<div dir="ltr">Ken-<div><br></div><div>That could be. I noticed that the SELinux policy updated on the server as well and Redhat might have changed something that is not allowing Cyrus to write there?? It is able to write the Kerberos credential cache there though. I thought it wrote everything else to /var/lib/imap.</div><div><br></div><div>I don't see anything in the cyrus syslog besides the postfix server logging into the cyrus server successfully. Is there a way to increase the debugging?</div><div><br></div><div>Steve</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jun 1, 2018 at 9:54 AM, Ken Murchison <span dir="ltr"><<a href="mailto:murch@fastmail.com" target="_blank">murch@fastmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<p>OTH, my guess is that Cyrus is failing to create the tmpfile to
stage the message. Is /tmp (or its equivalent) full, or not
writeable?</p>
<p>Without something from the Cyrus syslog, this will be hard to
diagnose.<br>
</p><div><div class="h5">
<br>
<div class="m_-1415814166734423300moz-cite-prefix">On 06/01/2018 12:51 PM, Stephen Ingram
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Ken-
<div><br>
</div>
<div>That all appears to be working correctly. Here's a cut from
the Postfix debug with addresses obfuscated:</div>
<div><br>
</div>
<div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: send attr offset
= 682</div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: send attr
dsn_orig_rcpt = <a href="mailto:rfc822%3Bx@x.com" target="_blank">rfc822;x@x.com</a></div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: send attr
notify_flags = 0</div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: send attr status
= 4.3.0</div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: send attr
diag_type = smtp</div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: send attr
diag_text = 451 4.3.0 System I/O error</div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: send attr
mta_type = dns</div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: send attr
mta_mname = imap.x.x</div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: send attr action
= delayed</div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: send attr reason
= host imap.x.x[10.0.13.83] said: 451 4.3.0 System I/O error
(in reply to end of DATA command)</div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: private/defer
socket: wanted attribute: status</div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: input attribute
name: status</div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: input attribute
value: 0</div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: private/defer
socket: wanted attribute: (list terminator)</div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: input attribute
name: (end)</div>
<div>Jun 1 16:48:52 mx postfix/lmtp[18136]: B7B0B9A2EB0:
to=<a class="m_-1415814166734423300moz-txt-link-rfc2396E" href="mailto:x@x.x" target="_blank"><x@x.x></a>, orig_to=<a class="m_-1415814166734423300moz-txt-link-rfc2396E" href="mailto:x@x.x" target="_blank"><x@x.x></a>,
relay=imap.x.x[10.0.13.83]:24, delay=0.3,
delays=0.19/0/0.09/0.02, dsn=4.3.0, status=deferred (host
imap.x.x[10.0.13.83] said: 451 4.3.0 System I/O error (in
reply to end of DATA command))</div>
</div>
<div><br>
</div>
<div>Steve</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Fri, Jun 1, 2018 at 9:33 AM, Ken
Murchison <span dir="ltr"><<a href="mailto:murch@fastmail.com" target="_blank">murch@fastmail.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>On 6/1/18 12:21 PM, Stephen Ingram wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I'm receiving a 451 4.3.0 System I/O error (in reply to
end of DATA command) error from Postfix when trying to
deliver to cyrus-imap and not really sure why. I'm on
CentOS 7 (2.4.17-8) after downgrading from current
version. I'm using Kerberos GSSAPI to connect to the
front end, but authentication appears to be working fine
as I can see authenticated when enabling LMTP debugging
in Postifx. All messages are refused for delivery
though. I'm not sure what to do. Any suggestions?<br>
</blockquote>
<br>
</span>
Any chance that Kerberos is negotiating a security layer?<span class="m_-1415814166734423300HOEnZb"><font color="#888888"><br>
<br>
-- <br>
Kenneth Murchison<br>
Cyrus Development Team<br>
FastMail Pty Ltd</font></span>
<div class="m_-1415814166734423300HOEnZb">
<div class="m_-1415814166734423300h5"><br>
<br>
----<br>
Cyrus Home Page: <a href="http://www.cyrusimap.org/" rel="noreferrer" target="_blank">http://www.cyrusimap.org/</a><br>
List Archives/Info: <a href="http://lists.andrew.cmu.edu/pipermail/info-cyrus/" rel="noreferrer" target="_blank">http://lists.andrew.cmu.edu/pi<wbr>permail/info-cyrus/</a><br>
To Unsubscribe:<br>
<a href="https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus" rel="noreferrer" target="_blank">https://lists.andrew.cmu.edu/m<wbr>ailman/listinfo/info-cyrus</a><br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
</div></div><span class="HOEnZb"><font color="#888888"><pre class="m_-1415814166734423300moz-signature" cols="72">--
Ken Murchison
Cyrus Development Team
FastMail US LLC</pre>
</font></span></div>
</blockquote></div><br></div>