can't login with SSL

[Alexandru Coseru]

Also , there are remaining process that won't die..

15074 pts/0    S      0:00 [master]
15075 ?        S      0:00 /usr/local/sbin/saslauthd -a pam
15077 ?        S      0:00 /usr/local/sbin/saslauthd -a pam
15078 ?        S      0:00 /usr/local/sbin/saslauthd -a pam
15079 ?        S      0:00 /usr/local/sbin/saslauthd -a pam
15080 ?        S      0:00 /usr/local/sbin/saslauthd -a pam
15087 pts/0    S      0:00 /usr/cyrus/bin/cyr_expire -E 3
15091 pts/0    S      0:00 imapd -s
15094 ?        S      0:00
gnome-spell-component-0.5 --oaf-activate-iid=OAFIID:GNOME_Spell_DictionaryFa
ctory:0.2 --oaf-ior-fd=23
15106 pts/0    S      0:00 imapd -s
15108 pts/0    S      0:00 imapd -s
15121 pts/0    R      0:00 ps -ax



I've done an strace on that imaps..

[root at alexl imap]# strace -s 100 -f -p 15108
select(0, NULL, NULL, NULL, {0, 670000}) = 0 (Timeout)
select(0, NULL, NULL, NULL, {1, 0})     = 0 (Timeout)
select(0, NULL, NULL, NULL, {1, 0}



They are waitting for something....
And so is Outlook , which fails by telling me that the timeout has expired..
That the server has not responded..


What could it be wrong ?


Regards
    Alex


----- Original Message ----- 
From: "Patrick Morris" <pmorris at wilshire.com>
To: "Alexandru Coseru" <alex_spam at distinctgroup.net>
Cc: <info-cyrus at lists.andrew.cmu.edu>
Sent: Thursday, September 18, 2003 7:47 PM
Subject: Re: can't login with SSL


> In the case of this particulkar error message, you were trying to log in
> before the system had finished starting up.  What happens now that it's
> running?
>
> Alexandru Coseru wrote:
>
> > Hello..
> > I've installed cyrus-imapd-2.2  and i'm trying to make it work with SSL.
> > I have compiled it with --with-openssl
> >
> > But now , when I'm starting it , i have some errors in logs:
> >
> >
> > Sep 18 15:18:32 alexl master[14810]: setrlimit: Unable to set file
> > descriptors limit to -1: Operation not permitted
> > Sep 18 15:18:32 alexl master[14810]: retrying with 1024 (current max)
> > Sep 18 15:18:32 alexl saslauthd[14811]: detach_tty      : master pid
> > is: 14811
> > Sep 18 15:18:32 alexl saslauthd[14811]: ipc_init        : listening on
> > socket: /var/run/saslauthd/mux
> > Sep 18 15:18:32 alexl master[14810]: process started
> > Sep 18 15:18:32 alexl master[14810]: process 14815 exited, signaled to
> > death by 11
> > Sep 18 15:18:33 alexl master[14810]: ready for work
> > Sep 18 15:18:33 alexl tls_prune[14822]: DBERROR db4: operation not
> > permitted during recovery.
> > Sep 18 15:18:33 alexl tls_prune[14822]: DBERROR: opening
> > /var/imap/tls_sessions.db: Invalid argument
> > Sep 18 15:18:33 alexl tls_prune[14822]: DBERROR: opening
> > /var/imap/tls_sessions.db: cyrusdb error
> > Sep 18 15:18:33 alexl ctl_cyrusdb[14824]: checkpointing cyrus databases
> > Sep 18 15:18:33 alexl ctl_cyrusdb[14824]: done checkpointing cyrus
> > databases
> >
> >
> > I'm interested mainly on thoose regarding tls_prune.
> > None of the SSL clients i'm using works....
> > If I connect directly to imap or pop3  (without SSL) , it works fine...
> >
> >
> > I have put in /etc/imapd.conf
> >
> > tls_ca_file: /var/imap/server.pem
> > tls_cert_file: /var/imap/server.pem
> > tls_key_file: /var/imap/server.pem
> >
> >
> >
> > Can somebody give me a hint ?
>
>
>
>


----------------------------------------------------------------------------
----


>
> This message is intended only for the use of the person(s) listed above as
the intended recipient(s), and may contain information that is PRIVILEGED
and CONFIDENTIAL.  If you are not an intended recipient, you may not read,
copy, or distribute this message or any attachment. If you received this
communication in error, please notify us immediately by e-mail and then
delete all copies of this message and any attachments.
>
> In addition you should be aware that ordinary (unencrypted) e-mail sent
through the Internet is not secure. Do not send confidential or sensitive
information, such as social security numbers, account numbers, personal
identification numbers and passwords, to us via ordinary (unencrypted)
e-mail.
>