Re: Virtual Memory Consumption of Cyrus IMAPd

2004-07-20 Thread Mohamed Magdi Abbas
Rob Siemborski wrote:
On Tue, 20 Jul 2004, Mohamed Magdi Abbas wrote:
Rob Siemborski wrote:
On Mon, 19 Jul 2004, Andrew Brink wrote:
I have also seen this sasauthd memory leak on a Debian box.  A 
simple restart always fixes the problem for me too.

When we get reports like this it inevitably turns out to be the PAM 
module leaking memory, not saslauthd itself.

But then why would a restart of saslauthd itself fix things, i.e. 
release the swap space (it or someother piece down the line) used up?

PAM modules are used as libraries by the running process. If they leak 
memory as part of the saslauthd process, then killing saslauthd will 
release the leaked memory.
Ah, that's right... thanks for the reminder...

-Rob
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Virtual Memory Consumption of Cyrus IMAPd

2004-07-20 Thread Mohamed Magdi Abbas
Rob Siemborski wrote:
On Mon, 19 Jul 2004, Andrew Brink wrote:
I have also seen this sasauthd memory leak on a Debian box.  A simple 
restart always fixes the problem for me too.

When we get reports like this it inevitably turns out to be the PAM 
module leaking memory, not saslauthd itself.
But then why would a restart of saslauthd itself fix things, i.e. 
release the swap space (it or someother piece down the line) used up?

-Rob
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Virtual Memory Consumption of Cyrus IMAPd

2004-07-19 Thread Mohamed Magdi Abbas
I'm running cyrus impad(v 2.2.6), used to run 2.1.16, on RHEL 3.0 and 
noticed that the amount of swap space free is decreasing. When I was 
running v2.1.16, the swap free would decrease until the kernel oom(out 
of memory) killer would activate and start killing processes which 
essentially grinds the system to a halt. I doubt that this is normal. 
Could this point to a memory leak in cyrus. Just for note, I have not 
yet experienced this with the latest version, but the swap free is 
decreasing.

By the way I'm using simons RPMS from invoca.ch. Could someone shed some 
light on this. Anything will help...

Mohamed Magdi Abbas
Systems Engineer
Longwood University
[EMAIL PROTECTED]
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Wanted: an example imapd.conf for authenticating against Active Directory

2004-07-09 Thread Mohamed Magdi Abbas
Igor Brezac wrote:
On Thu, 8 Jul 2004, Paul Boven wrote:
 

Hi everyone,
For a new customer, I'm setting up a Cyrus server that will have to
authenticate against an Active Directory server.
So far, I've gotten Kerberos, TSL, SASL all working together from the
command-line with ldapsearch, so what remains is to build an imapd.conf
and have Cyrus play nice with the ADS. But here are about 3 pages of
ldap-options to imapd.conf, and I still don't know what attribute to use
to check authentication against, so I'm a bit stuck for inspiration.
   

These are pts related commands.  You need to look at cyrus-sasl
documentation ($cyrus-sasl-src/doc)
 

As a side question: the pts ldap support is labeled experimental in 
cyrus-imapd 2.2.6. What does that mean? Is it not stable, prone to 
crash? Or is it just not well tested. I would like to use in our 
production environment, but have been reluctant sicne it's labeled 
experimental.

--
Igor
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
 

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Delivery According to ACLs' "post" Privilege

2004-04-29 Thread Mohamed Magdi Abbas
[EMAIL PROTECTED] wrote:
In one area I have had trouble using Cyrus IMAPd: Delivery.
After considerable effort - and help from others - I believe I've 
arrived at the fundamental problem: I wish for users to be able to 
filter mail using arbitrary user level programs, but I don't wish for 
users to be able to deliver mail to any and every mailbox.

For users to be able to filter mail using arbitrary user level programs 
- run with the users' privileges - delivery must be possible with the 
users' privileges. As I understand it, however, allowing a user to 
deliver - either using filesystem permissions or as an LMTP admin - 
means allowing a user to deliver to any mailbox.

I also understand, however, that it is possible to authenticate to the 
Cyrus LMTPd through TCP/IP using SASL, but that "... Only LMTP admins 
can deliver to LMTPd through TCP/IP sockets." Can someone explain why it 
is not possible for users, once authenticated, to deliver to only those 
mailboxes whose ACLs grant them "post" privileges?

That can be done. If you are using sendmail then you need to compile it 
from scratch with the following:
	
	You have to add -D_FFR_AUTH_PASSING=1 to your site.config.m4( might be 
called something else if you a .src.rpm):
	
	APPENDDEF(`confENVDEF', `-DSASL=2 -DNEWDB -DLDAPMAP -DSTARTTLS
	-DMAP_REGEX -DMILTER -D_FFR_AUTH_PASSING=1')

Then make sure you configure sendmail.mc to enable SMTP AUTH, and make 
sure LMTPD is running via TCP/IP.

That should accomplish what you want...
Mohamed Magdi Abbas
[EMAIL PROTECTED]
Systems Engineer
Longwood University

Thanks!
Jack
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


SMTP AUTH and LMTP AUTH passing AUTH= info

2004-04-22 Thread Mohamed Magdi Abbas
I've configured both sendmail and cyrus to do both SMTP AUTH and LMTP 
AUTH respectively. Delivery is done via LMTP TCP. The one thing not 
working is the passing of the auth credentials from sendmail to lmtp. 
I.e if I have a shared folder with a post acl assigned to user jsmith, 
and jsmith sends email to that shared folder, I get user does not have 
authroization to post to this mailbox.

How do I fix this? Anyone? I've scanned he info-cyrus archives and came 
up with nothing. Any help is appreciated...

Mohamed Magdi Abbas
Systems Engineer
[EMAIL PROTECTED]
Longwood University
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html