Sieve failure on deliverdb corruption...

[Rob Siemborski]

On Wed, 18 Jun 2003, Ken Murchison wrote:

> If we just ignored the fact that deliver.db isn't available, then we'd
> get people complaining about vacation sending out multiple responses, or
> the same message being redirected more than once, etc.

After seeing some of the bad behaviors of db3 if/when a database
corrupts itself beyond repair today, I've been toying with the idea of
having lmtpd fatal() if duplicate_init fails to successfully open the
database.

This, of course, results in no mail being delivered, but its a very
obvious failure mode that would get the administrator's attention.

Opinions?

-Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper