Re: autocreate folder for plus addressing?

2006-01-18 Thread Ondrej Sury
On Tue, 2006-01-17 at 18:42 -0500, Scott Russell wrote:
> Greets.
> 
> With Cyrus 2.3.1 (or the auto create patches?) can folders automatically 
> be created for plus addressing?
> 
> I was toying with the idea of having tagged spam being sent to 
> [EMAIL PROTECTED] rather than using a sieve script. Since sieve 
> scripts are user editable using plus addressing to sort tagged spam into 
> a folder seemed like a more sensible idea.

I guess it's simpler to patch your create scripts (or create some
automated modify scripts) to create this folder for each user then patch
cyrus source code for this task.

You can also revoke users permissions to delete that mailbox - just use:

sam folder -user c

(didn't try it on myself, but theoretically it should work :-)

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Interesting webmail problem with Cyrus

2006-01-18 Thread Ondrej Sury
On Tue, 2006-01-17 at 19:18 -0700, Sun Advocate Webmaster wrote:
> Where do I start, and what could cause this? I'm baffled!

Protocol dump?

O.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: lmtpd dropping mail in wrong mailbox

2006-01-14 Thread Ondrej Sury
On Fri, 2006-01-13 at 17:41 -0500, John Madden wrote:
> At the moment, I'm actually investigating what another subscriber mentioned --
> loss of sync on the socket as Postfix sends the message.  To resolve this, 
> I've
> turned off its lmtp connection cache.  I won't know if this is actually a
> sufficient fix for probably another week or so since the problem was so 
> random.

Have you tried dumping and restoring your mailbox database?  What type
is it anyway?  BDB or skiplist?  I could imagine wrong delivery could
happen when mailbox database is corrupt.

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Fwd: cyrus murder setup and big? problems

2006-01-14 Thread Ondrej Sury
You either need to use TLS or use nonplain mech.

frontend and backends doesn't have to share same user database, so you
can use auxprop (/etc/sasldb2) with backends and use CRAM-MD5 (etc.).

O.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: listen to a dynamic interface

2005-12-12 Thread Ondrej Sury
On Mon, 2005-12-12 at 15:30 -0500, Bill Kearney wrote:
> You could always stop/start cyrus based on the ppp interface being live.
> That way it'd bind to whatever address is active and then only when the link
> is up.  I suppose you could leave it live all the time and just restart it
> when the ppp link state changes.

What about running it on lo and adding firewall rule to forward traffic?
(ie. DNAT on Linux).

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

renaming mailboxes

2005-09-26 Thread Ondrej Sury
Hello,

we would like to have rename mailbox funcionality in Cyrus IMAPD.  Plain
cyrus-imapd refuses to rename mailbox, so I would like to know if there
was something done on that field?  Like 3rd party patches, 2.3.x branch
whatever.

If not do you have any hints where to start? (If cyrus imap is able to
move mailboxes between murder backends, then it should not be _that_
hard to write rename functionality.)

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Mupdate server: no mechanism avaible

2005-09-08 Thread Ondrej Sury
On Thu, 2005-09-08 at 09:49 +0200, Jérôme NENERT wrote:
> It's the same, mupdate doesn't offer authentification methods.

Have you checked log files?

This is minimal murder configuration, check it against yours.

configdirectory: /var/lib/imap
partition-default: /var/spool/imap
admins: cyrus
mupdate_admins: mupdate
sievedir: /var/lib/imap/sieve
sendmail: /usr/sbin/sendmail
hashimapspool: true
sasl_pwcheck_method: auxprop
sasl_sasldb_path: /var/lib/imap/sasldb2
tls_cert_file: /usr/share/ssl/certs/cyrus-imapd.pem
tls_key_file: /usr/share/ssl/private/cyrus-imapd.key
tls_ca_file: /usr/share/ssl/certs/ca-bundle.crt
sasl_mech_list: PLAIN LOGIN DIGEST-MD5

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Mupdate server: no mechanism avaible

2005-09-07 Thread Ondrej Sury
Hello,

just quick hint.

I suggest to split frontends and murder+backends auth configuration.

Let frontends use ldap and don't put authorized user into LDAP and
murder and backends can happily use auxprop with small /etc/sasldb2
database which includes small number (cyrus, mupdate, murder) users.

This makes possible to enable strong methods between frontends and
backends and makes your setup more secure because nobody can brute force
important passwords on frontends.

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: More than 2GB quotas

2005-08-30 Thread Ondrej Sury
On Tue, 2005-08-30 at 09:52 +0200, Carsten Hoeger wrote:
> On Tue, Aug 30, Simon Matter wrote:
> 
> > >   The cyrus22 debian packages have been released into the 'experimental'
> > 
> > While we are at it, could one of the debian package maintainers provide a
> > large quota patch? I didn't manage to backport the code from 2.3 and it
> > seems it has been done for the debian package. The problem is that deb
> > source packages don't contain multiple patches but contain a single large
> > patch instead, which makes it impossible to extract just a single patch.
> 
> If you also accept patches from a non-debian maintainer, you can use this one:
> 
> ftp://ftp.suse.com/pub/people/choeger/SLES9/cyrus-imapd-22-sles9-64bit-quota/source/64bit_quota.patch
> 
> I created it using Kens instructions from
> 
> https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=1212#c13

Is there a reason why you dropped LONG LONG checks?  I am not sure if
all archs in Debian has support for long long datatype (mips?), so I am
unsure if I can use your patch directly.

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: More than 2GB quotas

2005-08-30 Thread Ondrej Sury
On Tue, 2005-08-30 at 09:07 +0300, Cristian Mitrana wrote:
> * Petr Vyhnal <[EMAIL PROTECTED]> [29-08-05 23:03]:
>  
> > Hi all,
> > 
> > I tried to find something at google, but without success. I have 
> > cyrus-imap 2.1.18 on Debian Sarge server, but I need bigger quotas than 
> > 2GB. Is there any patch against 2.1.18 or against 2.2.x release? 
> > Eventually, does anybody have patched debian packages?
>  
>   The cyrus22 debian packages have been released into the 'experimental'
>   repository, see :
>   http://alioth.debian.org/projects/pkg-cyrus-imapd/
>   
>   I have been using them for some time (build from source on a 'stable'
>   machine) without any problems, but I have a small setup and nothing
>   out of the ordinary; check the debian mailing-list for the project or
>   even ask there directly for any show stoppers.

Just quick note.  Debian Cyrus Imapd don't include 64bit quota patch.

(And since Ken's patch don't apply cleanly I will look at it today.)

O.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: More than 2GB quotas

2005-08-30 Thread Ondrej Sury
You missed this mail from info-cyrus:
msg-id: <[EMAIL PROTECTED]>

> > Ken, would you be so kind to generate patchset (and maybe attach it
> > to mentioned bug report)?
> 
> Attached to bug #2690
> 
> -- 
> Kenneth Murchison Oceana Matrix Ltd.
> Software Engineer 21 Princeton Place
> 716-662-8973 x26  Orchard Park, NY 14127
> --PGP Public Key--http://www.oceana.com/~ken/ksm.pgp

On Tue, 2005-08-30 at 08:52 +0200, Simon Matter wrote:
> > * Petr Vyhnal <[EMAIL PROTECTED]> [29-08-05 23:03]:
> >
> >> Hi all,
> >>
> >> I tried to find something at google, but without success. I have
> >> cyrus-imap 2.1.18 on Debian Sarge server, but I need bigger quotas than
> >> 2GB. Is there any patch against 2.1.18 or against 2.2.x release?
> >> Eventually, does anybody have patched debian packages?
> >
> >   The cyrus22 debian packages have been released into the 'experimental'
> 
> While we are at it, could one of the debian package maintainers provide a
> large quota patch? I didn't manage to backport the code from 2.3 and it
> seems it has been done for the debian package. The problem is that deb
> source packages don't contain multiple patches but contain a single large
> patch instead, which makes it impossible to extract just a single patch.
> 
> Thanks,
> Simon
> 
> >   repository, see :
> >   http://alioth.debian.org/projects/pkg-cyrus-imapd/
> >
> >   I have been using them for some time (build from source on a 'stable'
> >   machine) without any problems, but I have a small setup and nothing
> >   out of the ordinary; check the debian mailing-list for the project or
> >   even ask there directly for any show stoppers.
> >
> >   mitu
> >
> >
> > 
> > Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> > Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
> >
> >
> 
> 
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Problem with direct delivery to cyrus subfolder...

2005-08-23 Thread Ondrej Sury
On Tue, 2005-08-23 at 14:29 +0200, Sylvain MEDEOT wrote:
> No changes, here are the new logs...

I see one significant change, mail is now delivered to
[EMAIL PROTECTED], before it was delivered to
[EMAIL PROTECTED]

> Aug 23 14:15:04 aldebaran postfix/lmtp[6752]: 9B190A5: to= [EMAIL PROTECTED]>,
> relay=/var/spool/postfix/public/lmtp[/var/spool/postfix/public/lmtp],
> delay=0, status=sent (250 2.1.5 Ok)


> But, I've also modified /etc/imapd.conf and add the line 
> postuser: si01

Yep, that's also correct when shared folder is on top level.
(Sorry I didn't read your previous mail to detail).

> Aug 23 14:19:31 aldebaran postfix/lmtp[6766]: 5567FEF: to= [EMAIL PROTECTED]>,
> relay=/var/spool/postfix/public/lmtp[/var/spool/postfix/public/lmtp],
> delay=0, status=sent (250 2.1.5 Ok)
This is place when mail is still hold by postfix, but now it gets
delivered correctly.

> And here the delivery is made right away to the shared folder...
> 
> Any idea ?

Configure MailScanner to not strip + extensions?

What happens if you enable MailScanner again?  Usually it's good idea to
start with least services as possible and then add them one by one to
see where problem could be.

O.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: cyradm script

2005-08-23 Thread Ondrej Sury
On Tue, 2005-08-23 at 12:04 +0200, Nikola Milutinovic wrote:
> Patrice wrote:
> 
> > hello,
> >
> > I try to make a script to automate creation of users with cyradm
> > but I haven't found the way to pass the password to cyradm automatically
> >
> > does somebody already did it ?
> 
> 
> Well, "cyradm" is just a shell script wrapper over Perl Cyrus::Admin 
> module, if I'm not mistaken. So, anyone with solid knowledge of Perl can 
> write a Perl script to do anything you want. Not being a Perl user, I 
> can only directo you to Google for your solution, look for Perl scripts 
> to accomplish this.

Or you can just use python imaplib module, it has support for every
function out of the box.

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: saslauthd

2005-08-23 Thread Ondrej Sury
On Tue, 2005-08-23 at 14:31 +0530, Gobbledegeek wrote:
> OK I got it working with sasl_pwcheck-method = auxprop in /etc/imapd.conf. 
> But why isn't there a simple statement advising this in the loads of
> documentation?  So much time wasted for want of a simple communiqe.
>
> [...useless rant...]
> 
> [EMAIL PROTECTED] programmers! 

[EMAIL PROTECTED] users who cannot read documentation?  Even if somebody 
recommends
them to read it?

from doc/sysadmin.html (from cyrus-sasl distribution tarball):

--cut here--
The principal concern for system administrators is how the
authentication identifier and password are verified. The Cyrus SASL
library is flexible in this regard:

auxprop 
checks passwords agains the userPassword attribute supplied by
an auxiliary property plugin. For example, SASL ships with a
sasldb auxiliary property plugin, that can be used to
authenticate against the passwords stored in /etc/sasldb2. Since
other mechanisms also use this database for passwords, using
this method will allow SASL to provide a uniform password
database to a large number of mechanisms.

saslauthd
contacts the saslauthd daemon to to check passwords using a
variety of mechanisms. More information about the various
invocations of saslauthd can be can be found in saslauthd(8).
Generally you want something like saslauthd -a pam. If plaintext
authentications seem to be taking some time under load,
increasing the value of the -n parameter can help.

Saslauthd keeps its named socket in "/var/state/saslauthd" by
default. This can be overridden by specifying an alternate value
to --with-saslauthd=/foo/bar at compile time, or by passing the
-m parameter to saslauthd (along with setting the saslauthd_path
SASL option). Whatever directory this is, it must exist in order
for saslauthd to function.

Once you configure (and start) saslauthd, there is a
testsaslauthd program that can be built with make testsaslauthd
in the saslauthd subdirectory of the source. This can be used to
check that that the saslauthd daemon is installed and running
properly. An invocation like testsaslauthd -u rjs3 -p 1234 with
appropriate values for the username and password should do the
trick.

If you are using the PAM method to verify passwords with
saslauthd, keep in mind that your PAM configuration will need to
be configured for each service name that is using saslauthd for
authentication. Common service names are "imap", "sieve", and
"smtp".

Courier-IMAP authdaemond
contacts Courier-IMAP's authdaemond daemon to check passwords.
This daemon is simliar in functionality to saslauthd, and is
shipped separately with the Courier mail server. 

Note: this feature is not compiled in the library by default,
and its provided for sites with custom/special requirements only
(because the internal authentication protocol its not documented
anywhere so it could change at any time). We have tested against
the authdaemond included with Courier-IMAP 2.2.1.

To enable authdaemond support, pass --with-authdaemon to the
configuration script, set pwcheck_method to ``authdaemond'' and
point authdaemon_path to authdaemond's unix socket. Optionally,
you can specify --with-authdaemond=PATH to the configure script
so that authdaemond_path points to a default, static, location.

pwcheck
checks passwords with the use of a separate, helper daemon. This
feature is for backwards-compatibility only. New installations
should use saslauthd.
--cut here--

-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Problem with direct delivery to cyrus subfolder...

2005-08-22 Thread Ondrej Sury
On Mon, 2005-08-22 at 17:18 +0200, Sylvain MEDEOT wrote:
Hi,

this question has nothing to do with Cyrus, it's more related to Postfix
(and maybe Mailscanner).

> In the logs, I get the following :
> 
> [...]
> Aug 20 10:24:01 aldebaran MailScanner[10654]: Uninfected: Delivered 1 
> messages
> Aug 20 10:24:01 aldebaran postfix/qmgr[10696]: 46005137: 
> from=<[EMAIL PROTECTED]>, size=855, nrcpt=1 (queue active)
> Aug 20 10:24:01 aldebaran postfix/lmtp[10784]: 46005137: 
> to=<[EMAIL PROTECTED]>, orig_to=<[EMAIL PROTECTED]>,
> relay=/var/spool/postfix/public/lmtp[/var/spool/postfix/public/lmtp], 
> delay=21, status=sent (250 2.1.5 Ok)
> [...]

Looks like postfix strips +partage extension before delivering it to
Postfix.  Have you tried asking on postfix-users list?

But anyway, try to disable Mailscanner first (for testing time) and see
what happens, Well, at least your logs will be much simpler :-)

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Ximian Evolution client / local imapd

2005-08-22 Thread Ondrej Sury
On Mon, 2005-08-22 at 08:27 -0400, Earl Shannon wrote:
> Hello,
> 
> Such a connection might be useful if the imap server expected to
> have the client running locally. I think the UW Imap server does that,
> but I'm only guessing. As others have already pointed out, doing it
> with Cyrus is not only a bad idea, it probably won't work.
Hi,

you can setup SSH tunnel in this case.  (See -L option to ssh).

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: saslauthd auth failure PAM auth error

2005-08-22 Thread Ondrej Sury
On Mon, 2005-08-22 at 16:57 +0530, Gobbledegeek wrote:
> Hello
>I reinstalled cyrus-imapd, after deleting spool/imap and
> lib/imap folders.  Now again I'm struggling with getting saslauthd to
> work with cyrus. I managed to get root and cyrus user successfully
> login with testsaslauthd - but they are local users. cyradm is also
> working for cyrus user.  I'm unable to get cyrus imap only users to
> authenticate from mail client or testsaslauthd. I've created
> "saslpasswd2 -c ", and  "saslpasswd -c  "  for each user
> but to no avail. I had got it working yesterday but today is a
> different day... (duh! maybe thats it...!! ) . Pls help.

You are mixing auxprop and saslauthd methods.  It looks like your
saslauthd is using pam database, which is really different
from /etc/sasldb2

I recommend you to read carefully documentation to Cyrus IMAP and Cyrus
SASL (which are two different things).

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Ximian Evolution client / local imapd

2005-08-22 Thread Ondrej Sury
On Fri, 2005-08-19 at 21:18 +, Brian Huffman wrote:
> All,
> 
> Evolution has an option to remotely connect to an imap server that you 
> otherwise
> can not connect to by using means such as ssh.  It allows a "custom command" 
> to
> connect to the imap server.  The default is:  
> 
> "ssh -C -l %u %h exec /usr/sbin/imapd"

Why would you want to do that instead of using IMAP SSL (or TLS)?

Cyrus servers are ment not to be accessible by ordinary users (ie. more
secure to local attacks).

O.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: cyrus-imapd virtual domains

2005-08-22 Thread Ondrej Sury
On Fri, 2005-08-19 at 12:52 -0400, Etienne Goyer wrote:
> Ondrej Sury wrote:
> > Don't enable virtual domain support in cyrus.  Just create map in your
> > MTA which will map email addresses to cyrus names.
> 
> The downside being that all the domains share the same namespace, thus 
> there could not be two mailbox named "info", for example.

Yeah, but that was already in requirements:
-- cut here --
I have several mail customers with their own domain. I wonder
if there is a way to make cyrus authenticate all the users from any
domain only with their username not using [EMAIL PROTECTED]
-- cut here --

And anyway, he can have [EMAIL PROTECTED] a [EMAIL PROTECTED] email addresses, 
but not
two info mailboxes.  It's important to pinpoint this difference.

O.

-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: cyrus-imapd virtual domains

2005-08-18 Thread Ondrej Sury
On Thu, 2005-08-18 at 15:23 -0400, Jesus Ruiz wrote:
> Hello, i'm trying to configure a cyrus-imapd server to server virtual
> domains. I have several mail customers with their own domain. I wonder
> if there is a way to make cyrus authenticate all the users from any
> domain only with their username not using [EMAIL PROTECTED]
> 
> I have read that cyrus have a default domain, and the users from this
> domain don't need to log using [EMAIL PROTECTED]
> 
> If there is  way to do this, can someone please send me suggested
> readings to make this work with sendmail.

Don't enable virtual domain support in cyrus.  Just create map in your
MTA which will map email addresses to cyrus names.

O.
-- 
Ondrej Sury <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: Debian package for Cyrus imapd 2.2.x ?

2005-07-26 Thread Ondrej Sury
On Tue, 2005-07-26 at 10:57 -0400, Etienne Goyer wrote:
> I found out that 2.2.12 Debian package is currently in experiemental 
> stage; see https://alioth.debian.org/projects/pkg-cyrus-imapd/.  I'll 
> give the experiemental dpkg a try.  I also found a few other sources
> on apt-get.org.  If you have any suggestion, they are still welcome. 

Just recompile stuff from experimental on your stable box, it's quite
easy to do it.  And don't forget to track progress with debian packages.

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


RE: Deleting mailbox problem

2005-07-22 Thread Ondrej Sury
On Fri, 2005-07-22 at 22:35 +0800, Wouter van Marle wrote:
> On Fri, 2005-07-22 at 09:23 -0500, Michael King wrote:
> > All mailboxes that belong to users are under the “user.” hierarchy,
> > so you *do* have a mailbox named “user.wouter”. 
> > 
> > The “INBOX” you’re looking for would be called “user.wouter.INBOX”.
> 
> OK I understand that part.
> Now I can still not change the permissions of user.wouter.INBOX, nor
> delete it.
> Can it be that it is an mandatory existing mailbox?
> 
> The main problem I have is that my e-mail software all the time gives
> pop-up warnings like "could not change to mailbox wouter.INBOX,
> mailbox does not exist" and the like. Pretty irritating, that's why I
> want to get rid of it, or put it to use.
> 
> I do have a general inbox (that should then be user.INBOX actually?)
> which I primarily use.

>From this and from list you did send me it looks like, you didn't create
your mailbox as you should.  Primary INBOX is named:

user.wouter

so you need to create it as "cm user.wouter" and it should show as
"INBOX" in lm afterwards.

(also all your subfolders should be part of this hierarchy, but you
won't see it when logged in as wouter, because cyrus is translating
mailbox names)

You should really not mix administrator mailbox with your user mailbox.
I suggest adding another user as administrator to your /etc/imapd.conf
and do all administrative operations from this another mailbox.

Ondrej
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Deleting mailbox problem

2005-07-22 Thread Ondrej Sury
On Fri, 2005-07-22 at 21:59 +0800, Wouter van Marle wrote:
> That command is accepted.
> Now I do not have a mailbox called user.wouter, and after giving that
> command I still get the system I/O error when setting rights to the
> mailbox wouter.INBOX... 
> I am logging in as "wouter" (my normal username), and I have set the
> line "admins: wouter" in imapd.conf. So I should be admin with full
> rights, right?

OK, what does lm command say? Ie. what mailboxes really exists on your
system?  If it's big please publish it somewhere on web and send only
pointer.

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: cyrus-imap + sieve

2005-07-13 Thread Ondrej Sury
Return-path: is not reliable check (it's usually added by MDA), so most
propably it's not there when sieve checks mail.  You have to check for
another header.

> Return-Path: <[EMAIL PROTECTED]> so it should work, but it doesn't.

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: integer overflow at 2^32 in quota calculations

2005-07-13 Thread Ondrej Sury

> > Actually, it's an unsigned 32-bit value, so the limit is 4GB:
> > 
> > https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2690
> > 
> > (Yes, we really do have users who are using more than 4GB of space.)
> 
> The limit is still 32-bit signed.  It needs to remain unsigned because 
> -1 is used to disable the quota.  But because the limit is set in KB, 
> the limit is actually 2TB.  All the patch does is use 64-bit for the 
> quota usage so we go beyond 4GB and track up to the limit without 
> overflowing.
> 
> 
> >>this will be different in 2.3
> > 
> > 
> > Yes, Ken fixed it on 2004-08-09 in the cyrus-imapd-2_3 branch.
> > 
> > Ken, off the top of your head, can you think of any gotchas in
> > backporting your quota calculation fixes to 2.2?  (I don't want to
> > wait until 2.3 for the fix, as this bug is currently biting us.)
> 
> I don't see any problem, as the space for the extra 4-bytes is already 
> carved out in cyrus.index.  You can probably use 'cvsps' to create a 
> patchset.  If you don't have it, I can make one for you.

Ken, would you be so kind to generate patchset (and maybe attach it to
mentioned bug report)?

Thanks,
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: backslash in addresses?

2005-07-13 Thread Ondrej Sury
Well,

IMHO you are mixing .forward syntax with /usr/sbin/sendmail behaviour.  

Sieve reinjects forwarded mail using /usr/sbin/sendmail (or whatever you
have configured in /etc/imapd.conf) and since backslashed email address
is not valid, so isn't sieve script.  So what you want to do is to learn
your /usr/sbin/sendmail to not do alias substitution.

Ondrej.

On Tue, 2005-07-12 at 21:17 -0500, Aleksandar Milivojevic wrote:
> If an email address starts with backslash ("\"), sendmail will not 
> perform alias substituion.  I'm attempting to use that feature inside my 
> Sieve script (generated by Horde's Ingo application) as follows:
> 
> if true {
> redirect "[EMAIL PROTECTED]";
> keep;
> }
> 
> However, I'm getting an error from timsieved:
> 
> script errors: line 7: address '[EMAIL PROTECTED]': parse error, 
> unexpected $undefined.
> 
> Does this means Sieve does not support "backslashed" addresses, or my 
> Sieve script manager program generated errornous script?  If later, what 
> would be the correct way to escape backslash that is part of email address?
> 
> Thanks,
> Aleksandar Milivojevic
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: cyradm freebsd ldap auth problem

2005-06-29 Thread Ondrej Sury
What is your auth method?  Ie. show us output of:

grep -E ^sasl /etc/imapd.conf

if you are using saslauthd, then does testsaslauthd works?

And did you read and understand all installation instructions?

Ondrej.

On Tue, 2005-06-28 at 21:55 -0300, Luís Cargnini wrote:
> People i  having the following problem:
> cyradm --u cyrus localhost
> Password:
> cyradm: cannot authenticate to server with  as cyrus
>  
> My entirely system is installed but i'm still can't connect as cyrus
> using cyradm what could i do ?
> What other information they need to help me ?
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Switch from /var/spool/imap/t/user/test to /var/spool/imap/user/test

2005-06-24 Thread Ondrej Sury
In that case you need to set hashimapspool to false.  (and rehash of
course)...

Ondrej.

On Wed, 2005-06-08 at 13:52 -0700, Maillist wrote:
> 
> Hi Simon,
> 
> the option hashimapspool is true in my /etc/imapd.conf, I stoped 
> cyrus-imap services, then  tried /usr/lib/cyrus-imapd/rehash -i none, 
> there was some error message occurs like "converting data partition 
> /var/spool/imap...couldn't rename t to .t at (eval 1) line 951,
>  
> line 2.",  it did change /var/spool/imap/t/user/test to 
> /var/spool/imap/user/test. however I could not access the mailbox 
> after, it always said "system I/O error". I had to 
> /usr/lib/cyrus-imapd/reconstruct -r user.test, but it went back to 
> /var/spool/imap/t/user/test again 
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: NO Mailbox does not exist

2005-06-24 Thread Ondrej Sury
Hi James,

maybe you could try to attach strace to running imap process, ie.:

# telnet localhost imap (and everything before SELECT INBOX)
# ps -ef | grep imap (pick right one)
# strace -p  -o /tmp/imap.trace
in telnet session write SELECT INBOX
stop strace (Ctrl-c usually helps :-)

look in /tmp/imap.trace which file it was trying to open...

Similary you could do same with gdb (and if you compile imap binary with
debugging symbols and you are in cyrus-imapd-2.2.12/imap/ you can do:
# gdb
file imapd
attach 
break imapd.c:1446
cont

Ondrej.

On Wed, 2005-06-08 at 17:00 -0400, James Treleaven wrote:
> [EMAIL PROTECTED] james]# telnet zooserver imap2
> * OK zooserver Cyrus IMAP4 v2.2.3 server ready
> 1 login Booneski foobar
> 1 OK User logged in
> 2 getacl user/Booneski
> * ACL user/Booneski booneski lrswipcda
> 2 OK Completed
> 3 SELECT INBOX
> 3 NO Mailbox does not exist
> 4 select user/Booneski
> * FLAGS (\Answered \Flagged \Draft \Deleted \Seen)
> * OK [PERMANENTFLAGS (\Answered \Flagged \Draft \Deleted \Seen \*)]
> * 1 EXISTS
> * 0 RECENT
> * OK [UNSEEN 1]
> * OK [UIDVALIDITY 1118253375]
> * OK [UIDNEXT 2]
> 4 OK [READ-WRITE] Completed
> 5 logout
> * BYE LOGOUT received
> 5 OK Completed
> Connection closed by foreign host. 
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Nothing authenticates with cyrus IMAP -- may be cyrus-sasl problem

2005-06-24 Thread Ondrej Sury
It won't work unless you fix errors I have copied below.  It's not
cyrus-sasl error, but cyrus-sasl configuration error.

Also please not that document you refered to contains some errors (or
possible errors), so you should really read the docs and understand what
you are doing.

F.E.:
"allowplaintext: yes" option is missing from /etc/imapd.conf
"virtdomains: userid" should be rather used (unless you really want what
"virtdomains: on" is for).

Also this guy is enabling saslauthd and not really using it, etc.  If
you really don't need this exact setup, you should rather go either for
vanilla cyrus-imapd/sasl or your distribution specific version.
Applying numerous patches doesn't help when you are in trouble.

BTW: contents of your /etc/imapd.conf could also help tracking errors.

Ondrej.

On Sun, 2005-06-12 at 08:51 -0400, Bud Roth wrote:
> Jun 11 21:13:49 salmon sasldblistusers2: sql_select option missing
> Jun 11 21:13:49 salmon sasldblistusers2: auxpropfunc error no
> mechanism available

> Jun 10 21:31:50 salmon postfix/smtpd[751]: sql plugin couldn't connect
> to any host
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: "imapopts.h:191: error: array type has incomplete element type" (take 2)

2005-06-23 Thread Ondrej Sury
Try attached patch.

O.

On Fri, 2005-06-17 at 21:40 -0700, OpenMacNews wrote:
> hi,
> 
> building cyrus-imapd-2.2.12 on a 'fresh' OSX 10.4.1 dev box ...
> 
> after config, 'make all' dies with:
> 
> % make all
> ### Making all in /usr/ports/cyrus/cyrus-imapd-2.2.12/man
> creating imapd.conf.5
> ./../tools/config2man ./../lib/imapoptions > ./imapd.conf.5
> ### Making all in /usr/ports/cyrus/cyrus-imapd-2.2.12/lib
> ./../tools/config2header CC=gcc ./imapopts.c ./imapopts.h < ./imapoptions
> gcc -c -I.. -I/usr/local//berkeley-db/include
> -I/usr/local//berkeley-db/include
> -I/Library/Frameworks/SASL2.framework/Headers -I/usr/local/ssl/include
> -I/usr/include -I/usr/local//cyrus-sasl/include -DHAVE_CONFIG_H
> -g -O2  \
> libconfig.c
> In file included from libconfig.h:47,
>  from libconfig.c:57:
> imapopts.h:191: error: array type has incomplete element type
> make[1]: *** [libconfig.o] Error 1
> make: *** [all] Error 1
> 
> any suggestions?
> 
> richard
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Ondrej Sury <[EMAIL PROTECTED]>


50-FTBFS-gcc-4.0-fix.dpatch
Description: application/shellscript


Re: backup without stopping the imap server?

2005-06-14 Thread Ondrej Sury
Have you tried using rsync with:

--size-only ignore mod time for quick check (use size)

O.

On Fri, 2005-06-10 at 10:37 -0700, Andrew Morgan wrote:
> On Thu, 9 Jun 2005, James Treleaven wrote:
> 
> > The best idea I have seen is two rsync's: the first while the server is 
> > running and the second (much faster one) with it momentarily stopped.
> 
> Unfortunately, even rsync can take a very long time.  I'm preparing to 
> migrate to a new Cyrus server and I plan to use rsync.  I've been doing 
> daily rsyncs of the mail spool in preparation for the final rsync while 
> the old server is stopped.  We have about 375GB of mail in 6 million+ 
> files, and the rsync process takes about 6 hours.  It's not the size of 
> the data (although the initial rsync did take considerably longer).  Just 
> calculating the differences for that many files is a lot of work.  :)
> 
>   Andy
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


IMSP server - development

2005-06-09 Thread Ondrej Sury
Hi there,

I just wanted to ask if there is active (or at least semi-active)
development on IMSP server?  I found version 1.8 which fixes some
compile error from 1.7b.  I would like to add support for virtual
domains, dots in usernames, dirhash and fulldirhash.

Running under cyrus master daemon instead of it's own daemonize would be
nice.

Should be reasonably easy to do it...  question is more or less, if I
should coordinate this effort and if I should and could push my changes
back upstream.

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


RE: EMBARRASSING TO THE LIST: Re: *WARNING* Your EmailAccount Will Be Closed

2005-06-01 Thread Ondrej Sury
On Tue, 2005-05-31 at 13:22 -0400, Kern, Tom wrote:
> I'm subscribed to the postfix and spamassassin mailing lists and they are 
> closed.
> I think those 2 lists have a lot to do with email.
> 
> This is the only list i'm on that got hit by that german spam bot..

Not true.  postfix-users was put on SORBS just because of german spam
comming thru list.  (See archives if you don't believe me...)

-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: "losing" email after delivery to cyrus

2005-05-28 Thread Ondrej Sury
On Fri, 2005-05-27 at 10:18 +0800, Justin wrote:
> allow duplicate messages to be delivered, then potentially that will
> cause more issues than currently exist. Leaving it unchanged is
> clearly not the answer, either. 

Disable it.

It compares msg-id's of messages which are not reliably unique, so it is
causing more pain then gain...

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


RE: [info-cyrus] put on the subject line. was: spam

2005-05-17 Thread Ondrej Sury
On Tue, 2005-05-17 at 07:43 -0500, Greg Harris wrote:
> While I agree with you that sorting is probably possible on any client, it
> is really nice when the tags are in place.  They make things much cleaner
> when the occasional e-mail jumps through the hoops because of a slight
> change in the addressing scheme.  If I can set my filter to look for any
> instance of [Info-Cyrus] in the subject line, then everything that is
> supposed to go to that folder goes and nothing else.

All mails from list has: "Sender: info-cyrus@lists.andrew.cmu.edu"
header set.  This is sufficient for all decent mail clients.

On the other hand adding List-ID: wouldn't hurt :-)

> While some subject lines do get a little messy, it is easier for a person to
> jump past all of the junk in the subject line than to move messages between
> folders.

This can be done on client side (or in your MDA), so why do it in mail
list software...?

> This is the only list that I know of that does not add a tag to
> the subject line and I have always thought that it was a little weird and
> wished it was there.

debian-*, linux-xfs, postfix, ubuntu-*, kernel-traffic, linux-kernel and
others don't add name of list to Subject.  Only lists that adds [...] I
know of is [EMAIL PROTECTED]

Just my two cents, but I don't really see any good reason to do it...

Ondrej.
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Problems getting Cyrus Imap working [2]

2005-05-10 Thread Ondrej Sury
Show us your /etc/cyrus.conf

Ondrej
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Kolab and preferred backup method

2005-05-06 Thread Ondrej Sury
That depends on budget and amount of data :-).

Most simple stuff include rsyncing /var/spool/cyrus to another location

Or you can use Bacula backup software (where you can do various
scheduling of tasks, etc.)

Or you can use snapshoting on disk storage which can vary from using LVM
(on Linux) thru using DAS (Direct Attached Storage) with this
functionality or use full featured SAN (where you can do various stuff,
syncing disks between different storages, etc.)

Ondrej.

On Fri, 2005-05-06 at 19:16 +0200, Markus Heller wrote:
> Dear Cyrus experts,
> 
> As you may know, the Cyrus imapd is used for the KOLAB open source groupware 
> server. Unfortunately I have lost some emails during a test recently, so I 
> was hit hard by the question how to back up the imapd.
> 
> What is the preferred and recommended backup strategy that allows zero 
> downtime?
> 
> Thanks in advance,
> Markus
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: case sensitivity

2005-04-29 Thread Ondrej Sury
>From imapd.conf:

# Forcing recipient user to lowercase
# Cyrus 2.1 is case-sensitive.  If all your mail users are in lowercase, it is
# probably a very good idea to set lmtp_downcase_rcpt to true.  The default is
# to assume the user knows what he is doing, and not downcase anything.
lmtp_downcase_rcpt: yes

Ondrej

On Fri, 2005-04-29 at 11:11 +0200, Dag-Erling Smørgrav wrote:
> I discovered by accident that lmtpd (or possibly deliver, or both) is
> case-sensitive; mail to [EMAIL PROTECTED] will bounce with
> 
> 550-Mailbox unknown.  Either there is no mailbox associated with this
> 550-name or you do not have authorization to see it.
> 
> Is this intentional?  It doesn't seem right; mail addresses are
> supposed to be case insensitive.  Can this be fixed in Cyrus, or do I
> have to set up my SMTP server (Postfix) to lowercase the address
> before delivering each message to Cyrus?
> 
> DES
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: IMAP Implementation People Time Estimates

2005-03-03 Thread Ondrej Sury
Well,

it took one week for skilled unix administrators / architects to fully
evaluate, install and test Cyrus IMAPD with all the whistles and bells
(postfix, ldap, sasl, tls).

Ondrej.

On Thu, 2005-03-03 at 11:51 +0100, Marco Colombo wrote:
> Christopher T. Beers wrote:
> > We are in the process of evaluating our current student email solution 
> > here at the University and I have been asked to develop some estimates 
> > of the time it takes to research, test and implement this.
> > 
> > The new system must support 35,000 users with about 1500 concurrent 
> > connections.  More than likely the setup will have redundant web front 
> > ends (2 servers running SquirrelMail, IMP, etc), 1 mupdate server, 2 
> > frontend machines and 2 backend Cyrus mail stores.  It will run on top 
> > of Linux (RHEL 4 probably).
> > 
> > We are familiar with UW IMAP server so we have to learn the differences 
> > to go to Cyrus, especially the aggregator, backup/recovery, cyradm, 
> > etc.  So keep that in mind.
> > 
> > If anyone has any data that would even remotely be helpful I would 
> > greatly appreciate it.  We are comparing Exchange, MiraPoint and this 
> > (which is much cheaper) but people now want to compare accurate 
> > estimates of people resources to implement it.  To me, that is like 
> > asking me how long it would take me to learn [place any abstract task 
> > here that you have never done].
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: lmtp over SSL - lmtps ?

2005-03-02 Thread Ondrej Sury
Putting private LAN (VLAN) between these two servers seems to be
simplest alternative (ie. granting physical security).  Using VPN or
IPsec seems more complicated, but also usable.

And in both cases you will gain more then just LMTP security.

Ondrej.

> > Is there any way to make communication in a secure way using lmtp?
> > I would like to have postfix and cyrus on separate machines.
> 
> Do you really want to encrypt *all* of the traffic or just the 
> authentication information?  Your email is most likely getting to 
> Postfix in plaintext anyways.
> 
> lmtpd will support non-plaintext authentication methods (and should 
> support TLS+PLAIN)
> 
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: batch removal script

2005-02-23 Thread Ondrej Sury
Something like this?

#!/usr/bin/perl

use Cyrus::IMAP::Admin;

my $partition = 'default';

$client = Cyrus::IMAP::Admin->new('localhost');
defined($client) || die "failed to get Admin obj.";

$ret = $client->authenticate(User => 'cyrus', Password => 'xxx', );

while (<>) {
chomp;

$mbox = "user.$_";

if ($client->listmailbox($mbox)) {
$client->setacl($mbox, cyrus => 'all');
$client->delete($mbox);
}
}


On Wed, 2005-02-23 at 17:09 +, Boyle, Bernadette wrote:
> Hello,
>  
> I would like to remove a couple of thousand users mailboxes. Does
> anyone have a script that would do this in batch please for a Solaris
> system running perl and all the usual shells.

-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Usernames type

2005-02-23 Thread Ondrej Sury
On Wed, 2005-02-23 at 13:30 -0300, Lincoln Zuljewic Silva wrote:
> how I can create the mailboxes in tha format . ?

look for unixhiersep in man imapd.conf and in documentation.

Ondrej
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Cyrus in ISP environment?

2005-02-11 Thread Ondrej Sury
Hello,

have anyone successfully used Cyrus in ISP/webhosting environment?

This means many different domains with little number of mailboxes per
domain.

Number of mailboxes: 500K - 1M
Disk space used: 1TB and more
Number of messages (daily number): 2-3M and more

Is it recommended to use Cyrus in such environment?

Best regards,
-- 
Ondrej Sury <[EMAIL PROTECTED]>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html