.cmu.edu
 Subject: Re: compile problems with imap-2.2.10
 
 On Mon, 23 May 2005, Mark Nernberg wrote:
 
 `initialize_imap_error_table_r':
 /usr/local/warez/cyrus-imapd-2.2.10/imap/imap_err.c:68: undefined reference
 to `initialize_error_table_r'
 libimap.a(imap_err.o)(.text+0x14):/usr/local/warez/cyrus-imapd-2.2.10/imap/i
 map_err.c:68: undefined reference to `initialize_error_table_r'
 
 Wild guess, the compile_et and libcom_err are not from the same source.
 

Not being a programmer, would you please be so kind as to offer a suggestion
to how I might get around it (i.e. get them in the same source).

 ---
 Cyrus Home Page: http://asg.web.cmu.edu/cyrus
 Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
 List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

new install, error when connecting, BYE Fatal Error: can't write proc file

[Mark Nernberg]

Ok.  I got the issues with compile_et  com_err worked out (by
specifying --with-com-err=/usr/local/dist/cyrus-imapd-2.2.10 in
./configure).

Now that its compiled, I need to test it (duh!).

When connecting via telnet to localhost 143, I get the following:

# telnet localhost 143
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
* BYE Fatal error: can't write proc file
Connection closed by foreign host.


Having Googled this, I noted that there is a prior posting to the list
(from Dec.2004), but it went unanswered.

Any/all help is MOST appreciated!  I need to get this up  running
fairly quickly, so time is running out.

M.

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: new install, error when connecting, BYE Fatal Error: can't write proc file

[Mark Nernberg]

Never mind.  I must be a dolt.

chown -R cyrus:mail /var/imap
chown -R cyrus:mail /var/spool/imap

I forgot to su to cyrus when running mkimap!

Thanks anyway.


On 5/23/05 4:53 PM, Mark Nernberg [EMAIL PROTECTED] wrote:

 Ok.  I got the issues with compile_et  com_err worked out (by
 specifying --with-com-err=/usr/local/dist/cyrus-imapd-2.2.10 in
 ./configure).
 
 Now that its compiled, I need to test it (duh!).
 
 When connecting via telnet to localhost 143, I get the following:
 
 # telnet localhost 143
 Trying 127.0.0.1...
 Connected to localhost.
 Escape character is '^]'.
 * BYE Fatal error: can't write proc file
 Connection closed by foreign host.
 
 
 Having Googled this, I noted that there is a prior posting to the list
 (from Dec.2004), but it went unanswered.
 
 Any/all help is MOST appreciated!  I need to get this up  running
 fairly quickly, so time is running out.
 
 M.
 
 ---
 Cyrus Home Page: http://asg.web.cmu.edu/cyrus
 Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
 List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Cyrus POP3 Issue [solved]

[L. Mark Stone]

Fernando,

Thank you very much, that fixed it!

With best regards,
Mark


On Fri, March 4, 2005 3:36 am, Fernando Arconada Oróstegui said:
 Yesterday i had the same problem in SLES9 and i found the solution
 disabling APOP in /etc/imapd.conf with allowapop:0
 Its a problem with ramdom numbers and entrophy if you need APOP other
 solution its to recompile saslauth to use /dev/random or to get a faster
 machine.


 L. Mark Stone [EMAIL PROTECTED] 04/03/05 3:59 
 I'm running Cyrus 2.2.3 on SuSE Linux Enterprise Server 9, installed
 from SuSE's rpm packages.

 The POP server component is giving us a problem.  It often fails to
 respond to connection requests in a timely manner, if at all.  IMAP
 shows no such problems; IMAP responds to telnet requests very fast
 indeed (like, within 60ms).  The server hardware is not heavily loaded,
 so we don't see this as a resource constraint issue.

 See for example:
 inside:~ # telnet localhost 110
 Trying 127.0.0.1...
 Connected to localhost.
 Escape character is '^]'.

 Sometimes the server responds with an +OK... immediately, sometimes
 after 5-10 seconds, more often not at all.  Nothing in the logs that we
 can see.  Googling and a review of the docs have yielded no hits, so we
 are posting here.

 Basically, we are just trying to figure out where to start looking to
 troubleshoot this.

 Any ideas/suggestions/pointers, etc. greatly appreciated,
 Mark

 --
 _
 A Message From...  L. Mark Stone

 Reliable Networks of Maine, LLC

 We manage your network so you can manage your business.

 477 Congress Street
 Portland, ME 04101
 Tel: (207) 772-5678
 Web: http://www.rnome.com


 ---
 Cyrus Home Page: http://asg.web.cmu.edu/cyrus
 Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
 List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html




-- 

A Message From...  L. Mark Stone

Reliable Networks of Maine, LLC

We manage your network so you can manage your business.

477 Congress Street
Portland, ME 04101
Tel: (207) 772-5678
Web: http://www.rnome.com




---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Cyrus POP3 Issue

[L. Mark Stone]

I'm running Cyrus 2.2.3 on SuSE Linux Enterprise Server 9, installed 
from SuSE's rpm packages.

The POP server component is giving us a problem.  It often fails to 
respond to connection requests in a timely manner, if at all.  IMAP 
shows no such problems; IMAP responds to telnet requests very fast 
indeed (like, within 60ms).  The server hardware is not heavily loaded, 
so we don't see this as a resource constraint issue.

See for example:
inside:~ # telnet localhost 110
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
 
Sometimes the server responds with an +OK... immediately, sometimes 
after 5-10 seconds, more often not at all.  Nothing in the logs that we 
can see.  Googling and a review of the docs have yielded no hits, so we 
are posting here.

Basically, we are just trying to figure out where to start looking to 
troubleshoot this.

Any ideas/suggestions/pointers, etc. greatly appreciated,
Mark

-- 
_
A Message From...  L. Mark Stone

Reliable Networks of Maine, LLC

We manage your network so you can manage your business.

477 Congress Street
Portland, ME 04101
Tel: (207) 772-5678
Web: http://www.rnome.com


---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Unread Counts Incorrect

[L. Mark Stone]

We are just starting to use Cyrus on SuSE SLES9, for about a month now.

One user (me) has a heirarchy of some 200 folders, and I am using sieve to
filter the 600-or-so incoming emails per day into various folders.

The problem is that the unread counts for all of the folders are wrong
(way too high).

Is there a tool that will clean this up?

Thanks,
Mark

-- 

A Message From...  L. Mark Stone

Reliable Networks of Maine, LLC

We manage your network so you can manage your business.

477 Congress Street
Portland, ME 04101
Tel: (207) 772-5678
Web: http://www.rnome.com




---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

sieve does not support same mechanisms as cyrus imap

[Mark Clarke]

Hi there,

I have setup my cyrus imap server to authenticate using saslauthd and
pam. Pam then refers to ldap for authentication.

imtest -a user -u user -t -m PLAIN  host

works fine. 

When I try sivtest -m PLAIN -u mark etc I get a response from the sieve
server that the only supported mechanism is DIGEST-MD5. Does anyone know
why it will do this? Where do I configure the sieve sasl supported
mechanisms if not in imapd.conf?

thanks


---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Sieve Script errors - permission denied writing to sub folders

[Mark Clarke]

Hi Rob,

Adding the p permission to the mailbox sorted out the problem. I must
admit it seems strange as it is cyrus user that is running at the time
i.e. sieve, and it could post to the user.mark folder but not any
subfolders. Even though they had the same permissions. I dont quite
understand how adding the p permission to the subfoldes for user mark
sorted this out but it did.
 Quess I still need to learn a lot


On Sun, 2005-01-09 at 22:47 -0800, Rob Tanner wrote:
 Mark,
 
 A point of clarification: is the permissions problem writing to the
 folder or executing the script?  Also, is the folder user.mark.XXX
 owned and writable by the cyrus user?  You mat be looking at UNIX
 system permission issues and not cyrus issues.
 
 -- Rob
 
 --On Monday, January 10, 2005 08:20:22 AM +0200 Mark Clarke
 [EMAIL PROTECTED] wrote:
 
  Hi there,
  
  I am new to cyrus and sieve. I have setup the following sieve script
  
  
  require [fileinto,reject];
  
  if address :domain contains: To XXX.abc.org
  {
  fileinto INBOX.XXX;
  }
  
  
  
  When i run this script I can see that the rule is applied but
  according to the logs permission is denied writing into the
  subfolder. Messages are delivered into the main Inbox folder just
  fine though.
  
  I have checked the permissions on the folder with cyradm 
  listacl user.mark.XXX
  (and get)
  mark lrswicd
  
  
  Any help appreciated
  
  ---
  Cyrus Home Page: http://asg.web.cmu.edu/cyrus
  Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
  List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
 
 
 

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Sieve Script errors - permission denied writing to sub folders

[Mark Clarke]

Hi there,

I am new to cyrus and sieve. I have setup the following sieve script


require [fileinto,reject];

if address :domain contains: To XXX.abc.org
{
fileinto INBOX.XXX;
}



When i run this script I can see that the rule is applied but according
to the logs permission is denied writing into the subfolder. Messages
are delivered into the main Inbox folder just fine though.

I have checked the permissions on the folder with cyradm 
listacl user.mark.XXX
(and get)
mark lrswicd


Any help appreciated

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: db4 backend alternative

[Mark Hannessen]

On Monday 20 December 2004 23:25, you wrote:
 Hi Mark,

 I'm looking for information as to how to convert from BDB4 to skiplist.

well, I don't have any real info or tools...

I only had 4 mail adresses at that time so I just copied all the mail using 
imap from my old to the new server. might be doable with 50 clients as 
well... though it is very braindead. suppose you could also write a script in 
perl to do it for you.

 I've finished with a new install of SASL, Cyrus IMAP, Postfix, MySQL,
 Web-Cyradm. I followed a how-to doc from Luc de Louw
 (www.web-cyradm.org). I've got the install completed and am in
 authentication testing phase. It looks like things are running ok.
 Recently, I've been paying attention to Berkeley DB complaints on the
 Cyrus mailing lists. Frankly, they have me concerned. The mail server
 I'm creating will be a corporate production mail server, but only
 serving 50 clients and 80GB of mail storage. I thought now would be a
 good time to possibly convert to skiplist before I populate the mail
 server.

 Can you point me to any docs on how to accomplish this? Does it mean
 recompiling SASL and IMAP, or is a config file change?

I added the following to my imapd.conf

annotation_db: skiplist
duplicate_db: skiplist
mboxlist_db: skiplist
ptscache_db: skiplist
quota_db: skiplist
seenstate_db: skiplist
subscription_db: skiplist
tlscache_db: skiplist

this will make sure everything will be stored in skiplist databases.

 Pardon my 
 ignorance, but what is skiplist? I'm having a hard time researching
 because I don't know much about it.

I don't have any real knowledge about skiplist other then that it is a 
database backend that seems to be used exclusively by cyrus imap.

 Any help is greatly appreciated.

 Thanks,

 Mark Butscher

 Mark Hannessen wrote:
  lol, so this thread is still running..
  been a while since I started it.
 
  I must say i am very pleased with skiplist, I have simulated a few
  hunderd crashes and it was able to recover every time. with db4 I had to
  pray for a succesfull restart or lose all my mail. (not kidding)
 
  the reason I switched to linux wasn't speed... because speed is cheap.
 
  it was stability and security.
 
  I think that in general people with few users won't care about the little
  random seek speed gain from db4, and people with many many many users
  would like to go to sleep at night, knowing that when they wake up there
  cyrus server is still having a good time handing mail over to users.
 
  I am not a technical dude, skiplist might be plain ugly, but from my
  perspective it works at what it is supposed to do. db4 fails that
  purpose.
 
  If I had to choose, skiplist would be the default a not db4. think about
  the bad impression it gives when new users see cyrus imap destroy all
  there mail before there eyes while doing a simple cyrus reboot. you would
  lose all faith in that product and switch to another one right?
 
  And the worst thing it that this isn't needed at all.
  cyrus is a good product. but people won't use it if they can't see that.
 
  regards from a happy cyrus user,
 
  Mark Hannessen
 
  On Friday 10 December 2004 13:18, you wrote:
 Michael Sims wrote:
 Denny Schierz wrote:
 Am Montag, den 22.11.2004, 22:51 + schrieb Mark Hannessen:
 I am really wondering about this because I just can't seem to get
 db4 to run stable.
 
 same problem here. I have to delete once a week all db's (but
 mailboxes.db). Otherwise i have timeouts and bouncing mails :-/
 
 Seriously, why don't you guys switch to skiplist and avoid the whole
 Berkeley DB mess?  I switched to skiplist for mailboxes.db, deliver.db,
 and the seen databases (on 2.1.x) about a year and a half ago and
  haven't had a problem since.  Berkeley DB
 
 Same here. Switched a year ago and not a worry in the world.
 The only difference is that I'm using deliver with db3-nosync (as with
 the tls_sessions) and the subscribed folders databases are flat files.
 The rest is all skiplist.
 
 may perform better in some situations, but IMHO it's not worth the
  hassle it brings. YMMV...
 
 Regards
 
  ---
  Cyrus Home Page: http://asg.web.cmu.edu/cyrus
  Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
  List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Redhat glibc upgrade broke my cyrus, help!!!

[Mr Mark London]

I installed Simon's RPMS, and that did not help my
problem.  What version of DB4 are you running, and did
you install it using Simon's patch?  I build db4 right
now from the source, because I need tcl-devel to do
that, which I don't have, and our local MIT redhat
server is not responding this morning for me to
download it.  Maybe glibc broke that server.  Note
that glibc broke Apache here, which we had built from
the sources, so other packages are affected by it.

--- David Curtin [EMAIL PROTECTED] wrote:

 Date: Tue, 21 Dec 2004 08:24:39 -0500
 From: David Curtin [EMAIL PROTECTED]
 To: Sebastian Hagedorn [EMAIL PROTECTED]
 CC: Mr Mark London [EMAIL PROTECTED],
 [EMAIL PROTECTED]
 Subject: Re: Redhat glibc upgrade broke my cyrus,
 help!!!
 
 Same here. We updated and have had no problems yet.
 
 Sebastian Hagedorn wrote:
 
  Hi,
 
  --On Montag, 20. Dezember 2004 22:03:29 Uhr MEZ
 -0800 Mr Mark London 
  [EMAIL PROTECTED] wrote:
 
  Hi - I just did some redhat enterprise 3.0
 upgrades,
  and they broke my cyrus.  I upgraded glibc,
 xfree86,
  and nfs-utils.  Obviously, glibc must have broke
 it.
 
 
  we just tried this on a test system and didn't
 have any problems after 
  the update. If nothing else comes up I guess we're
 going to upgrade 
  our production servers as well ...
 
  Cheers, Sebastian
  -- 
  Sebastian Hagedorn M.A. - RZKR-R1 (Gebäude 52),
 Zimmer 18
  Zentrum für angewandte Informatik -
 Universitätsweiter Service RRZK
  Universität zu Köln / Cologne University - Tel.
 +49-221-478-55
  87
 
 
 -- 
 David F. Curtin, FPG Child Development Institute
 [EMAIL PROTECTED]
 
 
 ---
 Cyrus Home Page: http://asg.web.cmu.edu/cyrus
 Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
 List Archives/Info:
 http://asg.web.cmu.edu/cyrus/mailing-list.html
 




__ 
Do you Yahoo!? 
The all-new My Yahoo! - What will yours do?
http://my.yahoo.com 
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Redhat glibc upgrade broke my cyrus, help!!!

[Mr Mark London]

Hi - I rebuilt DB4 from the sources (after running
into more problems just doing that!!) and that solved
our problem.  I'm pretty sure that the DB4 patch which
Simon has on his web page, is only necessary for
certain processors.  However, everything was working
fine here with the standard redhat db4, UNTIL we
upgraded the glibc.  Note similar weird also, when I
did a up2date glic, and it didn't update
glibc-headers, glibc-profile, and glibc-devel.  Why?? 
I had to do this by hand just now.  Weird. -  Mark

P.S.  I hate redhat.

--- Sebastian Hagedorn [EMAIL PROTECTED] wrote:

 Date: Tue, 21 Dec 2004 15:43:42 +0100
 From: Sebastian Hagedorn [EMAIL PROTECTED]
 To: Mr Mark London [EMAIL PROTECTED]
 CC: info-cyrus@lists.andrew.cmu.edu
 Subject: Re: Redhat glibc upgrade broke my cyrus,
 help!!!
 
 Hi,
 
 --On Dienstag, 21. Dezember 2004 6:25:51 Uhr MEZ
 -0800 Mr Mark London 
 [EMAIL PROTECTED] wrote:
 
  I installed Simon's RPMS, and that did not help my
  problem.  What version of DB4 are you running,
 
 the one that Red Hat provides:
 
 db4-4.1.25-8
 
  Maybe glibc broke that server.  Note
  that glibc broke Apache here, which we had built
 from
  the sources, so other packages are affected by it.
 
 Hmm. AFAIK our webservers haven't yet been updated,
 so I don't know about 
 that.
 
 Cheers, Sebastian
 --
 Sebastian Hagedorn M.A. - RZKR-R1 (Gebäude 52),
 Zimmer 18
 Zentrum für angewandte Informatik -
 Universitätsweiter Service RRZK
 Universität zu Köln / Cologne University - Tel.
+49-221-478-5587

 ATTACHMENT part 2 application/pgp-signature 



__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Redhat glibc upgrade broke my cyrus, help!!!

[Mr Mark London]

Hi - I just did some redhat enterprise 3.0 upgrades,
and they broke my cyrus.  I upgraded glibc, xfree86,
and nfs-utils.  Obviously, glibc must have broke it. 
The error messages are below.  I fixed this problem a
couple of years ago when it happened, but now I don't
know how to do it.  Removing the databases didn't
help.  Rebuilding cyrus from scratch didn't help.  I
don't know how to get the previous version of glibc,
without restoring the directories from backup tape. 
I'll have to do that tomorrow, unless someone has a
better suggestion.  Thanks! - Mark

Dec 21 01:01:13 psfcsv1 lmtpunix[25308]: DBERROR db4:
unable to initialize mute\
x: Function not implemented
Dec 21 01:01:13 psfcsv1 lmtpunix[25308]: DBERROR db4:
/var/imap/db/__db.001: un\
able to initialize environment lock: Function not
implemented
Dec 21 01:01:13 psfcsv1 lmtpunix[25308]: DBERROR:
dbenv-open '/var/imap/db' fa\
iled: Function not implemented
Dec 21 01:01:13 psfcsv1 lmtpunix[25308]: DBERROR:
init() on berkeley
Dec 21 01:01:13 psfcsv1 lmtpunix[25308]: DBERROR db4:
environment not yet opene\
d
Dec 21 01:01:13 psfcsv1 lmtpunix[25308]: DBERROR:
opening /var/imap/deliver.db:\
 Invalid argument
Dec 21 01:01:13 psfcsv1 lmtpunix[25308]: DBERROR:
opening /var/imap/deliver.db:\
 cyrusdb error
Dec 21 01:01:13 psfcsv1 lmtpunix[25308]: FATAL: lmtpd:
unable to init duplicate\
 delivery database




__ 
Do you Yahoo!? 
Yahoo! Mail - Helps protect you from nasty viruses. 
http://promotions.yahoo.com/new_mail
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Cyrus errors

[Mark Drummond]

Delivery is not working:

Dec 17 09:47:37 [postfix/lmtp] A7D9711D9F4: to=[EMAIL PROTECTED], 
relay=none, delay=301, status=deferred (connect 
to /var/imap/socket/lmtp[/var/imap/socket/lmtp]: read timeout)
Dec 17 09:47:48 [postfix/lmtp] 2514A11D9F6: to=[EMAIL PROTECTED], 
relay=none, delay=301, status=deferred (connect 
to /var/imap/socket/lmtp[/var/imap/socket/lmtp]: read timeout)

I'm almost inclined to reinstall cyrus from scratch.

Mark

On December 17, 2004 09:48, Mark Drummond wrote:
 Recently my cyrus-imapd went *boom* an I was having all kinds of problems
 with it. Most notably, I could not connect and postfix could not deliver
 mail to cyrus.

 Yesterday, cryus just magically started working again. Or at least, I can
 connect to it and I can read my mail. Not sure about delivery yet, haven't
 tried it.

 Nonetheless, I am still seeing all kinds of disconcerting error messages in
 my logs. Can someone tell me if these are a problem and maybe give me a
 clue what to do about them?

 Thanks,

 Mark

 Dec 17 09:48:16 [master] about to exec /usr/lib/cyrus/lmtpd
 Dec 17 09:48:16 [lmtpunix] DBERROR db4: fatal region error detected; run
 recovery
 Dec 17 09:48:16 [lmtpunix] DBERROR: dbenv-open '/var/imap/db' failed:
 DB_RUNRECOVERY: Fatal error, run database recovery
 Dec 17 09:48:16 [lmtpunix] DBERROR: init() on berkeley
 Dec 17 09:48:16 [lmtpunix] executed
 Dec 17 09:48:16 [lmtpunix] DBERROR db4: environment not yet opened
 Dec 17 09:48:16 [lmtpunix] DBERROR: opening /var/imap/deliver.db: Invalid
 argument
 Dec 17 09:48:16 [lmtpunix] DBERROR: opening /var/imap/deliver.db: cyrusdb
 error
 Dec 17 09:48:16 [lmtpunix] FATAL: lmtpd: unable to init duplicate delivery
 database
 Dec 17 09:48:16 [master] process 17385 exited, status 75
 Dec 17 09:48:16 [master] service lmtpunix pid 17385 in READY state:
 terminated abnormally
 Dec 17 09:48:16 [master] about to exec /usr/lib/cyrus/lmtpd
 Dec 17 09:48:16 [lmtpunix] DBERROR db4: fatal region error detected; run
 recovery
 Dec 17 09:48:16 [lmtpunix] DBERROR: dbenv-open '/var/imap/db' failed:
 DB_RUNRECOVERY: Fatal error, run database recovery
 Dec 17 09:48:16 [lmtpunix] DBERROR: init() on berkeley
 Dec 17 09:48:16 [lmtpunix] executed
 Dec 17 09:48:16 [lmtpunix] DBERROR db4: environment not yet opened
 Dec 17 09:48:16 [lmtpunix] DBERROR: opening /var/imap/deliver.db: Invalid
 argument
 Dec 17 09:48:16 [lmtpunix] DBERROR: opening /var/imap/deliver.db: cyrusdb
 error
 Dec 17 09:48:16 [lmtpunix] FATAL: lmtpd: unable to init duplicate delivery
 database
 Dec 17 09:48:16 [master] process 17401 exited, status 75
 Dec 17 09:48:16 [master] service lmtpunix pid 17401 in READY state:
 terminated abnormally
 Dec 17 09:48:16 [master] about to exec /usr/lib/cyrus/lmtpd
 Dec 17 09:48:16 [lmtpunix] DBERROR db4: fatal region error detected; run
 recovery
 Dec 17 09:48:16 [lmtpunix] DBERROR: dbenv-open '/var/imap/db' failed:
 DB_RUNRECOVERY: Fatal error, run database recovery
 Dec 17 09:48:16 [lmtpunix] DBERROR: init() on berkeley
 Dec 17 09:48:16 [lmtpunix] executed
 Dec 17 09:48:16 [lmtpunix] DBERROR db4: environment not yet opened
 Dec 17 09:48:16 [lmtpunix] DBERROR: opening /var/imap/deliver.db: Invalid
 argument
 Dec 17 09:48:16 [lmtpunix] DBERROR: opening /var/imap/deliver.db: cyrusdb
 error
 Dec 17 09:48:16 [lmtpunix] FATAL: lmtpd: unable to init duplicate delivery
 database
 Dec 17 09:48:16 [master] process 17418 exited, status 75
 Dec 17 09:48:16 [master] service lmtpunix pid 17418 in READY state:
 terminated abnormally
 Dec 17 09:48:16 [master] about to exec /usr/lib/cyrus/lmtpd
 Dec 17 09:48:16 [lmtpunix] DBERROR db4: fatal region error detected; run
 recovery
 Dec 17 09:48:16 [lmtpunix] DBERROR: dbenv-open '/var/imap/db' failed:
 DB_RUNRECOVERY: Fatal error, run database recovery
 Dec 17 09:48:16 [lmtpunix] DBERROR: init() on berkeley
 Dec 17 09:48:16 [lmtpunix] executed
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

kerbolized virtual domains.

[Mark Hannessen]

hi list,

I am currently running a basic kerberos/cyrus imap server

kerberos principle (realm KERBEROS)
[EMAIL PROTECTED]

cyrus user:
user.mark

I use mutt with GSSAPI and the following config.

set spoolfile=imap://xp2600c.linuxnet.nl/inbox
set folder=imap://xp2600c.linuxnet.nl/inbox
set imap_user=mark

this setup works, but it doesn't support virtual domains.

I tried adding [EMAIL PROTECTED] to cyrus imap instead of user.mark
but after doing that login fails, and I can't create enties in kerberos like 
[EMAIL PROTECTED]@KERBEROS (that's a DUHHH... i know..)

are multiple kerberos realms needed for virtual domains?
if yes, is there any howto for this, or any hint that might help me on how to 
set this up.
if no, does any know how users should be stored?

I can't find information around how this is supposed to be done. does anyone 
know where I could find some, or does anyone have a suggestions where I 
should look next?

Mark Hannessen
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: kerbolized virtual domains.

[Mark Hannessen]

On Thursday 16 December 2004 16:08, you wrote:
 On Thu, 16 Dec 2004, Mark Hannessen wrote:
  hi list,
 
  I am currently running a basic kerberos/cyrus imap server
 
  kerberos principle (realm KERBEROS)
  [EMAIL PROTECTED]
 
  cyrus user:
  user.mark
 
  I use mutt with GSSAPI and the following config.
 
  set spoolfile=imap://xp2600c.linuxnet.nl/inbox
  set folder=imap://xp2600c.linuxnet.nl/inbox
  set imap_user=mark
 
  this setup works, but it doesn't support virtual domains.
 
  I tried adding [EMAIL PROTECTED] to cyrus imap instead of
  user.mark but after doing that login fails, and I can't create enties in
  kerberos like [EMAIL PROTECTED]@KERBEROS (that's a DUHHH... i know..)

 There is nothing wrong with this principal from the rfc standpoint.  I
 would consider this a bug in cyrus-sasl.

well, the problem is more like:
how do I store users for multiple domains in kerberos and get cyrus(imap/sasl) 
to work with it.

a [EMAIL PROTECTED] principle == user.mark
when I login using [EMAIL PROTECTED] cyrus will search for user.mark, and not 
[EMAIL PROTECTED]

so I can't use user [EMAIL PROTECTED] for [EMAIL PROTECTED]

  are multiple kerberos realms needed for virtual domains?
  if yes, is there any howto for this, or any hint that might help me on
  how to set this up.
  if no, does any know how users should be stored?
 
  I can't find information around how this is supposed to be done. does
  anyone know where I could find some, or does anyone have a suggestions
  where I should look next?
 
  Mark Hannessen
  ---
  Cyrus Home Page: http://asg.web.cmu.edu/cyrus
  Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
  List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

kerberos -- mail account mapping.

[Mark Hannessen]

I am trying to set up virtual domain support using kerberos with only one 
kerberos realm, and am wondering if it could be done.:

in my kerberos database I how the following principles:

mark/[EMAIL PROTECTED]
mark/[EMAIL PROTECTED]

Is it possible to convince cyrus imap (sasl) to use principle 
mark/[EMAIL PROTECTED] for mail account [EMAIL PROTECTED] and 
mark/[EMAIL PROTECTED] for mail account [EMAIL PROTECTED]

I also have other account like admin users (mark/admin/nperfection.com) but I 
won't allow to users to check mail under those account.

anyone knows if it can be done?

thanks, Mark Hannessen
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: kerberos/imap trouble

[Mark Hannessen]

if I set my hostname to xp2600c.nperfection.com it dies a horrible death:

imtest xp2600c.linuxnet.nl
S: * OK xp2600c.nperfection.com Cyrus IMAP4 v2.2.8 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE 
UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT 
THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE LOGINDISABLED 
AUTH=GSSAPI SASL-IR
S: C01 OK Completed
C: A01 AUTHENTICATE GSSAPI 
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
S: A01 NO generic failure
Authentication failed. generic failure
Security strength factor: 0

but xp2600c.linuxnet.nl however does pass the test! (thanks for the hint!)

imtest xp2600c.linuxnet.nl
S: * OK xp2600c.linuxnet.nl Cyrus IMAP4 v2.2.8 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE 
UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT 
THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE LOGINDISABLED 
AUTH=GSSAPI SASL-IR
S: C01 OK Completed
C: A01 AUTHENTICATE GSSAPI 
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
S: + 
YIGWBgkqhkiG9xIBAgICAG+BhjCBg6ADAgEFoQMCAQ+idzB1oAMCARCibgRsT7/hOc1MB912ryagnCDkDZixJnJzMlHxKzFAWkaV8E4mt8WeoxVHPBMDUaXOp8ybbScuLNrjgQGNHylvQSVWiGmnKp67cg+nwj8maKMXIZSYHRTZNKFwqaBvJk+A+UvGhe+H8cYJYGxoOruO
C:
S: + 
YD8GCSqGSIb3EgECAgIBBAD/v68VJcY3id4KFBLlBN2metd0bgOLnSrjkfEBvAoGkT9W7hGsBwAQAAQEBAQ=
C: 
YD8GCSqGSIb3EgECAgIBBAD/MiDHXl7q31f0X2z7oD/1wfJ7yj9sS5ENMmrEeDulAENmQI/mBAAEAAQEBAQ=
S: A01 OK Success (privacy protection)
Authenticated.
Security strength factor: 56

I am also able to login into cyradm now.
now all that is left to find out is how to get this to work with virtual 
domains 

 That's strange. I certainly wouldn't contradict what you're
 saying, but the behaviour of our Cyrus IMAP server seems exactly
 the same as that which Mark had described. And the fix was to
 ensure that the names were the same.

I does fix the problem, I however do have another theory in mind.
kerberos maps dns -- realm names and nperfection.com isn't mapped to 
anything. currently it is like this.

[realms]
LINUXNET.NL = {
kdc = xp2600c.linuxnet.nl:88
admin_server = xp2600c.linuxnet.nl:749
default_domain = linuxnet.nl
}

[domain_realm]
.linuxnet.nl = LINUXNET.NL
linuxnet.nl = LINUXNET.NL

perhaps nperfection.com needs to be mapped to a kerberos realm...
I guess I'll have to dig into the realm theory a little more then :D

 I assume, then, that it has to do with our having a virtual
 interface defined, rather than just a CNAME? The hostname that is
 listed in our 'servername' parameter in /etc/imapd.conf is
 configured on a virtual interface, it is not merely a CNAME for
 the canonical FQDN of the host.

I'll check that out too.

 I can run 'imtest imap' (which is the virtual interface) and
 successfully authenticate, whereas if I run 'imtest hostname'
 with the canonical hostname of the IMAP server, the client
 retrieves the proper imap/hostname service tickets, but the
 connection is rejected by the IMAP server. The error message is:

 GSSAPI [SASL(-13): authentication failure: GSSAPI Failure:
 gss_accept_sec_context]

 I thought that this might be the same problem, but perhaps not?

At least I am moving in the right direction,

thanks you all for your help so far.

Mark Hannessen
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

kerberos auth trouble.

[Mark Hannessen]

hi.

I am trying to setup a kerberos v5 only mailserver.
that is: I would like all autherisation to be done by gssapi/kerberos.

so this is what I did..

# I added the imap principle to the imap server and gave it the right permissions.
addprinc -randkey imap/xp2600c.linuxnet.nl
ktadd -k /etc/krb5.keytab imap/xp2600c.linuxnet.nl
chown cyrus:root /etc/krb5.keytab

I obtain a ticket using:
kinit mark

klist returns the following:

Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]

Valid starting ExpiresService principal
12/10/04 11:17:50  12/11/04 11:17:50  krbtgt/[EMAIL PROTECTED]

Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached

I then try running the imtest program to test out if everything is ok.

imtest xp2600c.linuxnet.nl

S: * OK nperfection.com Cyrus IMAP4 v2.2.8 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE LOGINDISABLED AUTH=GSSAPI SASL-IR
S: C01 OK Completed
C: A01 AUTHENTICATE GSSAPI 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
S: A01 NO generic failure
Authentication failed. generic failure
Security strength factor: 0

this seems to fail for some reason
when i run klist again it returns:

Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]

Valid starting ExpiresService principal
12/10/04 11:17:50  12/11/04 11:17:50  krbtgt/[EMAIL PROTECTED]
12/10/04 11:18:38  12/11/04 11:17:50  imap/[EMAIL PROTECTED]

Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached

so I DO see an addition principal in my list.
as expected the cyrus admin tool doesn't work as well.

cyradm xp2600c.linuxnet.nl -auth GSSAPI
cyradm: cannot authenticate to server with GSSAPI as mark

my system log file contains the following:

Dec 10 11:33:48 xp2600c imap[1896]: badlogin: xp2600c.linuxnet.nl [10.4.8.27] GSSAPI [SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (No principal in keytab matches desired name)]

But I don't understand this messege since I DID add imap/xp2600c.linuxnet.nl to the servers keytab.

my imapd.conf looks like this:

servername: nperfection.com
configdirectory: /cyrus-imapd/var/imap
partition-default: /cyrus-imapd/var/spool/imap
admins: [EMAIL PROTECTED]
lmtp_admins: lmtpmanager
sasl_passwd_check: GSSAPI
sasl_mech_list: GSSAPI
keytab: /etc/krb5.keytab
annotation_db: skiplist
duplicate_db: skiplist
mboxlist_db: skiplist
ptscache_db: skiplist
quota_db: skiplist
seenstate_db: skiplist
subscription_db: skiplist
tlscache_db: skiplist
allowapop: no
skiplist_unsafe: no
virtdomains: userid
defaultdomain: localdomain
allowplaintext: no

before trying to work with kerberos I used this config
and it worked great... it however was plain text all the way.

configdirectory: /cyrus-imapd/var/imap
partition-default: /cyrus-imapd/var/spool/imap
admins: root
sasl_pwcheck_method: saslauthd
lmtp_admins: lmtpmanager
sasl_passwd_check: saslauthd
sasl_ldap_servers: openldap.linuxnet.nl
sasl_ldap_bind_dn: cn=Manager,dc=linuxnet,dc=nl
sasl_ldap_bind_pw: secret
allowplaintext: yes
sasl_mech_list: LOGIN PLAIN
annotation_db: skiplist
duplicate_db: skiplist
mboxlist_db: skiplist
ptscache_db: skiplist
quota_db: skiplist
seenstate_db: skiplist
subscription_db: skiplist
tlscache_db: skiplist
allowapop: no
skiplist_unsafe: no
virtdomains: userid
defaultdomain: localdomain

does anybody have a suggestion where I should look next?

Mark Hannessen

kerberos auth trouble (take 2)

[Mark Hannessen]

autch...
the mail formatting when very bad in attempt one...
so this is the same mail as take1, but with better formatting.

sorry, won't happen again.




hi.

I am trying to setup a kerberos v5 only mailserver.
that is: I would like all autherisation to be done by gssapi/kerberos.
so this is what I did..
# I added the imap principle to the imap server and gave it the right permissions.

addprinc -randkey imap/xp2600c.linuxnet.nl
ktadd -k /etc/krb5.keytab imap/xp2600c.linuxnet.nl
chown cyrus:root /etc/krb5.keytab

I obtain a ticket using:

kinit mark

klist returns the following:
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]
Valid starting Expires Service principal
12/10/04 11:17:50 12/11/04 11:17:50 krbtgt/[EMAIL PROTECTED]
Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached
I then try running the imtest program to test out if everything is ok.

imtest xp2600c.linuxnet.nl
S: * OK nperfection.com Cyrus IMAP4 v2.2.8 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE LOGINDISABLED AUTH=GSSAPI SASL-IR
S: C01 OK Completed
C: A01 AUTHENTICATE GSSAPI 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
S: A01 NO generic failure
Authentication failed. generic failure
Security strength factor: 0

this seems to fail for some reason
when i run klist again it returns:

Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]

Valid starting Expires Service principal
12/10/04 11:17:50 12/11/04 11:17:50 krbtgt/[EMAIL PROTECTED]
12/10/04 11:18:38 12/11/04 11:17:50 imap/[EMAIL PROTECTED]

Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached

so I DO see an addition principal in my list.

as expected the cyrus admin tool doesn't work as well.

cyradm xp2600c.linuxnet.nl -auth GSSAPI
cyradm: cannot authenticate to server with GSSAPI as mark

my system log file contains the following:

Dec 10 11:33:48 xp2600c imap[1896]: badlogin: xp2600c.linuxnet.nl [10.4.8.27] GSSAPI [SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (No principal in keytab matches desired name)]

But I don't understand this messege since I DID add imap/xp2600c.linuxnet.nl to the servers keytab.

my imapd.conf looks like this:

servername: nperfection.com
configdirectory: /cyrus-imapd/var/imap
partition-default: /cyrus-imapd/var/spool/imap
admins: [EMAIL PROTECTED]
lmtp_admins: lmtpmanager
sasl_passwd_check: GSSAPI
sasl_mech_list: GSSAPI
keytab: /etc/krb5.keytab
annotation_db: skiplist
duplicate_db: skiplist
mboxlist_db: skiplist
ptscache_db: skiplist
quota_db: skiplist
seenstate_db: skiplist
subscription_db: skiplist
tlscache_db: skiplist
allowapop: no
skiplist_unsafe: no
virtdomains: userid
defaultdomain: localdomain
allowplaintext: no
before trying to work with kerberos I used this config
and it worked great... it however was plain text all the way.
configdirectory: /cyrus-imapd/var/imap
partition-default: /cyrus-imapd/var/spool/imap
admins: root
sasl_pwcheck_method: saslauthd
lmtp_admins: lmtpmanager
sasl_passwd_check: saslauthd
sasl_ldap_servers: openldap.linuxnet.nl
sasl_ldap_bind_dn: cn=Manager,dc=linuxnet,dc=nl
sasl_ldap_bind_pw: secret
allowplaintext: yes
sasl_mech_list: LOGIN PLAIN
annotation_db: skiplist
duplicate_db: skiplist
mboxlist_db: skiplist
ptscache_db: skiplist
quota_db: skiplist
seenstate_db: skiplist
subscription_db: skiplist
tlscache_db: skiplist
allowapop: no
skiplist_unsafe: no
virtdomains: userid
defaultdomain: localdomain

does anybody have a suggestion where I should look next?

Mark Hannessen

Re: db4 backend alternative

[Mark Hannessen]

lol, so this thread is still running..
been a while since I started it.

I must say i am very pleased with skiplist, I have simulated a few hunderd 
crashes and it was able to recover every time. with db4 I had to pray for a 
succesfull restart or lose all my mail. (not kidding)

the reason I switched to linux wasn't speed... because speed is cheap.

it was stability and security.

I think that in general people with few users won't care about the little 
random seek speed gain from db4, and people with many many many users would 
like to go to sleep at night, knowing that when they wake up there cyrus 
server is still having a good time handing mail over to users.

I am not a technical dude, skiplist might be plain ugly, but from my 
perspective it works at what it is supposed to do. db4 fails that purpose.

If I had to choose, skiplist would be the default a not db4. think about the 
bad impression it gives when new users see cyrus imap destroy all there mail 
before there eyes while doing a simple cyrus reboot. you would lose all faith 
in that product and switch to another one right?

And the worst thing it that this isn't needed at all.
cyrus is a good product. but people won't use it if they can't see that.

regards from a happy cyrus user,

Mark Hannessen

On Friday 10 December 2004 13:18, you wrote:
 Michael Sims wrote:
  Denny Schierz wrote:
   Am Montag, den 22.11.2004, 22:51 + schrieb Mark Hannessen:
   I am really wondering about this because I just can't seem to get
   db4 to run stable.
  
   same problem here. I have to delete once a week all db's (but
   mailboxes.db). Otherwise i have timeouts and bouncing mails :-/
 
  Seriously, why don't you guys switch to skiplist and avoid the whole
  Berkeley DB mess?  I switched to skiplist for mailboxes.db, deliver.db,
  and the seen databases (on 2.1.x) about a year and a half ago and haven't
  had a problem since.  Berkeley DB

 Same here. Switched a year ago and not a worry in the world.
 The only difference is that I'm using deliver with db3-nosync (as with
 the tls_sessions) and the subscribed folders databases are flat files.
 The rest is all skiplist.

  may perform better in some situations, but IMHO it's not worth the hassle
  it brings. YMMV...

 Regards

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Public folders

[Mark Hannessen]

what you are looking for seems to be shared folders.
try the following link. you might find it usefull.

http://www.oreilly.com/catalog/mimap/chapter/ch09.html#91630

regards,

Mark Hannessen

On Friday 10 December 2004 13:59, you wrote:
 Hello list,

 I have a Debian Sarge machine running cyrus v2.1.7, Postfix v2.1.5, SA
 and gld.

 The system is up and running for 6 months without any problems.

 I was now asked to create several public folders on this system, usable
 by all users.

 Is there a good how-to on how to get this done?

 TIA

 D.


 ---
 Cyrus Home Page: http://asg.web.cmu.edu/cyrus
 Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
 List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

kerberos auth trouble (take 3)

[Mark Hannessen]

autch...
why o why well this is my last try to make this mail look nice
sorry for the spamming.

hi.

I am trying to setup a kerberos v5 only mailserver.
that is: I would like all autherisation to be done by gssapi/kerberos.

so this is what I did..

# I added the imap principle to the imap server and gave it the right 
permissions.

addprinc -randkey imap/xp2600c.linuxnet.nl
ktadd -k /etc/krb5.keytab imap/xp2600c.linuxnet.nl
chown cyrus:root /etc/krb5.keytab

I obtain a ticket using:
kinit mark

klist returns the following:

Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]
Valid starting Expires Service principal

12/10/04 11:17:50 12/11/04 11:17:50 krbtgt/[EMAIL PROTECTED]

Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached

I then try running the imtest program to test out if everything is ok.

imtest xp2600c.linuxnet.nl
S: * OK nperfection.com Cyrus IMAP4 v2.2.8 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE 
UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT 
THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE LOGINDISABLED 
AUTH=GSSAPI SASL-IR
S: C01 OK Completed
C: A01 AUTHENTICATE GSSAPI 
YIICDwYJKoZIhvcSAQICAQBuggH+MIIB+qADAgEFoQMCAQ6iBwMFACCjggEWYYIBEjCCAQ6gAwIBBaENGwtMSU5VWE5FVC5OTKImMCSgAwIBA6EdMBsbBGltYXAbE3hwMjYwMGMubGludXhuZXQubmyjgc8wgcygAwIBEKEDAgEGooG/BIG8Fblb9IEEBBehkSNV/kckAwkbDn4WZcmTpbSrdOMyi0NI+yB6a4Q25Fw0coWt1z+H78gco+/ebkPZFHmy2c7Fx6YJ8aD7sLikgVHrC6cMpbdhtFeF+6HKcUelZKVCgR8DGuxuomODHA8z4HCfu0Bg4PvECbhnbL0q02q7873KxtEJOIH06c5cqzHaFa3u2q6XvIpn4QqIs40Ul1stMQdQpd9njof/UTaJrwbV5cdo10BdXF6PPynM1aWzWmGkgcowgcegAwIBEKKBvwSBvFKdv3AGvjSJnZgYj1ag25rpeTBHtY5phHmneNDA+BnnUl2SBYxC/UQ4hiPYMSwIUQZJecSOn9QMXIZgg3u/92M+3d5/WMYrbLmB4y7wkraZ+nlngRFQ1wDhDWA7/T3+HBcVnOXmhYJhnW+Xs9wv/Jpgq/UBcnzmCjqQMbYYUedeoR5BOSx4C6KwGQALyXjkZNpBd1dUHutFINPeAXI2AXD8/L2cWnTHO5oak2tDYJDSJaTa5YxE7IbZrq9m
S: A01 NO generic failure
Authentication failed. generic failure
Security strength factor: 0

this seems to fail for some reason

when i run klist again it returns:

Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]

Valid starting Expires Service principal
12/10/04 11:17:50 12/11/04 11:17:50 krbtgt/[EMAIL PROTECTED]
12/10/04 11:18:38 12/11/04 11:17:50 imap/[EMAIL PROTECTED]
Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached

so I DO see an addition principal in my list.

as expected the cyrus admin tool doesn't work as well.

cyradm xp2600c.linuxnet.nl -auth GSSAPI
cyradm: cannot authenticate to server with GSSAPI as mark

my system log file contains the following:

Dec 10 11:33:48 xp2600c imap[1896]: badlogin: xp2600c.linuxnet.nl [10.4.8.27] 
GSSAPI [SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (No 
principal in keytab matches desired name)]

But I don't understand this messege since I DID add imap/xp2600c.linuxnet.nl 
to the servers keytab.

my imapd.conf looks like this:

servername: nperfection.com
configdirectory: /cyrus-imapd/var/imap
partition-default: /cyrus-imapd/var/spool/imap
admins: [EMAIL PROTECTED]
lmtp_admins: lmtpmanager
sasl_passwd_check: GSSAPI
sasl_mech_list: GSSAPI
keytab: /etc/krb5.keytab
annotation_db: skiplist
duplicate_db: skiplist
mboxlist_db: skiplist
ptscache_db: skiplist
quota_db: skiplist
seenstate_db: skiplist
subscription_db: skiplist
tlscache_db: skiplist
allowapop: no
skiplist_unsafe: no
virtdomains: userid
defaultdomain: localdomain
allowplaintext: no

before trying to work with kerberos I used this config

and it worked great... it however was plain text all the way.

configdirectory: /cyrus-imapd/var/imap
partition-default: /cyrus-imapd/var/spool/imap
admins: root
sasl_pwcheck_method: saslauthd
lmtp_admins: lmtpmanager
sasl_passwd_check: saslauthd
sasl_ldap_servers: openldap.linuxnet.nl
sasl_ldap_bind_dn: cn=Manager,dc=linuxnet,dc=nl
sasl_ldap_bind_pw: secret
allowplaintext: yes
sasl_mech_list: LOGIN PLAIN
annotation_db: skiplist
duplicate_db: skiplist
mboxlist_db: skiplist
ptscache_db: skiplist
quota_db: skiplist
seenstate_db: skiplist
subscription_db: skiplist
tlscache_db: skiplist
allowapop: no
skiplist_unsafe: no
virtdomains: userid
defaultdomain: localdomain

does anybody have a suggestion where I should look next?

Mark Hannessen
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html