Re: saslauthd vs auxprop

2011-01-10 Thread Adam Tauno Williams
On Sun, 2011-01-09 at 23:38 -0800, Andrew Morgan wrote: > On Sun, 9 Jan 2011, j...@destar.net wrote: > > I cannot wrap my mind around saslauthd and auxprop. > > Does auxprop use the sasldb file to authenticate users that have been > > added using the 'saslpasswd2' command? > > What is saslauthd tr

RE: Disallow cleartext on the wire

2011-01-10 Thread Adam Tauno Williams
On Sun, 2011-01-09 at 14:40 -0800, Dudi Goldenberg wrote: > >I am using Thunderbird to test with. I want completely disallow logins > >without TLS for IMAP. > Have a look at /etc/cyrus.conf: > SERVICES { > # --- Normal cyrus spool, or Murder backends --- > # add or remove based o

Re: Detecting last login IMAP and expire old messages

2011-01-10 Thread Adam Tauno Williams
On Sat, 2011-01-08 at 23:35 -0200, Lucas Zinato Carraro wrote: > Is there a way to get messages from a user account automatic expire if > account is not in used for 6 months ? Yes, set the "expire" annotation on the folder. For example, we set this to 365 on the user's sent-mail folder and to 14

Re: Disallow cleartext on the wire

2011-01-10 Thread Bron Gondwana
On Mon, Jan 10, 2011 at 07:00:13AM -0500, Adam Tauno Williams wrote: > On Sun, 2011-01-09 at 14:40 -0800, Dudi Goldenberg wrote: > > >I am using Thunderbird to test with. I want completely disallow logins > > >without TLS for IMAP. > > Have a look at /etc/cyrus.conf: > > > > Just hash out imap

Re: Detecting last login IMAP and expire old messages

2011-01-10 Thread Patrick Boutilier
On 01/10/2011 08:03 AM, Adam Tauno Williams wrote: On Sat, 2011-01-08 at 23:35 -0200, Lucas Zinato Carraro wrote: Is there a way to get messages from a user account automatic expire if account is not in used for 6 months ? Yes, set the "expire" annotation on the folder. For example, we set th

Re: Detecting last login IMAP and expire old messages

2011-01-10 Thread Adam Tauno Williams
On Mon, 2011-01-10 at 09:13 -0400, Patrick Boutilier wrote: > On 01/10/2011 08:03 AM, Adam Tauno Williams wrote: > > On Sat, 2011-01-08 at 23:35 -0200, Lucas Zinato Carraro wrote: > >> Is there a way to get messages from a user account automatic expire if > >> account is not in used for 6 months ?

Re: Detecting last login IMAP and expire old messages

2011-01-10 Thread Patrick Boutilier
On 01/10/2011 09:37 AM, Adam Tauno Williams wrote: On Mon, 2011-01-10 at 09:13 -0400, Patrick Boutilier wrote: On 01/10/2011 08:03 AM, Adam Tauno Williams wrote: On Sat, 2011-01-08 at 23:35 -0200, Lucas Zinato Carraro wrote: Is there a way to get messages from a user account automatic expire i

Re: Detecting last login IMAP and expire old messages

2011-01-10 Thread steffo76
Original-Nachricht > Datum: Mon, 10 Jan 2011 08:37:14 -0500 > Von: Adam Tauno Williams > An: info-cyrus@lists.andrew.cmu.edu > Betreff: Re: Detecting last login IMAP and expire old messages > On Mon, 2011-01-10 at 09:13 -0400, Patrick Boutilier wrote: > > On 01/10/2011 08:03 A

Re: Detecting last login IMAP and expire old messages

2011-01-10 Thread Lucas Zinato Carraro
In my case authentication is with saslauthd with ldap. ( OpenLDAP ) And this LDAP is used for another systems. User can use LDAP for UNIX authentication for example and not use LDAP dor imap. Aby other idea ? --- Cyrus IMAP has the annot

Re: Disallow cleartext on the wire

2011-01-10 Thread Dan White
On 10/01/11 23:32 +1100, Bron Gondwana wrote: >On Mon, Jan 10, 2011 at 07:00:13AM -0500, Adam Tauno Williams wrote: >> On Sun, 2011-01-09 at 14:40 -0800, Dudi Goldenberg wrote: >> > >I am using Thunderbird to test with. I want completely disallow logins >> > >without TLS for IMAP. >> > Have a look

Re: Detecting last login IMAP and expire old messages

2011-01-10 Thread Dan White
On 10/01/11 14:04 -0200, Lucas Zinato Carraro wrote: >In my case authentication is with saslauthd with ldap. ( OpenLDAP ) > >And this LDAP is used for another systems. > >User can use LDAP for UNIX authentication for example and not >use LDAP dor imap. Are you saying that authentication is not wo

Fwd: Detecting last login IMAP and expire old messages

2011-01-10 Thread Lucas Zinato Carraro
> On Mon, Jan 10, 2011 at 3:29 PM, Dan White wrote: > Are you saying that authentication is not working at all with your imap > server? Can you post your saslauthd.conf file, if it exists? No

Re: Fwd: Detecting last login IMAP and expire old messages

2011-01-10 Thread Dan White
On 10/01/11 16:30 -0200, Lucas Zinato Carraro wrote: >I try arbitron but receive a error: > > >arbitron -u -d 30 -l user/lucaszc >Loading Mailboxes...Done >Loading Users..Bus error Are you running the command as the cyrus user? Arbitron uses the internal mailbox naming scheme (for virtual domains

Re: Disallow cleartext on the wire

2011-01-10 Thread Bron Gondwana
On Mon, Jan 10, 2011 at 11:22:51AM -0600, Dan White wrote: > On 10/01/11 23:32 +1100, Bron Gondwana wrote: > >On Mon, Jan 10, 2011 at 07:00:13AM -0500, Adam Tauno Williams wrote: > >>On Sun, 2011-01-09 at 14:40 -0800, Dudi Goldenberg wrote: > >>> >I am using Thunderbird to test with. I want complet

imapd and pop3d processes accumulate when clients disappear

2011-01-10 Thread Gary Mills
I've noticed on our murder front end that imapd and pop3d processes gradually accumulate. Some of these can be several months old. In both cases, the reason seems to be that the process is listening on standard input, but the client has disappeared. Here's a typical stack trace: # pstack 58

Re: imapd and pop3d processes accumulate when clients disappear

2011-01-10 Thread Sebastian Hagedorn
That was fixed quite a while ago ... we had the same problem, so I worked with one of the developers to debug and fix it. Am 10.01.2011 um 23:23 schrieb Gary Mills : > I've noticed on our murder front end that imapd and pop3d processes > gradually accumulate. Some of these can be several months

Re: Disallow cleartext on the wire

2011-01-10 Thread jonr
Quoting Bron Gondwana : > On Mon, Jan 10, 2011 at 11:22:51AM -0600, Dan White wrote: >> On 10/01/11 23:32 +1100, Bron Gondwana wrote: >> >On Mon, Jan 10, 2011 at 07:00:13AM -0500, Adam Tauno Williams wrote: >> >>On Sun, 2011-01-09 at 14:40 -0800, Dudi Goldenberg wrote: >> >>> >I am using Thunderbi

Re: Disallow cleartext on the wire

2011-01-10 Thread Lucas Zinato Carraro
RFC2595 - not recommended IMAPs, but I disagree in some points. imaps and pop3s ports Separate "imaps" and "pop3s" ports were registered for use with SSL. Use of these ports is discouraged in favor of the STARTTLS or STLScommands. .. - Separate ports

Re: Disallow cleartext on the wire

2011-01-10 Thread jonr
Quoting Lucas Zinato Carraro : > RFC2595 - not recommended IMAPs, but I disagree in some points. > > > imaps and pop3s ports > > Separate "imaps" and "pop3s" ports were registered for use with > SSL. Use of these ports is discouraged in favor of the STARTTLS or > STLScommands. > > ...

Re: Disallow cleartext on the wire

2011-01-10 Thread Bron Gondwana
On Tue, Jan 11, 2011 at 08:56:01AM +1100, Bron Gondwana wrote: > > Running IMAP over 143 should be safe from over the wire snooping, if the > > server is properly configured. > > Yeah, that's what's known as "wishful thinking" I suspect. Has anyone > actually done any testing on this? And it's c

Re: Detecting last login IMAP and expire old messages

2011-01-10 Thread Bron Gondwana
On Mon, Jan 10, 2011 at 08:37:14AM -0500, Adam Tauno Williams wrote: > On Mon, 2011-01-10 at 09:13 -0400, Patrick Boutilier wrote: > > On 01/10/2011 08:03 AM, Adam Tauno Williams wrote: > > > On Sat, 2011-01-08 at 23:35 -0200, Lucas Zinato Carraro wrote: > > >> Is there a way to get messages from