We had a server crash and have some mailboxes with corruption issues.
We are running reconstructs on those mailboxes but unfortunately they
have a lot of messages and are taking a long time so we have the mail
server running and are telling our users not to access those mailboxes.
The issue is when they do the connection gets created and that imapd -s
process never dies even though the connection to the folder doesn't
work. I have been individually killing them off myself but is there
anyway to set some sort of timeout on these processes so that these
processes eventually die? Currently they are just churning and using a
lot of memory and taking connections as we have limited the amount of
connections based on memory constraints.
If you need more information from me please let me know...thanks...
This is the error we see in the maillog:
Sep 21 09:30:46 mailserver imaps[20968]: imaps TLS negotiation failed:
<connection-name> [ip.add.ress]
Sep 21 09:30:46 mailserver imaps[20968]: Fatal error:
tls_start_servertls() failed
I scrubbed the connection details. Thanks...
Relevent config info:
cyrus.conf:
# standard standalone server implementation
START {
# do not delete this entry!
recover cmd="ctl_cyrusdb -r"
# this is only necessary if using idled for IMAP IDLE
idled cmd="idled"
}
# UNIX sockets start with a slash and are put into /var/lib/imap/sockets
SERVICES {
# add or remove based on preferences
imap cmd="imapd" listen="imap" prefork=2 maxchild=20
imaps cmd="imapd -s" listen="imaps" prefork=1 maxchild=230
# pop3 cmd="pop3d" listen="pop3" prefork=0
# pop3s cmd="pop3d -s" listen="pop3s" prefork=0
sieve cmd="timsieved" listen="sieve" prefork=0
# these are only necessary if receiving/exporting usenet via NNTP
# nntp cmd="nntpd" listen="nntp" prefork=3
# nntps cmd="nntpd -s" listen="nntps" prefork=1
# at least one LMTP is required for delivery
lmtp cmd="lmtpd -a" listen="lmtp" prefork=0
lmtpunix cmd="lmtpd" listen="/var/lib/imap/socket/lmtp" prefork=1
# this is only necessary if using notifications
# notify cmd="notifyd" listen="/var/lib/imap/socket/notify" proto="udp"
prefork=1
}
EVENTS {
# this is required
checkpoint cmd="ctl_cyrusdb -c" period=30
# this is only necessary if using duplicate delivery suppression,
# Sieve or NNTP
delprune cmd="cyr_expire -E 3" at=0400
# this is only necessary if caching TLS sessions
tlsprune cmd="tls_prune" at=0430
----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
