upgrading from 2.3.7 to 2.3.13 - reconstruct -r needed?
When I upgrade from 2.3.7 to 2.3.13, on a 64 bit machine, do I need to do a reconstruct -r on the entire user tree? I'm looking at the ugrading doc, and it says "Due to byte alignment issues in cyrus.index, all mailboxes will have to be reconstructed." when upgrading from 2.3.3 or later on 64 bit machines. Will the user's email be accessible while that reconstruct is running? If not, that's going to be a significant downtime... Thanks for any help, Sam Smith Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
replication: sync_client dies
I am able to run "sync_client -u username" for all my users with no errors, so there is no problem with the setup or authentication that I know of, yet "sync_client -r" fails after a few runs. imapd.conf: sync_host: tsnf.gatch.edu sync_authname: cyrus sync_log: 1 sync_machineid: 1 sync_repeat_interval: 60 I run "sync_client -l -r" and never get an error - it just dies. On the machine running sync_server, I get: Oct 10 10:13:10 tsnf.gatch.edu syncserver[11089]: [ID 314898 local6.debug] mydelete: starting txn 2147488126 Oct 10 10:13:10 tsnf.gatch.edu syncserver[11089]: [ID 504160 local6.debug] mydelete: committing txn 2147488126 Oct 10 10:13:10 tsnf.gatch.edu syncserver[11089]: [ID 873112 local6.error] IOERROR: reading message: unexpected end of file and sync_client has exited on the imap server. It will usually run for a few minutes, and then dies with the same message (with a different txn number). Right now I am running a crontab that just restarts it every minute if it has died - not an elegant solution. Any clues? Thanks, Sam Smith Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: cyrus - sasl - pam - ldap strange error with libsldap
Andreas Winkelmann wrote: Am Thursday 14 September 2006 18:23 schrieb Sam Smith: We've been using cyrus faithfully with pam->NIS for years, but I have to change to pam->LDAP. I'm using saslauthd -a pam, with a solaris 9 box that authenticates just fine using pam->ldap to a fedora directory server. I'm using cyrus 2.3.7, and sasl 2.1.22. I did not compile in ldap support for sasl, since I am using pam. Anyway, here's the error: Sep 14 12:07:19 tsnfs.ece.gatech.edu imaps[2724]: [ID 379946 local6.notice] starttls: TLSv1 with cipher AES256-SHA (256/256 bits reused) no authentication Sep 14 12:07:19 tsnfs.ece.gatech.edu imaps[2724]: [ID 293258 local6.error] libsldap: Status: 91 Mesg: openConnection: failed to initialize TLS security (security library: bad database.) Sep 14 12:07:19 tsnfs.ece.gatech.edu last message repeated 1 time Sep 14 12:07:19 tsnfs.ece.gatech.edu imaps[2724]: [ID 292100 local6.warning] libsldap: could not remove ldapserv.ece.gatech.edu from servers list Sep 14 12:07:19 tsnfs.ece.gatech.edu imaps[2724]: [ID 293258 local6.error] libsldap: Status: 7 Mesg: Session error no available conn. Sep 14 12:07:19 tsnfs.ece.gatech.edu imaps[2724]: [ID 529592 local6.notice] login: ct5247.ece.gatech.edu [199.77.225.131] sam plain+TLS User logged in I am able to login with most clients (thunderbird, outlook, eudora), but I cannot login with squirrelmail. That's very strange. Squirrelmail logs in twice for some reason, and the second time always fails. Is this a cyrus or a sasl error? Or maybe a pam_ldap error? Of course, if I change back to pam->NIS, everything works great, but that's not an option. Your configuration? And, stop saslauthd and start it with an additional "-d" for Debug-Output out of a shell. Test it and show the Output. Thanks Andrew, The saslauthd output when run in debug mode while I login - doesn't show any problems: saslauthd[2193] :main: num_procs : 5 saslauthd[2193] :main: mech_option: NULL saslauthd[2193] :main: run_path : /var/state/saslauthd saslauthd[2193] :main: auth_mech : pam saslauthd[2193] :ipc_init: using accept lock file: /var/state/saslauthd/mux.accept saslauthd[2193] :detach_tty : master pid is: 0 saslauthd[2193] :ipc_init: listening on socket: /var/state/saslauthd/mux saslauthd[2193] :main: using process model saslauthd[2193] :have_baby : forked child: 2194 saslauthd[2194] :get_accept_lock : acquired accept lock saslauthd[2193] :have_baby : forked child: 2195 saslauthd[2193] :have_baby : forked child: 2196 saslauthd[2193] :have_baby : forked child: 2197 saslauthd[2194] :rel_accept_lock : released accept lock saslauthd[2195] :get_accept_lock : acquired accept lock saslauthd[2194] :do_auth : auth success: [user=sam] [service=imap] [realm=] [mech=pam] saslauthd[2194] :do_request : response: OK The log file during that login, showing the funny libsldap errors: Sep 18 12:49:25 tsnfs.ece.gatech.edu imaps[2205]: [ID 921384 local6.debug] accepted connection Sep 18 12:49:26 tsnfs.ece.gatech.edu imaps[2205]: [ID 636471 local6.notice] TLS server engine: ca nnot load CA data Sep 18 12:49:26 tsnfs.ece.gatech.edu imaps[2205]: [ID 379946 local6.notice] starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication Sep 18 12:49:26 tsnfs.ece.gatech.edu imaps[2205]: [ID 293258 local6.error] libsldap: Status: 91 Mesg: openConnection: failed to initialize TLS security (security library: bad database.) Sep 18 12:49:26 tsnfs.ece.gatech.edu last message repeated 1 time Sep 18 12:49:26 tsnfs.ece.gatech.edu imaps[2205]: [ID 292100 local6.warning] libsldap: could not remove ldapserv.ece.gatech.edu from servers list Sep 18 12:49:26 tsnfs.ece.gatech.edu imaps[2205]: [ID 293258 local6.error] libsldap: Status: 7 M esg: Session error no available conn. Sep 18 12:49:26 tsnfs.ece.gatech.edu imaps[2205]: [ID 529592 local6.notice] login: ct5247.ece. gatech.edu [199.77.225.131] sam plain+TLS User logged in Sep 18 12:49:26 tsnfs.ece.gatech.edu imaps[2205]: [ID 275131 local6.notice] skiplist: recovered / var/imap/user/s/sam.seen (55 records, 17648 bytes) in 0 seconds Sep 18 12:49:26 tsnfs.ece.gatech.edu imaps[2205]: [ID 677757 local6.debug] seen_db: user sam open ed /var/imap/user/s/sam.seen Sep 18 12:49:26 tsnfs.ece.gatech.edu imaps[2205]: [ID 736213 local6.debug] open: user sam opened INBOX my imapd.conf: configdirectory: /var/imap servername: imap.ece.gatech.edu defaultpartition: staff partition-staff: /var/spool/imap/staff partition-mailstore2: /var/spool/imap/mailstore2 partition-mailstore3: /var/spool/imap/mailstore3 partition-mailstore4: /var/spool/imap/mailstore4 partition-mailstore5: /var/spool/imap/mailstore5 partition-mailstore6: /var/spool/imap/mailstore6 admins: cyradmin cyrus tls_cacert_dir: /etc/ece_conf/ssl tls_cacert_file: /etc/ece_conf/
cyrus - sasl - pam - ldap strange error with libsldap
We've been using cyrus faithfully with pam->NIS for years, but I have to change to pam->LDAP. I'm using saslauthd -a pam, with a solaris 9 box that authenticates just fine using pam->ldap to a fedora directory server. I'm using cyrus 2.3.7, and sasl 2.1.22. I did not compile in ldap support for sasl, since I am using pam. Anyway, here's the error: Sep 14 12:07:19 tsnfs.ece.gatech.edu imaps[2724]: [ID 379946 local6.notice] starttls: TLSv1 with cipher AES256-SHA (256/256 bits reused) no authentication Sep 14 12:07:19 tsnfs.ece.gatech.edu imaps[2724]: [ID 293258 local6.error] libsldap: Status: 91 Mesg: openConnection: failed to initialize TLS security (security library: bad database.) Sep 14 12:07:19 tsnfs.ece.gatech.edu last message repeated 1 time Sep 14 12:07:19 tsnfs.ece.gatech.edu imaps[2724]: [ID 292100 local6.warning] libsldap: could not remove ldapserv.ece.gatech.edu from servers list Sep 14 12:07:19 tsnfs.ece.gatech.edu imaps[2724]: [ID 293258 local6.error] libsldap: Status: 7 Mesg: Session error no available conn. Sep 14 12:07:19 tsnfs.ece.gatech.edu imaps[2724]: [ID 529592 local6.notice] login: ct5247.ece.gatech.edu [199.77.225.131] sam plain+TLS User logged in I am able to login with most clients (thunderbird, outlook, eudora), but I cannot login with squirrelmail. That's very strange. Squirrelmail logs in twice for some reason, and the second time always fails. Is this a cyrus or a sasl error? Or maybe a pam_ldap error? Of course, if I change back to pam->NIS, everything works great, but that's not an option. Thanks for any help, Sam Smith Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Eudora, STARTTLS, etc
I recently upgraded to Cyrus 2.1.16 from 2.0.16. I read the entry in the FAQ about commenting out the lines in tls.c. Didn't help. I have a server running with cyrus 2.0.16 and openssl 0.9.6k that does work with Eudora, but darned if I can remember what I did 2 years ago to make it work. Of course mozilla, pine, outlook, etc all work just fine. I hate eudora. Can someone point me in the right direction? Thanks, Sam Smith
upgrade 2.0.16 to 2.1.16 - ctl_cyrusdb hangs
The upgrade seemed to go OK, but when I start the master process it starts ctl_cyrusdb. I get the following messages: Dec 17 14:16:05 newimap.ece.gatech.edu master[9932]: [ID 392559 local6.debug] about to exec /usr/cyrus/bin/ctl_cyrusdb Dec 17 14:16:05 newimap.ece.gatech.edu ctl_cyrusdb[9932]: [ID 702911 local6.notice] recovering cyrus databases and that's all. ctl_cyrusdb never seems to finish recovering, imapd never starts, etc. We do have over 100G of email... Should ctl_cyrusdb take hours? Sam Smith
Header limits
Is there a limit on the size of the To: header? I'm trying to chase down an "I/O error" when transferring from a sendmail host to Cyrus using lmtp. The failed message always seems to have a large To: header. Sendmail has no limit. Sam Smith
lmtp I/O error
I have a seperate mail hub (sendmail 8.12.1) and Cyrus imap server (2.0.16 on Solaris 2.7). I use lmtp to transfer the mail between them. It seems to work fine for awhile, then I get I/O errors from sendmail, even though I can connect to lmtp on the cyrus server and everything looks OK. After a few minutes it starts working again. >sendmail -q -v Running /var/spool/mqueue/fAEImm4o005332 (sequence 14 of 59) I/O error >From the syslog: Nov 14 13:50:14 mailmachine.gatech.edu sendmail[5667]: [ID 801593 mail.info] fAEIoB4o005650: to=<[EMAIL PROTECTED]>, delay=00:00:02, xdelay=00:00:00, mailer=lmtp, pri=30884, relay=imapmachine.gatech.edu., dsn=4.4.2, stat=I/O error from the sendmail.cf: Mlmtp, P=[IPC], F=sDFMnqAw@/:|SmXz, E=\r\n, S=ENVFroml, R=EnvToL/HdrToL, T=DNS/RFC822/X-Unix, A=TCP $h 2003 Has anyone seen this before? Sam [EMAIL PROTECTED]
netscape 4.77 and filters
The filters work on my old UW imap server. On the cyrus server, I can create a filter and save it. If I look again - it's not there. This is on Windows 2000. Anybody else seen this problem? -- Sam Smith N4MAP [EMAIL PROTECTED] http://www.mindspring.com/~sam.smith
berkeley to cyrus conversion
I have seen all the old messages about using mbxcvt and c-client. How does that work exactly? It says in the docs that cyrus imap is NOT one of the formats it supports. Also the scripts from "Managing IMAP" are out-of-date, since at least one uses the tcl version of cyradm. What are people using now to do the conversion? Thanks for any help... -- Sam Smith N4MAP [EMAIL PROTECTED] http://www.mindspring.com/~sam.smith
