all messages in inbox have been expunged...any idea how this happened ?

[Michael Menge]

Hi,


Quoting Chentao Credungtao via Info-cyrus <info-cyrus at lists.andrew.cmu.edu>:

> Hi,
>
> Today a user complained all his messages in the inbox have disappeared
>
> I checked the log and saw this (I replaced domain and user by  
> example.com and jdoe) :
>
> Jul  9 16:42:49 mail cyrus/imaps[14116]: client id:  
> "x-originating-ip" "192.168.0.217, 10.10.20.12"
> Jul  9 16:42:50 mail cyrus/imaps[14116]: Rename:  
> example.com!user.jdoe -> example.com!user.jdoe.
> Jul  9 16:42:50 mail cyrus/imaps[14116]: Expunged 2149 messages from  
> example.com!user.jdoe
>
> Any idea how this could happen ? The client is a SOGo webmail
>

I suspect that "Rename:" line is cut off. It looks like the user tried to
move his INBOX, to an folder (unintended drag'n'drop). As the user can  
not delete his own INBOX,
this results in an new folder and in moving the mails from the inbox  
to that new folder.

> PS : I easily restored all email with "unexpunge -a", so no harm  
> done, but I'd really like to understand what happened...

yes, delayed expunge mode is a great help for admins. Don't want to  
work without it.


--------------------------------------------------------------------------------
M.Menge                                Tel.: (49) 7071/29-70316
Universität Tübingen                   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung          mail:  
michael.menge at zdv.uni-tuebingen.de
Wächterstraße 76
72074 Tübingen