From cl at 1984.is  Mon Nov  3 05:46:22 2008
From: cl at 1984.is (Mordur Ingolfsson)
Date: Mon, 03 Nov 2008 10:46:22 +0000
Subject: Size limitation on login realms
Message-ID: <490ED67E.9090809@1984.is>

Dear list,

I have a Cyrus imap 2.2.13  running on Debian serving 1500 users from 
358 domains, meaning 333 login realms. Today, when I was going to add 
login realm nr. 359 all hell broke loose and my logs filed up with this 
here message:

Nov  3 09:38:20 mail cyrus/lmtpunix[7935]: FATAL: invalid option name on 
line 188 of configuration file /etc/imapd.conf

It so happens, that the line containing the option loginrealms: is line 
187 in imapd.conf, so I have probably reached a size limit for the 
loginrealms option and the domains in exess of this size limit are 
somehow considered to be on the next line in the file, line 188.

these are the statistics for my loginrealms line:

Lines: 1
Words:  333
Characters: 3711

Have I reached an unmovable barrier here, or is there a way around this? 
I would really like to know, because the setup is working very well 
except for this new problem.

Thanks,

Mordur Ingolfsson
1984 ehf



From aspineux at gmail.com  Mon Nov  3 06:34:56 2008
From: aspineux at gmail.com (Alain Spineux)
Date: Mon, 3 Nov 2008 12:34:56 +0100
Subject: Size limitation on login realms
In-Reply-To: <490ED67E.9090809@1984.is>
References: <490ED67E.9090809@1984.is>
Message-ID: <71fe4e760811030334v5e0a167cv112569aef67548ac@mail.gmail.com>

On Mon, Nov 3, 2008 at 11:46 AM, Mordur Ingolfsson <cl at 1984.is> wrote:
> Dear list,
>
> I have a Cyrus imap 2.2.13  running on Debian serving 1500 users from
> 358 domains, meaning 333 login realms. Today, when I was going to add
> login realm nr. 359 all hell broke loose and my logs filed up with this
> here message:
>
> Nov  3 09:38:20 mail cyrus/lmtpunix[7935]: FATAL: invalid option name on
> line 188 of configuration file /etc/imapd.conf
>
> It so happens, that the line containing the option loginrealms: is line
> 187 in imapd.conf, so I have probably reached a size limit for the
> loginrealms option and the domains in exess of this size limit are
> somehow considered to be on the next line in the file, line 188.
>
> these are the statistics for my loginrealms line:
>
> Lines: 1
> Words:  333
> Characters: 3711
>
> Have I reached an unmovable barrier here, or is there a way around this?
> I would really like to know, because the setup is working very well
> except for this new problem.
>

The line in imapd.conf are limited to 4096 chars before  2.3.12
After 2.3.12 lines length are unlimited and you can also use the "\"
continuation char at the end of the line.

Update to last 2.3.X or try to apply the patch to your old 2.2.13.

Regards


> Thanks,
>
> Mordur Ingolfsson
> 1984 ehf
>
>
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>



-- 
Alain Spineux
aspineux gmail com
May the sources be with you

From Rob.McMahon at warwick.ac.uk  Mon Nov  3 11:19:39 2008
From: Rob.McMahon at warwick.ac.uk (Rob McMahon)
Date: Mon, 03 Nov 2008 16:19:39 +0000
Subject: Too many open files
In-Reply-To: <46CEFDF6.6060605@warwick.ac.uk>
References: <46CEFDF6.6060605@warwick.ac.uk>
Message-ID: <490F249B.7040200@warwick.ac.uk>

Rob McMahon wrote:
> Cyrus-2.2.13 (yes, I know it's getting on a bit).  Solaris 10 SPARC, 
> around 115,000 mailboxes.
>
> I was mopping up a few users today with a script which basically does:
>
> while (<>) {
>   chomp;
>   my $mb = 'user.' . $_;
>   $client->setacl($mb, $user => 'c');
>   $client->delete($mb);
> }
>
> After deleting just a few, I start getting errors like "Must login 
> first", "System I/O Error" (sorry, I haven't got the exact messages to 
> cut & paste).  Looking in the logs I see:
>
> Aug 24 16:20:44 narcissus imap[24338]: [ID 240394 local6.error] IOERROR: 
> opening quota file /var/imap/quota/V/user.??????.Trash: Too many open files
> Aug 24 16:21:38 narcissus imap[24338]: [ID 816447 local6.error] warning: 
> cannot open /etc/hosts.deny: Too many open files
>
> and indeed this process has hit the default 256 limit, most of which 
> seem to be quota files.  Other issues were manifesting, IMAP commands 
> never completing for instance, so I had to kill this process, which in 
> turn caused the master process to restart.  Not good.
>
>   
I think I've just found an answer to this.  Looking at the files open by 
one of these processes (I'd upped descriptors to 2048), it appears that 
if you try to delete, say, user.a, the IMAP process ends up quota files 
for every user beginning with a "a" ... sounds mad but that is what I've 
observed, and if I'm careful about not deleting short names it goes 
through okay.  I'll try to investigate further.  I know this is old 
code, and the algorithms have probably changed by now.

Cheers,

Rob

-- 
E-Mail:	Rob.McMahon at warwick.ac.uk		PHONE:  +44 24 7652 3037
Rob McMahon, IT Services, Warwick University, Coventry, CV4 7AL, England


From shwaltz at cabm.rutgers.edu  Mon Nov  3 12:07:16 2008
From: shwaltz at cabm.rutgers.edu (Shelley Waltz)
Date: Mon, 3 Nov 2008 12:07:16 -0500 (EST)
Subject: Too many open files
In-Reply-To: <490F249B.7040200@warwick.ac.uk>
References: <46CEFDF6.6060605@warwick.ac.uk> <490F249B.7040200@warwick.ac.uk>
Message-ID: <37107.192.76.178.13.1225732036.squirrel@webmailnew.cabm.rutgers.edu>

Oddly enough I had the identical issue today while trying to remove a
bunch of users.  I am running cyrus-imapd-2.3.7-2.el5 on RHEL5.

I used cyradm and did
sam user.x anyone c
dm user.x

This worked fine for about 20 users, then I got the following in maillog ...

Nov  3 10:35:28 rr imap[16539]: IOERROR: opening quota file
/var/lib/imap/quota/x/user.x: Too many open files
Nov  3 10:35:28 rr imap[16539]: DBERROR: error fetching user.x: cyrusdb error
Nov  3 10:35:28 rr imap[16539]: Deleted mailbox user.x

If I look in /var/spool/imap/x/user/  the directory and folders for user
x are still there.  If I try to remove the mailbox once again using
cyradm, it claims the mailbox does not exist.

How does one resolve this issue safely?

S.Waltz


Rob McMahon wrote:
> Rob McMahon wrote:
>> Cyrus-2.2.13 (yes, I know it's getting on a bit).  Solaris 10 SPARC,
>> around 115,000 mailboxes.
>>
>> I was mopping up a few users today with a script which basically does:
>>
>> while (<>) {
>>   chomp;
>>   my $mb = 'user.' . $_;
>>   $client->setacl($mb, $user => 'c');
>>   $client->delete($mb);
>> }
>>
>> After deleting just a few, I start getting errors like "Must login
>> first", "System I/O Error" (sorry, I haven't got the exact messages to
>> cut & paste).  Looking in the logs I see:
>>
>> Aug 24 16:20:44 narcissus imap[24338]: [ID 240394 local6.error] IOERROR:
>> opening quota file /var/imap/quota/V/user.??????.Trash: Too many open
>> files
>> Aug 24 16:21:38 narcissus imap[24338]: [ID 816447 local6.error] warning:
>> cannot open /etc/hosts.deny: Too many open files
>>
>> and indeed this process has hit the default 256 limit, most of which
>> seem to be quota files.  Other issues were manifesting, IMAP commands
>> never completing for instance, so I had to kill this process, which in
>> turn caused the master process to restart.  Not good.
>>
>>
> I think I've just found an answer to this.  Looking at the files open by
> one of these processes (I'd upped descriptors to 2048), it appears that
> if you try to delete, say, user.a, the IMAP process ends up quota files
> for every user beginning with a "a" ... sounds mad but that is what I've
> observed, and if I'm careful about not deleting short names it goes
> through okay.  I'll try to investigate further.  I know this is old
> code, and the algorithms have probably changed by now.
>
> Cheers,
>
> Rob
>
> --
> E-Mail:	Rob.McMahon at warwick.ac.uk		PHONE:  +44 24 7652 3037
> Rob McMahon, IT Services, Warwick University, Coventry, CV4 7AL, England
>
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>



From cvizitiu at gbif.org  Mon Nov  3 13:04:18 2008
From: cvizitiu at gbif.org (Ciprian Marius Vizitiu (GBIF))
Date: Mon, 3 Nov 2008 19:04:18 +0100
Subject: Unpredictable results from imapsync runs 
Message-ID: <005a01c93dde$9760b020$c6221060$@org>

Hi everybody,

I'm trying to migrate a small 120GB IMAP store from a 32 bit Cyrus 2.2.12 on
RHEL4 to a 64 bit Cyrus 2.3.7 running on RHEL5. 

Multiple test runs of imapsync on a 4.2 GB folder will result in annoying
errors e.g. one of the destinations will show some extra 5 unread messages
(in one folder) and/or 2 messages missing in another =:-o ... No easy way to
predict which folder will be affected and I'm sure nobody's been messin'
with the affected test folders.

A scan of the logs left me empty handed so any hints would be appreciated.
o:-)


From list at joreybump.com  Mon Nov  3 13:50:49 2008
From: list at joreybump.com (Jorey Bump)
Date: Mon, 03 Nov 2008 13:50:49 -0500
Subject: Unpredictable results from imapsync runs
In-Reply-To: <005a01c93dde$9760b020$c6221060$@org>
References: <005a01c93dde$9760b020$c6221060$@org>
Message-ID: <490F4809.9030703@joreybump.com>

Ciprian Marius Vizitiu (GBIF) wrote, at 11/03/2008 01:04 PM:

> I'm trying to migrate a small 120GB IMAP store from a 32 bit Cyrus 2.2.12 on
> RHEL4 to a 64 bit Cyrus 2.3.7 running on RHEL5. 
> 
> Multiple test runs of imapsync on a 4.2 GB folder will result in annoying
> errors e.g. one of the destinations will show some extra 5 unread messages
> (in one folder) and/or 2 messages missing in another =:-o ... No easy way to
> predict which folder will be affected and I'm sure nobody's been messin'
> with the affected test folders.
> 
> A scan of the logs left me empty handed so any hints would be appreciated.
> o:-)

It's been a few years since I used imapsync, but I remember struggling
to get the command line options just right. What command are you using?

Ultimately, I scripted it, and here's an excerpt from an early test:

#!/bin/sh

# assuming user/password matches on both hosts
USER=bob
SECRET=secretpass

HOST1=old.example.net
HOST2=new.example.net

echo "Pass 1 (transfer INBOX, only):"
imapsync \
    --host1 $HOST1 --user1 $USER --password1 $SECRET --ssl1 --folder
INBOX --expunge --expunge1    \
    --host2 $HOST2 --user2 $USER --password2 $SECRET --ssl2 --delete2
--expunge2


Eventually, this involved into a much more complicated script that
enabled me to migrate my entire UW-IMAP store, so a lot of it will be
irrelevant here. The trick was getting the expunge & delete options
right, in order to get the most rsync-like behaviour. Nonetheless, I had
a bit of manual cleanup afterwards. You'll want to finetune this on a
dummy account, and make use of the --dry option to get an idea of what
will happen. As always, YMMV, so make backups and test on copies.



From cvizitiu at gbif.org  Mon Nov  3 14:12:40 2008
From: cvizitiu at gbif.org (Ciprian Marius Vizitiu)
Date: Mon, 03 Nov 2008 20:12:40 +0100
Subject: Unpredictable results from imapsync runs
In-Reply-To: <490F4809.9030703@joreybump.com>
References: <005a01c93dde$9760b020$c6221060$@org>
	<490F4809.9030703@joreybump.com>
Message-ID: <490F4D28.1030803@gbif.org>

Hi Jorey,

Jorey Bump wrote:

> It's been a few years since I used imapsync, but I remember struggling
> to get the command line options just right. What command are you using?

For my first attempt(s) I've used:

imapsync --syncinternaldates --host1 aaa.bbb --host2 192.168... 
--authuser1 cyrus --password1 XXX --authuser2 cyrus --password2 "ZZZ" 
--subscribe --user1 username --user2 username --ssl1 --ssl2 --folderrec 
INBOX --fastio1 --fastio2

> 
> echo "Pass 1 (transfer INBOX, only):"
> imapsync \
>     --host1 $HOST1 --user1 $USER --password1 $SECRET --ssl1 --folder
> INBOX --expunge --expunge1    \
>     --host2 $HOST2 --user2 $USER --password2 $SECRET --ssl2 --delete2
> --expunge2

I'm not exactly sure I want or have to do "expunge". I'm doing my best 
to keep the original as... "intact" as possible. :-)

> The trick was getting the expunge & delete options
> right, in order to get the most rsync-like behaviour. Nonetheless, I had
> a bit of manual cleanup afterwards. You'll want to finetune this on a
> dummy account, and make use of the --dry option to get an idea of what
> will happen. As always, YMMV, so make backups and test on copies.

I'm not at all sure about "delete", like I said I want to keep the source.

Mean time I've discovered that multiple runs will eventually bring the 
"Seen" in sync but I'm still puzzled by the mismatch of the message 
numbers. =:-o

I've got one folder for which a run like:

imapsync --syncinternaldates --host1 aaa.bbb --host2 192.168 --authuser1 
cyrus --password1 XXX --authuser2 cyrus --password2 "WWW" --subscribe 
--user1 username --user2 username --ssl1 --ssl2 --folderrec 
INBOX.smth.trouble --fastio1 --fastio2

produces a result like

++++ Calculating sizes ++++
 From Folder [INBOX.smth.trouble]                Size: 181794267 
Messages:   819
Total size: 181794267
Total messages: 819
Time : 2 s
++++ Calculating sizes ++++
To   Folder [INBOX.smth.trouble]                Size: 181783200 
Messages:   817
Total size: 181783200
Total messages: 817
Time : 1 s

... so there it is: one folder has two more messages, why are they 
ignored? :-o Of course the report says:

++++ Statistics ++++
Time                   : 12 sec
Messages transferred   : 0
Messages skipped       : 817
Total bytes transferred: 0
Total bytes skipped    : 181783200
Total bytes error      : 0
Detected 0 errors


From aspineux at gmail.com  Mon Nov  3 15:25:58 2008
From: aspineux at gmail.com (Alain Spineux)
Date: Mon, 3 Nov 2008 21:25:58 +0100
Subject: Unpredictable results from imapsync runs
In-Reply-To: <005a01c93dde$9760b020$c6221060$@org>
References: <005a01c93dde$9760b020$c6221060$@org>
Message-ID: <71fe4e760811031225x64e88afel77c5403421bc9670@mail.gmail.com>

On Mon, Nov 3, 2008 at 7:04 PM, Ciprian Marius Vizitiu (GBIF)
<cvizitiu at gbif.org> wrote:
> Hi everybody,
>
> I'm trying to migrate a small 120GB IMAP store from a 32 bit Cyrus 2.2.12 on
> RHEL4 to a 64 bit Cyrus 2.3.7 running on RHEL5.
>
> Multiple test runs of imapsync on a 4.2 GB folder will result in annoying
> errors e.g. one of the destinations will show some extra 5 unread messages
> (in one folder) and/or 2 messages missing in another =:-o ... No easy way to
> predict which folder will be affected and I'm sure nobody's been messin'
> with the affected test folders.
>
> A scan of the logs left me empty handed so any hints would be appreciated.
> o:-)

Are you sure the cache of the imap client you are using is really in
sync with both client ?
Are you sure the source mailbox in not corrupted ? a reconstruct could be useful

Regards.

>
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>



-- 
Alain Spineux
aspineux gmail com
May the sources be with you

From svinther at gmail.com  Mon Nov  3 15:45:30 2008
From: svinther at gmail.com (=?ISO-8859-1?Q?Steffen_Vinther_S=F8rensen?=)
Date: Mon, 3 Nov 2008 21:45:30 +0100
Subject: segfault after upgrade
Message-ID: <eacf179a0811031245v4414cce2ia985d77cfe97c3e0@mail.gmail.com>

I recently updated a CentOS 4 installation using the CentOS package
manager "yum". the cyrus imapd and the dbd packages was upgraded along
with several other packages. After that there seems to be an issue
with the Cyrus imapd "shared" mailboxes (the ones where users needs to
subscribe in order to use)

I already tried rebuilding mailboxes.db, by dumping it as text and
restoring it, but with no luck. Any further advice would be very
welcome:


Here is all the info I can think of:

cyradm version request:
mail.somecompany.dk> version
name       : Cyrus IMAPD
version    : v2.2.12-Invoca-RPM-2.2.12-9.RHEL4 2005/02/14 16:43:51
vendor     : Project Cyrus
support-url: http://asg.web.cmu.edu/cyrus
os         : Linux
os-version : 2.6.9-78.0.5.ELsmp
environment: Built w/Cyrus SASL 2.1.19
             Running w/Cyrus SASL 2.1.19
             Built w/Sleepycat Software: Berkeley DB 4.2.52: (July 14, 2007)
             Running w/Sleepycat Software: Berkeley DB 4.2.52: (July 14, 2007)
             Built w/OpenSSL 0.9.7a Feb 19 2003
             Running w/OpenSSL 0.9.7a Feb 19 2003
             CMU Sieve 2.2
             TCP Wrappers
             mmap = shared
             lock = fcntl
             nonblock = fcntl
             auth = unix
             idle = poll


/var/log/messages gets this every time a user tries to connect:
mail kernel: imapd[13804]: segfault at 0000000000000000 rip
00000030d36705f2 rsp 0000007fbfffcc88 error 4



/var/log/maillog
Nov  3 21:34:05 mail imap[14118]: accepted connection
Nov  3 21:34:05 mail master[14144]: about to exec /usr/lib64/cyrus-imapd/imapd
Nov  3 21:34:05 mail imap[14144]: executed
Nov  3 21:34:05 mail imap[14118]: login: svs.somecompany.dk
[192.168.1.20] svs plaintext User logged in
Nov  3 21:34:05 mail master[31849]: process 14118 exited, signaled to
death by 11
Nov  3 21:34:05 mail master[31849]: service imap pid 14118 in BUSY
state: terminated abnormally



strace for imapd process having the segfault, using strace -ff -p
<pid> on the cyrus-master pid:
close(6)         = 0
setuid(76)                      = 0
dup2(16, 3)   = 3
dup2(14, 4) = 4
fcntl(3, F_GETFD)                               = 0
fcntl(3, F_SETFD, 0)         = 0
fcntl(4, F_GETFD)                      = 0
fcntl(3, F_SETFD, 0)   = 0
close(11) = 0
close(12)                               = 0
close(13)    = 0
close(17)                             = 0
close(18) = 0
close(19) = 0
close(23) = 0
close(24) = 0
close(25) = 0
close(29) = 0
close(30) = 0
close(31) = 0
close(35) = 0
close(36) = 0
close(37) = 0
close(41) = 0
close(42) = 0
close(43) = 0
close(14) = 0
close(15) = 0
close(16) = 0
close(20) = 0
close(21) = 0
close(22) = 0
close(26) = 0
close(27) = 0
close(28) = 0
close(32) = 0
close(33) = 0
close(34) = 0
close(38) = 0
close(39) = 0
close(40) = 0
setrlimit(RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=766, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=766, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=766, ...}) = 0
sendto(5, "<23>Nov  3 20:14:39 master[2634]"..., 76, MSG_NOSIGNAL, NULL, 0) = 76
execve("/usr/lib64/cyrus-imapd/imapd", ["imapd"...], [/* 8 vars */])      = 0
uname({sys="Linux", node="mail.somecompany.dk", ...}) = 0
brk(0)                               = 0x6f1000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0)                                = 0x2a95556000
access("/etc/ld.so.preload", R_OK)                               = -1
ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY) = 5
fstat(5, {st_mode=S_IFREG|0644, st_size=28401, ...}) = 0
mmap(NULL, 28401, PROT_READ, MAP_PRIVATE, 5, 0)
       = 0x2a95557000
close(5)                                = 0
open("/usr/lib64/libsasl2.so.2", O_RDONLY)                               = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360D\260\3230\0\0\0"...,
832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=97424, ...}) = 0
mmap(0x30d3b00000, 1141936, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0)           = 0x30d3b00000
mprotect(0x30d3b16000, 1051824, PROT_NONE)                         = 0
mmap(0x30d3c16000, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x16000) = 0x30d3c16000
close(5)                             = 0
open("/lib64/libssl.so.4", O_RDONLY) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260\343@\3250\0\0\0"...,
832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=244288, ...}) = 0
mmap(0x30d5400000, 1291880, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0)              = 0x30d5400000
mprotect(0x30d5436000, 1070696, PROT_NONE) = 0
mmap(0x30d5536000, 20480, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x36000)
        = 0x30d5536000
mmap(0x30d553b000, 1640, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x30d553b000
close(5)                               = 0
open("/lib64/libcrypto.so.4", O_RDONLY) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220\311\324\3240\0\0\0"...,
832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=1234328, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0)                              = 0x2a9555e000
mmap(0x30d4d00000, 2295992, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0)                               =
0x30d4d00000
mprotect(0x30d4e0f000, 1185976, PROT_NONE)              = 0
mmap(0x30d4f0f000, 122880, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x10f000) = 0x30d4f0f000
mmap(0x30d4f2d000, 14520, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0)
 = 0x30d4f2d000
close(5) = 0
open("/lib64/tls/libdb-4.2.so", O_RDONLY)                              = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\0\302\3250\0\0\0"...,
832) = 832
lseek(5, 826144, SEEK_SET)              = 826144
read(5, "\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\4\0\0\0\24\0\0\0",
32) = 32
fstat(5, {st_mode=S_IFREG|0755, st_size=912488, ...}) = 0
mmap(0x30d5c00000, 1957656, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x30d5c00000
mprotect(0x30d5cdb000, 1060632, PROT_NONE)                              = 0
mmap(0x30d5dda000, 16384, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xda000)
        = 0x30d5dda000
close(5)              = 0
open("/lib64/libcom_err.so.2", O_RDONLY) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\fp\3240\0\0\0"...,
832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=10384, ...}) = 0
mmap(0x30d4700000, 1055000, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0)                               =
0x30d4700000
mprotect(0x30d4702000, 1046808, PROT_NONE) = 0
mmap(0x30d4801000, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x1000)
     = 0x30d4801000
close(5) = 0
open("/usr/lib64/libwrap.so.0", O_RDONLY)                              = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240/`\3260\0\0\0"...,
832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=35880, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a9555f000
mmap(0x30d6600000, 1082592, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0)   = 0x30d6600000
mprotect(0x30d6608000, 1049824, PROT_NONE) = 0
mmap(0x30d6707000, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x7000)
     = 0x30d6707000
mmap(0x30d6708000, 1248, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x30d6708000
close(5)                              = 0
open("/lib64/libnsl.so.1", O_RDONLY)                               = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`MP\3240\0\0\0"...,
832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=115016, ...}) = 0
mmap(0x30d4500000, 1145936, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0)                               =
0x30d4500000
mprotect(0x30d4515000, 1059920, PROT_NONE)                         = 0
mmap(0x30d4614000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x14000)
         = 0x30d4614000
mmap(0x30d4616000, 7248, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0)  = 0x30d4616000
close(5) = 0
open("/lib64/tls/libc.so.6", O_RDONLY)                              = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260\304a\3230\0\0\0"...,
832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=1636504, ...}) = 0
mmap(0x30d3600000, 2326568, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x30d3600000
mprotect(0x30d372f000, 1085480, PROT_NONE) = 0
mmap(0x30d382f000, 20480, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x12f000) = 0x30d382f000
mmap(0x30d3834000, 16424, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x30d3834000
close(5) = 0
open("/lib64/libdl.so.2", O_RDONLY) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\17\220\3230\0\0\0"...,
832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=19816, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a95560000
mmap(0x30d3900000, 1056968, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x30d3900000
mprotect(0x30d3902000, 1048776, PROT_NONE) = 0
mmap(0x30d3a01000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x1000) = 0x30d3a01000
close(5) = 0
open("/lib64/libresolv.so.2", O_RDONLY) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\24060\3240\0\0\0"...,
832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=93568, ...}) = 0
mmap(0x30d4300000, 1133256, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x30d4300000
mprotect(0x30d4311000, 1063624, PROT_NONE) = 0
mmap(0x30d4411000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x11000) = 0x30d4411000
mmap(0x30d4413000, 6856, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x30d4413000
close(5) = 0
open("/lib64/libcrypt.so.1", O_RDONLY) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360\v\360\3230\0\0\0"...,
832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=45488, ...}) = 0
mmap(0x30d3f00000, 1270208, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x30d3f00000
mprotect(0x30d3f08000, 1237440, PROT_NONE) = 0
mmap(0x30d4007000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x7000) = 0x30d4007000
mmap(0x30d4009000, 184768, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x30d4009000
close(5) = 0
open("/usr/lib64/libgssapi_krb5.so.2", O_RDONLY) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340i\0\3250\0\0\0"...,
832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=93832, ...}) = 0
mmap(0x30d5000000, 1138224, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x30d5000000
mprotect(0x30d5015000, 1052208, PROT_NONE) = 0
mmap(0x30d5115000, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x15000) = 0x30d5115000
close(5) = 0
open("/usr/lib64/libkrb5.so.3", O_RDONLY) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340m!\3250\0\0\0"...,
832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=464040, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a95561000
mmap(0x30d5200000, 1509024, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x30d5200000
mprotect(0x30d526d000, 1062560, PROT_NONE) = 0
mmap(0x30d536d000, 16384, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x6d000) = 0x30d536d000
close(5) = 0
open("/usr/lib64/libk5crypto.so.3", O_RDONLY) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 at Q\260\3240\0\0\0"...,
832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=145456, ...}) = 0
mmap(0x30d4b00000, 1191432, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x30d4b00000
mprotect(0x30d4b22000, 1052168, PROT_NONE) = 0
mmap(0x30d4c21000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x21000) = 0x30d4c21000
close(5) = 0
open("/usr/lib64/libz.so.1", O_RDONLY) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0
\37\320\3230\0\0\0"..., 832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=79336, ...}) = 0
mmap(0x30d3d00000, 1123752, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x30d3d00000
mprotect(0x30d3d13000, 1045928, PROT_NONE) = 0
mmap(0x30d3e12000, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x12000) = 0x30d3e12000
close(5) = 0
open("/lib64/tls/libpthread.so.0", O_RDONLY) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0
V\220\3240\0\0\0"..., 832) = 832
fstat(5, {st_mode=S_IFREG|0755, st_size=130112, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a95562000
mmap(0x30d4900000, 1131384, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x30d4900000
mprotect(0x30d4910000, 1065848, PROT_NONE) = 0
mmap(0x30d4a0f000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xf000) = 0x30d4a0f000
mmap(0x30d4a11000, 13176, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x30d4a11000
close(5) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a95563000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a95564000
mprotect(0x30d4614000, 4096, PROT_READ) = 0
mprotect(0x30d382f000, 12288, PROT_READ) = 0
mprotect(0x30d3a01000, 4096, PROT_READ) = 0
mprotect(0x30d4411000, 4096, PROT_READ) = 0
mprotect(0x30d4007000, 4096, PROT_READ) = 0
mprotect(0x30d4a0f000, 4096, PROT_READ) = 0
mprotect(0x30d3514000, 4096, PROT_READ) = 0
arch_prctl(ARCH_SET_FS, 0x2a95563b40) = 0
munmap(0x2a95557000, 28401) = 0
set_tid_address(0x2a95563bd0) = 2634
rt_sigaction(SIGRTMIN, {0x30d4905190, [], SA_RESTORER|SA_SIGINFO,
0x30d490c5b0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0x30d4905210, [],
SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x30d490c5b0}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
getrlimit(RLIMIT_STACK, {rlim_cur=10240*1024, rlim_max=RLIM_INFINITY}) = 0
_sysctl({{CTL_KERN, KERN_VERSION}, 2, 0x7fbffffa90, 34, (nil), 0}) = 0
brk(0) = 0x6f1000
brk(0x712000)                               = 0x712000
open("/etc/imapd.conf", O_RDONLY)                      = 5
fstat(5, {st_mode=S_IFREG|0644, st_size=379, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0)                             = 0x2a95557000
read(5, "configdirectory: /var/imap\nparti"..., 4096) = 379
read(5, "", 4096) = 0
close(5) = 0
munmap(0x2a95557000, 4096) = 0
umask(077)            = 022
open("/etc/mtab", O_RDONLY) = 5
fstat(5, {st_mode=S_IFREG|0644, st_size=305, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a95557000
read(5, "/dev/sda3 / ext3 rw 0 0\nnone /pr"..., 4096) = 305
close(5)                              = 0
munmap(0x2a95557000, 4096)                              = 0
open("/proc/stat", O_RDONLY)                               = 5
fstat(5, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0)            = 0x2a95557000
read(5, "cpu  18958 6703 15569 400999 286"..., 1024) = 708
read(5, "", 1024)                     = 0
close(5) = 0
munmap(0x2a95557000, 4096)                              = 0
stat("/var/imap/db/DB_CONFIG", 0x7fbfffdbf0)                   = -1
ENOENT (No such file or directory)
open("/var/imap/db/DB_CONFIG", O_RDONLY)              = -1 ENOENT (No
such file or directory)
stat("/var/tmp", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=4096, ...}) = 0
stat("/var/imap/db/__db.001", {st_mode=S_IFREG|0600, st_size=16384, ...}) = 0
open("/var/imap/db/__db.001", O_RDWR)                = 5
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
fstat(5, {st_mode=S_IFREG|0600, st_size=16384, ...}) = 0
close(5)                                = 0
open("/var/imap/db/__db.001", O_RDWR)   = 5
fcntl(5, F_SETFD, FD_CLOEXEC)           = 0
mmap(NULL, 16384, PROT_READ|PROT_WRITE, MAP_SHARED, 5, 0) = 0x2a95557000
close(5)                                = 0
stat("/var/imap/db/__db.002", {st_mode=S_IFREG|0600, st_size=663552, ...}) = 0
open("/var/imap/db/__db.002", O_RDWR)   = 5
fcntl(5, F_SETFD, FD_CLOEXEC)           = 0
mmap(NULL, 663552, PROT_READ|PROT_WRITE, MAP_SHARED, 5, 0) = 0x2a95565000
close(5)                                = 0
stat("/var/imap/db/__db.003", {st_mode=S_IFREG|0600, st_size=98304, ...}) = 0
open("/var/imap/db/__db.003", O_RDWR)   = 5
fcntl(5, F_SETFD, FD_CLOEXEC)           = 0
mmap(NULL, 98304, PROT_READ|PROT_WRITE, MAP_SHARED, 5, 0) = 0x2a95607000
close(5)                                = 0
stat("/var/imap/db/__db.004", {st_mode=S_IFREG|0600, st_size=33628160, ...}) = 0
open("/var/imap/db/__db.004", O_RDWR)   = 5
fcntl(5, F_SETFD, FD_CLOEXEC)           = 0
mmap(NULL, 33628160, PROT_READ|PROT_WRITE, MAP_SHARED, 5, 0) = 0x2a9561f000
close(5)                                = 0
stat("/var/imap/db/__db.005", {st_mode=S_IFREG|0600, st_size=32768, ...}) = 0
open("/var/imap/db/__db.005", O_RDWR)   = 5
fcntl(5, F_SETFD, FD_CLOEXEC)           = 0
mmap(NULL, 32768, PROT_READ|PROT_WRITE, MAP_SHARED, 5, 0) = 0x2a97631000
close(5)                                = 0
open("/var/imap/db/skipstamp", O_RDONLY) = 5
read(5, "I\17L+", 4)                    = 4
close(5)                                = 0
open("/etc/localtime", O_RDONLY)        = 5
fstat(5, {st_mode=S_IFREG|0644, st_size=766, ...}) = 0
fstat(5, {st_mode=S_IFREG|0644, st_size=766, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97639000
read(5, "TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\6\0\0\0\6\0\0\0\0"...,
4096) = 766
close(5)                                = 0
munmap(0x2a97639000, 4096)              = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=766, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=766, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=766, ...}) = 0
socket(PF_FILE, SOCK_DGRAM, 0)          = 5
fcntl(5, F_SETFD, FD_CLOEXEC)           = 0
connect(5, {sa_family=AF_FILE, path="/dev/log"}, 16) = 0
sendto(5, "<23>Nov  3 20:14:39 imap[2634]: "..., 40, MSG_NOSIGNAL, NULL, 0) = 40
fcntl(4, F_GETFD)                       = 0
fcntl(4, F_SETFD, FD_CLOEXEC)           = 0
fcntl(3, F_GETFD)           = 0
fcntl(3, F_SETFD, FD_CLOEXEC)                      = 0
getsockopt(4, SOL_SOCKET, SO_TYPE, [17179869185], [4]) = 0
geteuid()                             = 76
rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_DFL}, 8) = 0
getuid()                                = 76
geteuid() = 76
getgid() = 12
getegid()                               = 12
open("/usr/lib64/sasl2", O_RDONLY|O_NONBLOCK|O_DIRECTORY)            = 6
fstat(6, {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
fcntl(6, F_SETFD, FD_CLOEXEC) = 0
getdents64(6, /* 27 entries */, 4096)       = 1008
open("/usr/lib64/sasl2/libanonymous.la", O_RDONLY) = 11
fstat(11, {st_mode=S_IFREG|0755, st_size=903, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0)                              = 0x2a97639000
read(11, "# libanonymous.la - a libtool li"..., 4096) = 903
close(11)                               = 0
munmap(0x2a97639000, 4096)              = 0
futex(0x30d3a020c4, FUTEX_WAKE, 2147483647)            = 0
open("/usr/lib64/sasl2/libanonymous.so.2", O_RDONLY) = 11
read(11, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\20\0\0\0\0\0\0"...,
832) = 832
fstat(11, {st_mode=S_IFREG|0755, st_size=15992, ...}) = 0
mmap(NULL, 1062736, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE,
11, 0)                  = 0x2a97639000
mprotect(0x2a9763d000, 1046352, PROT_NONE)                              = 0
mmap(0x2a9773c000, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 11, 0x3000) = 0x2a9773c000
close(11) = 0
open("/usr/lib64/sasl2/libsasldb.la", O_RDONLY) = 11
close(11)                              = 0
open("/usr/lib64/sasl2/libanonymous.la", O_RDONLY) = 11
close(11) = 0
open("/usr/lib64/sasl2/libsasldb.la", O_RDONLY) = 11
fstat(11, {st_mode=S_IFREG|0755, st_size=948, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0)      = 0x2a9773d000
read(11, "# libsasldb.la - a libtool libra"..., 4096) = 948
close(11)   = 0
munmap(0x2a9773d000, 4096)              = 0
open("/usr/lib64/sasl2/libsasldb.so.2", O_RDONLY) = 11
read(11, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220\305\1\0\0\0\0\0"...,
832) = 832
fstat(11, {st_mode=S_IFREG|0755, st_size=827752, ...}) = 0
mmap(NULL, 1874512, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE,
11, 0) = 0x2a9773d000
mprotect(0x2a97804000, 1059408, PROT_NONE) = 0
mmap(0x2a97904000, 12288, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 11, 0xc7000) = 0x2a97904000
close(11)                               = 0
open("/usr/lib64/sasl2/libcrammd5.la", O_RDONLY)
        = 11
fstat(11, {st_mode=S_IFREG|0755, st_size=891, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0)          = 0x2a97907000
read(11, "# libcrammd5.la - a libtool libr"..., 4096) = 891
close(11)                = 0
munmap(0x2a97907000, 4096)                = 0
open("/usr/lib64/sasl2/libcrammd5.so.2", O_RDONLY) = 11
read(11, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\21\0\0\0\0\0\0"...,
832) = 832
fstat(11, {st_mode=S_IFREG|0755, st_size=19216, ...}) = 0
mmap(NULL, 1065968, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE,
11, 0)                             = 0x2a97907000
mprotect(0x2a9790b000, 1049584, PROT_NONE)                               = 0
mmap(0x2a97a0b000, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 11, 0x4000)          =
0x2a97a0b000
close(11)                        = 0
open("/usr/lib64/sasl2/libdigestmd5.la", O_RDONLY) = 11
fstat(11, {st_mode=S_IFREG|0755, st_size=912, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97a0c000
read(11, "# libdigestmd5.la - a libtool li"..., 4096) = 912
close(11) = 0
munmap(0x2a97a0c000, 4096) = 0
open("/usr/lib64/sasl2/libdigestmd5.so.2", O_RDONLY) = 11
read(11, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\33\0\0\0\0\0\0"...,
832) = 832
fstat(11, {st_mode=S_IFREG|0755, st_size=46552, ...}) = 0
mmap(NULL, 1093312, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE,
11, 0) = 0x2a97a0c000
mprotect(0x2a97a17000, 1048256, PROT_NONE) = 0
mmap(0x2a97b16000, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 11, 0xa000) = 0x2a97b16000
close(11) = 0
open("/usr/lib64/sasl2/liblogin.la", O_RDONLY) = 11
close(11) = 0
open("/usr/lib64/sasl2/libcrammd5.la", O_RDONLY) = 11
close(11) = 0
open("/usr/lib64/sasl2/liblogin.la", O_RDONLY) = 11
fstat(11, {st_mode=S_IFREG|0755, st_size=879, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0)             = 0x2a97b17000
read(11, "# liblogin.la - a libtool librar"..., 4096) = 879
close(11)                             = 0
munmap(0x2a97b17000, 4096) = 0
open("/usr/lib64/sasl2/liblogin.so.2", O_RDONLY)
       = 11
read(11, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\20\0\0\0\0\0\0"...,
832) = 832
fstat(11, {st_mode=S_IFREG|0755, st_size=16528, ...}) = 0
mmap(NULL, 1063280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE,
11, 0)              = 0x2a97b17000
mprotect(0x2a97b1b000, 1046896, PROT_NONE)                                 = 0
mmap(0x2a97c1a000, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 11, 0x3000)        = 0x2a97c1a000
close(11)                             = 0
open("/usr/lib64/sasl2/libplain.la", O_RDONLY)                              = 11
close(11)                              = 0
open("/usr/lib64/sasl2/libplain.la", O_RDONLY)
      = 11
fstat(11, {st_mode=S_IFREG|0755, st_size=879, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97c1b000
read(11, "# libplain.la - a libtool librar"..., 4096) = 879
close(11)                      = 0
munmap(0x2a97c1b000, 4096)          = 0
open("/usr/lib64/sasl2/libplain.so.2", O_RDONLY)
      = 11
read(11, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\20\0\0\0\0\0\0"...,
832) = 832
fstat(11, {st_mode=S_IFREG|0755, st_size=16560, ...}) = 0
mmap(NULL, 1063312, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE,
11, 0)                              = 0x2a97c1b000
mprotect(0x2a97c1f000, 1046928, PROT_NONE)                               = 0
mmap(0x2a97d1e000, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 11, 0x3000)              =
0x2a97d1e000
close(11)      = 0
open("/usr/lib64/sasl2/libdigestmd5.la", O_RDONLY) = 11
close(11)                               = 0
getdents64(6, /* 0 entries */, 4096) = 0
close(6)                              = 0
getuid()                             = 76
geteuid() = 76
getgid() = 12
getegid() = 12
open("/usr/lib64/sasl2/Cyrus.conf", O_RDONLY)
     = -1 ENOENT (No such file or directory)
getuid() = 76
geteuid()             = 76
getgid() = 12
getegid() = 12
open("/usr/lib64/sasl2", O_RDONLY|O_NONBLOCK|O_DIRECTORY)                = 6
fstat(6, {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
fcntl(6, F_SETFD, FD_CLOEXEC)                = 0
getdents64(6, /* 27 entries */, 4096) = 1008
open("/usr/lib64/sasl2/libanonymous.la", O_RDONLY) = 11
fstat(11, {st_mode=S_IFREG|0755, st_size=903, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97d1f000
read(11, "# libanonymous.la - a libtool li"..., 4096) = 903
close(11) = 0
munmap(0x2a97d1f000, 4096) = 0
open("/usr/lib64/sasl2/libsasldb.la", O_RDONLY) = 11
close(11) = 0
open("/usr/lib64/sasl2/libanonymous.la", O_RDONLY) = 11
close(11) = 0
open("/usr/lib64/sasl2/libsasldb.la", O_RDONLY) = 11
fstat(11, {st_mode=S_IFREG|0755, st_size=948, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97d1f000
read(11, "# libsasldb.la - a libtool libra"..., 4096) = 948
close(11) = 0
munmap(0x2a97d1f000, 4096) = 0
open("/usr/lib64/sasl2/libcrammd5.la", O_RDONLY) = 11
fstat(11, {st_mode=S_IFREG|0755, st_size=891, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97d1f000
read(11, "# libcrammd5.la - a libtool libr"..., 4096) = 891
close(11) = 0
munmap(0x2a97d1f000, 4096) = 0
open("/usr/lib64/sasl2/libdigestmd5.la", O_RDONLY) = 11
fstat(11, {st_mode=S_IFREG|0755, st_size=912, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97d1f000
read(11, "# libdigestmd5.la - a libtool li"..., 4096) = 912
close(11) = 0
munmap(0x2a97d1f000, 4096) = 0
open("/usr/lib64/sasl2/liblogin.la", O_RDONLY) = 11
close(11) = 0
open("/usr/lib64/sasl2/libcrammd5.la", O_RDONLY) = 11
close(11) = 0
open("/usr/lib64/sasl2/liblogin.la", O_RDONLY) = 11
fstat(11, {st_mode=S_IFREG|0755, st_size=879, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97d1f000
read(11, "# liblogin.la - a libtool librar"..., 4096) = 879
close(11) = 0
munmap(0x2a97d1f000, 4096) = 0
open("/usr/lib64/sasl2/libplain.la", O_RDONLY) = 11
close(11) = 0
open("/usr/lib64/sasl2/libplain.la", O_RDONLY) = 11
fstat(11, {st_mode=S_IFREG|0755, st_size=879, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97d1f000
read(11, "# libplain.la - a libtool librar"..., 4096) = 879
close(11) = 0
munmap(0x2a97d1f000, 4096) = 0
open("/usr/lib64/sasl2/libdigestmd5.la", O_RDONLY) = 11
close(11) = 0
getdents64(6, /* 0 entries */, 4096) = 0
close(6) = 0
open("/var/imap/mailboxes.db", O_RDWR) = 6
fcntl(6, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) = 0
fstat(6, {st_mode=S_IFREG|0600, st_size=113472, ...}) = 0
stat("/var/imap/mailboxes.db", {st_mode=S_IFREG|0600, st_size=113472, ...}) = 0
mmap(NULL, 122880, PROT_READ, MAP_SHARED, 6, 0) = 0x2a97d1f000
fcntl(6, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0
stat("/var/imap", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0
open("/var/imap/annotations.db", O_RDWR) = 11
fcntl(11, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) = 0
fstat(11, {st_mode=S_IFREG|0600, st_size=144, ...}) = 0
stat("/var/imap/annotations.db", {st_mode=S_IFREG|0600, st_size=144, ...}) = 0
mmap(NULL, 16384, PROT_READ, MAP_SHARED, 11, 0) = 0x2a97d3d000
fcntl(11, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0
stat("/usr/lib64/cyrus-imapd/imapd", {st_mode=S_IFREG|0755,
st_size=988672, ...}) = 0
open("/var/imap/socket/imap-1.lock", O_RDWR|O_CREAT, 0600) = 12
rt_sigaction(SIGALRM, {0x43b6e0, [], SA_RESTORER|SA_ONESHOT,
0x30d362e300}, NULL, 8) = 0
rt_sigaction(SIGHUP, {0x43b6e0, [], SA_RESTORER|SA_RESTART|SA_ONESHOT,
0x30d362e300}, NULL, 8) = 0
rt_sigaction(SIGINT, {0x43b6e0, [], SA_RESTORER|SA_RESTART|SA_ONESHOT,
0x30d362e300}, NULL, 8) = 0
rt_sigaction(SIGQUIT, {0x43b6e0, [],
SA_RESTORER|SA_RESTART|SA_ONESHOT, 0x30d362e300}, NULL, 8) = 0
fcntl(12, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=0, len=0}) = 0
stat("/usr/lib64/cyrus-imapd/imapd", {st_mode=S_IFREG|0755,
st_size=988672, ...}) = 0
accept(4, 0, NULL) = 13
fcntl(12, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0
alarm(0) = 0
getpeername(13, {sa_family=AF_INET, sin_port=htons(36806),
sin_addr=inet_addr("192.168.1.20")}, [16]) = 0
getpeername(13, {sa_family=AF_INET, sin_port=htons(36806),
sin_addr=inet_addr("192.168.1.20")}, [16]) = 0
getsockname(13, {sa_family=AF_INET, sin_port=htons(143),
sin_addr=inet_addr("83.95.34.26")}, [16]) = 0
open("/etc/hosts.allow", O_RDONLY) = 14
fstat(14, {st_mode=S_IFREG|0644, st_size=372, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97d41000
read(14, "#\n# hosts.allow\tThis file contai"..., 4096) = 372
read(14, "", 4096) = 0
close(14) = 0
munmap(0x2a97d41000, 4096) = 0
open("/etc/hosts.deny", O_RDONLY) = 14
fstat(14, {st_mode=S_IFREG|0644, st_size=643, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97d41000
read(14, "#\n# hosts.deny\tThis file contain"..., 4096) = 643
read(14, "", 4096) = 0
close(14)                               = 0
munmap(0x2a97d41000, 4096) = 0
write(3, "\2\0\0\0J\n\0\0", 8)                             = 8
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=766, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=766, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=766, ...}) = 0
sendto(5, "<23>Nov  3 20:14:40 imap[2634]: "..., 51, MSG_NOSIGNAL,
NULL, 0)              = 51
dup2(13, 0) = 0
dup2(13, 1)                              = 1
dup2(13, 2)                             = 2
close(13) = 0
write(3, "\3\0\0\0J\n\0\0", 8) = 8
getpeername(0, {sa_family=AF_INET, sin_port=htons(36806),
sin_addr=inet_addr("192.168.1.20")}, [16]) = 0
socket(PF_FILE, SOCK_STREAM, 0)                               = 13
fcntl(13, F_GETFL)                      = 0x2 (flags O_RDWR)
fcntl(13, F_SETFL, O_RDWR|O_NONBLOCK)   = 0
connect(13, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) =
-1 ENOENT (No such file or directory)
close(13) = 0
socket(PF_FILE, SOCK_STREAM, 0) = 13
fcntl(13, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(13, F_SETFL, O_RDWR|O_NONBLOCK) = 0
connect(13, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) =
-1 ENOENT (No such file or directory)
close(13) = 0
open("/etc/nsswitch.conf", O_RDONLY) = 13
fstat(13, {st_mode=S_IFREG|0644, st_size=1623, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97d41000
read(13, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 4096) = 1623
read(13, "", 4096) = 0
close(13) = 0
munmap(0x2a97d41000, 4096) = 0
open("/etc/ld.so.cache", O_RDONLY) = 13
fstat(13, {st_mode=S_IFREG|0644, st_size=28401, ...}) = 0
mmap(NULL, 28401, PROT_READ, MAP_PRIVATE, 13, 0) = 0x2a97d41000
close(13) = 0
open("/lib64/libnss_files.so.2", O_RDONLY)                               = 13
read(13, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220\"\0\0\0\0\0\0"...,
832) = 832
fstat(13, {st_mode=S_IFREG|0755, st_size=58888, ...}) = 0
mmap(NULL, 1094952, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE,
13, 0)                               = 0x2a97d48000
mprotect(0x2a97d52000, 1053992, PROT_NONE)                               = 0
mmap(0x2a97e52000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 13, 0xa000)
        = 0x2a97e52000
close(13)                               = 0
mprotect(0x2a97e52000, 4096, PROT_READ)                               = 0
munmap(0x2a97d41000, 28401)                               = 0
open("/etc/resolv.conf", O_RDONLY)                               = 13
fstat(13, {st_mode=S_IFREG|0644, st_size=48, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0)                               = 0x2a97d41000
read(13, "nameserver 192.168.1.52\nnameserv"..., 4096) = 48
read(13, "", 4096)                       = 0
close(13)                               = 0
munmap(0x2a97d41000, 4096)              = 0
uname({sys="Linux", node="mail.somecompany.dk", ...}) = 0
open("/etc/host.conf", O_RDONLY) = 13
fstat(13, {st_mode=S_IFREG|0644, st_size=17, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97d41000
read(13, "order hosts,bind\n", 4096) = 17
read(13, "", 4096) = 0
close(13) = 0
munmap(0x2a97d41000, 4096) = 0
futex(0x30d3836aa0, FUTEX_WAKE, 2147483647) = 0
open("/etc/hosts", O_RDONLY) = 13
fcntl(13, F_GETFD) = 0
fcntl(13, F_SETFD, FD_CLOEXEC) = 0
fstat(13, {st_mode=S_IFREG|0644, st_size=167, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97d41000
read(13, "# Do not remove the following li"..., 4096) = 167
read(13, "", 4096) = 0
close(13) = 0
munmap(0x2a97d41000, 4096)              = 0
open("/etc/ld.so.cache", O_RDONLY)                               = 13
fstat(13, {st_mode=S_IFREG|0644, st_size=28401, ...}) = 0
mmap(NULL, 28401, PROT_READ, MAP_PRIVATE, 13, 0) = 0x2a97d41000
close(13) = 0
open("/lib64/libnss_dns.so.2", O_RDONLY) = 13
read(13, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\22\0\0\0\0\0\0"...,
832) = 832
fstat(13, {st_mode=S_IFREG|0755, st_size=24640, ...}) = 0
mmap(NULL, 1065224, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE,
13, 0) = 0x2a97e54000
mprotect(0x2a97e58000, 1048840, PROT_NONE) = 0
mmap(0x2a97f57000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 13, 0x3000) = 0x2a97f57000
close(13)                               = 0
mprotect(0x2a97f57000, 4096, PROT_READ) = 0
munmap(0x2a97d41000, 28401)             = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 13
connect(13, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("192.168.1.52")}, 28) = 0
fcntl(13, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(13, F_SETFL, O_RDWR|O_NONBLOCK) = 0
poll([{fd=13, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1
sendto(13, "\10K\1\0\0\1\0\0\0\0\0\0\00220\0011\003168\003192\7in-add"...,
43, MSG_NOSIGNAL, NULL, 0) = 43
poll([{fd=13, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
ioctl(13, FIONREAD, [107])                      = 0
recvfrom(13, "\10K\205\200\0\1\0\1\0\1\0\1\00220\0011\003168\003192\7in-add"...,
1024, 0, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("192.168.1.52")}, [16]) = 107
close(13)                              = 0
getsockname(0, {sa_family=AF_INET, sin_port=htons(143),
sin_addr=inet_addr("83.95.34.26")}, [3328785957196398608]) = 0
open("/var/imap/proc/2634", O_RDWR|O_CREAT|O_TRUNC, 0666)              = 13
fstat(13, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0)                             = 0x2a97d41000
lseek(13, 0, SEEK_SET) = 0
write(13, "svs.somecompany.dk [192.168.1.20]\n", 29)
           = 29
lseek(13, 0, SEEK_CUR)                               = 29
ftruncate(13, 29)              = 0
open("/var/imap/msg/motd", O_RDONLY) = -1 ENOENT (No such file or directory)
select(1, [0], NULL, NULL, {0, 0})                               = 0 (Timeout)
write(1, "* OK mail.somecompany.dk Cyrus IMAP4 "..., 80) = 80
select(1, [0], NULL, NULL, {1800, 0})                               =
1 (in [0], left {1799, 999000})
read(0, "1 capability\r\n", 4096) = 14
select(1, [0], NULL, NULL, {0, 0}) = 0 (Timeout)
write(1, "* CAPABILITY IMAP4 IMAP4rev1 ACL"..., 265)
            = 265
select(1, [0], NULL, NULL, {1800, 0})     = 1 (in [0], left {1799, 997000})
read(0, "2 login \"svs\" \"xxxxxxxx\"\r\n", 4096) = 26
open("/etc/mtab", O_RDONLY) = 14
fstat(14, {st_mode=S_IFREG|0644, st_size=305, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97d42000
read(14, "/dev/sda3 / ext3 rw 0 0\nnone /pr"..., 4096) = 305
close(14)                                = 0
munmap(0x2a97d42000, 4096) = 0
open("/proc/stat", O_RDONLY)                               = 14
fstat(14, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97d42000
read(14, "cpu  18965 6703 15585 401045 286"..., 1024) = 708
read(14, "", 1024) = 0
close(14)                                = 0
munmap(0x2a97d42000, 4096)  = 0
stat("/etc/sasldb2", {st_mode=S_IFREG|0640, st_size=12288, ...}) = 0
open("/etc/sasldb2", O_RDONLY) = 14
fcntl(14, F_SETFD, FD_CLOEXEC) = 0
read(14, "\0\0\0\0\0\0\0\0\0\0\0\0a\25\6\0\7\0\0\0\0\20\0\0\0\10\0\0\0\0\0\0"...,
512) = 512
close(14) = 0
stat("DB_CONFIG", 0x7fbfffaaa0) = -1 ENOENT (No such file or directory)
open("DB_CONFIG", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/var/tmp", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=4096, ...}) = 0
stat("__db.002", 0x7fbfffab40)                  = -1 ENOENT (No such
file or directory)
mmap(NULL, 274432, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS,
-1, 0) = 0x2a97f59000
open("/etc/sasldb2", O_RDONLY) = 14
fcntl(14, F_SETFD, FD_CLOEXEC) = 0
fstat(14, {st_mode=S_IFREG|0640, st_size=12288, ...}) = 0
pread(14, "\0\0\0\0\0\0\0\0\0\0\0\0a\25\6\0\7\0\0\0\0\20\0\0\0\10\0\0\0\0\0\0"...,
4096, 0) = 4096
pread(14, "\0\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0L\0\240\t\0\2\336\17\331\17\270\17"...,
4096, 4096) = 4096
close(14) = 0
munmap(0x2a97f59000, 274432) = 0
open("/etc/mtab", O_RDONLY) = 14
fstat(14, {st_mode=S_IFREG|0644, st_size=305, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97f59000
read(14, "/dev/sda3 / ext3 rw 0 0\nnone /pr"..., 4096) = 305
close(14) = 0
munmap(0x2a97f59000, 4096) = 0
open("/proc/stat", O_RDONLY) = 14
fstat(14, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97f59000
read(14, "cpu  18965 6703 15586 401045 286"..., 1024) = 708
read(14, "", 1024)                       = 0
close(14)                              = 0
munmap(0x2a97f59000, 4096) = 0
stat("/etc/sasldb2", {st_mode=S_IFREG|0640, st_size=12288, ...}) = 0
open("/etc/sasldb2", O_RDONLY) = 14
fcntl(14, F_SETFD, FD_CLOEXEC)                                = 0
read(14, "\0\0\0\0\0\0\0\0\0\0\0\0a\25\6\0\7\0\0\0\0\20\0\0\0\10\0\0\0\0\0\0"...,
512) = 512
close(14)                               = 0
stat("DB_CONFIG", 0x7fbfffaaa0)                  = -1 ENOENT (No such
file or directory)
open("DB_CONFIG", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/var/tmp", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=4096, ...}) = 0
stat("__db.002", 0x7fbfffab40) = -1 ENOENT (No such file or directory)
mmap(NULL, 274432, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS,
-1, 0) = 0x2a97f59000
open("/etc/sasldb2", O_RDONLY) = 14
fcntl(14, F_SETFD, FD_CLOEXEC)                                = 0
fstat(14, {st_mode=S_IFREG|0640, st_size=12288, ...}) = 0
pread(14, "\0\0\0\0\0\0\0\0\0\0\0\0a\25\6\0\7\0\0\0\0\20\0\0\0\10\0\0\0\0\0\0"...,
4096, 0) = 4096
pread(14, "\0\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0L\0\240\t\0\2\336\17\331\17\270\17"...,
4096, 4096) = 4096
close(14) = 0
munmap(0x2a97f59000, 274432) = 0
socket(PF_FILE, SOCK_STREAM, 0) = 14
fcntl(14, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(14, F_SETFL, O_RDWR|O_NONBLOCK) = 0
connect(14, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) =
-1 ENOENT (No such file or directory)
close(14) = 0
socket(PF_FILE, SOCK_STREAM, 0) = 14
fcntl(14, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(14, F_SETFL, O_RDWR|O_NONBLOCK) = 0
connect(14, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) =
-1 ENOENT (No such file or directory)
close(14) = 0
open("/etc/passwd", O_RDONLY) = 14
fcntl(14, F_GETFD) = 0
fcntl(14, F_SETFD, FD_CLOEXEC) = 0
fstat(14, {st_mode=S_IFREG|0644, st_size=1676, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97f59000
read(14, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1676
read(14, "", 4096) = 0
close(14) = 0
munmap(0x2a97f59000, 4096) = 0
socket(PF_FILE, SOCK_STREAM, 0) = 14
fcntl(14, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(14, F_SETFL, O_RDWR|O_NONBLOCK) = 0
connect(14, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) =
-1 ENOENT (No such file or directory)
close(14) = 0
socket(PF_FILE, SOCK_STREAM, 0) = 14
fcntl(14, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(14, F_SETFL, O_RDWR|O_NONBLOCK) = 0
connect(14, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) =
-1 ENOENT (No such file or directory)
close(14) = 0
open("/etc/group", O_RDONLY) = 14
fcntl(14, F_GETFD)                               = 0
fcntl(14, F_SETFD, FD_CLOEXEC)                               = 0
fstat(14, {st_mode=S_IFREG|0644, st_size=699, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0)              = 0x2a97f59000
lseek(14, 0, SEEK_CUR)        = 0
read(14, "root:x:0:root\nbin:x:1:root,bin,d"..., 4096) = 699
read(14, "", 4096) = 0
close(14) = 0
munmap(0x2a97f59000, 4096) = 0
open("/etc/group", O_RDONLY) = 14
fcntl(14, F_GETFD) = 0
fcntl(14, F_SETFD, FD_CLOEXEC) = 0
fstat(14, {st_mode=S_IFREG|0644, st_size=699, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97f59000
lseek(14, 0, SEEK_CUR) = 0
read(14, "root:x:0:root\nbin:x:1:root,bin,d"..., 4096) = 699
read(14, "", 4096) = 0
close(14) = 0
munmap(0x2a97f59000, 4096) = 0
open("/etc/group", O_RDONLY) = 14
fcntl(14, F_GETFD) = 0
fcntl(14, F_SETFD, FD_CLOEXEC) = 0
fstat(14, {st_mode=S_IFREG|0644, st_size=699, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97f59000
read(14, "root:x:0:root\nbin:x:1:root,bin,d"..., 4096) = 699
close(14)         = 0
munmap(0x2a97f59000, 4096)   = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=766, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=766, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=766, ...}) = 0
sendto(5, "<21>Nov  3 20:14:40 imap[2634]: "..., 96, MSG_NOSIGNAL, NULL, 0) = 96
open("/etc/passwd", O_RDONLY) = 14
fcntl(14, F_GETFD) = 0
fcntl(14, F_SETFD, FD_CLOEXEC) = 0
fstat(14, {st_mode=S_IFREG|0644, st_size=1676, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0)      = 0x2a97f59000
read(14, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1676
read(14, "", 4096)                       = 0
close(14)                                = 0
munmap(0x2a97f59000, 4096)                               = 0
open("/etc/group", O_RDONLY) = 14
fcntl(14, F_GETFD) = 0
fcntl(14, F_SETFD, FD_CLOEXEC) = 0
fstat(14, {st_mode=S_IFREG|0644, st_size=699, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97f59000
lseek(14, 0, SEEK_CUR)                             = 0
read(14, "root:x:0:root\nbin:x:1:root,bin,d"..., 4096) = 699
read(14, "", 4096)                      = 0
close(14)                               = 0
munmap(0x2a97f59000, 4096)              = 0
open("/etc/group", O_RDONLY) = 14
fcntl(14, F_GETFD)                      = 0
fcntl(14, F_SETFD, FD_CLOEXEC) = 0
fstat(14, {st_mode=S_IFREG|0644, st_size=699, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97f59000
lseek(14, 0, SEEK_CUR) = 0
read(14, "root:x:0:root\nbin:x:1:root,bin,d"..., 4096) = 699
read(14, "", 4096) = 0
close(14)                               = 0
munmap(0x2a97f59000, 4096)              = 0
open("/etc/group", O_RDONLY)            = 14
fcntl(14, F_GETFD)                      = 0
fcntl(14, F_SETFD, FD_CLOEXEC)          = 0
fstat(14, {st_mode=S_IFREG|0644, st_size=699, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a97f59000
read(14, "root:x:0:root\nbin:x:1:root,bin,d"..., 4096) = 699
close(14) = 0
munmap(0x2a97f59000, 4096) = 0
open("/var/imap/log/svs/2634", O_WRONLY|O_CREAT|O_APPEND, 0644) = -1
ENOENT (No such file or directory)
open("/var/imap/msg/shutdown", O_RDONLY) = -1 ENOENT (No such file or directory)
select(1, [0], NULL, NULL, {0, 0}) = 0 (Timeout)
write(1, "2 OK User logged in\r\n", 21) = 21
select(1, [0], NULL, NULL, {1800, 0}) = 1 (in [0], left {1800, 0})
read(0, "3 select \"user.ecivrese-fejl\"\r\n", 4096) = 31
fcntl(6, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) = 0
fstat(6, {st_mode=S_IFREG|0600, st_size=113472, ...}) = 0
stat("/var/imap/mailboxes.db", {st_mode=S_IFREG|0600, st_size=113472, ...}) = 0
fcntl(6, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0
fcntl(6, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) = 0
fstat(6, {st_mode=S_IFREG|0600, st_size=113472, ...}) = 0
stat("/var/imap/mailboxes.db", {st_mode=S_IFREG|0600, st_size=113472, ...}) = 0
fcntl(6, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0
open("/var/spool/imap/user/ecivrese-fejl/cyrus.header", O_RDWR) = 14
fstat(14, {st_mode=S_IFREG|0600, st_size=182, ...}) = 0
mmap(NULL, 182, PROT_READ, MAP_SHARED, 14, 0) = 0x2a97f59000
--- SIGSEGV (Segmentation fault) @ 0 (0) ---

From ml at awinkelmann.de  Mon Nov  3 16:00:57 2008
From: ml at awinkelmann.de (Andreas Winkelmann)
Date: Mon, 3 Nov 2008 22:00:57 +0100
Subject: segfault after upgrade
In-Reply-To: <eacf179a0811031245v4414cce2ia985d77cfe97c3e0@mail.gmail.com>
References: <eacf179a0811031245v4414cce2ia985d77cfe97c3e0@mail.gmail.com>
Message-ID: <200811032200.57972.ml@awinkelmann.de>

Am Montag 03 November 2008 21:45:30 schrieb Steffen Vinther S?rensen:

> I recently updated a CentOS 4 installation using the CentOS package
> manager "yum". the cyrus imapd and the dbd packages was upgraded along
> with several other packages. After that there seems to be an issue
> with the Cyrus imapd "shared" mailboxes (the ones where users needs to
> subscribe in order to use)
>
> I already tried rebuilding mailboxes.db, by dumping it as text and
> restoring it, but with no luck. Any further advice would be very
> welcome:
>
> Here is all the info I can think of:
>
> cyradm version request:
> mail.somecompany.dk> version
> name       : Cyrus IMAPD
> version    : v2.2.12-Invoca-RPM-2.2.12-9.RHEL4 2005/02/14 16:43:51
> vendor     : Project Cyrus
> support-url: http://asg.web.cmu.edu/cyrus
> os         : Linux
> os-version : 2.6.9-78.0.5.ELsmp
> environment: Built w/Cyrus SASL 2.1.19
>              Running w/Cyrus SASL 2.1.19
>              Built w/Sleepycat Software: Berkeley DB 4.2.52: (July 14,
> 2007) Running w/Sleepycat Software: Berkeley DB 4.2.52: (July 14, 2007)
> Built w/OpenSSL 0.9.7a Feb 19 2003
>              Running w/OpenSSL 0.9.7a Feb 19 2003
>              CMU Sieve 2.2
>              TCP Wrappers
>              mmap = shared
>              lock = fcntl
>              nonblock = fcntl
>              auth = unix
>              idle = poll
>
>
> /var/log/messages gets this every time a user tries to connect:
> mail kernel: imapd[13804]: segfault at 0000000000000000 rip
> 00000030d36705f2 rsp 0000007fbfffcc88 error 4
>
> /var/log/maillog
> Nov  3 21:34:05 mail imap[14118]: accepted connection
> Nov  3 21:34:05 mail master[14144]: about to exec
> /usr/lib64/cyrus-imapd/imapd Nov  3 21:34:05 mail imap[14144]: executed
> Nov  3 21:34:05 mail imap[14118]: login: svs.somecompany.dk
> [192.168.1.20] svs plaintext User logged in
> Nov  3 21:34:05 mail master[31849]: process 14118 exited, signaled to
> death by 11
> Nov  3 21:34:05 mail master[31849]: service imap pid 14118 in BUSY
> state: terminated abnormally
>
> strace for imapd process having the segfault, using strace -ff -p
> <pid> on the cyrus-master pid:

...

> open("/var/spool/imap/user/ecivrese-fejl/cyrus.header", O_RDWR) = 14
> fstat(14, {st_mode=S_IFREG|0600, st_size=182, ...}) = 0
> mmap(NULL, 182, PROT_READ, MAP_SHARED, 14, 0) = 0x2a97f59000
> --- SIGSEGV (Segmentation fault) @ 0 (0) ---

Did you run a reconstruct on this Mailbox (ecivrese-fejl)?

--
Andreas

From D.Piethan at web.de  Mon Nov  3 16:01:49 2008
From: D.Piethan at web.de (Dirk Piethan)
Date: Mon, 03 Nov 2008 22:01:49 +0100
Subject: =?iso-8859-15?Q?relocation_R=5FX86=5F64=5F32_against_`a_local_symbol'_?=
	=?iso-8859-15?Q?can_not_be_used_when_making_a_shared_object;
	_recompile?= =?iso-8859-15?Q?_with_-fPIC?=
Message-ID: <1300238886@web.de>

Hello,

I want to compile Cyrus-imapd-2.3.13. My server is an AMD64 system with Debian Etch as operating system.
At the compile time I get an continual error.

relocation R_X86_64_32 against `a local symbol' can not be used when making a shared object; recompile with -fPIC

Despite of the fact that I have used the compiler flag "CCCDFLAGS=-fPIC". There is this flag in Makefile.

What can I do for the successful compliation of cyrus-imapd?


best regards from cologne
Dirk

-----------------------------------------------------------------------------------------------------------------
CFLAGS="-g -O2 -fPIC" ./configure \
--with-sasl=/usr/local/lib \
--with-perl \
--with-auth=unix \
--with-dbdir=/usr/local/bdb \
--with-bdb-libdir=/usr/local/bdb/lib \
--with-bdb-incdir=/usr/local/bdb/include \
--with-openssl=/usr/ssl \
--without-ucdsnmp \
--with-cyrus-user=cyrus \
--with-cyrus-group=mail \
--with-lock=fcntl \
--with-mboxlist-db=skiplist \
--with-syslogfacility=DAEMON \
--with-com_err=yes \
--with-idle=idled \
--enable-netscapehack \
--enable-shared \
--enable-murder \
--enable-annotatemore 
------------------------------------------------------------------------------------------------------------------------


piethan:/usr/local/src/cyrus-imapd-2.3.13/perl/imap# make
cp IMAP/Admin.pm blib/lib/Cyrus/IMAP/Admin.pm
cp IMAP.pm blib/lib/Cyrus/IMAP.pm
cp IMAP/Shell.pm blib/lib/Cyrus/IMAP/Shell.pm
cp IMAP/IMSP.pm blib/lib/Cyrus/IMAP/IMSP.pm
/usr/bin/perl /usr/share/perl/5.8/ExtUtils/xsubpp  -typemap /usr/share/perl/5.8/ExtUtils/typemap -typemap typemap  IMAP.xs > IMAP.xsc && mv IMAP.xsc IMAP.c
cc -c  -I../../lib -I../.. -I../../com_err/et   -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBIAN -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -O2   -DVERSION=\"1.00\" -DXS_VERSION=\"1.00\" -fPIC "-I/usr/lib/perl/5.8/CORE"  -DPERL_POLLUTE IMAP.c
Running Mkbootstrap for Cyrus::IMAP ()
chmod 644 IMAP.bs
rm -f blib/arch/auto/Cyrus/IMAP/IMAP.so
LD_RUN_PATH="/usr/local/lib" cc  -shared -L/usr/local/lib IMAP.o  -o blib/arch/auto/Cyrus/IMAP/IMAP.so ../../lib/libcyrus.a ../../lib/libcyrus_min.a	\
	   -lsasl2 -lssl -lcrypto  	\
	  
/usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/4.1.2/../../../../lib64/libssl.a(t1_clnt.o): relocation R_X86_64_32 against `a local symbol' can not be used when making a shared object; recompile with -fPIC
/usr/lib/gcc/x86_64-linux-gnu/4.1.2/../../../../lib64/libssl.a: could not read symbols: Bad value
collect2: ld returned 1 exit status
make: *** [blib/arch/auto/Cyrus/IMAP/IMAP.so] Error 1



_____________________________________________________________________
Der WEB.DE SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen!
http://smartsurfer.web.de/?mc=100071&distributionid=000000000066


From cvizitiu at gbif.org  Mon Nov  3 16:13:31 2008
From: cvizitiu at gbif.org (Ciprian Marius Vizitiu)
Date: Mon, 3 Nov 2008 22:13:31 +0100
Subject: Unpredictable results from imapsync runs
In-Reply-To: <71fe4e760811031225x64e88afel77c5403421bc9670@mail.gmail.com>
References: <005a01c93dde$9760b020$c6221060$@org>
	<71fe4e760811031225x64e88afel77c5403421bc9670@mail.gmail.com>
Message-ID: <554D0C9D032745F29A428BEB765A12CF@graph>


Hi Alain,

> Are you sure the cache of the imap client you are using is really in
> sync with both client ?

I've checked from both Outlook and Thunderbird, Vista and Centos. Anyway, I
know the drill so between the runs a "dm user.xxx" and then a "cm" was
performed AND the accounts deleted and created again on the client(s); I'm
sure the client cache is out of the question. 

... Wait, here's the final argument against the client cache: a simple ls *.
| wc -l shows the number of files to be different in the respective folders.

> Are you sure the source mailbox in not corrupted?

Hmmmm! Now THAT's an interesting question. 

> a reconstruct could be useful

On the source mailbox you mean? I'll try that OK. 



From aspineux at gmail.com  Mon Nov  3 16:43:58 2008
From: aspineux at gmail.com (Alain Spineux)
Date: Mon, 3 Nov 2008 22:43:58 +0100
Subject: Unpredictable results from imapsync runs
In-Reply-To: <554D0C9D032745F29A428BEB765A12CF@graph>
References: <005a01c93dde$9760b020$c6221060$@org>
	<71fe4e760811031225x64e88afel77c5403421bc9670@mail.gmail.com>
	<554D0C9D032745F29A428BEB765A12CF@graph>
Message-ID: <71fe4e760811031343g77dda2c4q764bac803f28ded1@mail.gmail.com>

On Mon, Nov 3, 2008 at 10:13 PM, Ciprian Marius Vizitiu
<cvizitiu at gbif.org> wrote:
>
> Hi Alain,
>
>> Are you sure the cache of the imap client you are using is really in
>> sync with both client ?
>
> I've checked from both Outlook and Thunderbird, Vista and Centos. Anyway, I
> know the drill so between the runs a "dm user.xxx" and then a "cm" was
> performed AND the accounts deleted and created again on the client(s); I'm
> sure the client cache is out of the question.
>
> ... Wait, here's the final argument against the client cache: a simple ls *.
> | wc -l shows the number of files to be different in the respective folders.
>
>> Are you sure the source mailbox in not corrupted?
>
> Hmmmm! Now THAT's an interesting question.
>
>> a reconstruct could be useful
>
> On the source mailbox you mean? I'll try that OK.

Yes on the source.

Other trick :
- try to increas imapsync verbosity an check for any error message
- increase the cyrus verbosisty : You can trac any imap command send
by a user ,
by just creating a directory inside the cyrus logging directory with
the same name
as of the user you wan to monitor.
Dont forget to give cyrus user right to this directory.

Do this on both end and check for error


>
>
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>



-- 
Alain Spineux
aspineux gmail com
May the sources be with you

From svinther at gmail.com  Mon Nov  3 17:10:26 2008
From: svinther at gmail.com (=?ISO-8859-1?Q?Steffen_Vinther_S=F8rensen?=)
Date: Mon, 3 Nov 2008 23:10:26 +0100
Subject: segfault after upgrade
In-Reply-To: <200811032200.57972.ml@awinkelmann.de>
References: <eacf179a0811031245v4414cce2ia985d77cfe97c3e0@mail.gmail.com>
	<200811032200.57972.ml@awinkelmann.de>
Message-ID: <eacf179a0811031410r43a1360fp9fbdd79fca35a408@mail.gmail.com>

On Mon, Nov 3, 2008 at 10:00 PM, Andreas Winkelmann <ml at awinkelmann.de> wrote:
> Am Montag 03 November 2008 21:45:30 schrieb Steffen Vinther S?rensen:
>
>> I recently updated a CentOS 4 installation using the CentOS package
>> manager "yum". the cyrus imapd and the dbd packages was upgraded along
>> with several other packages. After that there seems to be an issue
>> with the Cyrus imapd "shared" mailboxes (the ones where users needs to
>> subscribe in order to use)
>>
>> I already tried rebuilding mailboxes.db, by dumping it as text and
>> restoring it, but with no luck. Any further advice would be very
>> welcome:
>>
>> Here is all the info I can think of:
>>
>> cyradm version request:
>> mail.somecompany.dk> version
>> name       : Cyrus IMAPD
>> version    : v2.2.12-Invoca-RPM-2.2.12-9.RHEL4 2005/02/14 16:43:51
>> vendor     : Project Cyrus
>> support-url: http://asg.web.cmu.edu/cyrus
>> os         : Linux
>> os-version : 2.6.9-78.0.5.ELsmp
>> environment: Built w/Cyrus SASL 2.1.19
>>              Running w/Cyrus SASL 2.1.19
>>              Built w/Sleepycat Software: Berkeley DB 4.2.52: (July 14,
>> 2007) Running w/Sleepycat Software: Berkeley DB 4.2.52: (July 14, 2007)
>> Built w/OpenSSL 0.9.7a Feb 19 2003
>>              Running w/OpenSSL 0.9.7a Feb 19 2003
>>              CMU Sieve 2.2
>>              TCP Wrappers
>>              mmap = shared
>>              lock = fcntl
>>              nonblock = fcntl
>>              auth = unix
>>              idle = poll
>>
>>
>> /var/log/messages gets this every time a user tries to connect:
>> mail kernel: imapd[13804]: segfault at 0000000000000000 rip
>> 00000030d36705f2 rsp 0000007fbfffcc88 error 4
>>
>> /var/log/maillog
>> Nov  3 21:34:05 mail imap[14118]: accepted connection
>> Nov  3 21:34:05 mail master[14144]: about to exec
>> /usr/lib64/cyrus-imapd/imapd Nov  3 21:34:05 mail imap[14144]: executed
>> Nov  3 21:34:05 mail imap[14118]: login: svs.somecompany.dk
>> [192.168.1.20] svs plaintext User logged in
>> Nov  3 21:34:05 mail master[31849]: process 14118 exited, signaled to
>> death by 11
>> Nov  3 21:34:05 mail master[31849]: service imap pid 14118 in BUSY
>> state: terminated abnormally
>>
>> strace for imapd process having the segfault, using strace -ff -p
>> <pid> on the cyrus-master pid:
>
> ...
>
>> open("/var/spool/imap/user/ecivrese-fejl/cyrus.header", O_RDWR) = 14
>> fstat(14, {st_mode=S_IFREG|0600, st_size=182, ...}) = 0
>> mmap(NULL, 182, PROT_READ, MAP_SHARED, 14, 0) = 0x2a97f59000
>> --- SIGSEGV (Segmentation fault) @ 0 (0) ---
>
> Did you run a reconstruct on this Mailbox (ecivrese-fejl)?
>
> --
> Andreas
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>

yes, I already tried "reconstruct user.ecivrese-fejl" and then
restarted cyrus, but with no positive result

From simon.matter at invoca.ch  Mon Nov  3 17:10:37 2008
From: simon.matter at invoca.ch (Simon Matter)
Date: Mon, 3 Nov 2008 23:10:37 +0100 (CET)
Subject: relocation R_X86_64_32 against `a local symbol'  
	=?iso-8859-15?Q?can_not_be_used_when_making_a_shared_object;
	_recompile?= with -fPIC
In-Reply-To: <1300238886@web.de>
References: <1300238886@web.de>
Message-ID: <5c8713e593ac039ae2209d671d6cae67.squirrel@webmail.bi.corp.invoca.ch>

> Hello,
>
> I want to compile Cyrus-imapd-2.3.13. My server is an AMD64 system with
> Debian Etch as operating system.
> At the compile time I get an continual error.
>
> relocation R_X86_64_32 against `a local symbol' can not be used when
> making a shared object; recompile with -fPIC
>
> Despite of the fact that I have used the compiler flag "CCCDFLAGS=-fPIC".
> There is this flag in Makefile.

Hm, I have
CCDLFLAGS="-rdynamic"; export CCDLFLAGS
in my rpm spec which build fine on x86_64. You could try that?

Simon

>
> What can I do for the successful compliation of cyrus-imapd?
>
>
> best regards from cologne
> Dirk
>
> -----------------------------------------------------------------------------------------------------------------
> CFLAGS="-g -O2 -fPIC" ./configure \
> --with-sasl=/usr/local/lib \
> --with-perl \
> --with-auth=unix \
> --with-dbdir=/usr/local/bdb \
> --with-bdb-libdir=/usr/local/bdb/lib \
> --with-bdb-incdir=/usr/local/bdb/include \
> --with-openssl=/usr/ssl \
> --without-ucdsnmp \
> --with-cyrus-user=cyrus \
> --with-cyrus-group=mail \
> --with-lock=fcntl \
> --with-mboxlist-db=skiplist \
> --with-syslogfacility=DAEMON \
> --with-com_err=yes \
> --with-idle=idled \
> --enable-netscapehack \
> --enable-shared \
> --enable-murder \
> --enable-annotatemore
> ------------------------------------------------------------------------------------------------------------------------
>
>
> piethan:/usr/local/src/cyrus-imapd-2.3.13/perl/imap# make
> cp IMAP/Admin.pm blib/lib/Cyrus/IMAP/Admin.pm
> cp IMAP.pm blib/lib/Cyrus/IMAP.pm
> cp IMAP/Shell.pm blib/lib/Cyrus/IMAP/Shell.pm
> cp IMAP/IMSP.pm blib/lib/Cyrus/IMAP/IMSP.pm
> /usr/bin/perl /usr/share/perl/5.8/ExtUtils/xsubpp  -typemap
> /usr/share/perl/5.8/ExtUtils/typemap -typemap typemap  IMAP.xs > IMAP.xsc
> && mv IMAP.xsc IMAP.c
> cc -c  -I../../lib -I../.. -I../../com_err/et   -D_REENTRANT -D_GNU_SOURCE
> -DTHREADS_HAVE_PIDS -DDEBIAN -fno-strict-aliasing -pipe
> -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -O2
> -DVERSION=\"1.00\" -DXS_VERSION=\"1.00\" -fPIC "-I/usr/lib/perl/5.8/CORE"
> -DPERL_POLLUTE IMAP.c
> Running Mkbootstrap for Cyrus::IMAP ()
> chmod 644 IMAP.bs
> rm -f blib/arch/auto/Cyrus/IMAP/IMAP.so
> LD_RUN_PATH="/usr/local/lib" cc  -shared -L/usr/local/lib IMAP.o  -o
> blib/arch/auto/Cyrus/IMAP/IMAP.so ../../lib/libcyrus.a
> ../../lib/libcyrus_min.a	\
> 	   -lsasl2 -lssl -lcrypto  	\
>
> /usr/bin/ld:
> /usr/lib/gcc/x86_64-linux-gnu/4.1.2/../../../../lib64/libssl.a(t1_clnt.o):
> relocation R_X86_64_32 against `a local symbol' can not be used when
> making a shared object; recompile with -fPIC
> /usr/lib/gcc/x86_64-linux-gnu/4.1.2/../../../../lib64/libssl.a: could not
> read symbols: Bad value
> collect2: ld returned 1 exit status
> make: *** [blib/arch/auto/Cyrus/IMAP/IMAP.so] Error 1
>
>
>
> _____________________________________________________________________
> Der WEB.DE SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen!
> http://smartsurfer.web.de/?mc=100071&distributionid=000000000066
>
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>



From aspineux at gmail.com  Mon Nov  3 17:46:47 2008
From: aspineux at gmail.com (Alain Spineux)
Date: Mon, 3 Nov 2008 23:46:47 +0100
Subject: segfault after upgrade
In-Reply-To: <eacf179a0811031410r43a1360fp9fbdd79fca35a408@mail.gmail.com>
References: <eacf179a0811031245v4414cce2ia985d77cfe97c3e0@mail.gmail.com>
	<200811032200.57972.ml@awinkelmann.de>
	<eacf179a0811031410r43a1360fp9fbdd79fca35a408@mail.gmail.com>
Message-ID: <71fe4e760811031446w461f0049t279f9e96285493c7@mail.gmail.com>

On Mon, Nov 3, 2008 at 11:10 PM, Steffen Vinther S?rensen
<svinther at gmail.com> wrote:
> On Mon, Nov 3, 2008 at 10:00 PM, Andreas Winkelmann <ml at awinkelmann.de> wrote:
>> Am Montag 03 November 2008 21:45:30 schrieb Steffen Vinther S?rensen:
>>
>>> I recently updated a CentOS 4 installation using the CentOS package
>>> manager "yum". the cyrus imapd and the dbd packages was upgraded along
>>> with several other packages. After that there seems to be an issue
>>> with the Cyrus imapd "shared" mailboxes (the ones where users needs to
>>> subscribe in order to use)
>>>
>>> I already tried rebuilding mailboxes.db, by dumping it as text and
>>> restoring it, but with no luck. Any further advice would be very
>>> welcome:
>>>
>>> Here is all the info I can think of:
>>>
>>> cyradm version request:
>>> mail.somecompany.dk> version
>>> name       : Cyrus IMAPD
>>> version    : v2.2.12-Invoca-RPM-2.2.12-9.RHEL4 2005/02/14 16:43:51
>>> vendor     : Project Cyrus
>>> support-url: http://asg.web.cmu.edu/cyrus
>>> os         : Linux
>>> os-version : 2.6.9-78.0.5.ELsmp
>>> environment: Built w/Cyrus SASL 2.1.19
>>>              Running w/Cyrus SASL 2.1.19
>>>              Built w/Sleepycat Software: Berkeley DB 4.2.52: (July 14,
>>> 2007) Running w/Sleepycat Software: Berkeley DB 4.2.52: (July 14, 2007)
>>> Built w/OpenSSL 0.9.7a Feb 19 2003
>>>              Running w/OpenSSL 0.9.7a Feb 19 2003
>>>              CMU Sieve 2.2
>>>              TCP Wrappers
>>>              mmap = shared
>>>              lock = fcntl
>>>              nonblock = fcntl
>>>              auth = unix
>>>              idle = poll
>>>
>>>
>>> /var/log/messages gets this every time a user tries to connect:
>>> mail kernel: imapd[13804]: segfault at 0000000000000000 rip
>>> 00000030d36705f2 rsp 0000007fbfffcc88 error 4
>>>
>>> /var/log/maillog
>>> Nov  3 21:34:05 mail imap[14118]: accepted connection
>>> Nov  3 21:34:05 mail master[14144]: about to exec
>>> /usr/lib64/cyrus-imapd/imapd Nov  3 21:34:05 mail imap[14144]: executed
>>> Nov  3 21:34:05 mail imap[14118]: login: svs.somecompany.dk
>>> [192.168.1.20] svs plaintext User logged in
>>> Nov  3 21:34:05 mail master[31849]: process 14118 exited, signaled to
>>> death by 11
>>> Nov  3 21:34:05 mail master[31849]: service imap pid 14118 in BUSY
>>> state: terminated abnormally
>>>
>>> strace for imapd process having the segfault, using strace -ff -p
>>> <pid> on the cyrus-master pid:
>>
>> ...
>>
>>> open("/var/spool/imap/user/ecivrese-fejl/cyrus.header", O_RDWR) = 14
>>> fstat(14, {st_mode=S_IFREG|0600, st_size=182, ...}) = 0
>>> mmap(NULL, 182, PROT_READ, MAP_SHARED, 14, 0) = 0x2a97f59000
>>> --- SIGSEGV (Segmentation fault) @ 0 (0) ---
>>
>> Did you run a reconstruct on this Mailbox (ecivrese-fejl)?
>>
>> --
>> Andreas
>> ----
>> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
>> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
>> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>>
>
> yes, I already tried "reconstruct user.ecivrese-fejl" and then
> restarted cyrus, but with no positive result

You can try to debug the process using GDB.

look at the end of http://www.irbs.net/internet/info-cyrus/0709/0180.html
to know how to do that.


> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>



-- 
Alain Spineux
aspineux gmail com
May the sources be with you

From cvizitiu at gbif.org  Tue Nov  4 03:08:49 2008
From: cvizitiu at gbif.org (Ciprian Marius Vizitiu)
Date: Tue, 04 Nov 2008 09:08:49 +0100
Subject: Unpredictable results from imapsync runs
In-Reply-To: <71fe4e760811031343g77dda2c4q764bac803f28ded1@mail.gmail.com>
References: <005a01c93dde$9760b020$c6221060$@org>	
	<71fe4e760811031225x64e88afel77c5403421bc9670@mail.gmail.com>	
	<554D0C9D032745F29A428BEB765A12CF@graph>
	<71fe4e760811031343g77dda2c4q764bac803f28ded1@mail.gmail.com>
Message-ID: <49100311.8060803@gbif.org>

Alain Spineux wrote:

> Other trick :
> - try to increas imapsync verbosity an check for any error message
> - increase the cyrus verbosisty : You can trac any imap command send
> by a user ,
> by just creating a directory inside the cyrus logging directory with
> the same name
> as of the user you wan to monitor.
> Dont forget to give cyrus user right to this directory.
> 
> Do this on both end and check for error

Out of a sick "scientific" curiosity I left the servers in the same 
"state" that is no reconstruct and I've compiled Armin Diehl's ImapCopy. 
Given that both utilities use IMAP *IF* there was an an error on either 
of the servers, it would manifest itself for BOTH copy utilities now 
won't it (assuming we're talking the same folder)?

Guess what? I get no errors, I've already done the copy three times (not 
to mention the extra speed I get from ImapCopy).

Now, why would any of the Cyruses involved in the transfer give broken 
IMAP answers to imapsync but correct ones to ImapCopy?! =:-o Just 
because Simon likes Pascal better than Perl? I doubt that. o:-) So 
something's fishy here. :-|

From ml at bortal.de  Tue Nov  4 04:25:49 2008
From: ml at bortal.de (ml at bortal.de)
Date: Tue, 04 Nov 2008 10:25:49 +0100
Subject: Can i convert qpopper to cyrus?
Message-ID: <4910151D.7010007@bortal.de>

Hello List,

can i convert qpopper to cyrus somehow?

Thanks,
Mario

From michael.menge at zdv.uni-tuebingen.de  Tue Nov  4 05:52:28 2008
From: michael.menge at zdv.uni-tuebingen.de (Michael Menge)
Date: Tue, 04 Nov 2008 11:52:28 +0100
Subject: Unpredictable results from imapsync runs
In-Reply-To: <005a01c93dde$9760b020$c6221060$@org>
References: <005a01c93dde$9760b020$c6221060$@org>
Message-ID: <20081104115228.14312dnl591luagc@webmail.uni-tuebingen.de>

Hi,

if only the seenstate is the problem you may try to set the optinon
flushseenstate: 1 in imapd.conf

Regards

        Michael Menge

Quoting "Ciprian Marius Vizitiu (GBIF)" <cvizitiu at gbif.org>:

> Hi everybody,
>
> I'm trying to migrate a small 120GB IMAP store from a 32 bit Cyrus 2.2.12 on
> RHEL4 to a 64 bit Cyrus 2.3.7 running on RHEL5.
>
> Multiple test runs of imapsync on a 4.2 GB folder will result in annoying
> errors e.g. one of the destinations will show some extra 5 unread messages
> (in one folder) and/or 2 messages missing in another =:-o ... No easy way to
> predict which folder will be affected and I'm sure nobody's been messin'
> with the affected test folders.
>
> A scan of the logs left me empty handed so any hints would be appreciated.
> o:-)
>
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>



--------------------------------------------------------------------------------
M.Menge                                 Tel.: (49) 7071/29-70316
Universitaet Tuebingen                  Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung          mail:  
michael.menge at zdv.uni-tuebingen.de
Waechterstrasse 76
72074 Tuebingen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5339 bytes
Desc: S/MIME krytographische Unterschrift
Url : http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081104/37deae6a/attachment.bin 

From cvizitiu at gbif.org  Tue Nov  4 07:34:02 2008
From: cvizitiu at gbif.org (Ciprian Marius Vizitiu (GBIF))
Date: Tue, 4 Nov 2008 13:34:02 +0100
Subject: Unpredictable results from imapsync runs
In-Reply-To: <20081104115228.14312dnl591luagc@webmail.uni-tuebingen.de>
References: <005a01c93dde$9760b020$c6221060$@org>
	<20081104115228.14312dnl591luagc@webmail.uni-tuebingen.de>
Message-ID: <003e01c93e79$9e93c8a0$dbbb59e0$@org>


> Hi,

> if only the seenstate is the problem you may try to set the optinon
> flushseenstate: 1 in imapd.conf

Hi, 

No, the seenstate is the last of my concerns now as multiple runs of
imapsync will fix that; it's the different numbers of transferred messages
which is the show stopper, I'm trying to figure out which of the 800
messages is not copied over. ImapCopy OTOH works like a charm for 1 user but
it's a PITA to use in a "many users many folders" scenario. 


From Rob.McMahon at warwick.ac.uk  Tue Nov  4 07:39:18 2008
From: Rob.McMahon at warwick.ac.uk (Rob McMahon)
Date: Tue, 04 Nov 2008 12:39:18 +0000
Subject: Too many open files
In-Reply-To: <37107.192.76.178.13.1225732036.squirrel@webmailnew.cabm.rutgers.edu>
References: <46CEFDF6.6060605@warwick.ac.uk> <490F249B.7040200@warwick.ac.uk>
	<37107.192.76.178.13.1225732036.squirrel@webmailnew.cabm.rutgers.edu>
Message-ID: <49104276.5000503@warwick.ac.uk>

Shelley Waltz wrote:
> Oddly enough I had the identical issue today while trying to remove a
> bunch of users.  I am running cyrus-imapd-2.3.7-2.el5 on RHEL5.
>
> I used cyradm and did
> sam user.x anyone c
> dm user.x
>
> This worked fine for about 20 users, then I got the following in maillog ...
>
> Nov  3 10:35:28 rr imap[16539]: IOERROR: opening quota file
> /var/lib/imap/quota/x/user.x: Too many open files
> Nov  3 10:35:28 rr imap[16539]: DBERROR: error fetching user.x: cyrusdb error
> Nov  3 10:35:28 rr imap[16539]: Deleted mailbox user.x
>
> If I look in /var/spool/imap/x/user/  the directory and folders for user
> x are still there.  If I try to remove the mailbox once again using
> cyradm, it claims the mailbox does not exist.
>
> How does one resolve this issue safely?
>
>   
I have the same problem with a few mailboxes myself, and don't know how 
to clean it up.

To avoid the problem in the first place, if you have just a few (tens ? 
couple of hundred) users beginning with the same prefix, I think you can 
avoid the problem in the first place by putting e.g.

  imap          cmd="imapd" listen="imap" prefork=0 maxfds=4096

in /etc/cyrus.conf.

I suspect the underlying cause is this chunk from 
lib/cyrusdb_quotalegacy.c(foreach):

    /* strip off the qr specific path and replace with pattern */
    sprintf(strstr(quota_path, FNAME_QUOTADIR) + strlen(FNAME_QUOTADIR),
            "?/%s*", prefix);

    /* search for the quotaroots */
    glob(quota_path, GLOB_NOSORT, NULL, &globbuf);

That pattern on our boxes can match thousands of users.  I think it 
needs to be more careful and go looking for `prefix' and `prefix.*', but 
I haven't dug into it far enough yet.

Cheers,

Rob

-- 
E-Mail:	Rob.McMahon at warwick.ac.uk		PHONE:  +44 24 7652 3037
Rob McMahon, IT Services, Warwick University, Coventry, CV4 7AL, England


From cvizitiu at gbif.org  Tue Nov  4 13:43:55 2008
From: cvizitiu at gbif.org (Ciprian Marius Vizitiu (GBIF))
Date: Tue, 4 Nov 2008 19:43:55 +0100
Subject: Is there any way to keep the "seen" state in a reconstruct?
Message-ID: <000001c93ead$4a965400$dfc2fc00$@org>

Hi everybody,

On a Cyrus 2.3.7 running on RHEL5 I'm attempting to import an existing IMAP
store by simply copying the old store. Since the user.seen are both
"skiplist" I thought I'd keep them so:

1. Copy the messages (but not cyrus.index/cache/header)
2. update mboxlist (export, edit, import)
3. bring user.seen 
4. reconstruct -r

... still, I lose the "seen" state. Doesn't make any difference whether I
bring back the seen file before or after the reconstruct. Any hints?




From wes at umich.edu  Tue Nov  4 13:43:36 2008
From: wes at umich.edu (Wesley Craig)
Date: Tue, 4 Nov 2008 13:43:36 -0500
Subject: Too many open files
In-Reply-To: <49104276.5000503@warwick.ac.uk>
References: <46CEFDF6.6060605@warwick.ac.uk> <490F249B.7040200@warwick.ac.uk>
	<37107.192.76.178.13.1225732036.squirrel@webmailnew.cabm.rutgers.edu>
	<49104276.5000503@warwick.ac.uk>
Message-ID: <256D7447-263E-44FF-9132-2021B6B87752@umich.edu>

On 04 Nov 2008, at 07:39, Rob McMahon wrote:
> I suspect the underlying cause is this chunk from
> lib/cyrusdb_quotalegacy.c(foreach):
>
>     /* strip off the qr specific path and replace with pattern */
>     sprintf(strstr(quota_path, FNAME_QUOTADIR) + strlen 
> (FNAME_QUOTADIR),
>             "?/%s*", prefix);
>
>     /* search for the quotaroots */
>     glob(quota_path, GLOB_NOSORT, NULL, &globbuf);
>
> That pattern on our boxes can match thousands of users.  I think it
> needs to be more careful and go looking for `prefix' and  
> `prefix.*', but
> I haven't dug into it far enough yet.

That code's been rewritten in 2.3.13 to read the quota directory  
instead.  You might be able to back port the change:

	https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/cyrus/lib/ 
cyrusdb_quotalegacy.c.diff?r1=1.18;r2=1.19

For the record, it wasn't rewritten because of the bug you  
identified, but for an unrelated problem.

:wes

From wes at umich.edu  Tue Nov  4 14:31:56 2008
From: wes at umich.edu (Wesley Craig)
Date: Tue, 4 Nov 2008 14:31:56 -0500
Subject: Is there any way to keep the "seen" state in a reconstruct?
In-Reply-To: <000001c93ead$4a965400$dfc2fc00$@org>
References: <000001c93ead$4a965400$dfc2fc00$@org>
Message-ID: <DFDCA81D-64D2-4F57-A1B8-C198BB15AA38@umich.edu>

The seen list is indexed by the mailbox ID which is stored in the  
cyrus.header file.  If you don't copy the cyrus.header file, your  
seen data is useless.  Reconstruct will retain the mailbox ID if the  
cyrus.header file is intact.  Hope that helps.

:wes

On 04 Nov 2008, at 13:43, Ciprian Marius Vizitiu ((GBIF)) wrote:
> On a Cyrus 2.3.7 running on RHEL5 I'm attempting to import an  
> existing IMAP
> store by simply copying the old store. Since the user.seen are both
> "skiplist" I thought I'd keep them so:
>
> 1. Copy the messages (but not cyrus.index/cache/header)
> 2. update mboxlist (export, edit, import)
> 3. bring user.seen
> 4. reconstruct -r
>
> ... still, I lose the "seen" state. Doesn't make any difference  
> whether I
> bring back the seen file before or after the reconstruct. Any hints?

From brong at fastmail.fm  Wed Nov  5 01:06:21 2008
From: brong at fastmail.fm (Bron Gondwana)
Date: Wed, 05 Nov 2008 17:06:21 +1100
Subject: CONDSTORE and replication in production?
Message-ID: <1225865181.29537.1283058301@webmail.messagingengine.com>

Hi,

So - I've been playing with CONDSTORE a bit.  Specifically, I'm looking at
supporting cross folder searching through our web interface, and it would
kind of suck to have to re-run the search on every folder every time we
have a new query.  So I figured that checking HIGHESTMODSEQ would probably
be more reliable than a bunch of dodgy heuristics for guaranteeing that the
cache isn't stale.

Attached is a patch that makes rolling out condstore less painful, though
the interface is a little unfriendly:

mailbox_default_options: 2

My question - is anyone actually using CONDSTORE and Cyrus replication in
production?  For that matter, is anyone using CONDSTORE in production
anywhere?  Any client gotchas to be aware of?

My first pass will probably be to write a dodgy tool that can update all
the cyrus.index files directly just by twiddling a bit, so I can revert the
change in a massive hurry.  Then if everyone says it's good I'll enable
CONDSTORE for new mailboxes on one store, and see how that goes.

Bron ( and I'll report back of course )
-- 
  Bron Gondwana
  brong at fastmail.fm


From brong at fastmail.fm  Wed Nov  5 05:20:28 2008
From: brong at fastmail.fm (Bron Gondwana)
Date: Wed, 5 Nov 2008 21:20:28 +1100
Subject: CONDSTORE and replication in production?
In-Reply-To: <1225865181.29537.1283058301@webmail.messagingengine.com>
References: <1225865181.29537.1283058301@webmail.messagingengine.com>
Message-ID: <20081105102028.GA2942@brong.net>

On Wed, Nov 05, 2008 at 05:06:21PM +1100, Bron Gondwana wrote:
> Attached is a patch that makes rolling out condstore less painful, though
> the interface is a little unfriendly:
> 
> mailbox_default_options: 2

Oh yeah, indeed.  Alternatively.  Attached now.

Bron.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cyrus-mailbox-default-options-2.3.13.diff
Type: text/x-diff
Size: 2166 bytes
Desc: not available
Url : http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081105/854c9e0b/attachment.bin 

From svinther at gmail.com  Wed Nov  5 08:54:21 2008
From: svinther at gmail.com (=?ISO-8859-1?Q?Steffen_Vinther_S=F8rensen?=)
Date: Wed, 5 Nov 2008 14:54:21 +0100
Subject: segfault after upgrade
In-Reply-To: <71fe4e760811031446w461f0049t279f9e96285493c7@mail.gmail.com>
References: <eacf179a0811031245v4414cce2ia985d77cfe97c3e0@mail.gmail.com>
	<200811032200.57972.ml@awinkelmann.de>
	<eacf179a0811031410r43a1360fp9fbdd79fca35a408@mail.gmail.com>
	<71fe4e760811031446w461f0049t279f9e96285493c7@mail.gmail.com>
Message-ID: <eacf179a0811050554v265b3681x9b7f3d028a5e901f@mail.gmail.com>

On Mon, Nov 3, 2008 at 11:46 PM, Alain Spineux <aspineux at gmail.com> wrote:
> On Mon, Nov 3, 2008 at 11:10 PM, Steffen Vinther S?rensen
> <svinther at gmail.com> wrote:
>> On Mon, Nov 3, 2008 at 10:00 PM, Andreas Winkelmann <ml at awinkelmann.de> wrote:
>>> Am Montag 03 November 2008 21:45:30 schrieb Steffen Vinther S?rensen:
>>>
>>>> I recently updated a CentOS 4 installation using the CentOS package
>>>> manager "yum". the cyrus imapd and the dbd packages was upgraded along
>>>> with several other packages. After that there seems to be an issue
>>>> with the Cyrus imapd "shared" mailboxes (the ones where users needs to
>>>> subscribe in order to use)
>>>>
>>>> I already tried rebuilding mailboxes.db, by dumping it as text and
>>>> restoring it, but with no luck. Any further advice would be very
>>>> welcome:
>>>>
>>>> Here is all the info I can think of:
>>>>
>>>> cyradm version request:
>>>> mail.somecompany.dk> version
>>>> name       : Cyrus IMAPD
>>>> version    : v2.2.12-Invoca-RPM-2.2.12-9.RHEL4 2005/02/14 16:43:51
>>>> vendor     : Project Cyrus
>>>> support-url: http://asg.web.cmu.edu/cyrus
>>>> os         : Linux
>>>> os-version : 2.6.9-78.0.5.ELsmp
>>>> environment: Built w/Cyrus SASL 2.1.19
>>>>              Running w/Cyrus SASL 2.1.19
>>>>              Built w/Sleepycat Software: Berkeley DB 4.2.52: (July 14,
>>>> 2007) Running w/Sleepycat Software: Berkeley DB 4.2.52: (July 14, 2007)
>>>> Built w/OpenSSL 0.9.7a Feb 19 2003
>>>>              Running w/OpenSSL 0.9.7a Feb 19 2003
>>>>              CMU Sieve 2.2
>>>>              TCP Wrappers
>>>>              mmap = shared
>>>>              lock = fcntl
>>>>              nonblock = fcntl
>>>>              auth = unix
>>>>              idle = poll
>>>>
>>>>
>>>> /var/log/messages gets this every time a user tries to connect:
>>>> mail kernel: imapd[13804]: segfault at 0000000000000000 rip
>>>> 00000030d36705f2 rsp 0000007fbfffcc88 error 4
>>>>
>>>> /var/log/maillog
>>>> Nov  3 21:34:05 mail imap[14118]: accepted connection
>>>> Nov  3 21:34:05 mail master[14144]: about to exec
>>>> /usr/lib64/cyrus-imapd/imapd Nov  3 21:34:05 mail imap[14144]: executed
>>>> Nov  3 21:34:05 mail imap[14118]: login: svs.somecompany.dk
>>>> [192.168.1.20] svs plaintext User logged in
>>>> Nov  3 21:34:05 mail master[31849]: process 14118 exited, signaled to
>>>> death by 11
>>>> Nov  3 21:34:05 mail master[31849]: service imap pid 14118 in BUSY
>>>> state: terminated abnormally
>>>>
>>>> strace for imapd process having the segfault, using strace -ff -p
>>>> <pid> on the cyrus-master pid:
>>>
>>> ...
>>>
>>>> open("/var/spool/imap/user/ecivrese-fejl/cyrus.header", O_RDWR) = 14
>>>> fstat(14, {st_mode=S_IFREG|0600, st_size=182, ...}) = 0
>>>> mmap(NULL, 182, PROT_READ, MAP_SHARED, 14, 0) = 0x2a97f59000
>>>> --- SIGSEGV (Segmentation fault) @ 0 (0) ---
>>>
>>> Did you run a reconstruct on this Mailbox (ecivrese-fejl)?
>>>
>>> --
>>> Andreas
>>> ----
>>> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
>>> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
>>> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>>>
>>
>> yes, I already tried "reconstruct user.ecivrese-fejl" and then
>> restarted cyrus, but with no positive result
>
> You can try to debug the process using GDB.
>
> look at the end of http://www.irbs.net/internet/info-cyrus/0709/0180.html
> to know how to do that.
>
>
>> ----
>> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
>> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
>> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>>
>
>
>
> --
> Alain Spineux
> aspineux gmail com
> May the sources be with you
>

It turns out that the problem was somehow related to user/group rights.

When I create a user, we let the user access our "shared inboxes" by
having the user be member of a group

cm user.[userid]
sam user.[userid] group:sharedmail lrswipcda

For this to work out the sharedmail group must also be a unix group,
and each user must be a unix member of the group by modifying
/etc/group . Until the recent system upgrade, there seemed to be no
need for the users to have a unix account, but after the upgrade Cyrus
would segfault when trying to access a shared mailbox, until I created
unix accounts for all the mail users

Now the procedure for creating a new mail user with shared mailbox access is:

cm user.[userid]
sam user.[userid] group:sharedmail lrswipcda
useradd -M userid
usermod -aG sharedmail userid

in /etc/imapd.conf i have
sasl_pwcheck_method: auxprop


Any comments are welcome :-)

From murch at andrew.cmu.edu  Wed Nov  5 10:31:18 2008
From: murch at andrew.cmu.edu (Ken Murchison)
Date: Wed, 05 Nov 2008 10:31:18 -0500
Subject: CONDSTORE and replication in production?
In-Reply-To: <1225865181.29537.1283058301@webmail.messagingengine.com>
References: <1225865181.29537.1283058301@webmail.messagingengine.com>
Message-ID: <4911BC46.9090207@andrew.cmu.edu>

Bron Gondwana wrote:
> Hi,
> 
> So - I've been playing with CONDSTORE a bit.  Specifically, I'm looking at
> supporting cross folder searching through our web interface, and it would
> kind of suck to have to re-run the search on every folder every time we
> have a new query.  So I figured that checking HIGHESTMODSEQ would probably
> be more reliable than a bunch of dodgy heuristics for guaranteeing that the
> cache isn't stale.
> 
> Attached is a patch that makes rolling out condstore less painful, though
> the interface is a little unfriendly:
> 
> mailbox_default_options: 2
> 
> My question - is anyone actually using CONDSTORE and Cyrus replication in
> production?  For that matter, is anyone using CONDSTORE in production
> anywhere?  Any client gotchas to be aware of?

I'm not aware of any CONDSTORE clients other than Polymer, written by 
Dave Cridland.  He may have written a similar client for a cell phone m 
manufacturer.

-- 
Kenneth Murchison
Systems Programmer
Project Cyrus Developer/Maintainer
Carnegie Mellon University

From frank.richter at hrz.tu-chemnitz.de  Wed Nov  5 10:58:51 2008
From: frank.richter at hrz.tu-chemnitz.de (Frank Richter)
Date: Wed, 5 Nov 2008 16:58:51 +0100 (MET)
Subject: Thunderbird with cyrus-imapd: Why chose client certificate?
Message-ID: <alpine.LRH.2.00.0811051651060.28401@angerer.hrz.tu-chemnitz.de>

Hi,
I've a cyrus-imapd 2.3.12 installation with these options in imapd.conf

tls_cert_file: /etc/exim/etc/server.crt
tls_key_file:  /etc/exim/etc/server.key
tls_ca_file:   /etc/pki/tls/certs/ca-chain.crt
tls_require_cert: 0

SSL and STARTTLS are working fine.

I've imported a personal S/MIME certificate to thunderbird. When 
connecting to the IMAP server (using STARTTLS), thunderbird asks me to 
select a client cert, showing (translated from German):
    This website (!) requires a certificate for identification ...
    Chose a certificate ...

The server doesn't and shouldn't accept client certificates.
So who is wrong? My configuration, thunderbird ...

I hope somebody will enlighten me ...

Thanks,
Frank

-- 
E-Mail: Frank.Richter at hrz.tu-chemnitz.de  http://www.tu-chemnitz.de/~fri/
Work:   Computing Services,  Chemnitz University of Technology,  Germany

From wes at umich.edu  Wed Nov  5 11:22:45 2008
From: wes at umich.edu (Wesley Craig)
Date: Wed, 5 Nov 2008 11:22:45 -0500
Subject: CONDSTORE and replication in production?
In-Reply-To: <4911BC46.9090207@andrew.cmu.edu>
References: <1225865181.29537.1283058301@webmail.messagingengine.com>
	<4911BC46.9090207@andrew.cmu.edu>
Message-ID: <451A9B16-5FBE-4D8E-B920-78FEA2121245@umich.edu>

On 05 Nov 2008, at 10:31, Ken Murchison wrote:
> I'm not aware of any CONDSTORE clients other than Polymer, written by
> Dave Cridland.  He may have written a similar client for a cell  
> phone m
> manufacturer.

As I understand it, the IMP people are working on CONDSTORE support,  
tho I think they are at the educating themselves stage.

:wes

From hugo.doria at tjse.jus.br  Thu Nov  6 06:51:25 2008
From: hugo.doria at tjse.jus.br (Hugo Doria Nunes)
Date: Thu, 6 Nov 2008 09:51:25 -0200
Subject: Problem with cyrreconstruct
Message-ID: <ec6888ddb7812732efc700f34fc71db1@webmail.tjse.jus.br>

An HTML attachment was scrubbed...
URL: http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081106/d94a4975/attachment.html 

From cvizitiu at gbif.org  Thu Nov  6 08:13:23 2008
From: cvizitiu at gbif.org (Ciprian Marius Vizitiu)
Date: Thu, 06 Nov 2008 14:13:23 +0100
Subject: Problem with cyrreconstruct
In-Reply-To: <ec6888ddb7812732efc700f34fc71db1@webmail.tjse.jus.br>
References: <ec6888ddb7812732efc700f34fc71db1@webmail.tjse.jus.br>
Message-ID: <4912ED73.6010504@gbif.org>


> I am trying to migrate cyrus to a new server, but i got a big problem.
> 
> I made a backup of /var/lib/cyrus and /var/spool/cyrus. If i copy the 
> /var/lib/cyrus backup to the new server the "/usr/bin/cyrreconstruct -rf 
> user/*" does not works. It opens a process that uses 100% proc and does 
> nothing.  There is no useful info in syslog.

Unless you're moving between significantly *close* versions of Cyrus I 
don't think blindly copying /var/lib/cyrus would do. Which brings up the 
next problem question: what version(s) of Cyrus/OS are you using in the 
migration?

> If i do not use /var/lib/cyrus backup the "/usr/bin/cyrreconstruct -rf 
> user/*" command works fine. But i have some other problems like:
> 
> * No quota
> * All messages appears as not read.
> 
> My permissions are ok, and i am using debian 4.0.
> 
> Any suggestions?

Broadly speaking Cyrus uses some metadata for bookeeping. :-) Problem is 
there is a wide array of options for storing this metadata and the 
biggest culprit is typically Berkeley. This metadata includes at least 
the mailbox list, quota and the "seen" state. So, instead of blindly 
copying the metadata folder (most likely /var/lib/cyrus on Debian, 
/var/lib/imap on Red Hat) I suggest you investigate the format of the 
files and/or versions in order to see which will match what; e.g. a 
Berkeley 3.x will have problems with Berkeley 4.x and so on. The 
approach which worked for me was to export and import the metadata via 
plain text.


From sofkam at rpi.edu  Thu Nov  6 14:20:49 2008
From: sofkam at rpi.edu (Michael D. Sofka)
Date: Thu, 6 Nov 2008 14:20:49 -0500
Subject: Can i convert qpopper to cyrus?
In-Reply-To: <4910151D.7010007@bortal.de>
References: <4910151D.7010007@bortal.de>
Message-ID: <200811061420.49616.sofkam@rpi.edu>

On Tuesday 04 November 2008 04:25:49 am ml at bortal.de wrote:
> Hello List,
>
> can i convert qpopper to cyrus somehow?

I assume you mean:  you are running a qpopper server, and wish to migrate the 
contents of the POP3 mboxes to Cyrus IMAP.

Sure, you can do it.  The O'Reilly "Managing IMAP" book, while dated, has a 
section on converting from Berkeley mbox to Cyrus.  There are some tools 
available, but they are primitive.  The amount to:

	1) Parse the qpopper mbox files into messages
	2) Put those messages into Cyrus.

State 2 has two options:  Talk IMAP to Cyrus. Or, put individual files on
Cyrus and run reconstruct.   When we converted I choose option 3: write my 
own.  This was a perl program which ran on the qpopper server, and talked 
Cyrus.  It used Mail::Util and Mail::Header to parse mbox, and IMAP::Client 
to talk Cyrus.

I looked over this program, and it is too specialized to our needs.  We had a 
split domain:  Webmail kept email on the IMAP server, but new email came to 
the qpopper server.  The Webmail client was modified to look for new email on 
qpopper, as well as IMAP.  Yes, this is odd, but the idea was to smooth the 
transition as new students arrived, and accounts turned over.

The final step was to migrate the remaining qpopper users, and we choose to 
move only the unread messages to IMAP, then switch (via a Cisco redirector) 
the POP3 port to the Cyrus server.   So, the program was moving only unread 
email, and only for a subset of the population.  In the process it also moved 
email out of the Cyrus INBOX into a subfolder, so that newly switched users 
would not download any, potentially very old, ``Webmail'' email to their POP3 
clients (a difficult to reverse process). 


So, short answer---yes, it's easy, there are some simple scripts out there to 
help, but you might find yourself better off writing something using Perl or 
your favorite interpreted language with a good IMAP client, depending on the 
specifics of your site.

Mike

-- 
Michael D. Sofka               sofkam at rpi.edu
C&MT Sr. Systems Programmer,   Email, TeX, Epistemology
Rensselaer Polytechnic Institute, Troy, NY.  http://www.rpi.edu/~sofkam/

From ram at netcore.co.in  Tue Nov 11 05:54:15 2008
From: ram at netcore.co.in (ram)
Date: Tue, 11 Nov 2008 16:24:15 +0530
Subject: Load balance multiple servers with common storage
Message-ID: <1226400855.25801.79.camel@darkstar.netcore.co.in>

I have been googling but couldnt see any concrete answer 
Is it possible to load balance multiple cyrus imapd connections with
multiple servers connecting to same common storage

Say , I mount the /var/spool/imap and /var/imap and the sieve dir from a
SAN box on 2+ servers, Any user trying to access his mailbox will
connect to any server using a h/w load balancer 
Irrespective of which server he connects to he will always see the same
mailbox 

Is this a feasible solution. Will it not create locking issues on the
mailboxes.db How many imap processes can a single mailboxes.db handle If
I want to give a zero delay response.
If there is requirement for more mailboxes , I just add more frontend
boxes behind the load balancer. 

Can this work ? 


Thanks
Ram












From shwaltz at cabm.rutgers.edu  Tue Nov 11 08:37:26 2008
From: shwaltz at cabm.rutgers.edu (Shelley Waltz)
Date: Tue, 11 Nov 2008 08:37:26 -0500 (EST)
Subject: Too many open files
In-Reply-To: <49104276.5000503@warwick.ac.uk>
References: <46CEFDF6.6060605@warwick.ac.uk> <490F249B.7040200@warwick.ac.uk>
	<37107.192.76.178.13.1225732036.squirrel@webmailnew.cabm.rutgers.edu>
	<49104276.5000503@warwick.ac.uk>
Message-ID: <59984.192.76.178.143.1226410646.squirrel@webmailnew.cabm.rutgers.edu>

Rob McMahon wrote:
> Shelley Waltz wrote:
>> Oddly enough I had the identical issue today while trying to remove a
>> bunch of users.  I am running cyrus-imapd-2.3.7-2.el5 on RHEL5.
>>
>> I used cyradm and did
>> sam user.x anyone c
>> dm user.x
>>
>> This worked fine for about 20 users, then I got the following in maillog
>> ...
>>
>> Nov  3 10:35:28 rr imap[16539]: IOERROR: opening quota file
>> /var/lib/imap/quota/x/user.x: Too many open files
>> Nov  3 10:35:28 rr imap[16539]: DBERROR: error fetching user.x: cyrusdb
>> error
>> Nov  3 10:35:28 rr imap[16539]: Deleted mailbox user.x
>>
>> If I look in /var/spool/imap/x/user/  the directory and folders for user
>> x are still there.  If I try to remove the mailbox once again using
>> cyradm, it claims the mailbox does not exist.
>>
>> How does one resolve this issue safely?
>>
>>
> I have the same problem with a few mailboxes myself, and don't know how
> to clean it up.
>
> To avoid the problem in the first place, if you have just a few (tens ?
> couple of hundred) users beginning with the same prefix, I think you can
> avoid the problem in the first place by putting e.g.
>
>   imap          cmd="imapd" listen="imap" prefork=0 maxfds=4096
>
> in /etc/cyrus.conf.
>
> I suspect the underlying cause is this chunk from
> lib/cyrusdb_quotalegacy.c(foreach):
>
>     /* strip off the qr specific path and replace with pattern */
>     sprintf(strstr(quota_path, FNAME_QUOTADIR) + strlen(FNAME_QUOTADIR),
>             "?/%s*", prefix);
>
>     /* search for the quotaroots */
>     glob(quota_path, GLOB_NOSORT, NULL, &globbuf);
>
> That pattern on our boxes can match thousands of users.  I think it
> needs to be more careful and go looking for `prefix' and `prefix.*', but
> I haven't dug into it far enough yet.

I changed the maxfds to 4096 and will try removing mailboxes once again.
>From my previous attempt described above, I still have
/var/spool/imap/x/user/x with all the folders from the account in the
directory.  There appears to be no other trace of the account.  Is it safe
to just rm the var/spool/imap/x/user/x directory contents?

I have a replica using sync_client which shows no trace whatsoever of
the account, so it seems a safe bet, yes?

thanks S


From hal.deadman at gmail.com  Tue Nov 11 12:24:04 2008
From: hal.deadman at gmail.com (Hal Deadman)
Date: Tue, 11 Nov 2008 12:24:04 -0500
Subject: basing user's mailbox name on different ldap attribute than
	authentication id
Message-ID: <ebd0064c0811110924v1fcda82am3e0e2a3719940894@mail.gmail.com>

I am working with a custom java webmail application that accesses Cyrus imap
configured with sasl/pam_ldap for authentication. The user's login names for
the webmail client are based on the ldap cn attribute but the mailboxes in
Cyrus are based on the ldap mailNickname attribute. The webmail client
passes the mailNickname attribute as the username when it authenticates to
Cyrus.

example:
cn=john.smithmailNickname=ea9d92f15f608c44a7b4fdccf3f02bc5

I am introducing SSO via  JA-SIG CAS and pam-cas. I would like to
authenticate to IMAP using the cn (since that's what pam-cas will get when
it validates the CAS service ticket) but I still want the mailboxes to be
based on the mailNickname attribute.

Is there a way to have the user's mailbox be based on a different ldap
attribute than their authentication id?


Thanks for any pointers.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081111/f2803988/attachment.html 

From dwhite at olp.net  Tue Nov 11 12:47:39 2008
From: dwhite at olp.net (Dan White)
Date: Tue, 11 Nov 2008 11:47:39 -0600
Subject: basing user's mailbox name on different ldap attribute
	than	authentication id
In-Reply-To: <ebd0064c0811110924v1fcda82am3e0e2a3719940894@mail.gmail.com>
References: <ebd0064c0811110924v1fcda82am3e0e2a3719940894@mail.gmail.com>
Message-ID: <4919C53B.9080604@olp.net>

Hal Deadman wrote:
> I am working with a custom java webmail application that accesses 
> Cyrus imap configured with sasl/pam_ldap for authentication. The 
> user's login names for the webmail client are based on the ldap cn 
> attribute but the mailboxes in Cyrus are based on the ldap 
> mailNickname attribute. The webmail client passes the mailNickname 
> attribute as the username when it authenticates to Cyrus.
>
> example:
> cn=john.smith
> mailNickname=ea9d92f15f608c44a7b4fdccf3f02bc5
>
> I am introducing SSO via  JA-SIG CAS and pam-cas. I would like to 
> authenticate to IMAP using the cn (since that's what pam-cas will get 
> when it validates the CAS service ticket) but I still want the 
> mailboxes to be based on the mailNickname attribute. 
>
> Is there a way to have the user's mailbox be based on a different ldap 
> attribute than their authentication id? 

Perdition can do that, and probably several other IMAP proxies. 
Perdition can proxy pop3 and imap connections but does not proxy sieve 
connections.

Another option is to use the SASL ldapdb user canonicalization plugin, 
which is more of a generic solution, and can be used with most/all cyrus 
services.

- Dan

From morgan at orst.edu  Wed Nov 12 14:04:44 2008
From: morgan at orst.edu (Andrew Morgan)
Date: Wed, 12 Nov 2008 11:04:44 -0800 (PST)
Subject: Load balance multiple servers with common storage
In-Reply-To: <1226400855.25801.79.camel@darkstar.netcore.co.in>
References: <1226400855.25801.79.camel@darkstar.netcore.co.in>
Message-ID: <alpine.DEB.2.00.0811121058300.16600@shell2.onid.oregonstate.edu>

On Tue, 11 Nov 2008, ram wrote:

> I have been googling but couldnt see any concrete answer
> Is it possible to load balance multiple cyrus imapd connections with
> multiple servers connecting to same common storage
>
> Say , I mount the /var/spool/imap and /var/imap and the sieve dir from a
> SAN box on 2+ servers, Any user trying to access his mailbox will
> connect to any server using a h/w load balancer
> Irrespective of which server he connects to he will always see the same
> mailbox
>
> Is this a feasible solution. Will it not create locking issues on the
> mailboxes.db How many imap processes can a single mailboxes.db handle If
> I want to give a zero delay response.
> If there is requirement for more mailboxes , I just add more frontend
> boxes behind the load balancer.
>
> Can this work ?

You have to use an actual clustered file system solution to do this. 
Search the mailing list archives for "cyrus cluster" and you should find 
extensive discussions on this.

Some folks use a frontend proxy such as Perdition or nginx in combination 
with multiple replicated backends for high-availability in order to scale 
to large numbers of concurrent connections.  There are some tradeoffs with 
that solution also (cannot share mailboxes between backend servers).

Personally, I use the Cyrus built-in clustering (named "Murder") with 2 
backends and 3 frontends.  The 3 frontends are behind a ServerIron network 
load balancer.  The backends connect to a SAN, but they do not share the 
same LUNs.  This provides excellent scalability, but not 
high-availability.  If one of the backend servers dies, all the mailboxes 
it hosts will go offline until it is replaced.

 	Andy

From stovenator at gmail.com  Wed Nov 12 15:48:35 2008
From: stovenator at gmail.com (Mark Stover)
Date: Wed, 12 Nov 2008 14:48:35 -0600
Subject: Return order of Fetch items in 2.3.13
Message-ID: <48c67cb80811121248n5f912900oe792b7a72d720c16@mail.gmail.com>

I've upgraded a server from 2.3.7 to 2.3.13 (both were from Invoca RPMs) and
we've noticed that when fetching specific messages on 2.3.13 that the return
order is not in the same order as we requested.
In 2.3.7 that return order was in the order we asked to fetch items.

For example on 2.3.7:

. UID SORT (REVERSE DATE) US-ASCII ALL
* SORT 6 5 4 3 2 1
. OK Completed (6 msgs in 0.000 secs)
. UID FETCH 5,4 (UID FLAGS INTERNALDATE RFC822.SIZE ENVELOPE
BODY[HEADER.FIELDS (CONTENT-TYPE)])
* 5 FETCH (FLAGS (\Recent) UID 5 INTERNALDATE "12-Nov-2008 08:37:09 -0500"
RFC822.SIZE 699 ENVELOPE ("Wed, 12 Nov 2008 08:37:09 -0500 (EST)" "Test
Message" ((NIL NIL "test237" "domain.local")) ((NIL NIL "test237"
"domain.local")) ((NIL NIL "test237" "domain.local")) ((NIL NIL "test237"
"domain.local")) NIL NIL NIL
"<20081112133709.AA8784017C at test237imap.domain.local>") BODY[HEADER.FIELDS
(CONTENT-TYPE)] {2}

)
* 4 FETCH (FLAGS (\Recent) UID 4 INTERNALDATE "12-Nov-2008 08:37:07 -0500"
RFC822.SIZE 699 ENVELOPE ("Wed, 12 Nov 2008 08:37:07 -0500 (EST)" "Test
Message" ((NIL NIL "test237" "domain.local")) ((NIL NIL "test237"
"domain.local")) ((NIL NIL "test237" "domain.local")) ((NIL NIL "test237"
"domain.local")) NIL NIL NIL
"<20081112133707.364044017C at test237imap.domain.local>") BODY[HEADER.FIELDS
(CONTENT-TYPE)] {2}

)
. OK Completed (0.000 sec)



Example on 2.3.13:

. UID SORT (REVERSE DATE) US-ASCII ALL
* SORT 5 4 3 2 1
. OK Completed (5 msgs in 0.000 secs)
. UID FETCH 5,4 (UID FLAGS INTERNALDATE RFC822.SIZE ENVELOPE
BODY[HEADER.FIELDS (CONTENT-TYPE)])
* 4 FETCH (FLAGS (\Recent) UID 4 INTERNALDATE "12-Nov-2008 12:56:36 -0600"
RFC822.SIZE 750 ENVELOPE ("Wed, 12 Nov 2008 12:56:39 -0600" "subj test
subject" ((NIL NIL "test2313" "domain.local")) ((NIL NIL "test2313"
"domain.local")) ((NIL NIL "test2313" "domain.local")) ((NIL NIL "test2313"
"domain.local")) NIL NIL NIL NIL) BODY[HEADER.FIELDS (CONTENT-TYPE)] {95}
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_66D8_D9376028.6CA0E718"

)
* 5 FETCH (FLAGS (\Recent) UID 5 INTERNALDATE "12-Nov-2008 12:56:36 -0600"
RFC822.SIZE 750 ENVELOPE ("Wed, 12 Nov 2008 12:56:40 -0600" "subj test
subject" ((NIL NIL "test2313" "domain.local")) ((NIL NIL "test2313"
"domain.local")) ((NIL NIL "test2313" "domain.local")) ((NIL NIL "test2313"
"domain.local")) NIL NIL NIL NIL) BODY[HEADER.FIELDS (CONTENT-TYPE)] {95}
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_6551_DF97AA18.3ED767D6"

)
. OK Completed (0.000 sec)

Is this something that changed? Was it just chance that it worked before?
The IMAP spec doesn't mention a return order for items fetched, so I'm not
sure if the return is something we can count on.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081112/90b2845a/attachment.html 

From stovenator at gmail.com  Wed Nov 12 18:57:10 2008
From: stovenator at gmail.com (Mark Stover)
Date: Wed, 12 Nov 2008 17:57:10 -0600
Subject: Return order of Fetch items in 2.3.13
Message-ID: <48c67cb80811121557i3d10efcy1c3097998983dd34@mail.gmail.com>

I found this item in the release notes for 2.3.10:

 *  Improve the performance of commands that operate on sequence-sets. The
    sequence-set is now parsed only once, and the commands operate on a
sorted
    list of seq-ranges.


Does this mean that any sequence sets now passed in are acted upon in a
sorted order? Does this mean we can no longer rely upon the results of an
operation utilizing a sequence-set to be returned in the order in which they
were presented?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081112/84a3f773/attachment.html 

From davidk at cs.umass.edu  Wed Nov 12 20:32:06 2008
From: davidk at cs.umass.edu (David Korpiewski)
Date: Wed, 12 Nov 2008 20:32:06 -0500
Subject: Load balance multiple servers with common storage
In-Reply-To: <alpine.DEB.2.00.0811121058300.16600@shell2.onid.oregonstate.edu>
References: <1226400855.25801.79.camel@darkstar.netcore.co.in>
	<alpine.DEB.2.00.0811121058300.16600@shell2.onid.oregonstate.edu>
Message-ID: <491B8396.2020700@cs.umass.edu>

The Mac OSX 10.5 Leopard series of server software includes a 
"clustering" mail server that is a modified version of Cyrus and 
postfix.  This uses their XSAN technologies as the shared backend that 
holds the files.  It isn't cheap however.  Between the Xservers, Qlogic 
Fibre switch, XRAID storage units, you are easily dropping 15k.

I have been building one of these and on the front end I use a Barracuda 
300 load balancer.  So far so good.

Good luck.

David


Andrew Morgan wrote:
> On Tue, 11 Nov 2008, ram wrote:
> 
>> I have been googling but couldnt see any concrete answer
>> Is it possible to load balance multiple cyrus imapd connections with
>> multiple servers connecting to same common storage
>>
>> Say , I mount the /var/spool/imap and /var/imap and the sieve dir from a
>> SAN box on 2+ servers, Any user trying to access his mailbox will
>> connect to any server using a h/w load balancer
>> Irrespective of which server he connects to he will always see the same
>> mailbox
>>
>> Is this a feasible solution. Will it not create locking issues on the
>> mailboxes.db How many imap processes can a single mailboxes.db handle If
>> I want to give a zero delay response.
>> If there is requirement for more mailboxes , I just add more frontend
>> boxes behind the load balancer.
>>
>> Can this work ?
> 
> You have to use an actual clustered file system solution to do this. 
> Search the mailing list archives for "cyrus cluster" and you should find 
> extensive discussions on this.
> 
> Some folks use a frontend proxy such as Perdition or nginx in combination 
> with multiple replicated backends for high-availability in order to scale 
> to large numbers of concurrent connections.  There are some tradeoffs with 
> that solution also (cannot share mailboxes between backend servers).
> 
> Personally, I use the Cyrus built-in clustering (named "Murder") with 2 
> backends and 3 frontends.  The 3 frontends are behind a ServerIron network 
> load balancer.  The backends connect to a SAN, but they do not share the 
> same LUNs.  This provides excellent scalability, but not 
> high-availability.  If one of the backend servers dies, all the mailboxes 
> it hosts will go offline until it is replaced.
> 
>  	Andy
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

-- 
===========================================
David Korpiewski
Software Specialist I
CSCF - Computer Science Computing Facility
Department of Computer Science
Phone: 413-545-4319
Fax:   413-577-2285
===========================================

From gombasg at sztaki.hu  Thu Nov 13 06:10:59 2008
From: gombasg at sztaki.hu (Gabor Gombas)
Date: Thu, 13 Nov 2008 12:10:59 +0100
Subject: Return order of Fetch items in 2.3.13
In-Reply-To: <48c67cb80811121248n5f912900oe792b7a72d720c16@mail.gmail.com>
References: <48c67cb80811121248n5f912900oe792b7a72d720c16@mail.gmail.com>
Message-ID: <20081113111059.GB24894@boogie.lpds.sztaki.hu>

On Wed, Nov 12, 2008 at 02:48:35PM -0600, Mark Stover wrote:

> The IMAP spec doesn't mention a return order for items fetched, so I'm not
> sure if the return is something we can count on.

>From RFC3501:

sequence-set    = (seq-number / seq-range) *("," sequence-set)
                    ; set of seq-number values, regardless of order.
                    ; Servers MAY coalesce overlaps and/or execute the
                    ; sequence in any order.
                    ; Example: a message sequence number set of
                    ; 2,4:7,9,12:* for a mailbox with 15 messages is
                    ; equivalent to 2,4,5,6,7,9,12,13,14,15
                    ; Example: a message sequence number set of *:4,5:7
                    ; for a mailbox with 10 messages is equivalent to
                    ; 10,9,8,7,6,5,4,5,6,7 and MAY be reordered and
                    ; overlap coalesced to be 4,5,6,7,8,9,10.

Gabor

-- 
     ---------------------------------------------------------
     MTA SZTAKI Computer and Automation Research Institute
                Hungarian Academy of Sciences
     ---------------------------------------------------------

From stockton at netbg.com  Thu Nov 13 10:50:49 2008
From: stockton at netbg.com (Stoyan Tzalev)
Date: Thu, 13 Nov 2008 17:50:49 +0200
Subject: Thunderbird with cyrus-imapd: Why chose client certificate?
In-Reply-To: <alpine.LRH.2.00.0811051651060.28401@angerer.hrz.tu-chemnitz.de>
References: <alpine.LRH.2.00.0811051651060.28401@angerer.hrz.tu-chemnitz.de>
Message-ID: <200811131750.49503.stockton@netbg.com>

I can confirm this on two separate cyrus installations - 2.3.7 and 2.3.12. I'm 
pretty sure both servers does NOT request any client certificate. One more 
thing - looks like this happens only when you have at least one client cert 
installed. 
I'll try to gather more debug info and will report back tomorrow.

Regards,
Stoyan


On Wednesday 05 November 2008 17:58:51 Frank Richter wrote:
> Hi,
> I've a cyrus-imapd 2.3.12 installation with these options in imapd.conf
>
> tls_cert_file: /etc/exim/etc/server.crt
> tls_key_file:  /etc/exim/etc/server.key
> tls_ca_file:   /etc/pki/tls/certs/ca-chain.crt
> tls_require_cert: 0
>
> SSL and STARTTLS are working fine.
>
> I've imported a personal S/MIME certificate to thunderbird. When
> connecting to the IMAP server (using STARTTLS), thunderbird asks me to
> select a client cert, showing (translated from German):
>     This website (!) requires a certificate for identification ...
>     Chose a certificate ...
>
> The server doesn't and shouldn't accept client certificates.
> So who is wrong? My configuration, thunderbird ...
>
> I hope somebody will enlighten me ...
>
> Thanks,
> Frank



From eddy.beliveau at hec.ca  Thu Nov 13 11:51:27 2008
From: eddy.beliveau at hec.ca (Eddy Beliveau)
Date: Thu, 13 Nov 2008 11:51:27 -0500
Subject: IMAP/POP traffic accounting
In-Reply-To: <1164900951.4502.68.camel@mjaw-mobile.ipartners.pl>
References: <00ac01c713e3$96695d60$4e099d8e@neptune>
	<1164900951.4502.68.camel@mjaw-mobile.ipartners.pl>
Message-ID: <491C5B0F.1010008@hec.ca>

Hi!

By browsing archives, I find this current thread.

We are using cyrus-imapd 2.2.13 and it works well  :-)

I would also like to add statistics to pop3d.c

Can you please provide the patch that was used to get this:
Nov 30 16:27:31 mail1 pop3[19762]: stats: t63877a 8 663454 0 0

It would be valuable to our helpdesk staff.

Many thanks,

Have a nice day
Eddy

-------- Message original --------
Sujet : Re: IMAP/POP traffic accounting
De : Miros?aw Jaworski <mjaw at ikp.pl>
Pour : Anthony Tibbs <anthony-list at tibbs.ca>
Copie ? : info-cyrus at lists.andrew.cmu.edu
Date : 2006-11-30 10:35

> On Wed, 2006-11-29 at 13:23 -0500, Anthony Tibbs wrote:
>> I believe there was some mention of this in the past, but I'm wondering 
>> whether there are any known efforts to implement network traffic accounting 
>> in the later versions of Cyrus, or if this is still something that hasn't 
>> been dealt with.  I am pondering possibly tackling this, but I'm not really 
>> familiar with the Cyrus code and would rather not reinvent the wheel if it's 
>> already in the works.
> 
> Well, 'effort' is definitely too big word for the hack we use.
> Our support was used to some old popper log format, so we have made
> hack resulting in such lines:
> 
> User who (downloaded and) deleted 8 messages, 663454 bytes total.
> 
> Nov 30 16:27:16 mail1 pop3[19762]: login: [83.15.90.206] t63877a
> plaintext User logged in
> [...]
> Nov 30 16:27:31 mail1 pop3[19762]: stats: t63877a 8 663454 0 0
> 
> User who didn't (downloaded and) deleted any messages; has 35 messages
> in his INBOX, 10785042 bytes total:
> 
> Nov 30 16:18:59 mail1 pop3[19360]: login: [83.31.77.74] po30533
> plaintext User logged in
> [...]
> Nov 30 16:19:00 mail1 pop3[19360]: stats: po30533 0 0 35 10785042
> 
> 
> While it makes sense to have such logs from pop3 daemon doing simple
> operations on only one folder it has none when it comes to IMAP.
> What log can i possibly create after user connects to imap, applies
> his rules to an INBOX ( moving most of the messages to various folders,
> ie. marking them for deletion, not deleting them )? What when he reads
> some messages without deleting them?
> 
> M.
> 

-- 
Eddy Beliveau
HEC Montreal
Montreal (Quebec)
Canada

From list at joreybump.com  Thu Nov 13 12:06:01 2008
From: list at joreybump.com (Jorey Bump)
Date: Thu, 13 Nov 2008 12:06:01 -0500
Subject: Thunderbird with cyrus-imapd: Why chose client certificate?
In-Reply-To: <alpine.LRH.2.00.0811051651060.28401@angerer.hrz.tu-chemnitz.de>
References: <alpine.LRH.2.00.0811051651060.28401@angerer.hrz.tu-chemnitz.de>
Message-ID: <491C5E79.7000205@joreybump.com>

Frank Richter wrote, at 11/05/2008 10:58 AM:
> Hi,
> I've a cyrus-imapd 2.3.12 installation with these options in imapd.conf
> 
> tls_cert_file: /etc/exim/etc/server.crt
> tls_key_file:  /etc/exim/etc/server.key
> tls_ca_file:   /etc/pki/tls/certs/ca-chain.crt
> tls_require_cert: 0
> 
> SSL and STARTTLS are working fine.
> 
> I've imported a personal S/MIME certificate to thunderbird. When 
> connecting to the IMAP server (using STARTTLS), thunderbird asks me to 
> select a client cert, showing (translated from German):
>     This website (!) requires a certificate for identification ...
>     Chose a certificate ...
> 
> The server doesn't and shouldn't accept client certificates.
> So who is wrong? My configuration, thunderbird ...
> 
> I hope somebody will enlighten me ...

Try appending the CA's root certificate for your personal S/MIME
certificate to the file specified in tls_ca_file.

FWIW, I use the bundle provided by curl
(/usr/share/curl/curl-ca-bundle.crt on my system), because it's in the
correct format. You might have to append additional certificates,
depending on your needs.

This seems to be related to Cyrus' behaviour whenever tls_ca_file is
defined. The best solution seems to be to use a general purpose bundle,
though I haven't tested it with client certificates.


From goetz at shomitefo.de  Thu Nov 13 15:57:44 2008
From: goetz at shomitefo.de (Goetz Babin-Ebell)
Date: Thu, 13 Nov 2008 21:57:44 +0100
Subject: Thunderbird with cyrus-imapd: Why chose client certificate?
In-Reply-To: <alpine.LRH.2.00.0811051651060.28401@angerer.hrz.tu-chemnitz.de>
References: <alpine.LRH.2.00.0811051651060.28401@angerer.hrz.tu-chemnitz.de>
Message-ID: <491C94C8.3060506@shomitefo.de>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Frank Richter wrote:
| Hi,
| I've a cyrus-imapd 2.3.12 installation with these options in imapd.conf
|
| tls_cert_file: /etc/exim/etc/server.crt
| tls_key_file:  /etc/exim/etc/server.key
| tls_ca_file:   /etc/pki/tls/certs/ca-chain.crt
| tls_require_cert: 0
|
| SSL and STARTTLS are working fine.
|
| I've imported a personal S/MIME certificate to thunderbird. When
| connecting to the IMAP server (using STARTTLS), thunderbird asks me to
| select a client cert, showing (translated from German):
|     This website (!) requires a certificate for identification ...
|     Chose a certificate ...
|
| The server doesn't and shouldn't accept client certificates.
| So who is wrong? My configuration, thunderbird ...

If you don't want to do client authentication, why do you set
tls_ca_file at all ?

If you really need a CA file with your server cert,
you can include it in your tls_cert_file.
And you only need to do that if you have your server
cert signed by an intermediate CA and not a root
certificate:

- ---------    --------------       --------
|root CA| -> |intermediate| ->... |server|
- ---------    --------------       --------
do not       include in           in
include      tls_cert_file        tls_cert_file


Bye

Goetz

- --
DMCA: The greed of the few outweighs the freedom of the many
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJHJTI2iGqZUF3qPYRAnl9AJ43rnyStSA+3R1rQxEBKRpLxFAklACffN4a
nvsQq/nE12+gTdQttGDyn0M=
=ZlAs
-----END PGP SIGNATURE-----

From list at joreybump.com  Thu Nov 13 16:40:28 2008
From: list at joreybump.com (Jorey Bump)
Date: Thu, 13 Nov 2008 16:40:28 -0500
Subject: Thunderbird with cyrus-imapd: Why chose client certificate?
In-Reply-To: <491C94C8.3060506@shomitefo.de>
References: <alpine.LRH.2.00.0811051651060.28401@angerer.hrz.tu-chemnitz.de>
	<491C94C8.3060506@shomitefo.de>
Message-ID: <491C9ECC.1060100@joreybump.com>

Goetz Babin-Ebell wrote, at 11/13/2008 03:57 PM:

> If you don't want to do client authentication, why do you set
> tls_ca_file at all ?

Hmm, I do it to suppress these errors:

 TLS server engine: cannot load CA data

Setting tls_ca_file to a properly formatted bundle suppresses the error,
but now i'm wondering if that's a good idea. Will this expose my server
in any way? I don't see how, but the documentation (and error) is very
sparse:

 tls_ca_file: <none>
    File containing one or more Certificate Authority (CA) certificates.

There's no mention of client certificate authentication.


From goetz at shomitefo.de  Thu Nov 13 18:49:21 2008
From: goetz at shomitefo.de (Goetz Babin-Ebell)
Date: Fri, 14 Nov 2008 00:49:21 +0100
Subject: Thunderbird with cyrus-imapd: Why chose client certificate?
In-Reply-To: <491C9ECC.1060100@joreybump.com>
References: <alpine.LRH.2.00.0811051651060.28401@angerer.hrz.tu-chemnitz.de>
	<491C94C8.3060506@shomitefo.de> <491C9ECC.1060100@joreybump.com>
Message-ID: <491CBD01.4000603@shomitefo.de>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jorey Bump wrote:
| Goetz Babin-Ebell wrote, at 11/13/2008 03:57 PM:
|
|> If you don't want to do client authentication, why do you set
|> tls_ca_file at all ?
|
| Hmm, I do it to suppress these errors:
|
|  TLS server engine: cannot load CA data

from 2.3.11 (imap/tls.c):

~    if ((!SSL_CTX_load_verify_locations(s_ctx, CAfile, CApath)) ||
~        (!SSL_CTX_set_default_verify_paths(s_ctx))) {
~        /* just a warning since this is only necessary for client auth*/
~        syslog(LOG_NOTICE,"TLS server engine: cannot load CA data");
~    }

It is not an error.
It is simply noise to confuse people who don't know the details.
Since you don't do client authentication you can ignore
this output or hack your cyrus to shut up.

The code handling SSL client authentication and for this is simply bad
and in need for a rewrite.

There is an old patch /drom 2005) that never was integrated:
https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2642

| Setting tls_ca_file to a properly formatted bundle suppresses the error,
| but now i'm wondering if that's a good idea. Will this expose my server
| in any way? I don't see how, but the documentation (and error) is very
| sparse:
|
|  tls_ca_file: <none>
|     File containing one or more Certificate Authority (CA) certificates.
|
| There's no mention of client certificate authentication.

Unfortunately it is not documented that you normally only need
CA certificates if you do client authentication.

Basically setting it adds some useless overhead in the handshake
and a window the user has to click away if he has client certs
stored in his IMAP client...


Bye

Goetz

- --
DMCA: The greed of the few outweighs the freedom of the many
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJHL0B2iGqZUF3qPYRAkLlAJ9z9u1CyeWoQQtZ5Mr/WfnuSMdUBwCdEY4u
QBC+7o3kEVpx4+u7iICBGpU=
=1/U3
-----END PGP SIGNATURE-----

From frank.richter at hrz.tu-chemnitz.de  Fri Nov 14 03:20:02 2008
From: frank.richter at hrz.tu-chemnitz.de (Frank Richter)
Date: Fri, 14 Nov 2008 09:20:02 +0100 (MET)
Subject: Thunderbird with cyrus-imapd: Why chose client certificate?
In-Reply-To: <491C94C8.3060506@shomitefo.de>
References: <alpine.LRH.2.00.0811051651060.28401@angerer.hrz.tu-chemnitz.de>
	<491C94C8.3060506@shomitefo.de>
Message-ID: <alpine.LRH.2.00.0811140912020.14647@angerer.hrz.tu-chemnitz.de>

> | Hi,
> | I've a cyrus-imapd 2.3.12 installation with these options in imapd.conf
> |
> | tls_cert_file: /etc/exim/etc/server.crt
> | tls_key_file:  /etc/exim/etc/server.key
> | tls_ca_file:   /etc/pki/tls/certs/ca-chain.crt
> | tls_require_cert: 0
> |
> | SSL and STARTTLS are working fine.
> |
> | I've imported a personal S/MIME certificate to thunderbird. When
> | connecting to the IMAP server (using STARTTLS), thunderbird asks me to
> | select a client cert, showing (translated from German):
> |     This website (!) requires a certificate for identification ...
> |     Chose a certificate ...
> |
> | The server doesn't and shouldn't accept client certificates.
> | So who is wrong? My configuration, thunderbird ...
>
> If you don't want to do client authentication, why do you set
> tls_ca_file at all ?
>
> If you really need a CA file with your server cert,
> you can include it in your tls_cert_file.
> And you only need to do that if you have your server
> cert signed by an intermediate CA and not a root
> certificate:
>
> - ---------    --------------       --------
> |root CA| -> |intermediate| ->... |server|
> - ---------    --------------       --------
> do not       include in           in
> include      tls_cert_file        tls_cert_file

Thanks, but ...
I did this - not defining a tls_ca_file, and adding my CA chain to 
tls_cert_file. I'm getting the same behavior - Thunderbird is asking for a 
client cert. And the log entry:
   TLS server engine: No CA file specified. Client side certs may not work

Regards,
Frank
-- 
E-Mail: Frank.Richter at hrz.tu-chemnitz.de  http://www.tu-chemnitz.de/~fri/
Work:   Computing Services,  Chemnitz University of Technology,  Germany

From list at joreybump.com  Fri Nov 14 08:40:58 2008
From: list at joreybump.com (Jorey Bump)
Date: Fri, 14 Nov 2008 08:40:58 -0500
Subject: Thunderbird with cyrus-imapd: Why chose client certificate?
In-Reply-To: <alpine.LRH.2.00.0811140912020.14647@angerer.hrz.tu-chemnitz.de>
References: <alpine.LRH.2.00.0811051651060.28401@angerer.hrz.tu-chemnitz.de>	<491C94C8.3060506@shomitefo.de>
	<alpine.LRH.2.00.0811140912020.14647@angerer.hrz.tu-chemnitz.de>
Message-ID: <491D7FEA.2090105@joreybump.com>

Frank Richter wrote, at 11/14/2008 03:20 AM:

> Thanks, but ...
> I did this - not defining a tls_ca_file, and adding my CA chain to 
> tls_cert_file. I'm getting the same behavior - Thunderbird is asking for a 
> client cert. And the log entry:
>    TLS server engine: No CA file specified. Client side certs may not work

Just a thought: Do you have "Use secure authentication" checked in
Thunderbird's server settings for that account? It's always annoyed me
that you can't explicitly set which "secure" mechanism to use (CRAM-MD5,
DIGEST-MD5, GSSAPI, etc.). I wouldn't be surprised if it's trumping the
other mechanisms because you have a client certificate installed.


From test at remedial-teacher.nl  Sun Nov 16 18:13:08 2008
From: test at remedial-teacher.nl (Test)
Date: Mon, 17 Nov 2008 00:13:08 +0100
Subject: Duplicate delivery
Message-ID: <20081117001003.B159.EE63E960@remedial-teacher.nl>

All,

I am running in a stupid thing and am probably overlooking something:

I'm running web-cyradm, postfix, cyrus-imapd...

I have multiple domains with an info@ adres (info at domain1.com,
info at domain2.com)

When i send an email to info at domain1.com it also gets delivered to
info at domain2.com which obviously is not the way it should be...

The 2 info accounts have different accountuser names (infodom1 and
infodom2) so as far as i know that should do the trick.

But as stated before mail gets delivered to both accounts...

What am i missing here ?


-- 
Test <test at remedial-teacher.nl>


From ram at netcore.co.in  Mon Nov 17 00:10:37 2008
From: ram at netcore.co.in (ram)
Date: Mon, 17 Nov 2008 10:40:37 +0530
Subject: sieve vacation reposnse gives no response even after end of days
	specified
Message-ID: <1226898637.5877.72.camel@darkstar.netcore.co.in>

I have a default cyrus installation with cyrus-imapd-2.3 on centos 5 
People use sieve to set their vacation responses 

As per the configuration no response is sent for 1 day 
---------
cat  /usr/sieve/i/it/default.script

require "vacation";
# Vacation
vacation :days 1 :addresses "it at example.com" "this is a vacation
response";
------------------


The first vacation response seems to go perfectly fine , but even after
1 day the response is not sent again

What could be the issue ? how do I debug this ? 





From hans.moser at ofd-sth.niedersachsen.de  Mon Nov 17 11:27:02 2008
From: hans.moser at ofd-sth.niedersachsen.de (Marc Patermann)
Date: Mon, 17 Nov 2008 17:27:02 +0100
Subject: Duplicate delivery
In-Reply-To: <20081117001003.B159.EE63E960@remedial-teacher.nl>
References: <20081117001003.B159.EE63E960@remedial-teacher.nl>
Message-ID: <49219B56.8080006@ofd-sth.niedersachsen.de>

Test schrieb:

> I am running in a stupid thing and am probably overlooking something:
> 
> I'm running web-cyradm, postfix, cyrus-imapd...
> 
> I have multiple domains with an info@ adres (info at domain1.com,
> info at domain2.com)
> 
> When i send an email to info at domain1.com it also gets delivered to
> info at domain2.com which obviously is not the way it should be...
> 
> The 2 info accounts have different accountuser names (infodom1 and
> infodom2) so as far as i know that should do the trick.
> 
> But as stated before mail gets delivered to both accounts...
You should check your Postfix config. this seems to a MTA/MDA issue.
If you map mail address (info at domai1.com) to mailboxname (infodom1) 
there must be something wrong.


Marc

From jkordani at intlogsys.com  Mon Nov 17 14:14:12 2008
From: jkordani at intlogsys.com (Joshua Kordani)
Date: Mon, 17 Nov 2008 14:14:12 -0500
Subject: signaled to death by 7
Message-ID: <4921C284.7070406@intlogsys.com>

Greetings all, I've come up against a hairy little problem and could use 
some help

An imap process keeps kicking out when a particular user tries to access 
his mail.

mail log reports this:
master[8762]: process 26353 exited, signaled to death by 7

The process in question is the imap process that is handling the 
particular user's connection.

When I use telnet to access this user's mail, the server terminates the 
connection as soon as i make a select mailboxname request.  I can list 
them just fine.  It happens to all mailboxes this user owns.  I've 
restarted the cyrus master process.  I've turned up logging on the mail 
facility all the way up, and the only thing that is reported is that the 
connection terminates, and that the process is signaled to death by 7. 
It only happens with this user, and i've even run a reconstruct.  Where 
should I look next?

(as an aside, in my efforts to disable the imaps service which we were 
not using, but was filling up logs, i managed to turn off the pop3 
service and I can't get it back on... I only commented out the imaps 
entry in /etc/cyrus.conf and sighupped cyrus master, so I don't know...)

Any pointers would be greatly appreciated!

From jkordani at intlogsys.com  Mon Nov 17 14:22:30 2008
From: jkordani at intlogsys.com (Joshua Kordani)
Date: Mon, 17 Nov 2008 14:22:30 -0500
Subject: signaled to death by 7
In-Reply-To: <4921C284.7070406@intlogsys.com>
References: <4921C284.7070406@intlogsys.com>
Message-ID: <4921C476.5030400@intlogsys.com>

I made a breakthrough on the signaled to death by 7 error.....
I noticed in the log that the process crashed right after the user's 
seen file was accessed, so I made a backup of it and deleted it, and it 
looks like that did the trick... so the next question in this thread... 
since this was a user with a large amount of mail, can that seen state 
file be recovered in some way?

still trying to turn pop back on too...

Joshua Kordani wrote:
> Greetings all, I've come up against a hairy little problem and could use 
> some help
> 
> An imap process keeps kicking out when a particular user tries to access 
> his mail.
> 
> mail log reports this:
> master[8762]: process 26353 exited, signaled to death by 7
> 
> The process in question is the imap process that is handling the 
> particular user's connection.
> 
> When I use telnet to access this user's mail, the server terminates the 
> connection as soon as i make a select mailboxname request.  I can list 
> them just fine.  It happens to all mailboxes this user owns.  I've 
> restarted the cyrus master process.  I've turned up logging on the mail 
> facility all the way up, and the only thing that is reported is that the 
> connection terminates, and that the process is signaled to death by 7. 
> It only happens with this user, and i've even run a reconstruct.  Where 
> should I look next?
> 
> (as an aside, in my efforts to disable the imaps service which we were 
> not using, but was filling up logs, i managed to turn off the pop3 
> service and I can't get it back on... I only commented out the imaps 
> entry in /etc/cyrus.conf and sighupped cyrus master, so I don't know...)
> 
> Any pointers would be greatly appreciated!
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
> 

From wes at umich.edu  Mon Nov 17 14:23:47 2008
From: wes at umich.edu (Wesley Craig)
Date: Mon, 17 Nov 2008 14:23:47 -0500
Subject: signaled to death by 7
In-Reply-To: <4921C284.7070406@intlogsys.com>
References: <4921C284.7070406@intlogsys.com>
Message-ID: <4807EE22-3CD6-4B01-8AA2-3B8C4CEA2F4D@umich.edu>

On 17 Nov 2008, at 14:14, Joshua Kordani wrote:
> An imap process keeps kicking out when a particular user tries to  
> access
> his mail.
>
> mail log reports this:
> master[8762]: process 26353 exited, signaled to death by 7
>
> The process in question is the imap process that is handling the
> particular user's connection.
>
> When I use telnet to access this user's mail, the server terminates  
> the
> connection as soon as i make a select mailboxname request.  I can list
> them just fine.  It happens to all mailboxes this user owns.  I've
> restarted the cyrus master process.  I've turned up logging on the  
> mail
> facility all the way up, and the only thing that is reported is  
> that the
> connection terminates, and that the process is signaled to death by 7.
> It only happens with this user, and i've even run a reconstruct.   
> Where
> should I look next?

Attach gdb (or whatever) to the process after authN, before select.   
I'd guess the mailbox needs to be reconstructed, for whatever reason.

> (as an aside, in my efforts to disable the imaps service which we were
> not using, but was filling up logs, i managed to turn off the pop3
> service and I can't get it back on... I only commented out the imaps
> entry in /etc/cyrus.conf and sighupped cyrus master, so I don't  
> know...)

I've seen that in older versions (what version are you running?), but  
haven't been able to reproduce it in recent versions.  The problem,  
generally speaking, is that master runs as cyrus, so it's can't open  
new low-numbered ports. The bug is that it thinks pop3 is a new.

:wes

From morgan at orst.edu  Mon Nov 17 15:06:05 2008
From: morgan at orst.edu (Andrew Morgan)
Date: Mon, 17 Nov 2008 12:06:05 -0800 (PST)
Subject: signaled to death by 7
In-Reply-To: <4921C476.5030400@intlogsys.com>
References: <4921C284.7070406@intlogsys.com> <4921C476.5030400@intlogsys.com>
Message-ID: <alpine.DEB.2.00.0811171205420.19819@shell.onid.oregonstate.edu>

On Mon, 17 Nov 2008, Joshua Kordani wrote:

> I made a breakthrough on the signaled to death by 7 error.....
> I noticed in the log that the process crashed right after the user's
> seen file was accessed, so I made a backup of it and deleted it, and it
> looks like that did the trick... so the next question in this thread...
> since this was a user with a large amount of mail, can that seen state
> file be recovered in some way?
>
> still trying to turn pop back on too...

Search google for "skiplist.py", which is a python based skiplist recovery 
tool.

 	Andy

From antalarico at gmail.com  Tue Nov 18 05:28:02 2008
From: antalarico at gmail.com (Antonio Talarico)
Date: Tue, 18 Nov 2008 11:28:02 +0100
Subject: Folder allowed character
Message-ID: <a64143230811180228k188a1366k4191b630064062ee@mail.gmail.com>

Hi
Where i can found a list with allowed character for a folder name?

-- 
Antonio Talarico

From =?ISO-8859-1?Q?=3F=3F=3F=3F=3F=3F=3F=3F=3F_=3F=3F=3F=3F=3F=3F=3F=3F?=  Tue Nov 18 06:28:18 2008
From: =?ISO-8859-1?Q?=3F=3F=3F=3F=3F=3F=3F=3F=3F_=3F=3F=3F=3F=3F=3F=3F=3F?= (=?ISO-8859-1?Q?=3F=3F=3F=3F=3F=3F=3F=3F=3F_=3F=3F=3F=3F=3F=3F=3F=3F?=)
Date: Tue, 18 Nov 2008 16:28:18 +0500
Subject: Unknown code IMAP 5,9,11,45,46,etc.
Message-ID: <4922A6D2.9020509@chelcom.ru>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi! Sorry for my English
I have a problem with cyrus-imapd 2.3.13 building from ports on FreeBSD 7.0
When I recieve notify from IMAPd about "Over quota" or any other in my
mailbox, I see "Unknown code IMAP 46(45)" or any other "Unknown imap
code" instead of clear text message.
in my config.h i see #define HAS_STRERROR, and all looks like ok, but
this is still not work.
Please help me anyone


- -------------------
Alexander R. Shakhmukhametov
Russia.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkkiptIACgkQQnJBf+ilOuuFyQCgho2Ik/Jhk2mgPfEjvWxkRkGC
90QAn3Nw05YInSGouA1aNxkD/K4MJLbI
=4mo2
-----END PGP SIGNATURE-----

From brennan at columbia.edu  Tue Nov 18 08:58:34 2008
From: brennan at columbia.edu (Joseph Brennan)
Date: Tue, 18 Nov 2008 08:58:34 -0500
Subject: Folder allowed character
In-Reply-To: <a64143230811180228k188a1366k4191b630064062ee@mail.gmail.com>
References: <a64143230811180228k188a1366k4191b630064062ee@mail.gmail.com>
Message-ID: <F1F50D01603316AB529F3044@sodor.cc.columbia.edu>



--On Tuesday, November 18, 2008 11:28 +0100 Antonio Talarico 
<antalarico at gmail.com> wrote:

> Hi
> Where i can found a list with allowed character for a folder name?
>


RFC 3501, section 5.1 to 5.1.3

Joseph Brennan
Columbia University Information Technology




From wes at umich.edu  Tue Nov 18 13:38:31 2008
From: wes at umich.edu (Wesley Craig)
Date: Tue, 18 Nov 2008 13:38:31 -0500
Subject: Folder allowed character
In-Reply-To: <a64143230811180228k188a1366k4191b630064062ee@mail.gmail.com>
References: <a64143230811180228k188a1366k4191b630064062ee@mail.gmail.com>
Message-ID: <103CFD9D-FDAE-4D16-B404-2F1E1F6144B8@umich.edu>

On 18 Nov 2008, at 05:28, Antonio Talarico wrote:
> Where i can found a list with allowed character for a folder name?

./imap/mboxname.c:#define GOODCHARS " #$'+,-. 
0123456789:=@ABCDEFGHIJKLMNOPQRSTUVWXYZ_abcdefghijklmnopqrstuvwxyz~"

:wes

From wes at umich.edu  Tue Nov 18 13:40:03 2008
From: wes at umich.edu (Wesley Craig)
Date: Tue, 18 Nov 2008 13:40:03 -0500
Subject: Unknown code IMAP 5,9,11,45,46,etc.
In-Reply-To: <4922A6D2.9020509@chelcom.ru>
References: <4922A6D2.9020509@chelcom.ru>
Message-ID: <3E229B81-27BD-4ED3-AC27-080C98B7239D@umich.edu>

On 18 Nov 2008, at 06:28, ????????? ???????????? wrote:
> I have a problem with cyrus-imapd 2.3.13 building from ports on  
> FreeBSD 7.0
> When I recieve notify from IMAPd about "Over quota" or any other in my
> mailbox, I see "Unknown code IMAP 46(45)" or any other "Unknown imap
> code" instead of clear text message.
> in my config.h i see #define HAS_STRERROR, and all looks like ok, but
> this is still not work.

You're linking with an incompatible com_err.  Try ./configure --with- 
com_err=yes and see if that helps.

:wes

From jkordani at intlogsys.com  Tue Nov 18 15:47:56 2008
From: jkordani at intlogsys.com (Joshua Kordani)
Date: Tue, 18 Nov 2008 15:47:56 -0500
Subject: signaled to death by 7
In-Reply-To: <4807EE22-3CD6-4B01-8AA2-3B8C4CEA2F4D@umich.edu>
References: <4921C284.7070406@intlogsys.com>
	<4807EE22-3CD6-4B01-8AA2-3B8C4CEA2F4D@umich.edu>
Message-ID: <492329FC.2080008@intlogsys.com>

This might sound silly, but I'm a rather junior systems admin and I'm 
very new to cyrus admin, so i don't know what version we're running, but 
its at least a release or two old.

I got everything back up and running... when I said earlier that I had 
already tried restarting the cyrus master process... what I was really 
doing was giving it the hangup signal thinking that it would reread the 
configs, which it wasn't doing... so I had to use the /sbin/services 
whateveritwascalled restart, and that did the trick.

Thanks for your responses!
Josh K.

Wesley Craig wrote:
> On 17 Nov 2008, at 14:14, Joshua Kordani wrote:
>> An imap process keeps kicking out when a particular user tries to access
>> his mail.
>>
>> mail log reports this:
>> master[8762]: process 26353 exited, signaled to death by 7
>>
>> The process in question is the imap process that is handling the
>> particular user's connection.
>>
>> When I use telnet to access this user's mail, the server terminates the
>> connection as soon as i make a select mailboxname request.  I can list
>> them just fine.  It happens to all mailboxes this user owns.  I've
>> restarted the cyrus master process.  I've turned up logging on the mail
>> facility all the way up, and the only thing that is reported is that the
>> connection terminates, and that the process is signaled to death by 7.
>> It only happens with this user, and i've even run a reconstruct.  Where
>> should I look next?
> 
> Attach gdb (or whatever) to the process after authN, before select.  I'd 
> guess the mailbox needs to be reconstructed, for whatever reason.
> 
>> (as an aside, in my efforts to disable the imaps service which we were
>> not using, but was filling up logs, i managed to turn off the pop3
>> service and I can't get it back on... I only commented out the imaps
>> entry in /etc/cyrus.conf and sighupped cyrus master, so I don't know...)
> 
> I've seen that in older versions (what version are you running?), but 
> haven't been able to reproduce it in recent versions.  The problem, 
> generally speaking, is that master runs as cyrus, so it's can't open new 
> low-numbered ports. The bug is that it thinks pop3 is a new.
> 
> :wes
> 

From morgan at orst.edu  Tue Nov 18 17:25:29 2008
From: morgan at orst.edu (Andrew Morgan)
Date: Tue, 18 Nov 2008 14:25:29 -0800 (PST)
Subject: signaled to death by 7
In-Reply-To: <492329FC.2080008@intlogsys.com>
References: <4921C284.7070406@intlogsys.com>
	<4807EE22-3CD6-4B01-8AA2-3B8C4CEA2F4D@umich.edu>
	<492329FC.2080008@intlogsys.com>
Message-ID: <alpine.DEB.2.00.0811181424130.19819@shell.onid.oregonstate.edu>

On Tue, 18 Nov 2008, Joshua Kordani wrote:

> This might sound silly, but I'm a rather junior systems admin and I'm
> very new to cyrus admin, so i don't know what version we're running, but
> its at least a release or two old.

You can probably find out the version by looking at the version of the rpm 
package you have installed (guessing you are using a Redhat compatible 
OS).  Or, you can run cyradm and issue the "version" command.

 	Andy

From =?ISO-8859-1?Q?=3F=3F=3F=3F=3F=3F=3F=3F=3F_=3F=3F=3F=3F=3F=3F=3F=3F?=  Tue Nov 18 22:57:52 2008
From: =?ISO-8859-1?Q?=3F=3F=3F=3F=3F=3F=3F=3F=3F_=3F=3F=3F=3F=3F=3F=3F=3F?= (=?ISO-8859-1?Q?=3F=3F=3F=3F=3F=3F=3F=3F=3F_=3F=3F=3F=3F=3F=3F=3F=3F?=)
Date: Wed, 19 Nov 2008 08:57:52 +0500
Subject: Unknown code IMAP 5,9,11,45,46,etc.
In-Reply-To: <3E229B81-27BD-4ED3-AC27-080C98B7239D@umich.edu>
References: <4922A6D2.9020509@chelcom.ru>
	<3E229B81-27BD-4ED3-AC27-080C98B7239D@umich.edu>
Message-ID: <49238EC0.5070608@chelcom.ru>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Wesley Craig wrote:
> On 18 Nov 2008, at 06:28, ????????? ???????????? wrote:
>> I have a problem with cyrus-imapd 2.3.13 building from ports on
>> FreeBSD 7.0
>> When I recieve notify from IMAPd about "Over quota" or any other in my
>> mailbox, I see "Unknown code IMAP 46(45)" or any other "Unknown imap
>> code" instead of clear text message.
>> in my config.h i see #define HAS_STRERROR, and all looks like ok, but
>> this is still not work.
> 
> You're linking with an incompatible com_err.  Try ./configure
> --with-com_err=yes and see if that helps.
> 
> :wes
> 
thank you for you answer, but this still not work. This option has been
automatic enabled in port configuration and i see it in my
configure.log. This is deepest trouble. May be FreeBSD v.7.0 has broken
system com_err?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkkjjsAACgkQQnJBf+ilOuuV7gCgxdEGUYMR9r4cTF2fqa5YdZpE
o5gAoJyDDCPxXvrqLVPDziTOD9suq5vV
=w8Hv
-----END PGP SIGNATURE-----

From wes at umich.edu  Tue Nov 18 23:04:07 2008
From: wes at umich.edu (Wesley Craig)
Date: Tue, 18 Nov 2008 23:04:07 -0500
Subject: Unknown code IMAP 5,9,11,45,46,etc.
In-Reply-To: <49238EC0.5070608@chelcom.ru>
References: <4922A6D2.9020509@chelcom.ru>
	<3E229B81-27BD-4ED3-AC27-080C98B7239D@umich.edu>
	<49238EC0.5070608@chelcom.ru>
Message-ID: <22FAA353-770B-4070-B530-006BD8D872E1@umich.edu>

On 18 Nov 2008, at 22:57, ????????? ???????????? wrote:
> thank you for you answer, but this still not work. This option has  
> been
> automatic enabled in port configuration and i see it in my
> configure.log. This is deepest trouble. May be FreeBSD v.7.0 has  
> broken
> system com_err?

Not being a com_err expert, I can't say for sure, but I think you  
don't want to use the system com_err.

:wes

From =?ISO-8859-1?Q?=3F=3F=3F=3F=3F=3F=3F=3F=3F_=3F=3F=3F=3F=3F=3F=3F=3F?=  Tue Nov 18 23:23:12 2008
From: =?ISO-8859-1?Q?=3F=3F=3F=3F=3F=3F=3F=3F=3F_=3F=3F=3F=3F=3F=3F=3F=3F?= (=?ISO-8859-1?Q?=3F=3F=3F=3F=3F=3F=3F=3F=3F_=3F=3F=3F=3F=3F=3F=3F=3F?=)
Date: Wed, 19 Nov 2008 09:23:12 +0500
Subject: Unknown code IMAP 5,9,11,45,46,etc.
In-Reply-To: <22FAA353-770B-4070-B530-006BD8D872E1@umich.edu>
References: <4922A6D2.9020509@chelcom.ru>
	<3E229B81-27BD-4ED3-AC27-080C98B7239D@umich.edu>
	<49238EC0.5070608@chelcom.ru>
	<22FAA353-770B-4070-B530-006BD8D872E1@umich.edu>
Message-ID: <492394B0.6070506@chelcom.ru>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Wesley Craig wrote:
> On 18 Nov 2008, at 22:57, ????????? ???????????? wrote:
>> thank you for you answer, but this still not work. This option has been
>> automatic enabled in port configuration and i see it in my
>> configure.log. This is deepest trouble. May be FreeBSD v.7.0 has broken
>> system com_err?
> 
> Not being a com_err expert, I can't say for sure, but I think you don't
> want to use the system com_err.
> 
> :wes
> 

i analyze the com_err/et/error_message.c and find that
- --------begin C code
#ifdef HAS_STRERROR

        return strerror (offset);

#else

        if (offset < sys_nerr)

            return(sys_errlist[offset]);

        else

            goto oops;

#endif

    }

    for (et = _et_list; et; et = et->next) {

        if (et->table->base == table_num) {

            /* This is the right table */

            if (et->table->n_msgs <= offset)

                goto oops;

            return(et->table->msgs[offset]);

        }

    }

oops:

    strcpy (buffer, "Unknown code ");

    if (table_num) {

        strcat (buffer, error_table_name (table_num));

        strcat (buffer, " ");

    }

    for (cp = buffer; *cp; cp++)

        ;

    if (offset >= 100) {

        *cp++ = '0' + offset / 100;

        offset %= 100;

        started++;

    }

    if (started || offset >= 10) {

        *cp++ = '0' + offset / 10;

        offset %= 10;

    }

    *cp++ = '0' + offset;

    *cp = '\0';

    return(buffer);

}
- ------end of C code

error message going to "oops:" section on two ways: if HAS_STRERROR is
not defined in config.h and if number of messages in error table <=
offset parameter.
I'm not a expert of C program codes, but i think second way is true on
my system. What is "offset" in this code?

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkkjlLAACgkQQnJBf+ilOuu0CgCeM81HaNm4ockxr1Q6/YpeSSc8
24wAoLp4XiXRjwm5u9Au5D0z5IMm6XT0
=uYbw
-----END PGP SIGNATURE-----

From cyrus-list at esiway.net  Wed Nov 19 06:18:22 2008
From: cyrus-list at esiway.net (Marco Colombo)
Date: Wed, 19 Nov 2008 12:18:22 +0100
Subject: sieve vacation reposnse gives no response even after end of days
	specified
In-Reply-To: <1226898637.5877.72.camel@darkstar.netcore.co.in>
References: <1226898637.5877.72.camel@darkstar.netcore.co.in>
Message-ID: <4923F5FE.2080200@esiway.net>

ram wrote:
> I have a default cyrus installation with cyrus-imapd-2.3 on centos 5 
> People use sieve to set their vacation responses 
> 
> As per the configuration no response is sent for 1 day 
> ---------
> cat  /usr/sieve/i/it/default.script
> 
> require "vacation";
> # Vacation
> vacation :days 1 :addresses "it at example.com" "this is a vacation
> response";
> ------------------
> 
> 
> The first vacation response seems to go perfectly fine , but even after
> 1 day the response is not sent again
> 
> What could be the issue ? how do I debug this ? 

http://tools.ietf.org/html/rfc5230#section-4.1

   The minimum value used for this parameter is normally 1.  Sites MAY
   define a different minimum value as long as the minimum is greater
   than 0.

I think your server has the minimum = 3 days.

See also:
http://lists.andrew.cmu.edu/pipermail/info-cyrus/2007-August/026550.html

.TM.

From Rudy.Gevaert at UGent.be  Wed Nov 19 09:53:23 2008
From: Rudy.Gevaert at UGent.be (Rudy Gevaert)
Date: Wed, 19 Nov 2008 15:53:23 +0100
Subject: not arriving emails, duplicate suppression, message-id
Message-ID: <49242863.6010700@UGent.be>

Dear list,

Today I got a support ticket claiming that some mail was not arriving in 
a persons mailbox.

Sure enough when I went trough all our postfix and cyrus logs I could 
see that the email was certainly delivered to our mail store.

It was the duplicate delivery that eliminated duplicate message.

When I grepped in the mailbox after that message id I could find an 
other totally different message with the same id.

The only thing that both message had in common was that they were both 
created with Microsoft Outlook 12 and 11.

I thought that the message-id should be unique.

Has any body seen this before?

I couldn't find any info on the net how it is generated by Outlook. 
Maybe it is a setting that can be changed?

Thanks in advance,


-- 
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Rudy Gevaert          Rudy.Gevaert at UGent.be          tel:+32 9 264 4734
Directie ICT, afd. Infrastructuur ICT Department, Infrastructure office
Groep Systemen                    Systems group
Universiteit Gent                 Ghent University
Krijgslaan 281, gebouw S9, 9000 Gent, Belgie               www.UGent.be
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

From simon.matter at invoca.ch  Wed Nov 19 10:23:16 2008
From: simon.matter at invoca.ch (Simon Matter)
Date: Wed, 19 Nov 2008 16:23:16 +0100 (CET)
Subject: not arriving emails, duplicate suppression, message-id
In-Reply-To: <49242863.6010700@UGent.be>
References: <49242863.6010700@UGent.be>
Message-ID: <b1d1017b1bf0ff6e59a0f1839cd1eefb.squirrel@webmail.bi.corp.invoca.ch>

> Dear list,
>
> Today I got a support ticket claiming that some mail was not arriving in
> a persons mailbox.
>
> Sure enough when I went trough all our postfix and cyrus logs I could
> see that the email was certainly delivered to our mail store.
>
> It was the duplicate delivery that eliminated duplicate message.
>
> When I grepped in the mailbox after that message id I could find an
> other totally different message with the same id.
>
> The only thing that both message had in common was that they were both
> created with Microsoft Outlook 12 and 11.
>
> I thought that the message-id should be unique.

Outlook is broken, it sends new mails with existing message-id under
certain circumstances (for example when resending an already sent mail to
other receivers). Microsoft has fixed this - in their MTA on exchange! No
joke, when sending mail from Outlook to Exchange via SMTP the Exchange
server will always regenerate a uniq message-id.
I don't have a fix, only an explanation.

Simon

>
> Has any body seen this before?
>
> I couldn't find any info on the net how it is generated by Outlook.
> Maybe it is a setting that can be changed?
>
> Thanks in advance,
>
>
> --
> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> Rudy Gevaert          Rudy.Gevaert at UGent.be          tel:+32 9 264 4734
> Directie ICT, afd. Infrastructuur ICT Department, Infrastructure office
> Groep Systemen                    Systems group
> Universiteit Gent                 Ghent University
> Krijgslaan 281, gebouw S9, 9000 Gent, Belgie               www.UGent.be
> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>



From jacco at jaccorens.com  Wed Nov 19 10:58:45 2008
From: jacco at jaccorens.com (Jacco Rens)
Date: Wed, 19 Nov 2008 16:58:45 +0100
Subject: Planning for load balancing
Message-ID: <A2CCC380-B50B-4B6F-AD8E-B2140E5FF76A@jaccorens.com>

Hello,

I'm currently running Apple's Mac OS X Server as mail server for about  
100 users. The current setup has problem keeping up with all those  
users, since cyrus is limited to 300 sessions. The mail client in use  
opens 4 sockets per account, so there are quite often time-outs or  
password errors during office time. Now I want to look into solving  
this issue, without investing in new hardware. I can run VMware, with  
2 or 3 more virtual Mac OS X Servers.

Would the cyrus murder function help me here?
Can anyone advice what could help?

Best,

	Jar.

From jkordani at intlogsys.com  Wed Nov 19 10:59:19 2008
From: jkordani at intlogsys.com (Joshua Kordani)
Date: Wed, 19 Nov 2008 10:59:19 -0500
Subject: signaled to death by 7
In-Reply-To: <alpine.DEB.2.00.0811181424130.19819@shell.onid.oregonstate.edu>
References: <4921C284.7070406@intlogsys.com>
	<4807EE22-3CD6-4B01-8AA2-3B8C4CEA2F4D@umich.edu>
	<492329FC.2080008@intlogsys.com>
	<alpine.DEB.2.00.0811181424130.19819@shell.onid.oregonstate.edu>
Message-ID: <492437D7.3080003@intlogsys.com>

well.. cyradm version lists:
v2.3.7-Invoca-RPM-2.3.7-2.el5 2006/07/10 13:46:20
small shop with growing pains... I'd love to get a testbed machine up to 
work out upgrade issues before making an upgrade against the production 
box, especially due to my relative inexperience

Andrew Morgan wrote:
> On Tue, 18 Nov 2008, Joshua Kordani wrote:
> 
>> This might sound silly, but I'm a rather junior systems admin and I'm
>> very new to cyrus admin, so i don't know what version we're running, but
>> its at least a release or two old.
> 
> You can probably find out the version by looking at the version of the 
> rpm package you have installed (guessing you are using a Redhat 
> compatible OS).  Or, you can run cyradm and issue the "version" command.
> 
>     Andy
> 

From jmadden at ivytech.edu  Wed Nov 19 11:05:14 2008
From: jmadden at ivytech.edu (John Madden)
Date: Wed, 19 Nov 2008 12:05:14 -0400
Subject: Planning for load balancing
In-Reply-To: <A2CCC380-B50B-4B6F-AD8E-B2140E5FF76A@jaccorens.com>
References: <A2CCC380-B50B-4B6F-AD8E-B2140E5FF76A@jaccorens.com>
Message-ID: <200811191105.14480.jmadden@ivytech.edu>

> Can anyone advice what could help?

Increase your connection count to something more than 400?




-- 
John Madden
Sr. UNIX Systems Engineer
Ivy Tech Community College of Indiana
jmadden at ivytech.edu

From Duncan.Gibb at SiriusIT.co.uk  Wed Nov 19 11:08:22 2008
From: Duncan.Gibb at SiriusIT.co.uk (Duncan Gibb)
Date: Wed, 19 Nov 2008 16:08:22 +0000
Subject: Planning for load balancing
In-Reply-To: <A2CCC380-B50B-4B6F-AD8E-B2140E5FF76A@jaccorens.com>
References: <A2CCC380-B50B-4B6F-AD8E-B2140E5FF76A@jaccorens.com>
Message-ID: <492439F6.2090902@SiriusIT.co.uk>

Jacco Rens wrote:

JR> I'm currently running Apple's Mac OS X Server as mail server
JR> for about 100 users. The current setup has problem keeping up
JR> with all those users, since cyrus is limited to 300 sessions.

You should be able just to bump up the maxchild setting for the relevant
service(s) in cyrus.conf

We regularly run with maxchild=500 or more for both imap and imaps on
non-exotic x86_64 hardware.  I doubt you need anything more complex for
only 100 users.


Cheers


Duncan

-- 
Duncan Gibb, Technical Director
Sirius Corporation plc - The Open Source Experts
http://www.siriusit.co.uk/
Tel: +44 870 608 0063

From eric.wolfe at marshall.edu  Thu Nov 20 01:23:04 2008
From: eric.wolfe at marshall.edu (Eric G. Wolfe)
Date: Thu, 20 Nov 2008 01:23:04 -0500
Subject: murder setup - mailboxes.db corruption - trouble recovering with
	ctl_mboxlist
Message-ID: <49250248.9000807@marshall.edu>

We have a RHEL4u7 on all 5 servers:
1 mupdate master: mumailmaster
2 backends: mumailstore01, mumailstore02
2 Postfix MTA/Cyrus proxy frontends: mumail01, mumail02

So I started getting this on my backends around 14:15 EST, at which time 
mail started getting deferred to the backends.  I have 20,000+ per 
frontend deferred for delivery at the time of this e-mail.

Nov 19 16:30:26 mumailstore01 ctl_cyrusdb[4672]: DBERROR db4: PANIC: 
Cannot allocate memory
Nov 19 16:30:26 mumailstore01 ctl_cyrusdb[4672]: DBERROR: critical 
database situation
Nov 19 16:30:26 mumailstore01 ctl_mboxlist[4673]: DBERROR db4: PANIC: 
fatal region error detected; run recovery
Nov 19 16:30:26 mumailstore01 ctl_mboxlist[4673]: DBERROR: critical 
database situation
Nov 19 16:30:26 mumailstore01 ctl_cyrusdb[4674]: DBERROR db4: PANIC: 
fatal region error detected; run recovery
Nov 19 16:30:26 mumailstore01 ctl_cyrusdb[4674]: DBERROR: critical 
database situation

I tried the following directions for recovery. 
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&searchterm=skiplist&msg=32337.  
I made backup copies of all files deleted, renaming them 
$filename.corrupt.  I did this on each server, recovered on the 
backends, and let it push the updates to the mupdate server.  Manually 
recovered mailboxes.db on the frontends, as they did not seem to be 
getting updated.  If I am going about this wrong, please someone point 
me in the right direction for documentation on murder disaster recovery. 
The following, while somewhat helpful, does not go into a great amount 
of detail: http://cyrusimap.web.cmu.edu/imapd/install-murder.html.

So at this point my user agent says Unknown/Invalid partition.  The 
partitions are correctly defined on the backend mail stores.  A 
'ctl_mboxlist -d' shows correct partitions, no matter which local 
mailboxes.db I attempt to dump.  Furthermore, LMTP is still not 
delivering to the backends during this outage.

Any helpful tips or pointers would be appreciated.

Thanks,

-- 
Eric G. Wolfe, IT Associate, Sr.
One John Marshall Drive
Marshall University, Drinko Library 428k
Huntington, WV 25755
Phone: 304.696.3428
Email: eric.wolfe at marshall.edu

"Who is General Failure and why is he reading my hard disk ?"
Microsoft spel chekar vor sail, worgs grate !!
(By leitner at inf.fu-berlin.de, Felix von Leitner)


From aspineux at gmail.com  Thu Nov 20 01:57:13 2008
From: aspineux at gmail.com (Alain Spineux)
Date: Thu, 20 Nov 2008 07:57:13 +0100
Subject: Folder allowed character
In-Reply-To: <103CFD9D-FDAE-4D16-B404-2F1E1F6144B8@umich.edu>
References: <a64143230811180228k188a1366k4191b630064062ee@mail.gmail.com>
	<103CFD9D-FDAE-4D16-B404-2F1E1F6144B8@umich.edu>
Message-ID: <71fe4e760811192257m5071f203xa93c8153b642bcf1@mail.gmail.com>

On Tue, Nov 18, 2008 at 7:38 PM, Wesley Craig <wes at umich.edu> wrote:
> On 18 Nov 2008, at 05:28, Antonio Talarico wrote:
>> Where i can found a list with allowed character for a folder name?
>
> ./imap/mboxname.c:#define GOODCHARS " #$'+,-.
> 0123456789:=@ABCDEFGHIJKLMNOPQRSTUVWXYZ_abcdefghijklmnopqrstuvwxyz~"
>

These characters are about the mailbox name.
Imap clients must use a modified UTF-7 encoding for Folders name.
This allow you to use any characters in any language (if your client
is compliant on this part of imap spec).

> :wes
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>



-- 
Alain Spineux
aspineux gmail com
May the sources be with you

From Hagedorn at uni-koeln.de  Thu Nov 20 02:19:49 2008
From: Hagedorn at uni-koeln.de (Sebastian Hagedorn)
Date: Thu, 20 Nov 2008 08:19:49 +0100
Subject: Folder allowed character
In-Reply-To: <71fe4e760811192257m5071f203xa93c8153b642bcf1@mail.gmail.com>
References: <a64143230811180228k188a1366k4191b630064062ee@mail.gmail.com>
	<103CFD9D-FDAE-4D16-B404-2F1E1F6144B8@umich.edu>
	<71fe4e760811192257m5071f203xa93c8153b642bcf1@mail.gmail.com>
Message-ID: <9427341DABBC351CC3CA2BBD@G5.voip.local>

-- Alain Spineux <aspineux at gmail.com> is rumored to have mumbled on 20. 
November 2008 07:57:13 +0100 regarding Re: Folder allowed character:

> On Tue, Nov 18, 2008 at 7:38 PM, Wesley Craig <wes at umich.edu> wrote:
>> On 18 Nov 2008, at 05:28, Antonio Talarico wrote:
>>> Where i can found a list with allowed character for a folder name?
>>
>> ./imap/mboxname.c:#define GOODCHARS " #$'+,-.
>> 0123456789:=@ABCDEFGHIJKLMNOPQRSTUVWXYZ_abcdefghijklmnopqrstuvwxyz~"
>>
>
> These characters are about the mailbox name.
> Imap clients must use a modified UTF-7 encoding for Folders name.
> This allow you to use any characters in any language (if your client
> is compliant on this part of imap spec).

Actually not *any* character. You can't have a '/' or a '!', for example. 
Those characters aren't encoded any differently with modified UTF-7. AFAICT 
you can use any character that's outside of US-ASCII, but only those from 
US-ASCII that are in GOODCHARS.
--
Sebastian Hagedorn - RZKR-R1 (Flachbau), Zi. 18, Robert-Koch-Str. 10
Zentrum f?r angewandte Informatik - Universit?tsweiter Service RRZK
Universit?t zu K?ln / Cologne University - Tel. +49-221-478-5587
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: not available
Url : http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081120/277134a2/attachment.bin 

From eric.wolfe at marshall.edu  Thu Nov 20 07:39:30 2008
From: eric.wolfe at marshall.edu (Eric G. Wolfe)
Date: Thu, 20 Nov 2008 07:39:30 -0500
Subject: murder setup - mailboxes.db corruption - trouble recovering with
	ctl_mboxlist
In-Reply-To: <49250248.9000807@marshall.edu>
References: <49250248.9000807@marshall.edu>
Message-ID: <49255A82.3030302@marshall.edu>

Just to follow-up on this issue. 

Found this:
http://cyrusimap.web.cmu.edu/twiki/bin/view/Cyrus/CyrusMurderFailureModes

First, I followed the "Easy" instructions, which was a bust.

Next, I tried the "Hard" instructions.  Four hours later the mupdate 
master finished synch'ing with the backends.  I started up the 
front-ends, per the instructions.  The front-ends failed to synch with 
the mupdate master.

So in an effort to try something else.  I figured if the mailboxes.db on 
the front-ends and the master are the same format, I could just shutdown 
the mupdate master; copy the mailboxes.db file over to the front-ends; 
and start everything up.  This was also a bust.

Oh, and I am getting these logs on the mupdate master.  However, the 
number in fs.file-nr is nowhere near approaching fs.file-max.  There are 
no ulimits on the 'cyrus' user.  There was a maxfds=1024 parameter in 
/etc/imapd.conf.  I tried restarting without this parameter, and it 
seemed I couldn't keep the master process running without it.  If I 
restart the service, it will run fine for a while, but it eventually 
starts complaining again.   So I tried quadrupling the maxfds value, and 
we'll see if that helps.

imapd.conf (excerpt)
mupdate       cmd="/usr/lib64/cyrus-imapd/mupdate -m" listen=3905 
prefork=1 maxfds=1024

maillog (excerpt)
Nov 20 07:18:54 mumailmaster mupdate[27227]: refused connection from 
mumailstore01
Nov 20 07:18:54 mumailmaster mupdate[27227]: warning: cannot open 
/etc/hosts.allow: Too many open files

Additionally, I have double-checked all cyrus related service accounts 
and their associated passwords.  Our mupdate service account is 
successfully authenticating on the mupdate master.  I am getting a 
"imap: kick_mupdate: can't connect to target: Connection refused" on the 
front-ends.  However, I can connect to port 3905 on the mupdate master.

I have not noticed anything strange on the backends, in the logs or 
otherwise.  I will follow-up, if I find out anything else.

Again, if anyone can point us in the right direction, it would be very 
much appreciated.

Eric G. Wolfe wrote:
> We have a RHEL4u7 on all 5 servers:
> 1 mupdate master: mumailmaster
> 2 backends: mumailstore01, mumailstore02
> 2 Postfix MTA/Cyrus proxy frontends: mumail01, mumail02
>
> So I started getting this on my backends around 14:15 EST, at which time 
> mail started getting deferred to the backends.  I have 20,000+ per 
> frontend deferred for delivery at the time of this e-mail.
>
> Nov 19 16:30:26 mumailstore01 ctl_cyrusdb[4672]: DBERROR db4: PANIC: 
> Cannot allocate memory
> Nov 19 16:30:26 mumailstore01 ctl_cyrusdb[4672]: DBERROR: critical 
> database situation
> Nov 19 16:30:26 mumailstore01 ctl_mboxlist[4673]: DBERROR db4: PANIC: 
> fatal region error detected; run recovery
> Nov 19 16:30:26 mumailstore01 ctl_mboxlist[4673]: DBERROR: critical 
> database situation
> Nov 19 16:30:26 mumailstore01 ctl_cyrusdb[4674]: DBERROR db4: PANIC: 
> fatal region error detected; run recovery
> Nov 19 16:30:26 mumailstore01 ctl_cyrusdb[4674]: DBERROR: critical 
> database situation
>
> I tried the following directions for recovery. 
> http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&searchterm=skiplist&msg=32337.  
> I made backup copies of all files deleted, renaming them 
> $filename.corrupt.  I did this on each server, recovered on the 
> backends, and let it push the updates to the mupdate server.  Manually 
> recovered mailboxes.db on the frontends, as they did not seem to be 
> getting updated.  If I am going about this wrong, please someone point 
> me in the right direction for documentation on murder disaster recovery. 
> The following, while somewhat helpful, does not go into a great amount 
> of detail: http://cyrusimap.web.cmu.edu/imapd/install-murder.html.
>
> So at this point my user agent says Unknown/Invalid partition.  The 
> partitions are correctly defined on the backend mail stores.  A 
> 'ctl_mboxlist -d' shows correct partitions, no matter which local 
> mailboxes.db I attempt to dump.  Furthermore, LMTP is still not 
> delivering to the backends during this outage.
>
> Any helpful tips or pointers would be appreciated.
>
> Thanks,
>
>   


-- 
Eric G. Wolfe, IT Associate, Sr.
One John Marshall Drive
Marshall University, Drinko Library 428k
Huntington, WV 25755
Phone: 304.696.3428
Email: eric.wolfe at marshall.edu

"Who is General Failure and why is he reading my hard disk ?"
Microsoft spel chekar vor sail, worgs grate !!
(By leitner at inf.fu-berlin.de, Felix von Leitner)


From iane at sussex.ac.uk  Thu Nov 20 09:07:25 2008
From: iane at sussex.ac.uk (Ian Eiloart)
Date: Thu, 20 Nov 2008 14:07:25 +0000
Subject: Planning for load balancing
Message-ID: <0F2D6237FCFE535122AAE4BA@lewes.staff.uscs.susx.ac.uk>



--On 19 November 2008 16:58:45 +0100 Jacco Rens <jacco at jaccorens.com> wrote:

> Hello,
>
> I'm currently running Apple's Mac OS X Server as mail server for about
> 100 users. The current setup has problem keeping up with all those
> users, since cyrus is limited to 300 sessions.

This is an operating system limitation, which you can change. In OSX 10.5, 
the hard coded system limit on processes is 2500, and you can set a 
sensible per user limit of, say, 2300. For 10.4 the hard coded limit is 
2068 (yes, really, not 2048).

To change the limits, create /etc/sysctl.conf, and insert these lines:

kern.maxproc=2500
kern.maxprocperuid=2300


> The mail client in use
> opens 4 sockets per account, so there are quite often time-outs or
> password errors during office time.

Actually, Apple Mail will open far more than 4 connections. It'll open one 
per mailbox. I don't understand this design choice - especially in the 
context of the server process limit above. Perhaps they just want to sell 
more servers.

> Now I want to look into solving
> this issue, without investing in new hardware. I can run VMware, with
> 2 or 3 more virtual Mac OS X Servers.

That's an interesting approach, but try increasing your process limits 
first. I've been supporting 12000 users on four physical hosts, but have 
just increased that to six.

> Would the cyrus murder function help me here?

It would, if you really need multiple hosts.

> Can anyone advice what could help?
>
> Best,
>
> 	Jar.
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html



-- 
Ian Eiloart
IT Services, University of Sussex
x3148

From wes at umich.edu  Thu Nov 20 10:08:10 2008
From: wes at umich.edu (Wesley Craig)
Date: Thu, 20 Nov 2008 10:08:10 -0500
Subject: murder setup - mailboxes.db corruption - trouble recovering with
	ctl_mboxlist
In-Reply-To: <49250248.9000807@marshall.edu>
References: <49250248.9000807@marshall.edu>
Message-ID: <5618B26E-A003-4AAF-BAAA-91F89F7F33E4@umich.edu>

Which version of cyrus-imapd are you running?

On 20 Nov 2008, at 01:23, Eric G. Wolfe wrote:
> I tried the following directions for recovery.

> http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info- 
> cyrus&searchterm=skiplist&msg=32337.

So you're attempting to convert from BerkeleyDB to skiplist?

> I made backup copies of all files deleted, renaming them
> $filename.corrupt.  I did this on each server, recovered on the
> backends, and let it push the updates to the mupdate server.

Did you also convert mupdate master to skiplist?

> Manually
> recovered mailboxes.db on the frontends, as they did not seem to be
> getting updated.

Manually how?

> So at this point my user agent says Unknown/Invalid partition.  The
> partitions are correctly defined on the backend mail stores.  A
> 'ctl_mboxlist -d' shows correct partitions, no matter which local
> mailboxes.db I attempt to dump.  Furthermore, LMTP is still not
> delivering to the backends during this outage.

This is when the user agent talks to the a frontend?  I suspect this  
is an artifact of how the frontends were manually updated.

:wes

From wes at umich.edu  Thu Nov 20 10:27:01 2008
From: wes at umich.edu (Wesley Craig)
Date: Thu, 20 Nov 2008 10:27:01 -0500
Subject: murder setup - mailboxes.db corruption - trouble recovering with
	ctl_mboxlist
In-Reply-To: <49255A82.3030302@marshall.edu>
References: <49250248.9000807@marshall.edu> <49255A82.3030302@marshall.edu>
Message-ID: <F30CADDD-7955-483E-BFD4-2688BB31CD4A@umich.edu>

On 20 Nov 2008, at 07:39, Eric G. Wolfe wrote:
> Found this:
> http://cyrusimap.web.cmu.edu/twiki/bin/view/Cyrus/ 
> CyrusMurderFailureModes
> First, I followed the "Easy" instructions, which was a bust.

Did you see this:

	https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2819

If you're not running something pretty current, Easy doesn't work.

> Next, I tried the "Hard" instructions.  Four hours later the mupdate
> master finished synch'ing with the backends.  I started up the
> front-ends, per the instructions.  The front-ends failed to synch with
> the mupdate master.

So, after Hard, you have a good copy on the mupdate master.  In what  
way do the frontends fail to sync?

> So in an effort to try something else.  I figured if the  
> mailboxes.db on
> the front-ends and the master are the same format, I could just  
> shutdown
> the mupdate master; copy the mailboxes.db file over to the front-ends;
> and start everything up.  This was also a bust.

Presuming you're using skiplist, you can in fact just copy  
mailboxes.db between mupdate master and frontends.  However, when  
frontends start up, they insist on getting a full copy of the  
database from mupdate master.  This can take some time, and in older  
versions might error out in various ways.

> Oh, and I am getting these logs on the mupdate master.  However, the
> number in fs.file-nr is nowhere near approaching fs.file-max.   
> There are
> no ulimits on the 'cyrus' user.  There was a maxfds=1024 parameter in
> /etc/imapd.conf.  I tried restarting without this parameter, and it
> seemed I couldn't keep the master process running without it.  If I
> restart the service, it will run fine for a while, but it eventually
> starts complaining again.   So I tried quadrupling the maxfds  
> value, and
> we'll see if that helps.
>
> imapd.conf (excerpt)
> mupdate       cmd="/usr/lib64/cyrus-imapd/mupdate -m" listen=3905
> prefork=1 maxfds=1024
>
> maillog (excerpt)
> Nov 20 07:18:54 mumailmaster mupdate[27227]: refused connection from
> mumailstore01
> Nov 20 07:18:54 mumailmaster mupdate[27227]: warning: cannot open
> /etc/hosts.allow: Too many open files

The high connection rate is caused by mail delivery.  Stock lmtp  
proxy connects to the mupdate master to get backend information,  
instead of referring to the local mailboxes.db.  I have patches for  
2.2.x cyrus, in 2.3.x cyrus, "unified" murder refers to mailboxes.db  
instead of mupdate master.  The fact that lmtp proxy refers to  
mupdate master in any configuration is probably a bug.

With a large mail backlog, plus new inbound mail, this bottleneck is  
a big problem.  Couple that with trying to resync the frontends, and  
mupdate master is an even smaller bottleneck.

> Additionally, I have double-checked all cyrus related service accounts
> and their associated passwords.  Our mupdate service account is
> successfully authenticating on the mupdate master.  I am getting a
> "imap: kick_mupdate: can't connect to target: Connection refused"  
> on the
> front-ends.  However, I can connect to port 3905 on the mupdate  
> master.

The kick_mupdate error is just a signal that the mupdate on the  
frontend is in the process of resyncing.  It can be ignored.

:wes

From eric.wolfe at marshall.edu  Thu Nov 20 11:19:03 2008
From: eric.wolfe at marshall.edu (Wolfe, Eric G)
Date: Thu, 20 Nov 2008 11:19:03 -0500
Subject: murder setup - mailboxes.db corruption - trouble recovering
	with ctl_mboxlist
In-Reply-To: <5618B26E-A003-4AAF-BAAA-91F89F7F33E4@umich.edu>
References: <49250248.9000807@marshall.edu>,
	<5618B26E-A003-4AAF-BAAA-91F89F7F33E4@umich.edu>
Message-ID: <474C2677B73E604BA6DEC7745E2D7CE297B472D506@MUXC10.marshall.edu>

cyrus-imapd-2.2.12-9.RHEL4
________________________________________
From: Wesley Craig [wes at umich.edu]
Sent: Thursday, November 20, 2008 10:08 AM
To: Eric G.Wolfe
Cc: info-cyrus at lists.andrew.cmu.edu
Subject: Re: murder setup - mailboxes.db corruption - trouble recovering with ctl_mboxlist

Which version of cyrus-imapd are you running?

On 20 Nov 2008, at 01:23, Eric G. Wolfe wrote:
> I tried the following directions for recovery.

> http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-
> cyrus&searchterm=skiplist&msg=32337.

So you're attempting to convert from BerkeleyDB to skiplist?

> I made backup copies of all files deleted, renaming them
> $filename.corrupt.  I did this on each server, recovered on the
> backends, and let it push the updates to the mupdate server.

Did you also convert mupdate master to skiplist?

> Manually
> recovered mailboxes.db on the frontends, as they did not seem to be
> getting updated.

Manually how?

> So at this point my user agent says Unknown/Invalid partition.  The
> partitions are correctly defined on the backend mail stores.  A
> 'ctl_mboxlist -d' shows correct partitions, no matter which local
> mailboxes.db I attempt to dump.  Furthermore, LMTP is still not
> delivering to the backends during this outage.

This is when the user agent talks to the a frontend?  I suspect this
is an artifact of how the frontends were manually updated.

:wes

From eric.wolfe at marshall.edu  Thu Nov 20 12:00:20 2008
From: eric.wolfe at marshall.edu (Wolfe, Eric G)
Date: Thu, 20 Nov 2008 12:00:20 -0500
Subject: murder setup - mailboxes.db corruption - trouble recovering
	with ctl_mboxlist
In-Reply-To: <F30CADDD-7955-483E-BFD4-2688BB31CD4A@umich.edu>
References: <49250248.9000807@marshall.edu> <49255A82.3030302@marshall.edu>,
	<F30CADDD-7955-483E-BFD4-2688BB31CD4A@umich.edu>
Message-ID: <474C2677B73E604BA6DEC7745E2D7CE297B472D507@MUXC10.marshall.edu>

_______________________________________
From: Wesley Craig [wes at umich.edu]
Sent: Thursday, November 20, 2008 10:27 AM
To: Eric G.Wolfe
Cc: info-cyrus at lists.andrew.cmu.edu
Subject: Re: murder setup - mailboxes.db corruption - trouble recovering with ctl_mboxlist

On 20 Nov 2008, at 07:39, Eric G. Wolfe wrote:
> Found this:
> http://cyrusimap.web.cmu.edu/twiki/bin/view/Cyrus/
> CyrusMurderFailureModes
> First, I followed the "Easy" instructions, which was a bust.

>Did you see this:

>        https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2819

No, but that was a problem at 2:00 AM not 6:00 AM after trying the "Hard" instructions.

> If you're not running something pretty current, Easy doesn't work.

> Next, I tried the "Hard" instructions.  Four hours later the mupdate
> master finished synch'ing with the backends.  I started up the
> front-ends, per the instructions.  The front-ends failed to synch with
> the mupdate master.

> So, after Hard, you have a good copy on the mupdate master.  In what
> way do the frontends fail to sync?

I don't know, are the frontends' mailboxes.db supposed to stay at 144 bytes for 30 minutes or more?  On the backends, at least I could monitor the mailboxes.db growing, not quickly, but progress was apparent.

> So in an effort to try something else.  I figured if the
> mailboxes.db on
> the front-ends and the master are the same format, I could just
> shutdown
> the mupdate master; copy the mailboxes.db file over to the front-ends;
> and start everything up.  This was also a bust.

> Presuming you're using skiplist, you can in fact just copy
> mailboxes.db between mupdate master and frontends.  However, when
> frontends start up, they insist on getting a full copy of the
> database from mupdate master.  This can take some time, and in older
> versions might error out in various ways.

We are using skiplist, I copied the mailboxes.db to frontends.  If the frontends are updating, it is not apparent.  I could not verify that either of them were synching from the master after the mupdate master synch.  Which is why I copied them to the frontends to speed things up.

> Oh, and I am getting these logs on the mupdate master.  However, the
> number in fs.file-nr is nowhere near approaching fs.file-max.
> There are
> no ulimits on the 'cyrus' user.  There was a maxfds=1024 parameter in
> /etc/imapd.conf.  I tried restarting without this parameter, and it
> seemed I couldn't keep the master process running without it.  If I
> restart the service, it will run fine for a while, but it eventually
> starts complaining again.   So I tried quadrupling the maxfds
> value, and
> we'll see if that helps.
>
> imapd.conf (excerpt)
> mupdate       cmd="/usr/lib64/cyrus-imapd/mupdate -m" listen=3905
> prefork=1 maxfds=1024
>
> maillog (excerpt)
> Nov 20 07:18:54 mumailmaster mupdate[27227]: refused connection from
> mumailstore01
> Nov 20 07:18:54 mumailmaster mupdate[27227]: warning: cannot open
> /etc/hosts.allow: Too many open files

> The high connection rate is caused by mail delivery.  Stock lmtp
> proxy connects to the mupdate master to get backend information,
> instead of referring to the local mailboxes.db.  I have patches for
> 2.2.x cyrus, in 2.3.x cyrus, "unified" murder refers to mailboxes.db
> instead of mupdate master.  The fact that lmtp proxy refers to
> mupdate master in any configuration is probably a bug.

Strange that it would just start causing problems now.  We probably are seeing a cascading effect of failure, with the backlog though.  Do the latest vanilla trees, have these patches included in them?  The packages here: http://cyrusimap.web.cmu.edu/downloads.html#imap.  I am somewhat reluctant to upgrade things in a fragile state.  If these patches are included in latest releases, is 2.3.13 a fairly painless upgrade path from 2.2.12, or do we need to go with 2.2.13?

> With a large mail backlog, plus new inbound mail, this bottleneck is
> a big problem.  Couple that with trying to resync the frontends, and
> mupdate master is an even smaller bottleneck.

Is there anything we can turn off in the cyrus.conf or imapd.conf, to work around this "bottleneck"?  In other words, can we keep the MTA from knocking on the door for long enough to get everything running smoothly again?

> Additionally, I have double-checked all cyrus related service accounts
> and their associated passwords.  Our mupdate service account is
> successfully authenticating on the mupdate master.  I am getting a
> "imap: kick_mupdate: can't connect to target: Connection refused"
> on the
> front-ends.  However, I can connect to port 3905 on the mupdate
> master.

> The kick_mupdate error is just a signal that the mupdate on the
> frontend is in the process of resyncing.  It can be ignored.

Ok, because it sounds like a problem of connecting to the mupdate master port on 3905, to the unitiated.

:wes

From morgan at orst.edu  Thu Nov 20 12:51:46 2008
From: morgan at orst.edu (Andrew Morgan)
Date: Thu, 20 Nov 2008 09:51:46 -0800 (PST)
Subject: murder setup - mailboxes.db corruption - trouble recovering	with
	ctl_mboxlist
In-Reply-To: <474C2677B73E604BA6DEC7745E2D7CE297B472D507@MUXC10.marshall.edu>
References: <49250248.9000807@marshall.edu> <49255A82.3030302@marshall.edu>,
	<F30CADDD-7955-483E-BFD4-2688BB31CD4A@umich.edu>
	<474C2677B73E604BA6DEC7745E2D7CE297B472D507@MUXC10.marshall.edu>
Message-ID: <alpine.DEB.2.00.0811200947360.26124@shell.onid.oregonstate.edu>

On Thu, 20 Nov 2008, Wolfe, Eric G wrote:

> We are using skiplist, I copied the mailboxes.db to frontends.  If the 
> frontends are updating, it is not apparent.  I could not verify that 
> either of them were synching from the master after the mupdate master 
> synch.  Which is why I copied them to the frontends to speed things up.

I've tried this in the past for the same reasons, but it doesn't work. 
The only way I've been able to get the correct mailboxes.db on frontends 
is to let them sync with the mupdate master.  And yes, this takes a while 
from scratch when you are using skiplist because writes are much slower 
with skiplist.

> Strange that it would just start causing problems now.  We probably are 
> seeing a cascading effect of failure, with the backlog though.  Do the 
> latest vanilla trees, have these patches included in them?  The packages 
> here: http://cyrusimap.web.cmu.edu/downloads.html#imap.  I am somewhat 
> reluctant to upgrade things in a fragile state.  If these patches are 
> included in latest releases, is 2.3.13 a fairly painless upgrade path 
> from 2.2.12, or do we need to go with 2.2.13?

I wouldn't upgrade until you can get a working system.

> Is there anything we can turn off in the cyrus.conf or imapd.conf, to 
> work around this "bottleneck"?  In other words, can we keep the MTA from 
> knocking on the door for long enough to get everything running smoothly 
> again?

Yes, comment out lmtp in your cyrus.conf on the frontends.  After you have 
successfully synced mailboxes.db, enable lmtp again and restart cyrus on 
the frontends.  You probably should put some limits on lmtp as well.  We 
use maxchild=50 here (3 frontends).

> Ok, because it sounds like a problem of connecting to the mupdate master 
> port on 3905, to the unitiated.

Hard to say, but take the steps above to simplify the problem.  :)

 	Andy

From aspineux at gmail.com  Fri Nov 21 07:13:03 2008
From: aspineux at gmail.com (Alain Spineux)
Date: Fri, 21 Nov 2008 13:13:03 +0100
Subject: Folder allowed character
In-Reply-To: <9427341DABBC351CC3CA2BBD@G5.voip.local>
References: <a64143230811180228k188a1366k4191b630064062ee@mail.gmail.com>
	<103CFD9D-FDAE-4D16-B404-2F1E1F6144B8@umich.edu>
	<71fe4e760811192257m5071f203xa93c8153b642bcf1@mail.gmail.com>
	<9427341DABBC351CC3CA2BBD@G5.voip.local>
Message-ID: <71fe4e760811210413k73e2d77du4fc6504286bef39f@mail.gmail.com>

On Thu, Nov 20, 2008 at 8:19 AM, Sebastian Hagedorn
<Hagedorn at uni-koeln.de> wrote:
> -- Alain Spineux <aspineux at gmail.com> is rumored to have mumbled on 20.
> November 2008 07:57:13 +0100 regarding Re: Folder allowed character:
>
>> On Tue, Nov 18, 2008 at 7:38 PM, Wesley Craig <wes at umich.edu> wrote:
>>>
>>> On 18 Nov 2008, at 05:28, Antonio Talarico wrote:
>>>>
>>>> Where i can found a list with allowed character for a folder name?
>>>
>>> ./imap/mboxname.c:#define GOODCHARS " #$'+,-.
>>> 0123456789:=@ABCDEFGHIJKLMNOPQRSTUVWXYZ_abcdefghijklmnopqrstuvwxyz~"
>>>
>>
>> These characters are about the mailbox name.
>> Imap clients must use a modified UTF-7 encoding for Folders name.
>> This allow you to use any characters in any language (if your client
>> is compliant on this part of imap spec).
>
> Actually not *any* character. You can't have a '/' or a '!', for example.
> Those characters aren't encoded any differently with modified UTF-7. AFAICT
> you can use any character that's outside of US-ASCII, but only those from
> US-ASCII that are in GOODCHARS.

Yes right !
very good answer!

Alain

> --
> Sebastian Hagedorn - RZKR-R1 (Flachbau), Zi. 18, Robert-Koch-Str. 10
> Zentrum f?r angewandte Informatik - Universit?tsweiter Service RRZK
> Universit?t zu K?ln / Cologne University - Tel. +49-221-478-5587



-- 
Alain Spineux
aspineux gmail com
May the sources be with you

From slayer at yandex-team.ru  Fri Nov 21 09:47:56 2008
From: slayer at yandex-team.ru (Oleg Gorokhov)
Date: Fri, 21 Nov 2008 17:47:56 +0300
Subject: GSSAPI for sieve
Message-ID: <4926CA1C.8010803@yandex-team.ru>

Hello,

is GSSAPI authorization supported by timsieved? It seems that either 
sieveshell (which I used to test GSSAPI for sieve) or timsieved itself 
failed to finish GSSAPI session correctly:

Nov 21 17:37:01 ****** imaps[98068]: login: dhcp250-232.****** 
[*.*.250.232] ****** GSSAPI+TLS User logged in

Nov 21 17:37:06 ****** sieve[98007]: badlogin: dhcp250-232.****** 
[*.*.250.232] ****** GSSAPI error base64 decoding string

[17:37][****@slayer:q3][~]$ klist
Credentials cache: FILE:/tmp/krb5cc_1001
         Principal: slayer@******

   Issued           Expires          Principal
Nov 21 17:30:00  Nov 22 03:30:04  krbtgt/KDC_DOMAIN at KDC_DOMAIN
Nov 21 17:32:34  Nov 22 03:30:04  imap/*********@KDC_DOMAIN
Nov 21 17:33:10  Nov 22 03:30:04  sieve/*********@KDC_DOMAIN

In the same time imap server authenticates users perfectly, also, I 
think, it could be a problem in SASL library - I have found some 
discussions about processing CR+LF in saslutil.c - but patch I used did 
not help.

If someone has working timsieved+GSSAPI?

pkg_info | grep cyrus
cyrus-imapd-2.3.13
cyrus-sasl-2.1.22_2

-- 
Oleg Gorokhov
System Administrator, Yandex
Tel.: +7 (495) 739-7000 (+7166)

From eddy.beliveau at hec.ca  Fri Nov 21 14:12:42 2008
From: eddy.beliveau at hec.ca (Eddy Beliveau)
Date: Fri, 21 Nov 2008 14:12:42 -0500
Subject: Logging number of pop3's email retrieved during a connection - was
	(IMAP/POP traffic accounting)
In-Reply-To: <491C5B0F.1010008@hec.ca>
References: <00ac01c713e3$96695d60$4e099d8e@neptune>	<1164900951.4502.68.camel@mjaw-mobile.ipartners.pl>
	<491C5B0F.1010008@hec.ca>
Message-ID: <4927082A.8040405@hec.ca>

Hi! Netfriends,

I sent this email last week but didn't received any replies.

So, I would like to spin it again... Maybe my title was obscure.  ;-)



I would like to log some statistics when any user retrieves their pop3's 
emails.

Currently:
... pop3[32760]: login: address [ip] user plaintext User logged in

It would be nice to also get the number of messages retrieved (and total 
size if available)


Can someone help ?

Thanks,
Eddy

-------- Message original --------
Sujet : Re: IMAP/POP traffic accounting
De : Eddy Beliveau <eddy.beliveau at hec.ca>
Pour : Miros?aw Jaworski <mjaw at ikp.pl>
Copie ? : info-cyrus at lists.andrew.cmu.edu
Date : 2008-11-13 11:51

> Hi!
> 
> By browsing archives, I find this current thread.
> 
> We are using cyrus-imapd 2.2.13 and it works well  :-)
> 
> I would also like to add statistics to pop3d.c
> 
> Can you please provide the patch that was used to get this:
> Nov 30 16:27:31 mail1 pop3[19762]: stats: t63877a 8 663454 0 0
> 
> It would be valuable to our helpdesk staff.
> 
> Many thanks,
> 
> Have a nice day
> Eddy
> 
> -------- Message original --------
> Sujet : Re: IMAP/POP traffic accounting
> De : Miros?aw Jaworski <mjaw at ikp.pl>
> Pour : Anthony Tibbs <anthony-list at tibbs.ca>
> Copie ? : info-cyrus at lists.andrew.cmu.edu
> Date : 2006-11-30 10:35
> 
>> On Wed, 2006-11-29 at 13:23 -0500, Anthony Tibbs wrote:
>>> I believe there was some mention of this in the past, but I'm wondering 
>>> whether there are any known efforts to implement network traffic accounting 
>>> in the later versions of Cyrus, or if this is still something that hasn't 
>>> been dealt with.  I am pondering possibly tackling this, but I'm not really 
>>> familiar with the Cyrus code and would rather not reinvent the wheel if it's 
>>> already in the works.
>> Well, 'effort' is definitely too big word for the hack we use.
>> Our support was used to some old popper log format, so we have made
>> hack resulting in such lines:
>>
>> User who (downloaded and) deleted 8 messages, 663454 bytes total.
>>
>> Nov 30 16:27:16 mail1 pop3[19762]: login: [83.15.90.206] t63877a
>> plaintext User logged in
>> [...]
>> Nov 30 16:27:31 mail1 pop3[19762]: stats: t63877a 8 663454 0 0
>>
>> User who didn't (downloaded and) deleted any messages; has 35 messages
>> in his INBOX, 10785042 bytes total:
>>
>> Nov 30 16:18:59 mail1 pop3[19360]: login: [83.31.77.74] po30533
>> plaintext User logged in
>> [...]
>> Nov 30 16:19:00 mail1 pop3[19360]: stats: po30533 0 0 35 10785042
>>
>>
>> While it makes sense to have such logs from pop3 daemon doing simple
>> operations on only one folder it has none when it comes to IMAP.
>> What log can i possibly create after user connects to imap, applies
>> his rules to an INBOX ( moving most of the messages to various folders,
>> ie. marking them for deletion, not deleting them )? What when he reads
>> some messages without deleting them?
>>
>> M.
>>
> 

-- 
Eddy Beliveau
HEC Montreal
Montreal (Quebec)
Canada

From anthony-list at tibbs.ca  Fri Nov 21 14:27:07 2008
From: anthony-list at tibbs.ca (Anthony Tibbs)
Date: Fri, 21 Nov 2008 14:27:07 -0500
Subject: Logging number of pop3's email retrieved during a connection -
	was (IMAP/POP traffic accounting)
References: <00ac01c713e3$96695d60$4e099d8e@neptune>	<1164900951.4502.68.camel@mjaw-mobile.ipartners.pl>
	<491C5B0F.1010008@hec.ca> <4927082A.8040405@hec.ca>
Message-ID: <93AB016B3DD647EDB1D81048DBFF0730@venus>

Hi Eddy,

I had worked on this briefly and, given a day or so, I could probably come 
up with a working solution at least for byte/traffic accounting.  Logging 
'messages retrieved' for POP3 could make some sense, but it gets complicated 
with clients using "TOP" to partially retrieve messages for inspection, and 
in the IMAP world its all but meaningless (since that might involve copies 
to folders, etc.).

For pure traffic accounting purposes, though, that isn't so hard, 
particularly if you don't want it saved in a database anywhere, but merely 
added as a log entry.

I might not have a chance to look at this until December though. 
Cyrus/software development is something of a side job for me, as I'm 
actually a third year student in McGill's Faculty of Law.  But I will work 
on getting this done (since I need it nowadays anyway) for traffic 
accounting on IMAP/POP3 at the very least...

Take care,
Anthony


----- Original Message ----- 
From: "Eddy Beliveau" <eddy.beliveau at hec.ca>
To: "Miros?aw Jaworski" <mjaw at ikp.pl>
Cc: <info-cyrus at lists.andrew.cmu.edu>; <anthony-list at tibbs.ca>
Sent: Friday, November 21, 2008 2:12 PM
Subject: Logging number of pop3's email retrieved during a connection - was 
(IMAP/POP traffic accounting)


> Hi! Netfriends,
>
> I sent this email last week but didn't received any replies.
>
> So, I would like to spin it again... Maybe my title was obscure.  ;-)
>
>
>
> I would like to log some statistics when any user retrieves their pop3's 
> emails.
>
> Currently:
> ... pop3[32760]: login: address [ip] user plaintext User logged in
>
> It would be nice to also get the number of messages retrieved (and total 
> size if available)
>
>
> Can someone help ?
>
> Thanks,
> Eddy
>
> -------- Message original --------
> Sujet : Re: IMAP/POP traffic accounting
> De : Eddy Beliveau <eddy.beliveau at hec.ca>
> Pour : Miros?aw Jaworski <mjaw at ikp.pl>
> Copie ? : info-cyrus at lists.andrew.cmu.edu
> Date : 2008-11-13 11:51
>
>> Hi!
>>
>> By browsing archives, I find this current thread.
>>
>> We are using cyrus-imapd 2.2.13 and it works well  :-)
>>
>> I would also like to add statistics to pop3d.c
>>
>> Can you please provide the patch that was used to get this:
>> Nov 30 16:27:31 mail1 pop3[19762]: stats: t63877a 8 663454 0 0
>>
>> It would be valuable to our helpdesk staff.
>>
>> Many thanks,
>>
>> Have a nice day
>> Eddy
>>
>> -------- Message original --------
>> Sujet : Re: IMAP/POP traffic accounting
>> De : Miros?aw Jaworski <mjaw at ikp.pl>
>> Pour : Anthony Tibbs <anthony-list at tibbs.ca>
>> Copie ? : info-cyrus at lists.andrew.cmu.edu
>> Date : 2006-11-30 10:35
>>
>>> On Wed, 2006-11-29 at 13:23 -0500, Anthony Tibbs wrote:
>>>> I believe there was some mention of this in the past, but I'm wondering 
>>>> whether there are any known efforts to implement network traffic 
>>>> accounting in the later versions of Cyrus, or if this is still 
>>>> something that hasn't been dealt with.  I am pondering possibly 
>>>> tackling this, but I'm not really familiar with the Cyrus code and 
>>>> would rather not reinvent the wheel if it's already in the works.
>>> Well, 'effort' is definitely too big word for the hack we use.
>>> Our support was used to some old popper log format, so we have made
>>> hack resulting in such lines:
>>>
>>> User who (downloaded and) deleted 8 messages, 663454 bytes total.
>>>
>>> Nov 30 16:27:16 mail1 pop3[19762]: login: [83.15.90.206] t63877a
>>> plaintext User logged in
>>> [...]
>>> Nov 30 16:27:31 mail1 pop3[19762]: stats: t63877a 8 663454 0 0
>>>
>>> User who didn't (downloaded and) deleted any messages; has 35 messages
>>> in his INBOX, 10785042 bytes total:
>>>
>>> Nov 30 16:18:59 mail1 pop3[19360]: login: [83.31.77.74] po30533
>>> plaintext User logged in
>>> [...]
>>> Nov 30 16:19:00 mail1 pop3[19360]: stats: po30533 0 0 35 10785042
>>>
>>>
>>> While it makes sense to have such logs from pop3 daemon doing simple
>>> operations on only one folder it has none when it comes to IMAP.
>>> What log can i possibly create after user connects to imap, applies
>>> his rules to an INBOX ( moving most of the messages to various folders,
>>> ie. marking them for deletion, not deleting them )? What when he reads
>>> some messages without deleting them?
>>>
>>> M.
>>>
>>
>
> -- 
> Eddy Beliveau
> HEC Montreal
> Montreal (Quebec)
> Canada
> 


From brong at fastmail.fm  Sat Nov 22 06:42:09 2008
From: brong at fastmail.fm (Bron Gondwana)
Date: Sat, 22 Nov 2008 22:42:09 +1100
Subject: Logging number of pop3's email retrieved during a connection -
	was (IMAP/POP traffic accounting)
In-Reply-To: <93AB016B3DD647EDB1D81048DBFF0730@venus>
References: <00ac01c713e3$96695d60$4e099d8e@neptune>
	<1164900951.4502.68.camel@mjaw-mobile.ipartners.pl>
	<491C5B0F.1010008@hec.ca> <4927082A.8040405@hec.ca>
	<93AB016B3DD647EDB1D81048DBFF0730@venus>
Message-ID: <20081122114209.GA7615@brong.net>

On Fri, Nov 21, 2008 at 02:27:07PM -0500, Anthony Tibbs wrote:
> Hi Eddy,
> 
> I had worked on this briefly and, given a day or so, I could probably come 
> up with a working solution at least for byte/traffic accounting.  Logging 
> 'messages retrieved' for POP3 could make some sense, but it gets complicated 
> with clients using "TOP" to partially retrieve messages for inspection, and 
> in the IMAP world its all but meaningless (since that might involve copies 
> to folders, etc.).
> 
> For pure traffic accounting purposes, though, that isn't so hard, 
> particularly if you don't want it saved in a database anywhere, but merely 
> added as a log entry.

We have a patch at fastmail that does rate logging - but we have some
tricky requirements that it doesn't log meta traffic, just body
transfers, and only some of those.  It's a bit weird.

I suspect it would actually be _easier_ to just do byte counting in
prot_write depending on the filehandle.

Actually, why not just do traffic counting on all protstreams?  It's not
that hard.

The attached patch adds traffic counting to pop3 and imap connections,
it prints total bytes in and out at shutdown or reset.  I've also
refactored our "auditlog" patch on top of this so that the traffic data
gets logged along with the sessionid allowing it to be easily tied back
to a login (you can do it with PID from the log file if you want, but
we use the session_id so we can track it back to the proxy logs on the
frontends and there to the source IP and specific login used - because
we allow our users to set up multiple passwords for their account with
different restrictions on use)

Counting messages would be a separate patch to just pop3.

Bron ( hey, I was interested.  It took about an hour and compiled first
       try! )
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cyrus-traffic-count-2.3.13.diff
Type: text/x-diff
Size: 6417 bytes
Desc: not available
Url : http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081122/216906a8/attachment.bin 

From brong at fastmail.fm  Sat Nov 22 07:17:13 2008
From: brong at fastmail.fm (Bron Gondwana)
Date: Sat, 22 Nov 2008 23:17:13 +1100
Subject: Logging number of pop3's email retrieved during a connection -
	was (IMAP/POP traffic accounting)
In-Reply-To: <20081122114209.GA7615@brong.net>
References: <00ac01c713e3$96695d60$4e099d8e@neptune>
	<1164900951.4502.68.camel@mjaw-mobile.ipartners.pl>
	<491C5B0F.1010008@hec.ca> <4927082A.8040405@hec.ca>
	<93AB016B3DD647EDB1D81048DBFF0730@venus>
	<20081122114209.GA7615@brong.net>
Message-ID: <20081122121713.GA17290@brong.net>

On Sat, Nov 22, 2008 at 10:42:09PM +1100, Bron Gondwana wrote:
> Counting messages would be a separate patch to just pop3.

Something like this...

Bron ( it counts retr, top and dele commands only, I figured I couldn't
       be arsed counting list and uidl )
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cyrus-popcount-2.3.13.diff
Type: text/x-diff
Size: 1673 bytes
Desc: not available
Url : http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081122/ef9b1af4/attachment.bin 

From j+asg at 2008.salmi.ch  Sat Nov 22 13:35:59 2008
From: j+asg at 2008.salmi.ch (Jukka Salmi)
Date: Sat, 22 Nov 2008 19:35:59 +0100
Subject: GSSAPI for sieve
In-Reply-To: <4926CA1C.8010803@yandex-team.ru>
References: <4926CA1C.8010803@yandex-team.ru>
Message-ID: <20081122183558.GA1071@moray.salmi.ch>

Hello,

Oleg Gorokhov --> info-cyrus (2008-11-21 17:47:56 +0300):
> is GSSAPI authorization supported by timsieved? It seems that either 
> sieveshell (which I used to test GSSAPI for sieve) or timsieved itself 
> failed to finish GSSAPI session correctly:
[...]
> If someone has working timsieved+GSSAPI?
> 
> pkg_info | grep cyrus
> cyrus-imapd-2.3.13
> cyrus-sasl-2.1.22_2

works fine here on NetBSD/i386 3.1 running Cyrus IMAPd 2.2.13 and SASL
2.1.22 (both built using pkgsrc).


Regards, Jukka

-- 
bashian roulette:
$ ((RANDOM%6)) || rm -rf ~

From ram at netcore.co.in  Mon Nov 24 01:51:29 2008
From: ram at netcore.co.in (ram)
Date: Mon, 24 Nov 2008 12:21:29 +0530
Subject: sieve vacation reposnse gives no response even after end of
	days specified
In-Reply-To: <4923F5FE.2080200@esiway.net>
References: <1226898637.5877.72.camel@darkstar.netcore.co.in>
	<4923F5FE.2080200@esiway.net>
Message-ID: <1227509489.9050.100.camel@darkstar.netcore.co.in>


On Wed, 2008-11-19 at 12:18 +0100, Marco Colombo wrote:
> ram wrote:
> > I have a default cyrus installation with cyrus-imapd-2.3 on centos 5 
> > People use sieve to set their vacation responses 
> > 
> > As per the configuration no response is sent for 1 day 
> > ---------
> > cat  /usr/sieve/i/it/default.script
> > 
> > require "vacation";
> > # Vacation
> > vacation :days 1 :addresses "it at example.com" "this is a vacation
> > response";
> > ------------------
> > 
> > 
> > The first vacation response seems to go perfectly fine , but even after
> > 1 day the response is not sent again
> > 
> > What could be the issue ? how do I debug this ? 
> 
> http://tools.ietf.org/html/rfc5230#section-4.1
> 
>    The minimum value used for this parameter is normally 1.  Sites MAY
>    define a different minimum value as long as the minimum is greater
>    than 0.
> 
> I think your server has the minimum = 3 days.
> 
> See also:
> http://lists.andrew.cmu.edu/pipermail/info-cyrus/2007-August/026550.html
> 


Is there a patch that fixes this value to 1 


From gougousoudis-list at servicecenter-khs.de  Mon Nov 24 08:56:35 2008
From: gougousoudis-list at servicecenter-khs.de (Alexandros Gougousoudis)
Date: Mon, 24 Nov 2008 14:56:35 +0100
Subject: Archiving emails with Cyrus
Message-ID: <492AB293.808@servicecenter-khs.de>

Hi,

we use Cyrus 2.2 on a Debian Etch Linux with Sasl and Thunderbird as a
IMAP mailclient for our users. The problem is, that the mailboxes become
very big, so I look for an automatic archiving software, which takes the
mails out of the mailbox into a file and a searchable database.

Thunderbird offers the possibility to mark a mail with an editable
keyword (right mouseclick) even as a bulk operation on all selected emails.

So my plan is, that the user marks all mails which can be archived with
that keyword (lets say "archive"), or move them to a subfolder "archive".

There must be a process in cyrus, which copies these emails into a
(zip)-file and/or into a database, to have them somehow accessable.
Cyrus must do this with the administrator account, because the imap
credentials of all the users are of course not known to us. Or we
install an "archive"-useraccount which has access to all mailboxes.

Does something like this exist? Where to look for? Maybe Opensource?

Please give a hint

Thanks
  Alex

From adam at morrison-ind.com  Mon Nov 24 09:56:41 2008
From: adam at morrison-ind.com (Adam Tauno Williams)
Date: Mon, 24 Nov 2008 09:56:41 -0500
Subject: Archiving emails with Cyrus
In-Reply-To: <492AB293.808@servicecenter-khs.de>
References: <492AB293.808@servicecenter-khs.de>
Message-ID: <20081124095641.th41hzpd8gw80s4o@tyr.morrison.iserv.net>

> we use Cyrus 2.2 on a Debian Etch Linux with Sasl and Thunderbird as a
> IMAP mailclient for our users. The problem is, that the mailboxes become
> very big, so I look for an automatic archiving software, which takes the
> mails out of the mailbox into a file and a searchable database.

Are you looking to archive message for data-retention or because you  
need to recover capacity?

> Thunderbird offers the possibility to mark a mail with an editable
> keyword (right mouseclick) even as a bulk operation on all selected emails.

Does that actually get saved to the server?  Or just in TB's cache?

> So my plan is, that the user marks all mails which can be archived with
> that keyword (lets say "archive"), or move them to a subfolder "archive".
> There must be a process in cyrus, which copies these emails into a
> (zip)-file and/or into a database, to have them somehow accessable.
> Cyrus must do this with the administrator account,

It should be trivial to write an IMAP tool that will archive messages.  
  I'm curious because I am currently working on a .NET/Gtk#  
application to do some management of Cyrus.  Currently it profiles a  
mailstore and creates a graph relating age of messages to storage  
space consumed.

> because the imap
> credentials of all the users are of course not known to us. Or we
> install an "archive"-useraccount which has access to all mailboxes.

Recommend the second,  I try never to connect to the box as the cyrus  
account.  Just grant appropriate access to the appropriate resources.

> Does something like this exist? Where to look for?

Not to my knowledge.



From gougousoudis-list at servicecenter-khs.de  Mon Nov 24 10:16:03 2008
From: gougousoudis-list at servicecenter-khs.de (Alexandros Gougousoudis)
Date: Mon, 24 Nov 2008 16:16:03 +0100
Subject: Archiving emails with Cyrus
In-Reply-To: <20081124095641.th41hzpd8gw80s4o@tyr.morrison.iserv.net>
References: <492AB293.808@servicecenter-khs.de>
	<20081124095641.th41hzpd8gw80s4o@tyr.morrison.iserv.net>
Message-ID: <492AC533.2070700@servicecenter-khs.de>

Hi Adam,

Adam Tauno Williams schrieb:
> Are you looking to archive message for data-retention or because you  
> need to recover capacity?
>
>   
I'll need both, sooner or later. For the moment it'll be enough to gain 
some more capacity. Thanks for your answer.

>> Thunderbird offers the possibility to mark a mail with an editable
>> Keyword (right mouseclick) even as a bulk operation on all selected emails.
>>     
> Does that actually get saved to the server?  Or just in TB's cache?
>
>   

Good question. I played around a bit, and looked in the cyrus mail 
spool, but it seems these marks are not transferred back to the server.

> plication to do some management of Cyrus.  Currently it profiles a  
> mailstore and creates a graph relating age of messages to storage  
> space consumed.
>   

I could do that with php, but if the users can't mark their messages to 
be archived, than it'll not be flexible enough. I can do that, just by 
date, but that's not what I want.

cu
 Alex



From adam at morrison-ind.com  Mon Nov 24 10:25:38 2008
From: adam at morrison-ind.com (Adam Tauno Williams)
Date: Mon, 24 Nov 2008 10:25:38 -0500
Subject: Archiving emails with Cyrus
In-Reply-To: <492AC533.2070700@servicecenter-khs.de>
References: <492AB293.808@servicecenter-khs.de>
	<20081124095641.th41hzpd8gw80s4o@tyr.morrison.iserv.net>
	<492AC533.2070700@servicecenter-khs.de>
Message-ID: <1227540338.7325.4.camel@sandbox64.mormail.com>

> Adam Tauno Williams schrieb:
> > Are you looking to archive message for data-retention or because you  
> > need to recover capacity?
> I'll need both, sooner or later. For the moment it'll be enough to gain 
> some more capacity. Thanks for your answer.
> >> Thunderbird offers the possibility to mark a mail with an editable
> >> Keyword (right mouseclick) even as a bulk operation on all selected emails.
> > Does that actually get saved to the server?  Or just in TB's cache?
> Good question. I played around a bit, and looked in the cyrus mail 
> spool, but it seems these marks are not transferred back to the server.

What I expected, 

> > plication to do some management of Cyrus.  Currently it profiles a  
> > mailstore and creates a graph relating age of messages to storage  
> > space consumed.
> I could do that with php, but if the users can't mark their messages to 
> be archived, than it'll not be flexible enough. I can do that, just by 
> date, but that's not what I want.

It's a bummer that basically no clients support annotation.  Probably
setting up an archive folder is the only workable solution.


From jmadden at ivytech.edu  Mon Nov 24 10:36:06 2008
From: jmadden at ivytech.edu (John Madden)
Date: Mon, 24 Nov 2008 10:36:06 -0500
Subject: Archiving emails with Cyrus
In-Reply-To: <492AB293.808@servicecenter-khs.de>
References: <492AB293.808@servicecenter-khs.de>
Message-ID: <200811241036.07023.jmadden@ivytech.edu>

On Monday 24 November 2008 08:56:35 am Alexandros Gougousoudis wrote:
> There must be a process in cyrus, which copies these emails into a
> (zip)-file and/or into a database, to have them somehow accessable.
> Cyrus must do this with the administrator account, because the imap
> credentials of all the users are of course not known to us. Or we
> install an "archive"-useraccount which has access to all mailboxes.

Here's an idea I've been toying with for an upcoming implementation...

Let's say you create everyone's Inbox/Drafts/etc mailboxes on your reasonably 
fast (expensive/small?) storage with a relatively low mailbox quota.  You 
then create user.username.archive on a separate Cyrus partition, perhaps 
residing on SATA with a relatively high mailbox quota.  Inform your users 
that to store mail and keep their Inbox available they should move it there.  
You can then use Cyrus' built-in search mechanisms (squat) and have to change 
very little.  

John




-- 
John Madden
Sr. UNIX Systems Engineer
Ivy Tech Community College of Indiana
jmadden at ivytech.edu

From eric.wolfe at marshall.edu  Mon Nov 24 11:03:01 2008
From: eric.wolfe at marshall.edu (Eric G. Wolfe)
Date: Mon, 24 Nov 2008 11:03:01 -0500
Subject: murder setup - mailboxes.db corruption - trouble recovering	with
	ctl_mboxlist
In-Reply-To: <alpine.DEB.2.00.0811200947360.26124@shell.onid.oregonstate.edu>
References: <49250248.9000807@marshall.edu> <49255A82.3030302@marshall.edu>,
	<F30CADDD-7955-483E-BFD4-2688BB31CD4A@umich.edu>
	<474C2677B73E604BA6DEC7745E2D7CE297B472D507@MUXC10.marshall.edu>
	<alpine.DEB.2.00.0811200947360.26124@shell.onid.oregonstate.edu>
Message-ID: <492AD035.2060501@marshall.edu>

I just wanted to follow up on this thread, rather than leaving it hanging.

It seems there was a more serious issue, which ultimately lead to the 
failure we experienced, with our murder setup.  Specifically our 
internal DNS servers, were having sporadic time-outs for Linux and 
Macintosh clients.  After disabling ipv6 on both of our nameservers, it 
seemed the name resolution issue cleared up.  The strange thing is that 
it has been working without any complications for the last 6 months.  
But nobody at Marshall can pinpoint anything that may have changed 
recently with regards to ipv6 networking on the internal network.  What 
is even stranger is that the name resolution timeouts only seemed to 
occur on Linux and Macintosh clients, while having no harmful effects on 
Microsoft Windows servers and clients.

I personally want to thank everyone who helped troubleshoot and resolve 
this issue.  Wesley Craig at the University of Michigan, thank you for 
your input, steering me in the right direction, and clearing up 
misconceptions about perceived errors.  Andrew Morgan at Oregon State 
University, thank you for the input on working around performance 
bottlenecks (due to a huge backlog of e-mail) during the 
re-synchronization to the front-ends.  Also, a big thanks to Jeff Eaton 
at Carnegie Mellon, for his assistance in troubleshooting and his advice 
on what to do next.

Andrew Morgan wrote:
> On Thu, 20 Nov 2008, Wolfe, Eric G wrote:
>
>   
>> We are using skiplist, I copied the mailboxes.db to frontends.  If the 
>> frontends are updating, it is not apparent.  I could not verify that 
>> either of them were synching from the master after the mupdate master 
>> synch.  Which is why I copied them to the frontends to speed things up.
>>     
>
> I've tried this in the past for the same reasons, but it doesn't work. 
> The only way I've been able to get the correct mailboxes.db on frontends 
> is to let them sync with the mupdate master.  And yes, this takes a while 
> from scratch when you are using skiplist because writes are much slower 
> with skiplist.
>
>   
>> Strange that it would just start causing problems now.  We probably are 
>> seeing a cascading effect of failure, with the backlog though.  Do the 
>> latest vanilla trees, have these patches included in them?  The packages 
>> here: http://cyrusimap.web.cmu.edu/downloads.html#imap.  I am somewhat 
>> reluctant to upgrade things in a fragile state.  If these patches are 
>> included in latest releases, is 2.3.13 a fairly painless upgrade path 
>> from 2.2.12, or do we need to go with 2.2.13?
>>     
>
> I wouldn't upgrade until you can get a working system.
>
>   
>> Is there anything we can turn off in the cyrus.conf or imapd.conf, to 
>> work around this "bottleneck"?  In other words, can we keep the MTA from 
>> knocking on the door for long enough to get everything running smoothly 
>> again?
>>     
>
> Yes, comment out lmtp in your cyrus.conf on the frontends.  After you have 
> successfully synced mailboxes.db, enable lmtp again and restart cyrus on 
> the frontends.  You probably should put some limits on lmtp as well.  We 
> use maxchild=50 here (3 frontends).
>
>   
>> Ok, because it sounds like a problem of connecting to the mupdate master 
>> port on 3905, to the unitiated.
>>     
>
> Hard to say, but take the steps above to simplify the problem.  :)
>
>  	Andy
>   


-- 
Eric G. Wolfe, IT Associate, Sr.
One John Marshall Drive
Marshall University, Drinko Library 428k
Huntington, WV 25755
Phone: 304.696.3428
Email: eric.wolfe at marshall.edu

Nobody's gonna believe that computers are intelligent until they start
coming in late and lying about it.


From nik at bu.edu  Mon Nov 24 11:12:36 2008
From: nik at bu.edu (Nik Conwell)
Date: Mon, 24 Nov 2008 11:12:36 -0500
Subject: Archiving emails with Cyrus
In-Reply-To: <200811241036.07023.jmadden@ivytech.edu>
References: <492AB293.808@servicecenter-khs.de>
	<200811241036.07023.jmadden@ivytech.edu>
Message-ID: <2EDEF8B4-087B-426C-97D9-82B9A4DF7DA7@bu.edu>


On Nov 24, 2008, at 10:36 AM, John Madden wrote:

> On Monday 24 November 2008 08:56:35 am Alexandros Gougousoudis wrote:
>> There must be a process in cyrus, which copies these emails into a
>> (zip)-file and/or into a database, to have them somehow accessable.
>> Cyrus must do this with the administrator account, because the imap
>> credentials of all the users are of course not known to us. Or we
>> install an "archive"-useraccount which has access to all mailboxes.
>
> Here's an idea I've been toying with for an upcoming implementation...
>
> Let's say you create everyone's Inbox/Drafts/etc mailboxes on your  
> reasonably
> fast (expensive/small?) storage with a relatively low mailbox  
> quota.  You
> then create user.username.archive on a separate Cyrus partition,  
> perhaps
> residing on SATA with a relatively high mailbox quota.  Inform your  
> users
> that to store mail and keep their Inbox available they should move  
> it there.
> You can then use Cyrus' built-in search mechanisms (squat) and have  
> to change
> very little.

I've been toying with the idea of replacing the cyrus routine(s?) that  
open/read the MESSAGE#. spool files with something that also  
understands gzipped data.  That way I can selectively gzip messages  
based on some algorithm involving message size and lack of activity.   
I haven't yet had the chance to do the analysis on the spool to see  
what sort of space gains I could expect.

Nik Conwell
Systems Programming
Boston University


From simon.matter at invoca.ch  Mon Nov 24 11:36:53 2008
From: simon.matter at invoca.ch (Simon Matter)
Date: Mon, 24 Nov 2008 17:36:53 +0100 (CET)
Subject: murder setup - mailboxes.db corruption - trouble 
	recovering	with ctl_mboxlist
In-Reply-To: <492AD035.2060501@marshall.edu>
References: <49250248.9000807@marshall.edu> <49255A82.3030302@marshall.edu>,
	<F30CADDD-7955-483E-BFD4-2688BB31CD4A@umich.edu>
	<474C2677B73E604BA6DEC7745E2D7CE297B472D507@MUXC10.marshall.edu>
	<alpine.DEB.2.00.0811200947360.26124@shell.onid.oregonstate.edu>
	<492AD035.2060501@marshall.edu>
Message-ID: <8749856b37542a0d7e0cf93c57141b00.squirrel@webmail.bi.corp.invoca.ch>

> I just wanted to follow up on this thread, rather than leaving it hanging.
>
> It seems there was a more serious issue, which ultimately lead to the
> failure we experienced, with our murder setup.  Specifically our
> internal DNS servers, were having sporadic time-outs for Linux and
> Macintosh clients.  After disabling ipv6 on both of our nameservers, it
> seemed the name resolution issue cleared up.  The strange thing is that
> it has been working without any complications for the last 6 months.
> But nobody at Marshall can pinpoint anything that may have changed
> recently with regards to ipv6 networking on the internal network.  What
> is even stranger is that the name resolution timeouts only seemed to
> occur on Linux and Macintosh clients, while having no harmful effects on
> Microsoft Windows servers and clients.

I had a strange issue recently with name resolution (OT because it has
nothing todo with cyrus-imapd).
Resolvers on Linux and recent OSX seem to always try to query for IPv6
(AAAA) records even if NO IPv6 is configured on the client (no, I think it
only happens if the client program tries to resolve IPv6 like firefox in
our case). The problem starts if the DNS servers in question don't reply
correctly to those requests and reply with SERVFAIL for example. The
resolver will then ask the next DNS server it find in resolv.conf and go
on until no more servers to ask, which can take quite some time if you
have 4 servers configured like in our case.
In the end it turned out the company in question were running DNS
loadbalancers and they simply replied with SERVFAIL for AAAA records. I've
been told customers with Windows don't have that problem and I guess it's
because their resolver doesn't ask for IPv6 adresses if no IPv6 is
configured.

Simon

>
> I personally want to thank everyone who helped troubleshoot and resolve
> this issue.  Wesley Craig at the University of Michigan, thank you for
> your input, steering me in the right direction, and clearing up
> misconceptions about perceived errors.  Andrew Morgan at Oregon State
> University, thank you for the input on working around performance
> bottlenecks (due to a huge backlog of e-mail) during the
> re-synchronization to the front-ends.  Also, a big thanks to Jeff Eaton
> at Carnegie Mellon, for his assistance in troubleshooting and his advice
> on what to do next.
>
> Andrew Morgan wrote:
>> On Thu, 20 Nov 2008, Wolfe, Eric G wrote:
>>
>>
>>> We are using skiplist, I copied the mailboxes.db to frontends.  If the
>>> frontends are updating, it is not apparent.  I could not verify that
>>> either of them were synching from the master after the mupdate master
>>> synch.  Which is why I copied them to the frontends to speed things up.
>>>
>>
>> I've tried this in the past for the same reasons, but it doesn't work.
>> The only way I've been able to get the correct mailboxes.db on frontends
>> is to let them sync with the mupdate master.  And yes, this takes a
>> while
>> from scratch when you are using skiplist because writes are much slower
>> with skiplist.
>>
>>
>>> Strange that it would just start causing problems now.  We probably are
>>> seeing a cascading effect of failure, with the backlog though.  Do the
>>> latest vanilla trees, have these patches included in them?  The
>>> packages
>>> here: http://cyrusimap.web.cmu.edu/downloads.html#imap.  I am somewhat
>>> reluctant to upgrade things in a fragile state.  If these patches are
>>> included in latest releases, is 2.3.13 a fairly painless upgrade path
>>> from 2.2.12, or do we need to go with 2.2.13?
>>>
>>
>> I wouldn't upgrade until you can get a working system.
>>
>>
>>> Is there anything we can turn off in the cyrus.conf or imapd.conf, to
>>> work around this "bottleneck"?  In other words, can we keep the MTA
>>> from
>>> knocking on the door for long enough to get everything running smoothly
>>> again?
>>>
>>
>> Yes, comment out lmtp in your cyrus.conf on the frontends.  After you
>> have
>> successfully synced mailboxes.db, enable lmtp again and restart cyrus on
>> the frontends.  You probably should put some limits on lmtp as well.  We
>> use maxchild=50 here (3 frontends).
>>
>>
>>> Ok, because it sounds like a problem of connecting to the mupdate
>>> master
>>> port on 3905, to the unitiated.
>>>
>>
>> Hard to say, but take the steps above to simplify the problem.  :)
>>
>>  	Andy
>>
>
>
> --
> Eric G. Wolfe, IT Associate, Sr.
> One John Marshall Drive
> Marshall University, Drinko Library 428k
> Huntington, WV 25755
> Phone: 304.696.3428
> Email: eric.wolfe at marshall.edu
>
> Nobody's gonna believe that computers are intelligent until they start
> coming in late and lying about it.
>
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>



From wes at umich.edu  Mon Nov 24 13:09:02 2008
From: wes at umich.edu (Wesley Craig)
Date: Mon, 24 Nov 2008 13:09:02 -0500
Subject: sieve vacation reposnse gives no response even after end of days
	specified
In-Reply-To: <1227509489.9050.100.camel@darkstar.netcore.co.in>
References: <1226898637.5877.72.camel@darkstar.netcore.co.in>
	<4923F5FE.2080200@esiway.net>
	<1227509489.9050.100.camel@darkstar.netcore.co.in>
Message-ID: <26B08311-F72B-44FF-88E2-577D400296D3@umich.edu>

On 24 Nov 2008, at 01:51, ram wrote:
> Is there a patch that fixes this value to 1

Find one attached.  Is this in bugzilla?  I couldn't find it...  If  
someone puts it there and marks it as a "blocker", it will be fixed  
in the next release.

:wes
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sieve-min.diff
Type: application/octet-stream
Size: 494 bytes
Desc: not available
Url : http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081124/3cd6dd0b/attachment.obj 

From weigel at dfbnet.org  Mon Nov 24 13:10:29 2008
From: weigel at dfbnet.org (Helmut Weigel)
Date: Mon, 24 Nov 2008 19:10:29 +0100
Subject: Cyrus-IMAPD Hot Standby Configuration
Message-ID: <20081124191029000.00000002504@donald>

Hi,

we're currently running a mailsystem with postfix and cyrus imapd
with about 37.000 mboxes on a single server.

For "HA" purposes (Hot Standby ist ok) I'm looking for a way to 
replicate the mailboxes to a second server on the fly.

I found a description an the net 
http://cyrusimap.web.cmu.edu/imapd/install-replication.html
but it's from 2005 

so my question is: Is this still the recommended way for doing
replication or is there something new?

we are using cyrus-imapd-2.2.8-1 release from Red Hat Enterprise 
Linux AS release 3 (Taroon Update)

Any hel / comments aprechiated

Thanks

Helmut Weigel

 

DFB-Medien GmbH & Co. KG
Otto-Fleck-Schneise 6
60528 Frankfurt

 

fon +49 (69) 6788-319
fax +49 (69) 6788-343
email: helmut.weigel at dfbnet.de

Homepage: www.dfb-medien.de


--------------------------------------------

Hermann-Neuberger-Haus | Otto-Fleck-Schneise 6 | 60528 Frankfurt | DFB Medien GmbH & Co. KG | Gesch?ftsf?hrung: DFB Medien Verwaltungs-GmbH, deren Gesch?ftsf?hrer: Kurt G?rtner, Tilman Walk |Vorsitzender des Aufsichtsrates: Dr. Theo Zwanziger | HRA 30550 | Registergericht: Frankfurt


From wes at umich.edu  Mon Nov 24 13:56:01 2008
From: wes at umich.edu (Wesley Craig)
Date: Mon, 24 Nov 2008 13:56:01 -0500
Subject: Cyrus-IMAPD Hot Standby Configuration
In-Reply-To: <20081124191029000.00000002504@donald>
References: <20081124191029000.00000002504@donald>
Message-ID: <79CDD7F7-3566-4D7D-BFBD-F5B1DCBE8955@umich.edu>

On 24 Nov 2008, at 13:10, Helmut Weigel wrote:
> I found a description an the net
> http://cyrusimap.web.cmu.edu/imapd/install-replication.html
> but it's from 2005

Definitely a bit dated, but replication is also much more mature now.

> so my question is: Is this still the recommended way for doing
> replication or is there something new?

It is the recommended approach, yes.  There are definitely other  
options, e.g., "mupdate_config: replicated" plus a HA disk system is  
another (much more expensive) method.

> we are using cyrus-imapd-2.2.8-1 release from Red Hat Enterprise
> Linux AS release 3 (Taroon Update)

Replication requires 2.3.x and 2.3.13 is the best replicating cyrus  
imapd available.

:wes

From weigel at dfbnet.org  Mon Nov 24 16:19:58 2008
From: weigel at dfbnet.org (Helmut Weigel)
Date: Mon, 24 Nov 2008 22:19:58 +0100
Subject: AW: Cyrus-IMAPD Hot Standby Configuration
In-Reply-To: <79CDD7F7-3566-4D7D-BFBD-F5B1DCBE8955@umich.edu>
References: <20081124191029000.00000002504@donald>
	<79CDD7F7-3566-4D7D-BFBD-F5B1DCBE8955@umich.edu>
Message-ID: <20081124221958859.00000001816@donald>

Hi All

> 
> Replication requires 2.3.x and 2.3.13 is the best replicating 
> cyrus imapd available.
> 

RedHat ships 2.3.7 with RHEL Enterprise Server 5. 

Is that sufficient? Does anybody have experiences with that version?

Thanks in advance 

Helmut Weigel


From Hagedorn at uni-koeln.de  Mon Nov 24 16:47:28 2008
From: Hagedorn at uni-koeln.de (Sebastian Hagedorn)
Date: Mon, 24 Nov 2008 22:47:28 +0100
Subject: AW: Cyrus-IMAPD Hot Standby Configuration
In-Reply-To: <20081124221958859.00000001816@donald>
References: <20081124191029000.00000002504@donald>
	<79CDD7F7-3566-4D7D-BFBD-F5B1DCBE8955@umich.edu>
	<20081124221958859.00000001816@donald>
Message-ID: <FE733A18292B1BDD29FF65B7@G5.voip.local>

-- Helmut Weigel <weigel at dfbnet.org> is rumored to have mumbled on 24. 
November 2008 22:19:58 +0100 regarding AW: Cyrus-IMAPD Hot Standby 
Configuration:

>> Replication requires 2.3.x and 2.3.13 is the best replicating
>> cyrus imapd available.
>>
>
> RedHat ships 2.3.7 with RHEL Enterprise Server 5.
>
> Is that sufficient? Does anybody have experiences with that version?

There's no need to use Red Hat's stock RPMs, because Simon Matter provides 
excellent more current ones. We (Universit?t zu K?ln) have been using 
them successfuly for years:

<http://invoca.ch/pub/packages/cyrus-imapd/>

Initially we staid with Red Hat's because we thought they'd give us better 
support if we did, but their support isn't worth much. Believe me, you're 
much better off with the community support you're getting here!
--
Sebastian Hagedorn - RZKR-R1 (Flachbau), Zi. 18, Robert-Koch-Str. 10
Zentrum f?r angewandte Informatik - Universit?tsweiter Service RRZK
Universit?t zu K?ln / Cologne University - Tel. +49-221-478-5587
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: not available
Url : http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081124/fe4142e1/attachment.bin 

From nic at onlight.com  Mon Nov 24 16:56:31 2008
From: nic at onlight.com (Nic Bernstein)
Date: Mon, 24 Nov 2008 15:56:31 -0600
Subject: AW: Cyrus-IMAPD Hot Standby Configuration
In-Reply-To: <FE733A18292B1BDD29FF65B7@G5.voip.local>
References: <20081124191029000.00000002504@donald>	<79CDD7F7-3566-4D7D-BFBD-F5B1DCBE8955@umich.edu>	<20081124221958859.00000001816@donald>
	<FE733A18292B1BDD29FF65B7@G5.voip.local>
Message-ID: <492B230F.8070500@onlight.com>

I must second Sabastian's comments.  Simon Matter's Invoca RPMs are very 
well put together.  I use them extensively.

Best regards,
    -nic

Sebastian Hagedorn wrote:
> -- Helmut Weigel <weigel at dfbnet.org> is rumored to have mumbled on 24. 
> November 2008 22:19:58 +0100 regarding AW: Cyrus-IMAPD Hot Standby 
> Configuration:
>
>>> Replication requires 2.3.x and 2.3.13 is the best replicating
>>> cyrus imapd available.
>>>
>>
>> RedHat ships 2.3.7 with RHEL Enterprise Server 5.
>>
>> Is that sufficient? Does anybody have experiences with that version?
>
> There's no need to use Red Hat's stock RPMs, because Simon Matter 
> provides excellent more current ones. We (Universit?t zu K?ln) have 
> been using them successfuly for years:
>
> <http://invoca.ch/pub/packages/cyrus-imapd/>
>
> Initially we staid with Red Hat's because we thought they'd give us 
> better support if we did, but their support isn't worth much. Believe 
> me, you're much better off with the community support you're getting 
> here!
> -- 
> Sebastian Hagedorn - RZKR-R1 (Flachbau), Zi. 18, Robert-Koch-Str. 10
> Zentrum f?r angewandte Informatik - Universit?tsweiter Service RRZK
> Universit?t zu K?ln / Cologne University - Tel. +49-221-478-5587
> ------------------------------------------------------------------------
>
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


-- 
Nic Bernstein                             nic at onlight.com
Onlight llc.                              www.onlight.com
2266 North Prospect Avenue #610	          v. 414.272.4477
Milwaukee, Wisconsin  53202-6306          f. 414.290.0335

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081124/a792e03d/attachment.html 

From wes at umich.edu  Mon Nov 24 17:05:54 2008
From: wes at umich.edu (Wesley Craig)
Date: Mon, 24 Nov 2008 17:05:54 -0500
Subject: AW: Cyrus-IMAPD Hot Standby Configuration
In-Reply-To: <20081124221958859.00000001816@donald>
References: <20081124191029000.00000002504@donald>
	<79CDD7F7-3566-4D7D-BFBD-F5B1DCBE8955@umich.edu>
	<20081124221958859.00000001816@donald>
Message-ID: <AD3B1E8B-D31B-43EF-B172-95499ED00819@umich.edu>

On 24 Nov 2008, at 16:19, Helmut Weigel wrote:
> RedHat ships 2.3.7 with RHEL Enterprise Server 5.
> Is that sufficient? Does anybody have experiences with that version?

I haven't reviewed RH's 2.3.7.  Perhaps they closely follow cyrus  
imapd development and back port all of the important stability,  
security and correctness changes that have been made between 2.3.7  
and 2.3.13.  But I strongly doubt it :)

:wes

From wbreyha at gmx.net  Tue Nov 25 09:35:16 2008
From: wbreyha at gmx.net (Wolfgang Breyha)
Date: Tue, 25 Nov 2008 15:35:16 +0100
Subject: murder frontend CAPABILITY check
Message-ID: <492C0D24.4080509@gmx.net>

Hi!

I recognized that IDLE was not working as expected on our murder setup. We've
two frontends, 3 backends and a dedicated mupdate server, all running 2.3.13.
idled is active on the backends.

I did some strace'ing on front- and backends and as far as I can tell, the
frontends do not proxy the IDLE command to the backends, because the frontends
think the backends are not CAPAable to do IDLE.

I searched the source and it seems that there is a problem with the capability
check the frontends do on the backends.

On one hand cyrus announces CAPABILITY in the greeting banner. But
CAPA_PREAUTH doesn't contain all of the caps the frontend wants to know. eg.
IDLE, MULTIAPPEND, RIGHTS and LIST-SUBSCRIBED.

On the other hand, the frontend is told by the protocol definition in
imap_proxy.c:107, that it should exclusively check the banner in backend.c:400
for the CAPS, which doesn't contain the needed info in pre_auth state.

Am I right, that either
capa_response(CAPA_PREAUTH);
should return the needed caps for the frontends, too, or the frontends
should'nt believe blindly in the banner capabilites?

Regards, Wolfgang Breyha
-- 
Wolfgang Breyha <wbreyha at gmx.net> | http://www.blafasel.at/
Vienna University Computer Center | Austria


From morgan at orst.edu  Tue Nov 25 16:39:46 2008
From: morgan at orst.edu (Andrew Morgan)
Date: Tue, 25 Nov 2008 13:39:46 -0800 (PST)
Subject: murder setup - mailboxes.db corruption - trouble 	recovering
	with ctl_mboxlist
In-Reply-To: <8749856b37542a0d7e0cf93c57141b00.squirrel@webmail.bi.corp.invoca.ch>
References: <49250248.9000807@marshall.edu> <49255A82.3030302@marshall.edu>,
	<F30CADDD-7955-483E-BFD4-2688BB31CD4A@umich.edu>
	<474C2677B73E604BA6DEC7745E2D7CE297B472D507@MUXC10.marshall.edu>
	<alpine.DEB.2.00.0811200947360.26124@shell.onid.oregonstate.edu>
	<492AD035.2060501@marshall.edu>
	<8749856b37542a0d7e0cf93c57141b00.squirrel@webmail.bi.corp.invoca.ch>
Message-ID: <alpine.DEB.2.00.0811251337430.28113@shell.onid.oregonstate.edu>

On Mon, 24 Nov 2008, Simon Matter wrote:

>> I just wanted to follow up on this thread, rather than leaving it hanging.
>>
>> It seems there was a more serious issue, which ultimately lead to the
>> failure we experienced, with our murder setup.  Specifically our
>> internal DNS servers, were having sporadic time-outs for Linux and
>> Macintosh clients.  After disabling ipv6 on both of our nameservers, it
>> seemed the name resolution issue cleared up.  The strange thing is that
>> it has been working without any complications for the last 6 months.
>> But nobody at Marshall can pinpoint anything that may have changed
>> recently with regards to ipv6 networking on the internal network.  What
>> is even stranger is that the name resolution timeouts only seemed to
>> occur on Linux and Macintosh clients, while having no harmful effects on
>> Microsoft Windows servers and clients.
>
> I had a strange issue recently with name resolution (OT because it has
> nothing todo with cyrus-imapd).
> Resolvers on Linux and recent OSX seem to always try to query for IPv6
> (AAAA) records even if NO IPv6 is configured on the client (no, I think it
> only happens if the client program tries to resolve IPv6 like firefox in
> our case). The problem starts if the DNS servers in question don't reply
> correctly to those requests and reply with SERVFAIL for example. The
> resolver will then ask the next DNS server it find in resolv.conf and go
> on until no more servers to ask, which can take quite some time if you
> have 4 servers configured like in our case.
> In the end it turned out the company in question were running DNS
> loadbalancers and they simply replied with SERVFAIL for AAAA records. I've
> been told customers with Windows don't have that problem and I guess it's
> because their resolver doesn't ask for IPv6 adresses if no IPv6 is
> configured.

I ran into an almost identical problem just yesterday with my silly home 
network router (D-Link DIR-655).  The built-in DNS server in the router 
simply ignored AAAA queries.  It didn't respond as all, even with 
SERVFAIL.  Eventually the resolver library on Linux would timeout and try 
an A query instead.  I ended up disabling the built-in DNS server and 
using the Comcast DNS servers directly.

Anyways, I can definately understand why IPv6 might cause some issues... 
:)

 	Andy

From cyrus-list at esiway.net  Tue Nov 25 19:22:39 2008
From: cyrus-list at esiway.net (Marco Colombo)
Date: Wed, 26 Nov 2008 01:22:39 +0100
Subject: sieve vacation reposnse gives no response even after end of days
	specified
In-Reply-To: <26B08311-F72B-44FF-88E2-577D400296D3@umich.edu>
References: <1226898637.5877.72.camel@darkstar.netcore.co.in>
	<4923F5FE.2080200@esiway.net>
	<1227509489.9050.100.camel@darkstar.netcore.co.in>
	<26B08311-F72B-44FF-88E2-577D400296D3@umich.edu>
Message-ID: <492C96CF.5020703@esiway.net>

Wesley Craig wrote:
> On 24 Nov 2008, at 01:51, ram wrote:
>> Is there a patch that fixes this value to 1
> 
> Find one attached.  Is this in bugzilla?  I couldn't find it...  If
> someone puts it there and marks it as a "blocker", it will be fixed in
> the next release.
> 
> :wes

At that time I just reported the "bug" here. I wasn't even sure it was
a bug.

.TM.


From wbreyha at gmx.net  Wed Nov 26 06:34:27 2008
From: wbreyha at gmx.net (Wolfgang Breyha)
Date: Wed, 26 Nov 2008 12:34:27 +0100
Subject: murder frontend CAPABILITY check
In-Reply-To: <492C0D24.4080509@gmx.net>
References: <492C0D24.4080509@gmx.net>
Message-ID: <492D3443.3020902@gmx.net>

Wolfgang Breyha wrote, on 25.11.2008 15:35:
> Am I right, that either
> capa_response(CAPA_PREAUTH);
> should return the needed caps for the frontends, too

I tried this, by adding CAPA_POSTAUTH in imapd.c:cmdloop() and my frontends
proxy IDLE to the backends again. This confirms my previous findings and I
filed a bug:
https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=3121

Regards, Wolfgang Breyha
-- 
Wolfgang Breyha <wbreyha at gmx.net> | http://www.blafasel.at/
Vienna University Computer Center | Austria


From Duncan.Gibb at SiriusIT.co.uk  Wed Nov 26 11:36:10 2008
From: Duncan.Gibb at SiriusIT.co.uk (Duncan Gibb)
Date: Wed, 26 Nov 2008 16:36:10 +0000
Subject: murder frontend CAPABILITY check
In-Reply-To: <492D3443.3020902@gmx.net>
References: <492C0D24.4080509@gmx.net> <492D3443.3020902@gmx.net>
Message-ID: <492D7AFA.9090504@SiriusIT.co.uk>

Wolfgang Breyha wrote:

WB> I tried this, by adding CAPA_POSTAUTH in imapd.c:cmdloop() and my
WB> frontends proxy IDLE to the backends again. This confirms my
WB> previous findings and I filed a bug:
WB> https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=3121

Could you post your patch, please?  Or attach it to the bug.


Cheers


Duncan

-- 
Duncan Gibb, Technical Director
Sirius Corporation plc - The Open Source Experts
http://www.siriusit.co.uk/
Tel: +44 870 608 0063

From wbreyha at gmx.net  Wed Nov 26 11:46:00 2008
From: wbreyha at gmx.net (Wolfgang Breyha)
Date: Wed, 26 Nov 2008 17:46:00 +0100
Subject: murder frontend CAPABILITY check
In-Reply-To: <492D7AFA.9090504@SiriusIT.co.uk>
References: <492C0D24.4080509@gmx.net> <492D3443.3020902@gmx.net>
	<492D7AFA.9090504@SiriusIT.co.uk>
Message-ID: <492D7D48.4040107@gmx.net>

Duncan Gibb wrote, on 26.11.2008 17:36:
> Could you post your patch, please?  Or attach it to the bug.

I'll post it here, since it's only a quick and dirty "fix" to have proof of
the bug.

Regards, Wolfgang
-- 
Wolfgang Breyha <wbreyha at gmx.net> | http://www.blafasel.at/
Vienna University Computer Center | Austria

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: cyrus-imapd-2.3.13-capa.patch
Url: http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081126/76f8af70/attachment.ksh 

From demarco at maya.com  Wed Nov 26 16:57:10 2008
From: demarco at maya.com (Christopher DeMarco)
Date: Wed, 26 Nov 2008 16:57:10 -0500
Subject: Cyrus ACLs and groups from LDAP
Message-ID: <20081126215710.GB14152@owl.prv.maya.com>

I want to put a group: into an ACL, but I want to expand the group
using LDAP rather than /etc/groups.

A thread from this list circa 2006 seems to indicate that if PAM uses
LDAP (or NIS for that matter), that Cyrus will use LDAP without even
knowing it. 

I'd actually prefer that Cyrus do this explicitly -- for clarity's
sake and because I don't want to switch the mail server over to
LDAP-via-PAM authentication just yet.  Is it possible, and if so, how?

Thanks!


-- 
Christopher DeMarco <demarco at maya.com>
IT Director
MAYA Group
+1-412-708-9660


From dwhite at olp.net  Wed Nov 26 17:24:16 2008
From: dwhite at olp.net (Dan White)
Date: Wed, 26 Nov 2008 16:24:16 -0600
Subject: Cyrus ACLs and groups from LDAP
In-Reply-To: <20081126215710.GB14152@owl.prv.maya.com>
References: <20081126215710.GB14152@owl.prv.maya.com>
Message-ID: <492DCC90.60006@olp.net>

Christopher DeMarco wrote:
> I want to put a group: into an ACL, but I want to expand the group
> using LDAP rather than /etc/groups.
>
> A thread from this list circa 2006 seems to indicate that if PAM uses
> LDAP (or NIS for that matter), that Cyrus will use LDAP without even
> knowing it. 
>
> I'd actually prefer that Cyrus do this explicitly -- for clarity's
> sake and because I don't want to switch the mail server over to
> LDAP-via-PAM authentication just yet.  Is it possible, and if so, how?
>
> Thanks!
>   

Christopher,

The option unix_group_enable controls how cyrus searches groups. If 
enabled, cyrus will search using the system getgrent call and, depending 
on your OS, can make use of various NSS modules to retrieve group 
information. It doesn't use ldap-pam, but can use nss-ldap, nss-ldapd, 
nss-mysql etc. (on at least Linux and Solaris). This wouldn't affect how 
you currently to authentication, only how group ACL authorization performs.

You should also be able to use the ldap ptloader module to perform 
authorization, but I have not tried that.

- Dan

From spamtest-eir1beucei at asp4.polyformal.de  Thu Nov 27 04:14:48 2008
From: spamtest-eir1beucei at asp4.polyformal.de (Stefan Pampel)
Date: Thu, 27 Nov 2008 10:14:48 +0100
Subject: plus addressing over lmtp not working / sam [box] anyone p set
Message-ID: <slrngisp8a.df4.polyformal@trabant3.kaecgn>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

it seems that plus addressing not work in my case:

postfix configured correctly:
main.cf: 
recipient_delimiter = +

master.cf:
lmtp      unix  -       -       n       -       -       lmtp

Mails basically reach the INBOX, but not the folder itself

cyrus config:
<snip>
altnamespace: yes # even with no does not work
virtdomains: userid
defaultdomain: foo.bar.org
unixhierarchysep: no
</snip>

The folder
lam user.user1.spam

user1 lrswipcda
anyone p

The mail header contains 
To: user1 <user1+spam at foo.bar.org>

Any hints?

Thanks in advance.

Stefan Pampel

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkkuZQgACgkQXXT1nfS2Z+HQZACePaK8zDCOamVl91z+hIhnK8b6
XkMAn2iwps/ZU1Oet+Vg1g+uXWi/uAqM
=6YOr
-----END PGP SIGNATURE-----

-- 
/ polyformal                /
| http://www.polyformal.de /
|_________________________/
GPG KEY: 11678845


From rudy.gevaert at ugent.be  Thu Nov 27 04:42:58 2008
From: rudy.gevaert at ugent.be (Rudy Gevaert)
Date: Thu, 27 Nov 2008 10:42:58 +0100
Subject: plus addressing over lmtp not working / sam [box] anyone p set
In-Reply-To: <slrngisp8a.df4.polyformal@trabant3.kaecgn>
References: <slrngisp8a.df4.polyformal@trabant3.kaecgn>
Message-ID: <20081127104258.s6ijo7dw9w880gok@webmail.ugent.be>

Quoting Stefan Pampel <spamtest-eir1beucei at asp4.polyformal.de>:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hello,
>
> it seems that plus addressing not work in my case:
>
> postfix configured correctly:
> main.cf:
> recipient_delimiter = +
>
> master.cf:
> lmtp      unix  -       -       n       -       -       lmtp
>
> Mails basically reach the INBOX, but not the folder itself
>
> cyrus config:
> <snip>
> altnamespace: yes # even with no does not work
> virtdomains: userid
> defaultdomain: foo.bar.org
> unixhierarchysep: no
> </snip>
>
> The folder
> lam user.user1.spam
>
> user1 lrswipcda
> anyone p
>
> The mail header contains
> To: user1 <user1+spam at foo.bar.org>
>
> Any hints?
>
I don't have the manual page at hand right now, but isn't there an  
option to switch it on in imapd.conf?  We are using + addressing  
without any problems.
Is the folder already created?  Do the cases match?

-- 
  -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
  Rudy Gevaert                             e-mail: Rudy.Gevaert at UGent.be
  Directie ICT, Afdeling Infrastructuur
  Groep Systemen                                      tel: +32 9 264 4750
  Universiteit Gent                                   fax: +32 9 264 4994
  Krijgslaan 281, gebouw S9, 9000 Gent, Belgie               www.UGent.be
  -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --


From spamtest-eir1beucei at asp4.polyformal.de  Thu Nov 27 05:40:24 2008
From: spamtest-eir1beucei at asp4.polyformal.de (Stefan Pampel)
Date: Thu, 27 Nov 2008 11:40:24 +0100
Subject: plus addressing over lmtp not working / sam [box] anyone p set
References: <slrngisp8a.df4.polyformal@trabant3.kaecgn>
Message-ID: <slrngisu8o.df4.polyformal@trabant3.kaecgn>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Rudy Gevaert <rudy.gevaert at ugent.be> schrieb:
> Quoting Stefan Pampel <spamtest-eir1beucei at asp4.polyformal.de>:
>> it seems that plus addressing not work in my case:
>>
>> postfix configured correctly:
>> main.cf:
>> recipient_delimiter = +
>>
>> master.cf:
>> lmtp      unix  -       -       n       -       -       lmtp
>>
>> Mails basically reach the INBOX, but not the folder itself
>>
>> cyrus config:
>> <snip>
>> altnamespace: yes # even with no does not work
>> virtdomains: userid
>> defaultdomain: foo.bar.org
>> unixhierarchysep: no
>> </snip>
>>
>> The folder
>> lam user.user1.spam
>>
>> user1 lrswipcda
>> anyone p
>>
>> The mail header contains
>> To: user1 <user1+spam at foo.bar.org>
>>
>> Any hints?
>>
> I don't have the manual page at hand right now, but isn't there an  
> option to switch it on in imapd.conf?  We are using + addressing  
> without any problems.
> Is the folder already created?  Do the cases match?

Yes, and with permissions anyone p, as i mentioned above. Case does
match. lmtp_downcase_rcpt = yes , I also tried = no . No changes :|

OS: Debian lenny with cyrus 2.2.13-14+b3


Stefan Pampel

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkkuePoACgkQXXT1nfS2Z+G9UwCeMGXGZF7MOepjlyNzTh0FsHT5
3HYAoKqn+kDQRk2T+8aHUG12JAiJxlxi
=I3KU
-----END PGP SIGNATURE-----

-- 
/ polyformal                /
| http://www.polyformal.de /
|_________________________/
GPG KEY: 11678845


From dimma at higis.ru  Thu Nov 27 15:22:27 2008
From: dimma at higis.ru (Dmitriy Kirhlarov)
Date: Thu, 27 Nov 2008 23:22:27 +0300
Subject: Cyrus ACLs and groups from LDAP
In-Reply-To: <20081126215710.GB14152@owl.prv.maya.com>
References: <20081126215710.GB14152@owl.prv.maya.com>
Message-ID: <492F0183.3040508@higis.ru>

Christopher DeMarco wrote:
> I want to put a group: into an ACL, but I want to expand the group
> using LDAP rather than /etc/groups.
> 
> A thread from this list circa 2006 seems to indicate that if PAM uses
> LDAP (or NIS for that matter), that Cyrus will use LDAP without even
> knowing it. 
> 
> I'd actually prefer that Cyrus do this explicitly -- for clarity's
> sake and because I don't want to switch the mail server over to
> LDAP-via-PAM authentication just yet.  Is it possible, and if so, how?

Yes. It's possible:
https://dev.vega.ru/twiki/bin/view/SysAdmin/Sprint2008-11-18-2008-11-24

also, afair, now issue with registering user in several groups fixed.

WBR
Dmitriy

From spamtest-eir1beucei at asp4.polyformal.de  Thu Nov 27 15:49:36 2008
From: spamtest-eir1beucei at asp4.polyformal.de (Stefan Pampel)
Date: Thu, 27 Nov 2008 21:49:36 +0100
Subject: Cyrus ACLs and groups from LDAP
References: <20081126215710.GB14152@owl.prv.maya.com>
	<492F0183.3040508@higis.ru>
Message-ID: <slrngiu1v0.lv1.spamtest-eir1beucei@trabant3.kaecgn>

Dmitriy Kirhlarov <dimma at higis.ru> schrieb:
> Christopher DeMarco wrote:
>> I want to put a group: into an ACL, but I want to expand the group
>> using LDAP rather than /etc/groups.
>> 
>> A thread from this list circa 2006 seems to indicate that if PAM uses
>> LDAP (or NIS for that matter), that Cyrus will use LDAP without even
>> knowing it. 
>> 
>> I'd actually prefer that Cyrus do this explicitly -- for clarity's
>> sake and because I don't want to switch the mail server over to
>> LDAP-via-PAM authentication just yet.  Is it possible, and if so, how?
>
> Yes. It's possible:
> https://dev.vega.ru/twiki/bin/view/SysAdmin/Sprint2008-11-18-2008-11-24

Hello Dmitriy,

is this document also available in a public place? This place is
password protected.

Thanks in advance

Stefan Pampel
-- 
/ polyformal                /
| http://www.polyformal.de /
|_________________________/
GPG KEY: 11678845


From simon at localhorst.com  Fri Nov 28 08:33:15 2008
From: simon at localhorst.com (Simon Liebold)
Date: Fri, 28 Nov 2008 14:33:15 +0100
Subject: "Trash"-mailboxes with separate quota
Message-ID: <1227879195.19333.34.camel@simpad>

Hi all,

there exists this problem that a user cannot delete mails from an
over-quota mailbox because their client tries to copy the files into a
trash-folder first instead of removing the file right away. 

One of the solutions is to set up a separate quota on users
trash-mailbox to stop users from complaining "Help, I cannot delete my
mail...". 

The simple script on
http://www.formfall.de/~sliebold/keep/fixtrashquota.pl
searches for all mailboxes matching "user.*.Trash" (like used by
Squirrelmail) and sets the quota to 25MB (if called like
"fixtrashquota.pl -a"). Just edit the authentication credentials and
make shure to set 700-rights. 

After that users have to purge the trash from time to time. 

Maybe someone finds this script useful. Please let me know if you find
major flaws in it because I am really no Perl-wizard. 

Brgds,
Simon 


From dimma at higis.ru  Fri Nov 28 12:58:11 2008
From: dimma at higis.ru (Dmitriy Kirhlarov)
Date: Fri, 28 Nov 2008 20:58:11 +0300
Subject: Cyrus ACLs and groups from LDAP
In-Reply-To: <slrngiu1v0.lv1.spamtest-eir1beucei@trabant3.kaecgn>
References: <20081126215710.GB14152@owl.prv.maya.com>	<492F0183.3040508@higis.ru>
	<slrngiu1v0.lv1.spamtest-eir1beucei@trabant3.kaecgn>
Message-ID: <49303133.9000508@higis.ru>

Stefan Pampel wrote:
> Dmitriy Kirhlarov <dimma at higis.ru> schrieb:
>> Christopher DeMarco wrote:
>>> I want to put a group: into an ACL, but I want to expand the group
>>> using LDAP rather than /etc/groups.
>>>
>>> A thread from this list circa 2006 seems to indicate that if PAM uses
>>> LDAP (or NIS for that matter), that Cyrus will use LDAP without even
>>> knowing it. 
>>>
>>> I'd actually prefer that Cyrus do this explicitly -- for clarity's
>>> sake and because I don't want to switch the mail server over to
>>> LDAP-via-PAM authentication just yet.  Is it possible, and if so, how?
>> Yes. It's possible:
>> https://dev.vega.ru/twiki/bin/view/SysAdmin/Sprint2008-11-18-2008-11-24
> 
> Hello Dmitriy,
> 
> is this document also available in a public place? This place is
> password protected.

Oops. :)

http://lists.andrew.cmu.edu/pipermail/info-cyrus/2007-June/026192.html

WBR
Dmitriy

From choeger at cs.tu-berlin.de  Sat Nov 29 16:19:34 2008
From: choeger at cs.tu-berlin.de (Christoph =?ISO-8859-1?Q?H=F6ger?=)
Date: Sat, 29 Nov 2008 22:19:34 +0100
Subject: using cyrus as imap proxy
Message-ID: <1227993574.4778.17.camel@choeger5.umpa.netz>

Hi,

due to sluggish performance of evolution/my imap provider I would like
to setup the following configuration:


		IMAP/local		IMAPS		
Evolution	<------------->	Proxy	<----------->	IMAP-server

That should work by providing the user credentials to the proxy which
should then download and cache all data needed for _fast_ reading,
searching through mails etc.

There are some tools already for that offlineimap does it on invokation,
fetchmail only in one direction. The question is: can I configure cyrus
do work as a proxy as shown above?

regards

christoph

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
Url : http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081129/52207971/attachment.bin 

From brong at fastmail.fm  Sat Nov 29 18:38:14 2008
From: brong at fastmail.fm (Bron Gondwana)
Date: Sun, 30 Nov 2008 10:38:14 +1100
Subject: using cyrus as imap proxy
In-Reply-To: <1227993574.4778.17.camel@choeger5.umpa.netz>
References: <1227993574.4778.17.camel@choeger5.umpa.netz>
Message-ID: <1228001894.2841.1287379989@webmail.messagingengine.com>


On Sat, 29 Nov 2008 22:19:34 +0100, "Christoph H?ger" <choeger at cs.tu-berlin.de> wrote:
> Hi,
> 
> due to sluggish performance of evolution/my imap provider I would like
> to setup the following configuration:
> 
> 
> 		IMAP/local		IMAPS		
> Evolution       <-------------> Proxy   <----------->   IMAP-server
> 
> That should work by providing the user credentials to the proxy which
> should then download and cache all data needed for _fast_ reading,
> searching through mails etc.
> 
> There are some tools already for that offlineimap does it on invokation,
> fetchmail only in one direction. The question is: can I configure cyrus
> do work as a proxy as shown above?

Nope.  It's an interesting idea.  I started writing one a while back, but
it's very much a part time project that isn't getting much attention.

Bron ( I want one of these too! )
-- 
  Bron Gondwana
  brong at fastmail.fm


From sgcarr at civeng.adelaide.edu.au  Sat Nov 29 18:49:23 2008
From: sgcarr at civeng.adelaide.edu.au (Stephen Carr)
Date: Sun, 30 Nov 2008 10:19:23 +1030
Subject: using cyrus as imap proxy
In-Reply-To: <1228001894.2841.1287379989@webmail.messagingengine.com>
References: <1227993574.4778.17.camel@choeger5.umpa.netz>
	<1228001894.2841.1287379989@webmail.messagingengine.com>
Message-ID: <4931D503.1070000@civeng.adelaide.edu.au>

Dear Bron

Would http://www.imapproxy.org/ fit the bill?
I use with SquirrelMail and it does speed up the transfers as it caches 
the users credentials with s hit ratio near 20:1.

Regards
Stephen Carr

Bron Gondwana wrote:
> On Sat, 29 Nov 2008 22:19:34 +0100, "Christoph H?ger" <choeger at cs.tu-berlin.de> wrote:
>> Hi,
>>
>> due to sluggish performance of evolution/my imap provider I would like
>> to setup the following configuration:
>>
>>
>> 		IMAP/local		IMAPS		
>> Evolution       <-------------> Proxy   <----------->   IMAP-server
>>
>> That should work by providing the user credentials to the proxy which
>> should then download and cache all data needed for _fast_ reading,
>> searching through mails etc.
>>
>> There are some tools already for that offlineimap does it on invokation,
>> fetchmail only in one direction. The question is: can I configure cyrus
>> do work as a proxy as shown above?
> 
> Nope.  It's an interesting idea.  I started writing one a while back, but
> it's very much a part time project that isn't getting much attention.
> 
> Bron ( I want one of these too! )

-- 
Stephen Carr
Computing Officer
School of Civil and Environmental Engineering
The University of Adelaide
Tel +618-8303-4313
Fax +618-8303-4359
Email sgcarr at civeng.adelaide.edu.au

CRICOS Provider Number 00123M
-----------------------------------------------------------
This email message is intended only for the addressee(s) and
contains information that may be confidential and/or copyright.
If you are not the intended recipient please notify the sender
by reply email and immediately delete this email. Use, disclosure
or reproduction of this email by anyone other than the intended
recipient(s) is strictly prohibited. No representation is made
that this email or any attachments are free of viruses. Virus
scanning is recommended and is the responsibility of the recipient.


From brong at fastmail.fm  Sat Nov 29 19:49:21 2008
From: brong at fastmail.fm (Bron Gondwana)
Date: Sun, 30 Nov 2008 11:49:21 +1100
Subject: using cyrus as imap proxy
In-Reply-To: <4931D503.1070000@civeng.adelaide.edu.au>
References: <1227993574.4778.17.camel@choeger5.umpa.netz>
	<1228001894.2841.1287379989@webmail.messagingengine.com>
	<4931D503.1070000@civeng.adelaide.edu.au>
Message-ID: <20081130004921.GA11098@brong.net>

On Sun, Nov 30, 2008 at 10:19:23AM +1030, Stephen Carr wrote:
> Dear Bron
>
> Would http://www.imapproxy.org/ fit the bill?
> I use with SquirrelMail and it does speed up the transfers as it caches  
> the users credentials with s hit ratio near 20:1.

Yes, it would - but it only speeds up logins.  (ahh, good old squirrelmail.
I remember it well.  I'm listed in the "Past Developers" section of the
docs.  Was active for a bit back when email service wasn't my primary job
and I ran it for my work)

I want something that actually caches mailbox contents, so that non-write
queries don't need _any_ traffic to the server.  The ultimate would be an
offline mode that actually worked disconnected, and synchronised state with
the imap server on reconnection.

(note: you have to accept UID promotion as a fact of life - basically if
there's a UID conflict you delete that UID at BOTH ends and re-inject both
messages into the mailbox so you get two new copies with different UIDs)

Bron.

From lists at webtent.net  Sun Nov 30 17:41:40 2008
From: lists at webtent.net (Robert Fitzpatrick)
Date: Sun, 30 Nov 2008 17:41:40 -0500
Subject: determining db version
Message-ID: <1228084900.14908.5.camel@columbus.webtent.org>

I am trying to move my config to another server, copied over the
partition and config files, but the server seems to be complaining of my
db version. I thought it was 4.3 and with that was what I built imapd.
Can someone tell me how to determine what version my existing Berkeley
db files are in and how to confirm the db version used to build imapd?
Or how can I handle this?

Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR db4: Unacceptable log file /var/imap/db/log.0000000021: unsupported log version 11
Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR db4: Invalid log file: log.0000000021: Invalid argument
Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR db4: PANIC: Invalid argument
Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR: critical database situation
Nov 30 17:40:03 mail master[15861]: process 15862 exited, status 75
Nov 30 17:40:03 mail master[15861]: ready for work
Nov 30 17:40:03 mail ctl_cyrusdb[15863]: DBERROR db4: PANIC: fatal region error detected; run recovery

-- 
Robert


From nic at onlight.com  Sun Nov 30 17:46:46 2008
From: nic at onlight.com (Nic Bernstein)
Date: Sun, 30 Nov 2008 16:46:46 -0600
Subject: determining db version
In-Reply-To: <1228084900.14908.5.camel@columbus.webtent.org>
References: <1228084900.14908.5.camel@columbus.webtent.org>
Message-ID: <493317D6.6000208@onlight.com>

On 11/30/2008 04:41 PM, Robert Fitzpatrick wrote:
> I am trying to move my config to another server, copied over the
> partition and config files, but the server seems to be complaining of my
> db version. I thought it was 4.3 and with that was what I built imapd.
> Can someone tell me how to determine what version my existing Berkeley
> db files are in and how to confirm the db version used to build imapd?
> Or how can I handle this?
>
> Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR db4: Unacceptable log file /var/imap/db/log.0000000021: unsupported log version 11
> Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR db4: Invalid log file: log.0000000021: Invalid argument
> Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR db4: PANIC: Invalid argument
> Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR: critical database situation
> Nov 30 17:40:03 mail master[15861]: process 15862 exited, status 75
> Nov 30 17:40:03 mail master[15861]: ready for work
> Nov 30 17:40:03 mail ctl_cyrusdb[15863]: DBERROR db4: PANIC: fatal region error detected; run recovery
>
>   
You should be able to determine which version of Berkeley DB your imapd 
is linked against with an "ldd `which imapd`" or whatever the equivilent 
is in your OS (you didn't mention which OS you are running on).  You 
should be able to determine the version of db library which created the 
files with a "file <db-filename>" command.  Most modern version of the 
file command and associated data will properly identify Berekely DB file 
versions.

Best regards,
    -nic

-- 
Nic Bernstein                             nic at onlight.com
Onlight llc.                              www.onlight.com
2266 North Prospect Avenue #610	          v. 414.272.4477
Milwaukee, Wisconsin  53202-6306          f. 414.290.0335


From lists at webtent.net  Sun Nov 30 18:08:39 2008
From: lists at webtent.net (Robert Fitzpatrick)
Date: Sun, 30 Nov 2008 18:08:39 -0500
Subject: determining db version
In-Reply-To: <493317D6.6000208@onlight.com>
References: <1228084900.14908.5.camel@columbus.webtent.org>
	<493317D6.6000208@onlight.com>
Message-ID: <1228086519.14908.9.camel@columbus.webtent.org>

On Sun, 2008-11-30 at 16:46 -0600, Nic Bernstein wrote:
> On 11/30/2008 04:41 PM, Robert Fitzpatrick wrote:
> > I am trying to move my config to another server, copied over the
> > partition and config files, but the server seems to be complaining of my
> > db version. I thought it was 4.3 and with that was what I built imapd.
> > Can someone tell me how to determine what version my existing Berkeley
> > db files are in and how to confirm the db version used to build imapd?
> > Or how can I handle this?
> >
> > Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR db4: Unacceptable log file /var/imap/db/log.0000000021: unsupported log version 11
> > Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR db4: Invalid log file: log.0000000021: Invalid argument
> > Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR db4: PANIC: Invalid argument
> > Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR: critical database situation
> > Nov 30 17:40:03 mail master[15861]: process 15862 exited, status 75
> > Nov 30 17:40:03 mail master[15861]: ready for work
> > Nov 30 17:40:03 mail ctl_cyrusdb[15863]: DBERROR db4: PANIC: fatal region error detected; run recovery
> >
> >   
> You should be able to determine which version of Berkeley DB your imapd 
> is linked against with an "ldd `which imapd`" or whatever the equivilent 
> is in your OS (you didn't mention which OS you are running on).  You 
> should be able to determine the version of db library which created the 
> files with a "file <db-filename>" command.  Most modern version of the 
> file command and associated data will properly identify Berekely DB file 
> versions.

Thanks for the help, I am running FreeBSD 6.4. The ldd and file commands
don't seem to work on this OS...

mail# ldd `which imapd`
ldd: imapd:: No such file or directory
ldd: Command: No such file or directory
ldd: not: No such file or directory
ldd: found.: No such file or directory
mail# file /var/imap/mailboxes.db 
/var/imap/mailboxes.db: Cyrus skiplist DB

I am also getting the following, so I'm sure this has something to do
with version. Imapd server starts, but all these errors and not able to
connect...

Nov 30 18:01:55 mail ctl_cyrusdb[83077]: DBERROR db4: Program version
4.3 doesn't match environment version

-- 
Robert


From nic at onlight.com  Sun Nov 30 18:28:34 2008
From: nic at onlight.com (Nic Bernstein)
Date: Sun, 30 Nov 2008 17:28:34 -0600
Subject: determining db version
In-Reply-To: <1228086519.14908.9.camel@columbus.webtent.org>
References: <1228084900.14908.5.camel@columbus.webtent.org>	
	<493317D6.6000208@onlight.com>
	<1228086519.14908.9.camel@columbus.webtent.org>
Message-ID: <493321A2.6050705@onlight.com>

On 11/30/2008 05:08 PM, Robert Fitzpatrick wrote:
> On Sun, 2008-11-30 at 16:46 -0600, Nic Bernstein wrote:
>   
>> On 11/30/2008 04:41 PM, Robert Fitzpatrick wrote:
>>     
>>> I am trying to move my config to another server, copied over the
>>> partition and config files, but the server seems to be complaining of my
>>> db version. I thought it was 4.3 and with that was what I built imapd.
>>> Can someone tell me how to determine what version my existing Berkeley
>>> db files are in and how to confirm the db version used to build imapd?
>>> Or how can I handle this?
>>>
>>> Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR db4: Unacceptable log file /var/imap/db/log.0000000021: unsupported log version 11
>>> Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR db4: Invalid log file: log.0000000021: Invalid argument
>>> Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR db4: PANIC: Invalid argument
>>> Nov 30 17:40:03 mail ctl_cyrusdb[15862]: DBERROR: critical database situation
>>> Nov 30 17:40:03 mail master[15861]: process 15862 exited, status 75
>>> Nov 30 17:40:03 mail master[15861]: ready for work
>>> Nov 30 17:40:03 mail ctl_cyrusdb[15863]: DBERROR db4: PANIC: fatal region error detected; run recovery
>>>
>>>   
>>>       
>> You should be able to determine which version of Berkeley DB your imapd 
>> is linked against with an "ldd `which imapd`" or whatever the equivilent 
>> is in your OS (you didn't mention which OS you are running on).  You 
>> should be able to determine the version of db library which created the 
>> files with a "file <db-filename>" command.  Most modern version of the 
>> file command and associated data will properly identify Berekely DB file 
>> versions.
>>     
>
> Thanks for the help, I am running FreeBSD 6.4. The ldd and file commands
> don't seem to work on this OS...
>
> mail# ldd `which imapd`
> ldd: imapd:: No such file or directory
> ldd: Command: No such file or directory
> ldd: not: No such file or directory
> ldd: found.: No such file or directory
>   

The ldd command is fine, but the imapd command is not in your path.  Do 
you know where it is?  If it is in /usr/local/libexec, for example, the 
command would be "ldd /usr/local/libexec/imapd"

You should perform this on the old and the new server and see if the 
imapd's are linked against the same version of db.  If not, you will 
need to perform a db_dump on the old system, and then reimport the 
database on the new server.  You can use the cyrus specific utilities to 
make this easier.
> mail# file /var/imap/mailboxes.db 
> /var/imap/mailboxes.db: Cyrus skiplist DB
>   
This is not the database which is yielding the errors, since this is a 
skiplist DB and not a Berkeley DB.  What you should probably do is look 
at the imapd.conf file on the old and new servers, and check the release 
notes for both versions to see which of the different databases default 
to which DB backends in each.  For example, in some older versions of 
cyrus several databases defaulted to Berkeley DB, whereas in newer 
versions they default to skiplist.  A "man imapd.conf" should tell you 
the default for your version, and unless it is altered in the imapd.conf 
file that is what was used.

I know this is a little vague, but you haven't given us much to go on.

Cheers,
    -nic
> I am also getting the following, so I'm sure this has something to do
> with version. Imapd server starts, but all these errors and not able to
> connect...
>
> Nov 30 18:01:55 mail ctl_cyrusdb[83077]: DBERROR db4: Program version
> 4.3 doesn't match environment version
>
>   


-- 
Nic Bernstein                             nic at onlight.com
Onlight llc.                              www.onlight.com
2266 North Prospect Avenue #610	          v. 414.272.4477
Milwaukee, Wisconsin  53202-6306          f. 414.290.0335

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20081130/b3748a8c/attachment.html