From ml at netfence.it  Fri Mar  1 04:02:08 2019
From: ml at netfence.it (Andrea Venturoli)
Date: Fri, 1 Mar 2019 10:02:08 +0100
Subject: Sieve script not working
In-Reply-To: <33634f01-9c07-4435-b2e4-9a5e4b9a558e@www.fastmail.com>
References: <f212e3ad-bf37-6da5-ca21-3f20d2fcf9c4@andreaventuroli.it>
 <3980dfd9-d397-7f3e-5781-e58185c2746f@onlight.com>
 <c270e06b-2ccc-9134-8b91-7701dfa26b54@andreaventuroli.it>
 <9f0dfe24-1d79-2ce8-7847-f78a80b369ea@netfence.it>
 <67349212-1882-4ba5-a8d6-e06d569f37a0@beta.fastmail.com>
 <b372dc51-8120-6ded-f018-d70965dc9859@netfence.it>
 <33634f01-9c07-4435-b2e4-9a5e4b9a558e@www.fastmail.com>
Message-ID: <95938971-aba5-18a5-59d1-e191968b5781@netfence.it>

On 2/6/19 6:43 PM, Bron Gondwana wrote:

> Yeah, it's just called test.c in the sieve directory. Here's our 
> buildscript code:
> ...

I'm giving up on this: I cannot get to build this test binary; besides, 
I'm *sure* the script is correct, since it works for other 2 mailboxes.

Thanks for your help anyway.

  bye
	av.

From merlin at mrc-mbu.cam.ac.uk  Fri Mar  1 05:01:21 2019
From: merlin at mrc-mbu.cam.ac.uk (Merlin Hartley)
Date: Fri, 1 Mar 2019 10:01:21 +0000
Subject: Sieve script not working
In-Reply-To: <95938971-aba5-18a5-59d1-e191968b5781@netfence.it>
References: <f212e3ad-bf37-6da5-ca21-3f20d2fcf9c4@andreaventuroli.it>
 <3980dfd9-d397-7f3e-5781-e58185c2746f@onlight.com>
 <c270e06b-2ccc-9134-8b91-7701dfa26b54@andreaventuroli.it>
 <9f0dfe24-1d79-2ce8-7847-f78a80b369ea@netfence.it>
 <67349212-1882-4ba5-a8d6-e06d569f37a0@beta.fastmail.com>
 <b372dc51-8120-6ded-f018-d70965dc9859@netfence.it>
 <33634f01-9c07-4435-b2e4-9a5e4b9a558e@www.fastmail.com>
 <95938971-aba5-18a5-59d1-e191968b5781@netfence.it>
Message-ID: <DFF1A941-34D3-4174-A23F-6EF99A845EA2@mrc-mbu.cam.ac.uk>

Is this a shared mailbox? Have you actually compiled the script or just put the plain text there? Did you install the file by hand or use something like timsieved?

You haven?t really given us much to go on?


Merlin
--
Merlin Hartley
Computer Officer
MRC Mitochondrial Biology Unit
University of Cambridge
Cambridge, CB2 0XY
United Kingdom

> On 1 Mar 2019, at 09:02, Andrea Venturoli <ml at netfence.it> wrote:
> 
> On 2/6/19 6:43 PM, Bron Gondwana wrote:
> 
>> Yeah, it's just called test.c in the sieve directory. Here's our buildscript code:
>> ...
> 
> I'm giving up on this: I cannot get to build this test binary; besides, I'm *sure* the script is correct, since it works for other 2 mailboxes.
> 
> Thanks for your help anyway.
> 
> bye
> 	av.
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190301/128bcece/attachment.html>

From ml at netfence.it  Fri Mar  1 05:16:09 2019
From: ml at netfence.it (Andrea Venturoli)
Date: Fri, 1 Mar 2019 11:16:09 +0100
Subject: Sieve script not working
In-Reply-To: <DFF1A941-34D3-4174-A23F-6EF99A845EA2@mrc-mbu.cam.ac.uk>
References: <f212e3ad-bf37-6da5-ca21-3f20d2fcf9c4@andreaventuroli.it>
 <3980dfd9-d397-7f3e-5781-e58185c2746f@onlight.com>
 <c270e06b-2ccc-9134-8b91-7701dfa26b54@andreaventuroli.it>
 <9f0dfe24-1d79-2ce8-7847-f78a80b369ea@netfence.it>
 <67349212-1882-4ba5-a8d6-e06d569f37a0@beta.fastmail.com>
 <b372dc51-8120-6ded-f018-d70965dc9859@netfence.it>
 <33634f01-9c07-4435-b2e4-9a5e4b9a558e@www.fastmail.com>
 <95938971-aba5-18a5-59d1-e191968b5781@netfence.it>
 <DFF1A941-34D3-4174-A23F-6EF99A845EA2@mrc-mbu.cam.ac.uk>
Message-ID: <05994186-ac35-99e6-2166-3907acf00fae@netfence.it>

On 3/1/19 11:01 AM, Merlin Hartley wrote:
> Is this a shared mailbox?

No.



> Have you actually compiled the script or just
> put the plain text there? Did you install the file by hand or use 
> something like timsieved?

I install the scripts via sieveshell.



> You haven?t really given us much to go on?

Unfortunately, I really don't know which information I should post.
My original question was if I could enable some logs to see what was 
going on.
If there is other info that can be useful to solve this problem, I'm 
willing to report it.



  bye & Thanks
	av.

From Willem at Offermans.Rompen.nl  Fri Mar  1 06:04:40 2019
From: Willem at Offermans.Rompen.nl (Willem Offermans)
Date: Fri, 1 Mar 2019 12:04:40 +0100
Subject: Sieve script not working
In-Reply-To: <05994186-ac35-99e6-2166-3907acf00fae@netfence.it>
References: <f212e3ad-bf37-6da5-ca21-3f20d2fcf9c4@andreaventuroli.it>
 <3980dfd9-d397-7f3e-5781-e58185c2746f@onlight.com>
 <c270e06b-2ccc-9134-8b91-7701dfa26b54@andreaventuroli.it>
 <9f0dfe24-1d79-2ce8-7847-f78a80b369ea@netfence.it>
 <67349212-1882-4ba5-a8d6-e06d569f37a0@beta.fastmail.com>
 <b372dc51-8120-6ded-f018-d70965dc9859@netfence.it>
 <33634f01-9c07-4435-b2e4-9a5e4b9a558e@www.fastmail.com>
 <95938971-aba5-18a5-59d1-e191968b5781@netfence.it>
 <DFF1A941-34D3-4174-A23F-6EF99A845EA2@mrc-mbu.cam.ac.uk>
 <05994186-ac35-99e6-2166-3907acf00fae@netfence.it>
Message-ID: <E489CA1E-8248-4BD8-BF3C-A5D7D6B94ED0@Offermans.Rompen.nl>

Dear Andrea and Cyrus friends,

I remember from a long time ago, that documentation with respect to sieve was sparse.
It took me quite some time to set things up and to handle sieve back then. But even now
I wouldn?t know how to debug the sieve process. Most of the things in the background of the
sieve process are still mysterious to me. But it works very well from a perspective from a user.
Since then, it didn?t change for the better, I?m afraid.

It can happen with software development: nice and excellent code has been developed,
but the program is almost not useable or is only partly used with respect to its power, because of lack of 
documentation. Usually an excellent developer is a poor documenter. It is very time consuming and oh so boring to write
good documentation?. To a great frustration of the users ? And this is not a judgement, I can understand both sides.

What can help in such a situation, is to dig into the original code.
If you are extremely lucky, the developer commented its code and you can follow, read and/or puzzle on
what is going on. It might give you hints on how to debug.
Also go through the original code distribution. Sometimes it includes ReadMe?s or examples, which can give you hints.
 
If you find something useful, or if you even can solve your problem, then please document it and try to get the documentation 
into the source distribution, or at least into the mailing list, so that others can benefit from it.

The following is illustrative of what I mean:

<snip>
$ ll /usr/local/cyrus/bin/*ieve*
-rwxr-xr-x  1 root  wheel  uarch 1191104 Nov  7  2016 /usr/local/cyrus/bin/sievec
-rwxr-xr-x  1 root  wheel  uarch 1182048 Nov  7  2016 /usr/local/cyrus/bin/sieved
-rwxr-xr-x  1 root  wheel  uarch 1512864 Nov  7  2016 /usr/local/cyrus/bin/compile_sieve
-rwxr-xr-x  1 root  wheel  uarch 1544432 Nov  7  2016 /usr/local/cyrus/bin/timsieved
-r-xr-xr-x  1 root  wheel  uarch    4976 Nov  7  2016 /usr/local/cyrus/bin/masssievec
$ man sievec
No manual entry for sievec
$ man sieved
No manual entry for sieved
$ man compile_sieve
No manual entry for compile_sieve
$ man masssievec
No manual entry for masssievec
$ man timsieved
TIMSIEVED(8)                                                      TIMSIEVED(8)



 *

NAME
       timsieved - CMU hack for getting sieve scripts onto the server

SYNOPSIS
       timsieved [ -C config-file ]

DESCRIPTION
       timsieved  is a server that allows users to remotely manage their sieve
       scripts kept on the server.  It accepts commands on its standard  input
       and  responds  on  its standard output. It MUST be invoked by master(8)
       with those descriptors attached to a remote client connection.

       Cyrus admins that authenticate and authorize as themselves (e.g.  don't
       proxy) manage global scripts.

       Timsieved reads its configuration options out of the imapd.conf(5) file
       unless specified otherwise by -C.


OPTIONS
       -C config-file
              Read configuration options from config-file.

FILES
       /etc/imapd.conf

SEE ALSO
       imapd.conf(5), master(8)



CMU                              Project Cyrus                    TIMSIEVED(8)

</snip>

man <program> is usually the starting point of your journey.  



Wiel Offermans
Willem at Offermans.Rompen.nl




> On 1 Mar 2019, at 11:16, Andrea Venturoli <ml at netfence.it> wrote:
> 
> On 3/1/19 11:01 AM, Merlin Hartley wrote:
>> Is this a shared mailbox?
> 
> No.
> 
> 
> 
>> Have you actually compiled the script or just
>> put the plain text there? Did you install the file by hand or use something like timsieved?
> 
> I install the scripts via sieveshell.
> 
> 
> 
>> You haven?t really given us much to go on?
> 
> Unfortunately, I really don't know which information I should post.
> My original question was if I could enable some logs to see what was going on.
> If there is other info that can be useful to solve this problem, I'm willing to report it.
> 
> 
> 
> bye & Thanks
> 	av.
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190301/e08c2ae0/attachment-0001.html>

From ml at netfence.it  Fri Mar  1 06:17:50 2019
From: ml at netfence.it (Andrea Venturoli)
Date: Fri, 1 Mar 2019 12:17:50 +0100
Subject: Sieve script not working
In-Reply-To: <E489CA1E-8248-4BD8-BF3C-A5D7D6B94ED0@Offermans.Rompen.nl>
References: <f212e3ad-bf37-6da5-ca21-3f20d2fcf9c4@andreaventuroli.it>
 <3980dfd9-d397-7f3e-5781-e58185c2746f@onlight.com>
 <c270e06b-2ccc-9134-8b91-7701dfa26b54@andreaventuroli.it>
 <9f0dfe24-1d79-2ce8-7847-f78a80b369ea@netfence.it>
 <67349212-1882-4ba5-a8d6-e06d569f37a0@beta.fastmail.com>
 <b372dc51-8120-6ded-f018-d70965dc9859@netfence.it>
 <33634f01-9c07-4435-b2e4-9a5e4b9a558e@www.fastmail.com>
 <95938971-aba5-18a5-59d1-e191968b5781@netfence.it>
 <DFF1A941-34D3-4174-A23F-6EF99A845EA2@mrc-mbu.cam.ac.uk>
 <05994186-ac35-99e6-2166-3907acf00fae@netfence.it>
 <E489CA1E-8248-4BD8-BF3C-A5D7D6B94ED0@Offermans.Rompen.nl>
Message-ID: <856d9f2b-2366-7fa1-6067-8ccbb6625233@netfence.it>

On 3/1/19 12:04 PM, Willem Offermans wrote:

 > (big snip on the rest)
> $ man timsieved
> TIMSIEVED(8)                                                     
>  ?TIMSIEVED(8)

Just to make sure I've clarified this: the script *is* there.

> ls /var/imap/sieve/u/user1
> user1.sieve.bc	user1.sieve.script

The content of user1.sieve.script is the script I installed via 
sieveshell; user1.sieve.bc is a bytecode file where some strings (i.e. 
regex and folder names) match the original script, so I think it's right.

As I said, the same goes for user2 and user3, but for those users the 
script also works.

  bye & Thanks
	av.

From michael.menge at zdv.uni-tuebingen.de  Fri Mar  1 06:31:55 2019
From: michael.menge at zdv.uni-tuebingen.de (Michael Menge)
Date: Fri, 01 Mar 2019 12:31:55 +0100
Subject: Sieve script not working
In-Reply-To: <856d9f2b-2366-7fa1-6067-8ccbb6625233@netfence.it>
References: <f212e3ad-bf37-6da5-ca21-3f20d2fcf9c4@andreaventuroli.it>
 <3980dfd9-d397-7f3e-5781-e58185c2746f@onlight.com>
 <c270e06b-2ccc-9134-8b91-7701dfa26b54@andreaventuroli.it>
 <9f0dfe24-1d79-2ce8-7847-f78a80b369ea@netfence.it>
 <67349212-1882-4ba5-a8d6-e06d569f37a0@beta.fastmail.com>
 <b372dc51-8120-6ded-f018-d70965dc9859@netfence.it>
 <33634f01-9c07-4435-b2e4-9a5e4b9a558e@www.fastmail.com>
 <95938971-aba5-18a5-59d1-e191968b5781@netfence.it>
 <DFF1A941-34D3-4174-A23F-6EF99A845EA2@mrc-mbu.cam.ac.uk>
 <05994186-ac35-99e6-2166-3907acf00fae@netfence.it>
 <E489CA1E-8248-4BD8-BF3C-A5D7D6B94ED0@Offermans.Rompen.nl>
 <856d9f2b-2366-7fa1-6067-8ccbb6625233@netfence.it>
Message-ID: <20190301123155.Horde.m2X3SY2ghd_AypKpp903ZTH@webmail.uni-tuebingen.de>

Hi

Quoting Andrea Venturoli <ml at netfence.it>:

> On 3/1/19 12:04 PM, Willem Offermans wrote:
>
>> (big snip on the rest)
>> $ man timsieved
>> TIMSIEVED(8)                                                       
>> ?TIMSIEVED(8)
>
> Just to make sure I've clarified this: the script *is* there.
>
>> ls /var/imap/sieve/u/user1
>> user1.sieve.bc	user1.sieve.script
>

is the script activated? a user can have multiple scripts stored on the server
but only one can be activated at the same time. On the filesystem there should
be a "defaultbc"  which is a soft link to the active bc file.

> The content of user1.sieve.script is the script I installed via  
> sieveshell; user1.sieve.bc is a bytecode file where some strings  
> (i.e. regex and folder names) match the original script, so I think  
> it's right.
>
> As I said, the same goes for user2 and user3, but for those users  
> the script also works.
>
>  bye & Thanks
> 	av.
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus



--------------------------------------------------------------------------------
M.Menge                                Tel.: (49) 7071/29-70316
Universit?t T?bingen                   Fax.: (49) 7071/29-5912
Zentrum f?r Datenverarbeitung          mail:  
michael.menge at zdv.uni-tuebingen.de
W?chterstra?e 76
72074 T?bingen


From Willem at Offermans.Rompen.nl  Fri Mar  1 07:18:42 2019
From: Willem at Offermans.Rompen.nl (Willem Offermans)
Date: Fri, 1 Mar 2019 13:18:42 +0100
Subject: Sieve script not working
In-Reply-To: <20190301123155.Horde.m2X3SY2ghd_AypKpp903ZTH@webmail.uni-tuebingen.de>
References: <f212e3ad-bf37-6da5-ca21-3f20d2fcf9c4@andreaventuroli.it>
 <3980dfd9-d397-7f3e-5781-e58185c2746f@onlight.com>
 <c270e06b-2ccc-9134-8b91-7701dfa26b54@andreaventuroli.it>
 <9f0dfe24-1d79-2ce8-7847-f78a80b369ea@netfence.it>
 <67349212-1882-4ba5-a8d6-e06d569f37a0@beta.fastmail.com>
 <b372dc51-8120-6ded-f018-d70965dc9859@netfence.it>
 <33634f01-9c07-4435-b2e4-9a5e4b9a558e@www.fastmail.com>
 <95938971-aba5-18a5-59d1-e191968b5781@netfence.it>
 <DFF1A941-34D3-4174-A23F-6EF99A845EA2@mrc-mbu.cam.ac.uk>
 <05994186-ac35-99e6-2166-3907acf00fae@netfence.it>
 <E489CA1E-8248-4BD8-BF3C-A5D7D6B94ED0@Offermans.Rompen.nl>
 <856d9f2b-2366-7fa1-6067-8ccbb6625233@netfence.it>
 <20190301123155.Horde.m2X3SY2ghd_AypKpp903ZTH@webmail.uni-tuebingen.de>
Message-ID: <4952E7C8-D919-4739-976B-DEAD5D704134@Offermans.Rompen.nl>

Dear Michael and Cyrus friends,

Where is this documented?

I cannot find anything about this in

https://www.cyrusimap.org/imap/reference/admin/sieve.html <https://www.cyrusimap.org/imap/reference/admin/sieve.html>

How should a user/administrator know?

Pay attention to

https://www.cyrusimap.org/imap/reference/manpages/usercommands/sieveshell.html#std:cyrusman-sieveshell(1) <https://www.cyrusimap.org/imap/reference/manpages/usercommands/sieveshell.html#std:cyrusman-sieveshell(1)>

and look at activate/deactivate. 

This is sufficient documentation according to the developer, who spent many hours in the code, I guess.
However, an ignorant user only gets a hint at most. Where is defaultbc mentioned? Be aware that the 
text the user reads is far away off what the user experiences, when he uses sieveshell. There is no 
(visual) connection between the two. It is a challenge to find your way. 

I?m a bit ashamed, but I found a way to contribute to the documentation:

https://www.cyrusimap.org/imap/developer/documentation.html

It is better for me to contribute. 

I hope I can find some time ...



Wiel Offermans
Willem at Offermans.Rompen.nl




> On 1 Mar 2019, at 12:31, Michael Menge <michael.menge at zdv.uni-tuebingen.de> wrote:
> 
> Hi
> 
> Quoting Andrea Venturoli <ml at netfence.it>:
> 
>> On 3/1/19 12:04 PM, Willem Offermans wrote:
>> 
>>> (big snip on the rest)
>>> $ man timsieved
>>> TIMSIEVED(8)                                                       TIMSIEVED(8)
>> 
>> Just to make sure I've clarified this: the script *is* there.
>> 
>>> ls /var/imap/sieve/u/user1
>>> user1.sieve.bc	user1.sieve.script
>> 
> 
> is the script activated? a user can have multiple scripts stored on the server
> but only one can be activated at the same time. On the filesystem there should
> be a "defaultbc"  which is a soft link to the active bc file.
> 
>> The content of user1.sieve.script is the script I installed via sieveshell; user1.sieve.bc is a bytecode file where some strings (i.e. regex and folder names) match the original script, so I think it's right.
>> 
>> As I said, the same goes for user2 and user3, but for those users the script also works.
>> 
>> bye & Thanks
>> 	av.
>> ----
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> 
> 
> 
> --------------------------------------------------------------------------------
> M.Menge                                Tel.: (49) 7071/29-70316
> Universit?t T?bingen                   Fax.: (49) 7071/29-5912
> Zentrum f?r Datenverarbeitung          mail: michael.menge at zdv.uni-tuebingen.de
> W?chterstra?e 76
> 72074 T?bingen
> 
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190301/29a4d27f/attachment.html>

From michael.menge at zdv.uni-tuebingen.de  Fri Mar  1 07:51:14 2019
From: michael.menge at zdv.uni-tuebingen.de (Michael Menge)
Date: Fri, 01 Mar 2019 13:51:14 +0100
Subject: Sieve script not working
In-Reply-To: <4952E7C8-D919-4739-976B-DEAD5D704134@Offermans.Rompen.nl>
References: <f212e3ad-bf37-6da5-ca21-3f20d2fcf9c4@andreaventuroli.it>
 <3980dfd9-d397-7f3e-5781-e58185c2746f@onlight.com>
 <c270e06b-2ccc-9134-8b91-7701dfa26b54@andreaventuroli.it>
 <9f0dfe24-1d79-2ce8-7847-f78a80b369ea@netfence.it>
 <67349212-1882-4ba5-a8d6-e06d569f37a0@beta.fastmail.com>
 <b372dc51-8120-6ded-f018-d70965dc9859@netfence.it>
 <33634f01-9c07-4435-b2e4-9a5e4b9a558e@www.fastmail.com>
 <95938971-aba5-18a5-59d1-e191968b5781@netfence.it>
 <DFF1A941-34D3-4174-A23F-6EF99A845EA2@mrc-mbu.cam.ac.uk>
 <05994186-ac35-99e6-2166-3907acf00fae@netfence.it>
 <E489CA1E-8248-4BD8-BF3C-A5D7D6B94ED0@Offermans.Rompen.nl>
 <856d9f2b-2366-7fa1-6067-8ccbb6625233@netfence.it>
 <20190301123155.Horde.m2X3SY2ghd_AypKpp903ZTH@webmail.uni-tuebingen.de>
 <4952E7C8-D919-4739-976B-DEAD5D704134@Offermans.Rompen.nl>
Message-ID: <20190301135114.Horde.NPsaf04lwGdNpVUn75Q8TUF@webmail.uni-tuebingen.de>

Hi


Quoting Willem Offermans <Willem at offermans.rompen.nl>:

> Dear Michael and Cyrus friends,
>
> Where is this documented?
>

> I cannot find anything about this in
>
> https://www.cyrusimap.org/imap/reference/admin/sieve.html  
> <https://www.cyrusimap.org/imap/reference/admin/sieve.html>

The example shown in section "Testing the sieve server"
https://www.cyrusimap.org/imap/reference/admin/sieve.html#testing-the-sieve-server

# To place this script on the server run the following command:
#
# sieveshell servername
# Please enter your password: ******
#> put myscript.script
#> activate myscript
#> quit
#
#This should place your script on the server and make it the active script.

As timsieved implements rfc5804 there is also
https://tools.ietf.org/html/rfc5804#section-1.4

>
> How should a user/administrator know?
>
> Pay attention to
>
> https://www.cyrusimap.org/imap/reference/manpages/usercommands/sieveshell.html#std:cyrusman-sieveshell(1)  
> <https://www.cyrusimap.org/imap/reference/manpages/usercommands/sieveshell.html#std:cyrusman-sieveshell(1)>
>
> and look at activate/deactivate.
>
> This is sufficient documentation according to the developer, who  
> spent many hours in the code, I guess.
> However, an ignorant user only gets a hint at most. Where is  
> defaultbc mentioned? Be aware that the
> text the user reads is far away off what the user experiences, when  
> he uses sieveshell. There is no
> (visual) connection between the two. It is a challenge to find your way.
>

I don't know if the defaultbc is documented somewhere, google found
some old list mails from 2007 and a thread on a german linux forum.
So there is room for improvement.

The users can't normally see this file, it is only visible indirect as the
active script is shown / marked in timsieved / sieveshell "list" command.





--------------------------------------------------------------------------------
M.Menge                                Tel.: (49) 7071/29-70316
Universit?t T?bingen                   Fax.: (49) 7071/29-5912
Zentrum f?r Datenverarbeitung          mail:  
michael.menge at zdv.uni-tuebingen.de
W?chterstra?e 76
72074 T?bingen


From ml at netfence.it  Fri Mar  1 09:04:49 2019
From: ml at netfence.it (Andrea Venturoli)
Date: Fri, 1 Mar 2019 15:04:49 +0100
Subject: Sieve script not working
In-Reply-To: <20190301123155.Horde.m2X3SY2ghd_AypKpp903ZTH@webmail.uni-tuebingen.de>
References: <f212e3ad-bf37-6da5-ca21-3f20d2fcf9c4@andreaventuroli.it>
 <3980dfd9-d397-7f3e-5781-e58185c2746f@onlight.com>
 <c270e06b-2ccc-9134-8b91-7701dfa26b54@andreaventuroli.it>
 <9f0dfe24-1d79-2ce8-7847-f78a80b369ea@netfence.it>
 <67349212-1882-4ba5-a8d6-e06d569f37a0@beta.fastmail.com>
 <b372dc51-8120-6ded-f018-d70965dc9859@netfence.it>
 <33634f01-9c07-4435-b2e4-9a5e4b9a558e@www.fastmail.com>
 <95938971-aba5-18a5-59d1-e191968b5781@netfence.it>
 <DFF1A941-34D3-4174-A23F-6EF99A845EA2@mrc-mbu.cam.ac.uk>
 <05994186-ac35-99e6-2166-3907acf00fae@netfence.it>
 <E489CA1E-8248-4BD8-BF3C-A5D7D6B94ED0@Offermans.Rompen.nl>
 <856d9f2b-2366-7fa1-6067-8ccbb6625233@netfence.it>
 <20190301123155.Horde.m2X3SY2ghd_AypKpp903ZTH@webmail.uni-tuebingen.de>
Message-ID: <90083594-cfe6-b1e5-1c9a-87c80eafca2d@netfence.it>

On 3/1/19 12:31 PM, Michael Menge wrote:

> is the script activated?

Uh, no!



> a user can have multiple scripts stored on the 
> server
> but only one can be activated at the same time. On the filesystem there 
> should
> be a "defaultbc"? which is a soft link to the active bc file.

There was no such link.

I have now "activated" this script and hope I can confirm it working the 
next time this account receives spam.



I guess this was it and I'm glad it was somethin so "stupid" on my part.

Thanks.



  bye
	av.

From Willem at Offermans.Rompen.nl  Fri Mar  1 09:18:15 2019
From: Willem at Offermans.Rompen.nl (Willem Offermans)
Date: Fri, 1 Mar 2019 15:18:15 +0100
Subject: Sieve script not working
In-Reply-To: <90083594-cfe6-b1e5-1c9a-87c80eafca2d@netfence.it>
References: <f212e3ad-bf37-6da5-ca21-3f20d2fcf9c4@andreaventuroli.it>
 <3980dfd9-d397-7f3e-5781-e58185c2746f@onlight.com>
 <c270e06b-2ccc-9134-8b91-7701dfa26b54@andreaventuroli.it>
 <9f0dfe24-1d79-2ce8-7847-f78a80b369ea@netfence.it>
 <67349212-1882-4ba5-a8d6-e06d569f37a0@beta.fastmail.com>
 <b372dc51-8120-6ded-f018-d70965dc9859@netfence.it>
 <33634f01-9c07-4435-b2e4-9a5e4b9a558e@www.fastmail.com>
 <95938971-aba5-18a5-59d1-e191968b5781@netfence.it>
 <DFF1A941-34D3-4174-A23F-6EF99A845EA2@mrc-mbu.cam.ac.uk>
 <05994186-ac35-99e6-2166-3907acf00fae@netfence.it>
 <E489CA1E-8248-4BD8-BF3C-A5D7D6B94ED0@Offermans.Rompen.nl>
 <856d9f2b-2366-7fa1-6067-8ccbb6625233@netfence.it>
 <20190301123155.Horde.m2X3SY2ghd_AypKpp903ZTH@webmail.uni-tuebingen.de>
 <90083594-cfe6-b1e5-1c9a-87c80eafca2d@netfence.it>
Message-ID: <3A956C56-7E3E-4499-AD15-16C7DCE96B86@Offermans.Rompen.nl>

Dear Andrea and Cyrus friends,

That is exactly the point: it was not ``stupid`` in any way.
It was ignorance, which we can only avoid by improving the 
documentation.

By the way, the debug/logging question is still not answered.
Debugging/logging might also enlighten the user/administrator.



Wiel Offermans
Willem at Offermans.Rompen.nl




> On 1 Mar 2019, at 15:04, Andrea Venturoli <ml at netfence.it> wrote:
> 
> On 3/1/19 12:31 PM, Michael Menge wrote:
> 
>> is the script activated?
> 
> Uh, no!
> 
> 
> 
>> a user can have multiple scripts stored on the server
>> but only one can be activated at the same time. On the filesystem there should
>> be a "defaultbc"  which is a soft link to the active bc file.
> 
> There was no such link.
> 
> I have now "activated" this script and hope I can confirm it working the next time this account receives spam.
> 
> 
> 
> I guess this was it and I'm glad it was somethin so "stupid" on my part.
> 
> Thanks.
> 
> 
> 
> bye
> 	av.
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190301/4646d181/attachment.html>

From ml at netfence.it  Fri Mar  1 09:29:46 2019
From: ml at netfence.it (Andrea Venturoli)
Date: Fri, 1 Mar 2019 15:29:46 +0100
Subject: Sieve script not working
In-Reply-To: <3A956C56-7E3E-4499-AD15-16C7DCE96B86@Offermans.Rompen.nl>
References: <f212e3ad-bf37-6da5-ca21-3f20d2fcf9c4@andreaventuroli.it>
 <3980dfd9-d397-7f3e-5781-e58185c2746f@onlight.com>
 <c270e06b-2ccc-9134-8b91-7701dfa26b54@andreaventuroli.it>
 <9f0dfe24-1d79-2ce8-7847-f78a80b369ea@netfence.it>
 <67349212-1882-4ba5-a8d6-e06d569f37a0@beta.fastmail.com>
 <b372dc51-8120-6ded-f018-d70965dc9859@netfence.it>
 <33634f01-9c07-4435-b2e4-9a5e4b9a558e@www.fastmail.com>
 <95938971-aba5-18a5-59d1-e191968b5781@netfence.it>
 <DFF1A941-34D3-4174-A23F-6EF99A845EA2@mrc-mbu.cam.ac.uk>
 <05994186-ac35-99e6-2166-3907acf00fae@netfence.it>
 <E489CA1E-8248-4BD8-BF3C-A5D7D6B94ED0@Offermans.Rompen.nl>
 <856d9f2b-2366-7fa1-6067-8ccbb6625233@netfence.it>
 <20190301123155.Horde.m2X3SY2ghd_AypKpp903ZTH@webmail.uni-tuebingen.de>
 <90083594-cfe6-b1e5-1c9a-87c80eafca2d@netfence.it>
 <3A956C56-7E3E-4499-AD15-16C7DCE96B86@Offermans.Rompen.nl>
Message-ID: <e583c222-612e-12ca-a32c-66a4b58052cf@netfence.it>

On 3/1/19 3:18 PM, Willem Offermans wrote:
> Dear Andrea and Cyrus friends,
> 
> That is exactly the point: it was not ``stupid`` in any way.
> It was ignorance, which we can only avoid by improving the
> documentation.

I blame myself for this; I'll be glad if the documentation was improved, 
obviously.



> By the way, the debug/logging question is still not answered.
> Debugging/logging might also enlighten the user/administrator.

That's right.
Better logs would be a very big improvement: what I was looking for was 
an option to write sieve activity (like "executing script ...", "message 
moved to folder ...", etc...).
That would have confirmed the script was NOT even executed (and avoided 
several attempts at modifying it).



  bye & Thanks
	av.

From michael.menge at zdv.uni-tuebingen.de  Fri Mar  1 10:49:51 2019
From: michael.menge at zdv.uni-tuebingen.de (Michael Menge)
Date: Fri, 01 Mar 2019 16:49:51 +0100
Subject: faild to rename deleted mailbox, or how  conversation db sucks again
Message-ID: <20190301164951.Horde.jeNSlGiAd6d-zePfCrV_CJD@webmail.uni-tuebingen.de>

I


i have now a user request to restore a deleted mailbox.

This failed with "Invalid mailbox name" in cyradm. which is wrong in  
the fist place,
because the new name was the original name.

In the Log files I found "can't rename a deleted mailbox" and I discovered
this in the source :-(


     /* we can't rename back from a deleted mailbox, because the conversations
      * information will be wrong.  Ideally we might re-calculate, but for now
      * we just throw a big fat error */
     if (config_getswitch(IMAPOPT_CONVERSATIONS) &&
         mboxname_isdeletedmailbox(oldmailbox->name, NULL)) {
         syslog(LOG_ERR, "can't rename a deleted mailbox %s",  
oldmailbox->name);
         return IMAP_MAILBOX_BADNAME;
     }


So conversation db breaks one of the mail reasons "delete_mode: delayed"
(restoring deleted folders) without resorting to a filebased backup.

Is there an other way than disabling
- conversation db,
- restoring the folder,
- enabeling conversation db again (so that squat files are used for  
header searches),
- rebuilding conversation db for all users (because there will be some  
new mails between
   disabling and re-enabling conversation db).

Kind regards.

    Michael Menge

--------------------------------------------------------------------------------
M.Menge                                Tel.: (49) 7071/29-70316
Universit?t T?bingen                   Fax.: (49) 7071/29-5912
Zentrum f?r Datenverarbeitung          mail:  
michael.menge at zdv.uni-tuebingen.de
W?chterstra?e 76
72074 T?bingen


From ellie at fastmail.com  Sun Mar  3 21:20:20 2019
From: ellie at fastmail.com (ellie timoney)
Date: Sun, 03 Mar 2019 21:20:20 -0500
Subject: =?UTF-8?Q?Re:_faild_to_rename_deleted_mailbox,
 _or_how__conversation_db_s?= =?UTF-8?Q?ucks_again?=
In-Reply-To: <20190301164951.Horde.jeNSlGiAd6d-zePfCrV_CJD@webmail.uni-tuebingen.de>
References: <20190301164951.Horde.jeNSlGiAd6d-zePfCrV_CJD@webmail.uni-tuebingen.de>
Message-ID: <73b5ec6e-b6fa-488a-9025-01b5f7302ff9@www.fastmail.com>

On Sat, Mar 2, 2019, at 2:54 AM, Michael Menge wrote: 
> Is there an other way than disabling
> - conversation db,
> - restoring the folder,
> - enabeling conversation db again (so that squat files are used for  
> header searches),
> - rebuilding conversation db for all users (because there will be some  
> new mails between
>    disabling and re-enabling conversation db).

If you can arrange for your MX to hold the incoming mail during the period where conversations is disabled, that would at least avoid needing to rebuild conversationsdb for everyone again afterwards?  You might be able to do this by temporarily disabling the lmtpd service, but I'm not sure (it would depend on how your MX handles that)

Cheers,

ellie

From brong at fastmailteam.com  Sun Mar  3 21:35:58 2019
From: brong at fastmailteam.com (Bron Gondwana)
Date: Sun, 03 Mar 2019 21:35:58 -0500
Subject: =?UTF-8?Q?Re:_faild_to_rename_deleted_mailbox,
 __or_how__conversation_db_?= =?UTF-8?Q?sucks_again?=
In-Reply-To: <73b5ec6e-b6fa-488a-9025-01b5f7302ff9@www.fastmail.com>
References: <20190301164951.Horde.jeNSlGiAd6d-zePfCrV_CJD@webmail.uni-tuebingen.de>
 <73b5ec6e-b6fa-488a-9025-01b5f7302ff9@www.fastmail.com>
Message-ID: <6d2e9b01-da41-496e-957d-e37c20a19934@www.fastmail.com>

This isn't quite renaming the folder, and you'll lose per-user seen state, but you can create a new folder and, using the admin login, copy the messages:

. RENAME DELETED.user.brongfoo.xx.5C7C8E80 at fastmailtest.com user.brongfoo.xx at fastmailtest.com
. NO Invalid mailbox name
. SELECT DELETED.user.brongfoo.xx.5C7C8E80 at fastmailtest.com
* OK [CLOSED] Ok
* 2 EXISTS
[...]
. CREATE user.brongfoo.xx at fastmailtest.com
. OK [MAILBOXID (648d3c90-6c68-49cf-ac2b-49c2cfb9ee8b)] Completed
. COPY 1:* user.brongfoo.xx at fastmailtest.com
. OK [COPYUID 1551666806 1:2 1:2] Completed
. SELECT user.brongfoo.xx at fastmailtest.com
* OK [CLOSED] Ok
* 2 EXISTS
* 2 RECENT


On Mon, Mar 4, 2019, at 13:25, ellie timoney wrote:
> On Sat, Mar 2, 2019, at 2:54 AM, Michael Menge wrote: 
> > Is there an other way than disabling
> > - conversation db,
> > - restoring the folder,
> > - enabeling conversation db again (so that squat files are used for 
> > header searches),
> > - rebuilding conversation db for all users (because there will be some 
> > new mails between
> > disabling and re-enabling conversation db).
> 
> If you can arrange for your MX to hold the incoming mail during the period where conversations is disabled, that would at least avoid needing to rebuild conversationsdb for everyone again afterwards? You might be able to do this by temporarily disabling the lmtpd service, but I'm not sure (it would depend on how your MX handles that)
> 
> Cheers,
> 
> ellie
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> 

--
 Bron Gondwana, CEO, FastMail Pty Ltd
 brong at fastmailteam.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190303/658b9027/attachment.html>

From ellie at fastmail.com  Sun Mar  3 22:06:48 2019
From: ellie at fastmail.com (ellie timoney)
Date: Sun, 03 Mar 2019 22:06:48 -0500
Subject: =?UTF-8?Q?Re:_faild_to_rename_deleted_mailbox,
 ___or_how__conversation_db?= =?UTF-8?Q?_sucks_again?=
In-Reply-To: <6d2e9b01-da41-496e-957d-e37c20a19934@www.fastmail.com>
References: <20190301164951.Horde.jeNSlGiAd6d-zePfCrV_CJD@webmail.uni-tuebingen.de>
 <73b5ec6e-b6fa-488a-9025-01b5f7302ff9@www.fastmail.com>
 <6d2e9b01-da41-496e-957d-e37c20a19934@www.fastmail.com>
Message-ID: <3c09ae41-be71-4473-a066-200326d8df0b@www.fastmail.com>

I've raised https://github.com/cyrusimap/cyrus-imapd/issues/2659 to get this properly fixed
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190303/7b6c8e1d/attachment.html>

From michael.menge at zdv.uni-tuebingen.de  Mon Mar  4 10:17:28 2019
From: michael.menge at zdv.uni-tuebingen.de (Michael Menge)
Date: Mon, 04 Mar 2019 16:17:28 +0100
Subject: thoughts about conversation db and cyrus [faild to rename deleted
 mailbox, or how conversation db sucks again]
In-Reply-To: <3c09ae41-be71-4473-a066-200326d8df0b@www.fastmail.com>
References: <20190301164951.Horde.jeNSlGiAd6d-zePfCrV_CJD@webmail.uni-tuebingen.de>
 <73b5ec6e-b6fa-488a-9025-01b5f7302ff9@www.fastmail.com>
 <6d2e9b01-da41-496e-957d-e37c20a19934@www.fastmail.com>
 <3c09ae41-be71-4473-a066-200326d8df0b@www.fastmail.com>
Message-ID: <20190304161728.Horde.Ygi8OBQxx-8SBZ-WFItC7VF@webmail.uni-tuebingen.de>

Hi Ellie and Bron,

first thank you for your ideas for the workaround and for opening the issue.

I have to apologize about the original subject, but I was a bit  
frustrated that
I have encountered again a problem with the conversation db.

As I have discovered jet another, not jet reported problem with  
conversation db
(I am unsure if it's a problem with the conversation db or if only  
shows an other
problem some where else), I have decided to deactivate the conversation db for
the moment.

I think I should elaborate the general problem I have with this  
feature and the
cyrus development as i have observed it.

I am an experienced linux and cyrus administrator. I am not an  
software developer,
or programmer, but I understand enough about programming to fix small problems
and narrow down problems.

Cyrus code quality has grown in the last 14 years since i first set up  
our first
cyrus imap (2.3) server. Especially since Fastmail dedicated personal for the
cyrus project. But also automatic testing and other design decisions helped to
bring the project a big step forward.

I know we have a complex setup (murder, replication, meta- and archive  
partition,
delayed delete, delayed expunge) so that we use combinations of  
features that are not
that common. So fare we are happy with our cyrus setup.

We did not encounter any data loss, and where able to fix most  
problems in short time.
The system is very stable and expect for the slow search can't  
complain about the performance.
So thanks again to the devs for the work and also for the community  
the help I received
in the last 14 years.

I like new features, but I have always to balance the advantages of  
these new features
with the impact on stability, performance and administration overhead.  
In that regard I
tend to exercise caution.

While testing cyrus 3.0, on one hand neither conversation db nor  
sphinx or xapian search
engines looked particular interesting, as I had no need to improve  
search speed in
cyrus 2.4 with squatter ("If it isn't broken don't fix it").  On the  
other hand i didn't
have time to rigorous test these features, so I decided not to use  
them as new feature
have a tendency to contain more new bugs.

After upgrading the production system to cyrus 3.0 I discovered that  
search was slow with
squatter, conversation db did more than the documentation suggested  
that it does.
I don't know if it was intended that conversation db was required for  
squatter to work
or if it broke by one change to support multiple search engines but  
the requirement
was surprising. I did try to find the commit that did break the  
squatter search but
failed, as was unable to compile most commits git bisect suggested.

The problems I encountered with conversation db, confirmed my initial  
caution not to enable
conversation db without testing. But it would be unfair to blame only  
the implementation of
conversation db.

One problem was caused by "reconstruct -V max" not upgrading all  
mailboxes, which i did
miss in the logs. It would be nice if ctl_conversationsdb would check  
mailbox version
before creating a huge conversation db file in an endless loop.

The problem with "IOERROR: conversations_audit on load:" and "IOERROR:  
conversations_audit on store:"
is still a mystery to so it is unclear if it is really a bug in the  
conversation db of if it shows
an other problem with my installation.

The same is with the new problem i had no time to report jet. Deleting  
users i see the following error
popping up for some accounts.
"Fatal error: Internal error: assertion failed: imap/conversations.c:  
2205: !status.exists"

But breaking an common use case of an other feature like "delete_mode:  
delayed" is
an other case. This should have been fixed before it was released in  
the stable
cyrus version. At least a WARNING in the documentation is required.

I would like to help to improve the documentation, but there are some  
questions that need to be answered:

1. Which search engines and combinations are currently supported?
    Is a stand alone squatter still supported?

2. What are to pros and cons for the supported search engines?

3. Should, or to which extend should, the search engines work without  
conversations db?
    Or is enabling the conversations db a new requirement for some/all  
search engines?

4. Is the conversations db murder aware? And how do shared folders  
(one user shared one
     of his folders with other users) on the same server/cross server
     affect search results and performances

5. What is stored in the conversations db?
     
https://www.cyrusimap.org/dev/imap/concepts/deployment/databases.html#conversations-userid-conversations
    is incomplete as conversations db also contains hashes of mime parts.

6. Which Information is affected by conversations_expire_days

TLDR; I like cyrus, but there is some work to do regarding to  
conversation db and search engines,
in the field of documentation, code testing and feature interaction


--------------------------------------------------------------------------------
M.Menge                                Tel.: (49) 7071/29-70316
Universit?t T?bingen                   Fax.: (49) 7071/29-5912
Zentrum f?r Datenverarbeitung          mail:  
michael.menge at zdv.uni-tuebingen.de
W?chterstra?e 76
72074 T?bingen


From a_s_y at sama.ru  Wed Mar  6 09:17:09 2019
From: a_s_y at sama.ru (Sergey)
Date: Wed, 6 Mar 2019 18:17:09 +0400
Subject: Sieve not working
In-Reply-To: <eb2fa1ec-3e14-6315-1467-438349b0bb9a@bordengrammar.kent.sch.uk>
References: <eb2fa1ec-3e14-6315-1467-438349b0bb9a@bordengrammar.kent.sch.uk>
Message-ID: <201903061817.09944.a_s_y@sama.ru>

On Friday 15 February 2019, J Pilfold-Bagwell wrote:

> ?? sieve??? ??? cmd="timsieved" listen="0.0.0.0:2000" prefork=0
> ?? sieve????????cmd="timsieved" listen="0.0.0.0:4190" prefork=0

I think what you should to change it to

    sieve1        cmd="timsieved" listen="0.0.0.0:2000" prefork=0
    sieve2        cmd="timsieved" listen="0.0.0.0:4190" prefork=0

It seems to me that the second process don't be started in your case.

-- 
Regards, Sergey

From a_s_y at sama.ru  Wed Mar  6 09:48:08 2019
From: a_s_y at sama.ru (Sergey)
Date: Wed, 6 Mar 2019 18:48:08 +0400
Subject: 3.0.8, notifyd ignores syslog_prefix
Message-ID: <201903061848.08965.a_s_y@sama.ru>

Hello.

Is it correct that notifyd ignores syslog_prefix?
My imapd.conf contains "syslog_prefix: cyrus" but I see
"Mar  6 13:57:48 mail notifyd[4452]: ..." in log/messages.
All other components are written with "cyrus" prefix.

-- 
Regards, Sergey

From ismael.tanguy at univ-brest.fr  Thu Mar  7 05:23:29 2019
From: ismael.tanguy at univ-brest.fr (=?UTF-8?Q?Isma=c3=abl_Tanguy?=)
Date: Thu, 7 Mar 2019 11:23:29 +0100
Subject: Murder, couldn't authenticate to backend server: no mechanism
 available
In-Reply-To: <2f7373fb3eaae4627f35ff749871c275.squirrel@webmail.bi.invoca.ch>
References: <50036990-66af-bfea-900d-ae9d64428c1c@solvo.ru>
 <87554ee5-c872-eea4-7ef9-cd31f984c7bf@oakton.edu>
 <69869d48-3eb4-ec65-99bc-6de60505c9df@solvo.ru>
 <b3899975-e6da-f493-4249-8fd596183962@solvo.ru>
 <8d6ba9fb-fb2e-4b56-96bf-47032a5980fc@www.fastmail.com>
 <dace03ae-0aca-7be7-da74-d86ad7db73b9@solvo.ru>
 <2f7373fb3eaae4627f35ff749871c275.squirrel@webmail.bi.invoca.ch>
Message-ID: <c272da42-f08e-3511-e68d-24b90e6f2c81@univ-brest.fr>

Hello,

I'm stucked in configuring a murder cluster with one frontend and one 
backend.
LMTP between frontend and backend doesn't work, the logs says that no 
mechanism is available.
I'm using sasl plain.
When turning saslauthd in debug mode, mta connection to frontend is OK, 
but there's no request for the connection between frontend and backend.
lmtptest -t "" -a murder backend is OK and goes over TLS.
Here's the debug log:

### /var/log/maillog -> frontend cyrus

frontend cyrus/lmtp[19541]: accepted connection
frontend cyrus/lmtp[19541]: connection from mta.domain [IP]
frontend cyrus/lmtp[19541]: command: LHLO mta.domain
frontend cyrus/lmtp[19541]: TLS is available.
frontend cyrus/lmtp[19541]: command: STARTTLS
frontend cyrus/lmtp[19541]: TLS is available.
frontend cyrus/lmtp[19541]: SSL_accept() incomplete -> wait
frontend cyrus/lmtp[19541]: SSL_accept() succeeded -> done
frontend cyrus/lmtp[19541]: starttls: TLSv1.2 with cipher 
ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new) no authentication
frontend cyrus/lmtp[19541]: command: LHLO mta.domain
frontend cyrus/lmtp[19541]: TLS is available.
frontend cyrus/lmtp[19541]: command: AUTH PLAIN ***************
frontend cyrus/lmtp[19541]: login: mta.domain [IP] cyrus PLAIN+TLS User 
logged in
frontend cyrus/lmtp[19541]: command: MAIL FROM:<mail at domain> SIZE=576
frontend cyrus/lmtp[19541]: command: RCPT TO:<mail at domain>
frontend cyrus/lmtp[19541]: command: DATA
frontend cyrus/lmtp[19541]: USAGE <uid> user: 0.030932 sys: 0.017066
frontend cyrus/lmtp[19537]: accepted connection
frontend cyrus/lmtp[19537]: connection from frontend.domain [IP]
frontend cyrus/lmtp[19537]: command: LHLO lmtpproxyd
frontend cyrus/lmtp[19537]: TLS is available.
frontend cyrus/lmtp[19537]: command: STARTTLS
frontend cyrus/lmtp[19537]: TLS is available.
frontend cyrus/lmtp[19541]: tls_server_ca_dir=(NULL) 
tls_server_ca_file=/etc/ssl/certs/wildcard.ca
frontend cyrus/lmtp[19537]: SSL_accept() incomplete -> wait
frontend cyrus/lmtp[19541]: Doing a peer verify
frontend cyrus/lmtp[19541]: Doing a peer verify
frontend cyrus/lmtp[19541]: Doing a peer verify
frontend cyrus/lmtp[19537]: Doing a peer verify
frontend cyrus/lmtp[19537]: Doing a peer verify
frontend cyrus/lmtp[19537]: Doing a peer verify
frontend cyrus/lmtp[19537]: SSL_accept() incomplete -> wait
frontend cyrus/lmtp[19537]: SSL_accept() succeeded -> done
frontend cyrus/lmtp[19537]: received client certificate
frontend cyrus/lmtp[19537]: 
subject=***********************************************
frontend cyrus/lmtp[19537]: starttls: TLSv1.2 with cipher 
ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new) authenticated as *.domain
frontend cyrus/lmtp[19541]: received server certificate
frontend cyrus/lmtp[19541]: starttls: TLSv1.2 with cipher 
ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new client) no authentication
frontend cyrus/lmtp[19537]: command: LHLO lmtpproxyd
frontend cyrus/lmtp[19537]: TLS is available.
frontend cyrus/lmtp[19541]: couldn't authenticate to backend server: no 
mechanism available
frontend cyrus/lmtp[19537]: command: QUIT
frontend cyrus/lmtp[19541]: command: QUIT


### saslauthd -d -a pam? >> cyrus is lmtpuser from mta, murder is 
lmtpuser for the backend,
### lmtp connection to the backend doesn't go to saslauthd
saslauthd[19525] :rel_accept_lock : released accept lock
saslauthd[19527] :get_accept_lock : acquired accept lock
saslauthd[19525] :do_auth???????? : auth success: [user=cyrus] 
[service=lmtp] [realm=] [mech=pam]
saslauthd[19525] :do_request????? : response: OK


### /var/log/messages
frontend cyrus/lmtp[19563]: No worthy mechs found
frontend cyrus/lmtp[19563]: No worthy mechs found

### /var/log/maillog -> mta postfix
mta postfix/smtpd[7678]: connect from client_test
mta postfix/smtpd[7678]: DCAEF10392E5: client=client_test
mta postfix/cleanup[7682]: DCAEF10392E5: message-id=<>
mta postfix/qmgr[2161]: DCAEF10392E5: from=<mail.domain>, size=576, 
nrcpt=1 (queue active)
mta postfix/smtpd[7678]: disconnect from client_test
mta postfix/lmtp[7683]: Untrusted TLS connection established to 
frontend:24: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
mta postfix/lmtp[7683]: DCAEF10392E5: to=<mail.domain>, 
relay=frontend:24, delay=0.1, delays=0.01/0/0.07/0.02, dsn=4.4.3, 
status=deferred (host frontend said: 451 4.4.3 Remote server unavailable 
(in reply to end of DATA command))


### /etc/imapd.conf -> frontend
sasl_pwcheck_method: saslauthd
sasl_mech_list: PLAIN
mupdate_server: cyrus-murder.univ-brest.fr
mupdate_username: murder
mupdate_authname: murder
mupdate_password: password
backend_password: password
proxy_authname: murder


### /etc/cyrus.conf -> frontend
START {
 ? recover?????? cmd="ctl_cyrusdb -r"
}
SERVICES {
 ? # add or remove based on preferences
 ? mupdate?????? cmd="mupdate" listen=3905 prefork=1
 ? imap????????? cmd="imapd" listen="imap" prefork=5
 ? imaps???????? cmd="imapd -s" listen="imaps" prefork=1
 ? pop3????????? cmd="pop3d" listen="pop3" prefork=3
 ? pop3s???????? cmd="pop3d -s" listen="pop3s" prefork=1
 ? sieve???????? cmd="timsieved" listen="sieve" prefork=0
 ? nntp????????? cmd="nntpd" listen="nntp" prefork=3
 ? lmtp????????? cmd="lmtpd" listen="lmtp" prefork=0
}
EVENTS {
 ? checkpoint??? cmd="ctl_cyrusdb -c" period=30
 ? delprune????? cmd="cyr_expire -E 3" at=0400
 ? tlsprune????? cmd="tls_prune" at=0400
}
DAEMON {
 ? idled???????? cmd="idled"
}

### /etc/sysconfig/saslauthd
SOCKETDIR=/run/saslauthd
MECH=pam

### lmtptest frontend -> backend
(frontend)# lmtptest -t "" -a murder backend
S: 220 backend.domain Cyrus LMTP 3.0.8-7.el7.centos Fedora server ready
C: LHLO lmtptest
S: 250-backend.domain
S: 250-8BITMIME
S: 250-ENHANCEDSTATUSCODES
S: 250-PIPELINING
S: 250-SIZE
S: 250-STARTTLS
S: 250-AUTH PLAIN
S: 250-IGNOREQUOTA
S: 250 Ok SESSIONID=<cyrus-28058-1551952740-1-7710567405059874995>
C: STARTTLS
S: 220 Begin TLS negotiation now
verify error:num=19:self signed certificate in certificate chain
TLS connection established: TLSv1.2 with cipher 
ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
C: LHLO lmtptest
S: 250-backend.domain
S: 250-8BITMIME
S: 250-ENHANCEDSTATUSCODES
S: 250-PIPELINING
S: 250-SIZE
S: 250-AUTH PLAIN
S: 250-IGNOREQUOTA
S: 250 Ok SESSIONID=<cyrus-28058-1551952740-2-5714180577914972405>
Please enter your password:
C: AUTH PLAIN ***************************************
S: 235 Authenticated!
Authenticated.
Security strength factor: 256


It seems I miss something in imapd.conf to tell LMTP to use sasl plain 
but I didn't find the way.
Any help would be greatly appreciated.

Thanks


Isma?l TANGUY
Universit? de Bretagne Occidentale
Brest - France


From michael.menge at zdv.uni-tuebingen.de  Thu Mar  7 05:55:36 2019
From: michael.menge at zdv.uni-tuebingen.de (Michael Menge)
Date: Thu, 07 Mar 2019 11:55:36 +0100
Subject: Murder, couldn't authenticate to backend server: no mechanism
 available
In-Reply-To: <c272da42-f08e-3511-e68d-24b90e6f2c81@univ-brest.fr>
References: <50036990-66af-bfea-900d-ae9d64428c1c@solvo.ru>
 <87554ee5-c872-eea4-7ef9-cd31f984c7bf@oakton.edu>
 <69869d48-3eb4-ec65-99bc-6de60505c9df@solvo.ru>
 <b3899975-e6da-f493-4249-8fd596183962@solvo.ru>
 <8d6ba9fb-fb2e-4b56-96bf-47032a5980fc@www.fastmail.com>
 <dace03ae-0aca-7be7-da74-d86ad7db73b9@solvo.ru>
 <2f7373fb3eaae4627f35ff749871c275.squirrel@webmail.bi.invoca.ch>
 <c272da42-f08e-3511-e68d-24b90e6f2c81@univ-brest.fr>
Message-ID: <20190307115536.Horde.abq94lJF-NZD553VbaecXd5@webmail.uni-tuebingen.de>

Hi,


I suspect, lmtp it trying to proxy auth, which is not possible with  
the PLAIN mech,
(but e.g. with LOGIN). So as only PLAIN is availble "No worthy mechs found".

You can try not to set "mupdate_username: murder" in the frontend imapd.conf.
But keep "mupdate_authname: murder". This should result in normal  
PLAIN authentication
as user "murder".

Even if you enable the LOGIN mech, setting mupdate_username can cause  
some problems.
I can't remember which problems, but I reminded myself not to set  
mupdate_username
with a comment in my own imapd.conf

Regards

    Michael Menge


Quoting Isma?l Tanguy <ismael.tanguy at univ-brest.fr>:

> Hello,
>
> I'm stucked in configuring a murder cluster with one frontend and  
> one backend.
> LMTP between frontend and backend doesn't work, the logs says that  
> no mechanism is available.
> I'm using sasl plain.
> When turning saslauthd in debug mode, mta connection to frontend is  
> OK, but there's no request for the connection between frontend and  
> backend.
> lmtptest -t "" -a murder backend is OK and goes over TLS.
> Here's the debug log:
>
> ### /var/log/maillog -> frontend cyrus
>
> frontend cyrus/lmtp[19541]: accepted connection
> frontend cyrus/lmtp[19541]: connection from mta.domain [IP]
> frontend cyrus/lmtp[19541]: command: LHLO mta.domain
> frontend cyrus/lmtp[19541]: TLS is available.
> frontend cyrus/lmtp[19541]: command: STARTTLS
> frontend cyrus/lmtp[19541]: TLS is available.
> frontend cyrus/lmtp[19541]: SSL_accept() incomplete -> wait
> frontend cyrus/lmtp[19541]: SSL_accept() succeeded -> done
> frontend cyrus/lmtp[19541]: starttls: TLSv1.2 with cipher  
> ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new) no authentication
> frontend cyrus/lmtp[19541]: command: LHLO mta.domain
> frontend cyrus/lmtp[19541]: TLS is available.
> frontend cyrus/lmtp[19541]: command: AUTH PLAIN ***************
> frontend cyrus/lmtp[19541]: login: mta.domain [IP] cyrus PLAIN+TLS  
> User logged in
> frontend cyrus/lmtp[19541]: command: MAIL FROM:<mail at domain> SIZE=576
> frontend cyrus/lmtp[19541]: command: RCPT TO:<mail at domain>
> frontend cyrus/lmtp[19541]: command: DATA
> frontend cyrus/lmtp[19541]: USAGE <uid> user: 0.030932 sys: 0.017066
> frontend cyrus/lmtp[19537]: accepted connection
> frontend cyrus/lmtp[19537]: connection from frontend.domain [IP]
> frontend cyrus/lmtp[19537]: command: LHLO lmtpproxyd
> frontend cyrus/lmtp[19537]: TLS is available.
> frontend cyrus/lmtp[19537]: command: STARTTLS
> frontend cyrus/lmtp[19537]: TLS is available.
> frontend cyrus/lmtp[19541]: tls_server_ca_dir=(NULL)  
> tls_server_ca_file=/etc/ssl/certs/wildcard.ca
> frontend cyrus/lmtp[19537]: SSL_accept() incomplete -> wait
> frontend cyrus/lmtp[19541]: Doing a peer verify
> frontend cyrus/lmtp[19541]: Doing a peer verify
> frontend cyrus/lmtp[19541]: Doing a peer verify
> frontend cyrus/lmtp[19537]: Doing a peer verify
> frontend cyrus/lmtp[19537]: Doing a peer verify
> frontend cyrus/lmtp[19537]: Doing a peer verify
> frontend cyrus/lmtp[19537]: SSL_accept() incomplete -> wait
> frontend cyrus/lmtp[19537]: SSL_accept() succeeded -> done
> frontend cyrus/lmtp[19537]: received client certificate
> frontend cyrus/lmtp[19537]:  
> subject=***********************************************
> frontend cyrus/lmtp[19537]: starttls: TLSv1.2 with cipher  
> ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new) authenticated as  
> *.domain
> frontend cyrus/lmtp[19541]: received server certificate
> frontend cyrus/lmtp[19541]: starttls: TLSv1.2 with cipher  
> ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new client) no  
> authentication
> frontend cyrus/lmtp[19537]: command: LHLO lmtpproxyd
> frontend cyrus/lmtp[19537]: TLS is available.
> frontend cyrus/lmtp[19541]: couldn't authenticate to backend server:  
> no mechanism available
> frontend cyrus/lmtp[19537]: command: QUIT
> frontend cyrus/lmtp[19541]: command: QUIT
>
>
> ### saslauthd -d -a pam? >> cyrus is lmtpuser from mta, murder is  
> lmtpuser for the backend,
> ### lmtp connection to the backend doesn't go to saslauthd
> saslauthd[19525] :rel_accept_lock : released accept lock
> saslauthd[19527] :get_accept_lock : acquired accept lock
> saslauthd[19525] :do_auth???????? : auth success: [user=cyrus]  
> [service=lmtp] [realm=] [mech=pam]
> saslauthd[19525] :do_request????? : response: OK
>
>
> ### /var/log/messages
> frontend cyrus/lmtp[19563]: No worthy mechs found
> frontend cyrus/lmtp[19563]: No worthy mechs found
>
> ### /var/log/maillog -> mta postfix
> mta postfix/smtpd[7678]: connect from client_test
> mta postfix/smtpd[7678]: DCAEF10392E5: client=client_test
> mta postfix/cleanup[7682]: DCAEF10392E5: message-id=<>
> mta postfix/qmgr[2161]: DCAEF10392E5: from=<mail.domain>, size=576,  
> nrcpt=1 (queue active)
> mta postfix/smtpd[7678]: disconnect from client_test
> mta postfix/lmtp[7683]: Untrusted TLS connection established to  
> frontend:24: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384  
> (256/256 bits)
> mta postfix/lmtp[7683]: DCAEF10392E5: to=<mail.domain>,  
> relay=frontend:24, delay=0.1, delays=0.01/0/0.07/0.02, dsn=4.4.3,  
> status=deferred (host frontend said: 451 4.4.3 Remote server  
> unavailable (in reply to end of DATA command))
>
>
> ### /etc/imapd.conf -> frontend
> sasl_pwcheck_method: saslauthd
> sasl_mech_list: PLAIN
> mupdate_server: cyrus-murder.univ-brest.fr
> mupdate_username: murder
> mupdate_authname: murder
> mupdate_password: password
> backend_password: password
> proxy_authname: murder
>
>
> ### /etc/cyrus.conf -> frontend
> START {
> ? recover?????? cmd="ctl_cyrusdb -r"
> }
> SERVICES {
> ? # add or remove based on preferences
> ? mupdate?????? cmd="mupdate" listen=3905 prefork=1
> ? imap????????? cmd="imapd" listen="imap" prefork=5
> ? imaps???????? cmd="imapd -s" listen="imaps" prefork=1
> ? pop3????????? cmd="pop3d" listen="pop3" prefork=3
> ? pop3s???????? cmd="pop3d -s" listen="pop3s" prefork=1
> ? sieve???????? cmd="timsieved" listen="sieve" prefork=0
> ? nntp????????? cmd="nntpd" listen="nntp" prefork=3
> ? lmtp????????? cmd="lmtpd" listen="lmtp" prefork=0
> }
> EVENTS {
> ? checkpoint??? cmd="ctl_cyrusdb -c" period=30
> ? delprune????? cmd="cyr_expire -E 3" at=0400
> ? tlsprune????? cmd="tls_prune" at=0400
> }
> DAEMON {
> ? idled???????? cmd="idled"
> }
>
> ### /etc/sysconfig/saslauthd
> SOCKETDIR=/run/saslauthd
> MECH=pam
>
> ### lmtptest frontend -> backend
> (frontend)# lmtptest -t "" -a murder backend
> S: 220 backend.domain Cyrus LMTP 3.0.8-7.el7.centos Fedora server ready
> C: LHLO lmtptest
> S: 250-backend.domain
> S: 250-8BITMIME
> S: 250-ENHANCEDSTATUSCODES
> S: 250-PIPELINING
> S: 250-SIZE
> S: 250-STARTTLS
> S: 250-AUTH PLAIN
> S: 250-IGNOREQUOTA
> S: 250 Ok SESSIONID=<cyrus-28058-1551952740-1-7710567405059874995>
> C: STARTTLS
> S: 220 Begin TLS negotiation now
> verify error:num=19:self signed certificate in certificate chain
> TLS connection established: TLSv1.2 with cipher  
> ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
> C: LHLO lmtptest
> S: 250-backend.domain
> S: 250-8BITMIME
> S: 250-ENHANCEDSTATUSCODES
> S: 250-PIPELINING
> S: 250-SIZE
> S: 250-AUTH PLAIN
> S: 250-IGNOREQUOTA
> S: 250 Ok SESSIONID=<cyrus-28058-1551952740-2-5714180577914972405>
> Please enter your password:
> C: AUTH PLAIN ***************************************
> S: 235 Authenticated!
> Authenticated.
> Security strength factor: 256
>
>
> It seems I miss something in imapd.conf to tell LMTP to use sasl  
> plain but I didn't find the way.
> Any help would be greatly appreciated.
>
> Thanks
>
>
> Isma?l TANGUY
> Universit? de Bretagne Occidentale
> Brest - France
>
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus



--------------------------------------------------------------------------------
M.Menge                                Tel.: (49) 7071/29-70316
Universit?t T?bingen                   Fax.: (49) 7071/29-5912
Zentrum f?r Datenverarbeitung          mail:  
michael.menge at zdv.uni-tuebingen.de
W?chterstra?e 76
72074 T?bingen


From heiler.bemerguy at cinbesa.com.br  Thu Mar  7 08:53:44 2019
From: heiler.bemerguy at cinbesa.com.br (Heiler Bemerguy)
Date: Thu, 7 Mar 2019 10:53:44 -0300
Subject: cyrus 2.5 imap idle/stuck connections (DOS like)
Message-ID: <143cafbf-ab34-3b26-9ff5-e8124692ef48@cinbesa.com.br>

Hail,

I've noticed an user with ~200 open connections to cyrus? imap port 
(143) and, because of him, no one else could login to the server.

I've noticed even with a single "telnet ip 143", the connection is 
accepted and never ever dropped, even while still unauthenticated.

How to stop that from happening?

cyrus.conf:
imap??????????? cmd="imapd -U 30" listen="imap" prefork=6 maxchild=200


-- 
Atenciosamente,

Heiler Bensimon Bemerguy - CINBESA
Analista de Redes, Wi-Fi,
Virtualiza??o e Servi?os Internet
(55) 91 98151-4894


From Willem at Offermans.Rompen.nl  Thu Mar  7 09:25:55 2019
From: Willem at Offermans.Rompen.nl (Willem Offermans)
Date: Thu, 7 Mar 2019 15:25:55 +0100
Subject: cyrus 2.5 imap idle/stuck connections (DOS like)
In-Reply-To: <143cafbf-ab34-3b26-9ff5-e8124692ef48@cinbesa.com.br>
References: <143cafbf-ab34-3b26-9ff5-e8124692ef48@cinbesa.com.br>
Message-ID: <009A6994-69AF-4EAA-8A63-8C214E3F1780@Offermans.Rompen.nl>

Dear Cyrus friends and Heiler Bensimon Bemerguy,

You could use your firewall to achieve this.

For ipfw:

${fwcmd} add pass tcp from any to ${ip_me} imap setup limit src-addr 10

You have to lookup the right syntax for your firewall.

Dit you check man imapd or man cyrus, maybe there is also an option for the daemon itself, but I would prefer the firewall. 


Wiel Offermans
Willem at Offermans.Rompen.nl




> On 7 Mar 2019, at 14:53, Heiler Bemerguy via Info-cyrus <info-cyrus at lists.andrew.cmu.edu> wrote:
> 
> Hail,
> 
> I've noticed an user with ~200 open connections to cyrus  imap port (143) and, because of him, no one else could login to the server.
> 
> I've noticed even with a single "telnet ip 143", the connection is accepted and never ever dropped, even while still unauthenticated.
> 
> How to stop that from happening?
> 
> cyrus.conf:
> imap            cmd="imapd -U 30" listen="imap" prefork=6 maxchild=200
> 
> 
> -- 
> Atenciosamente,
> 
> Heiler Bensimon Bemerguy - CINBESA
> Analista de Redes, Wi-Fi,
> Virtualiza??o e Servi?os Internet
> (55) 91 98151-4894
> 
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190307/22918878/attachment-0001.html>

From heiler.bemerguy at cinbesa.com.br  Thu Mar  7 09:39:37 2019
From: heiler.bemerguy at cinbesa.com.br (Heiler Bemerguy)
Date: Thu, 7 Mar 2019 11:39:37 -0300
Subject: cyrus 2.5 imap idle/stuck connections (DOS like)
In-Reply-To: <009A6994-69AF-4EAA-8A63-8C214E3F1780@Offermans.Rompen.nl>
References: <143cafbf-ab34-3b26-9ff5-e8124692ef48@cinbesa.com.br>
 <009A6994-69AF-4EAA-8A63-8C214E3F1780@Offermans.Rompen.nl>
Message-ID: <9f4fa2d4-7a36-e739-60a5-036449f34911@cinbesa.com.br>

An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190307/7dcb11a5/attachment.html>

From Willem at Offermans.Rompen.nl  Thu Mar  7 09:47:25 2019
From: Willem at Offermans.Rompen.nl (Willem Offermans)
Date: Thu, 7 Mar 2019 15:47:25 +0100
Subject: cyrus 2.5 imap idle/stuck connections (DOS like)
In-Reply-To: <9f4fa2d4-7a36-e739-60a5-036449f34911@cinbesa.com.br>
References: <143cafbf-ab34-3b26-9ff5-e8124692ef48@cinbesa.com.br>
 <009A6994-69AF-4EAA-8A63-8C214E3F1780@Offermans.Rompen.nl>
 <9f4fa2d4-7a36-e739-60a5-036449f34911@cinbesa.com.br>
Message-ID: <10AD7755-992A-4D2E-BD4C-0F9CF334AD2F@Offermans.Rompen.nl>

Dear Cyrus friends and Heiler Bensimon Bemerguy,

Don?t forget to report your solution.

It might certainly help other Cyrus users as well, though it is not directly related to Cyrus.



Wiel Offermans
Willem at Offermans.Rompen.nl




> On 7 Mar 2019, at 15:39, Heiler Bemerguy via Info-cyrus <info-cyrus at lists.andrew.cmu.edu> wrote:
> 
> Yes I've read imapd.conf and cyrus.conf and found no options to limit connections per source IP or "idleness".. 
> 
> It means anyone can open a lot of connections to any port (143, 25, 110 etc) and render the server unusable??
> 
> I'm using Debian, so I'll try to figure out how to do that with iptables.. Thanks!
> 
> 
> 
> Best Regards,
> 
> Heiler Bensimon Bemerguy - CINBESA
> Analista de Redes, Wi-Fi,
> Virtualiza??o e Servi?os Internet
> (55) 91 98151-4894
> Em 07/03/2019 11:25, Willem Offermans escreveu:
>> Dear Cyrus friends and Heiler Bensimon Bemerguy,
>> 
>> You could use your firewall to achieve this.
>> 
>> For ipfw:
>> 
>> ${fwcmd} add pass tcp from any to ${ip_me} imap setup limit src-addr 10
>> 
>> You have to lookup the right syntax for your firewall.
>> 
>> Dit you check man imapd or man cyrus, maybe there is also an option for the daemon itself, but I would prefer the firewall. 
>> 
>> 
>> Wiel Offermans
>> Willem at Offermans.Rompen.nl <mailto:Willem at Offermans.Rompen.nl>
>> 
>> 
>> 
>> 
>>> On 7 Mar 2019, at 14:53, Heiler Bemerguy via Info-cyrus <info-cyrus at lists.andrew.cmu.edu <mailto:info-cyrus at lists.andrew.cmu.edu>> wrote:
>>> 
>>> Hail,
>>> 
>>> I've noticed an user with ~200 open connections to cyrus  imap port (143) and, because of him, no one else could login to the server.
>>> 
>>> I've noticed even with a single "telnet ip 143", the connection is accepted and never ever dropped, even while still unauthenticated.
>>> 
>>> How to stop that from happening?
>>> 
>>> cyrus.conf:
>>> imap            cmd="imapd -U 30" listen="imap" prefork=6 maxchild=200
>>> 
>>> 
>>> -- 
>>> Atenciosamente,
>>> 
>>> Heiler Bensimon Bemerguy - CINBESA
>>> Analista de Redes, Wi-Fi,
>>> Virtualiza??o e Servi?os Internet
>>> (55) 91 98151-4894
>>> 
>>> ----
>>> Cyrus Home Page: http://www.cyrusimap.org/ <http://www.cyrusimap.org/>
>>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ <http://lists.andrew.cmu.edu/pipermail/info-cyrus/>
>>> To Unsubscribe:
>>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus <https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus>
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190307/f7ac95b8/attachment.html>

From kia at solvo.ru  Thu Mar  7 09:55:50 2019
From: kia at solvo.ru (Ivan Kuznetsov)
Date: Thu, 7 Mar 2019 17:55:50 +0300
Subject: cyrus 2.5 imap idle/stuck connections (DOS like)
In-Reply-To: <9f4fa2d4-7a36-e739-60a5-036449f34911@cinbesa.com.br>
References: <143cafbf-ab34-3b26-9ff5-e8124692ef48@cinbesa.com.br>
 <009A6994-69AF-4EAA-8A63-8C214E3F1780@Offermans.Rompen.nl>
 <9f4fa2d4-7a36-e739-60a5-036449f34911@cinbesa.com.br>
Message-ID: <9fac5a52-67f6-98e1-e138-e0de78e77ee2@solvo.ru>

Hello

iptables -A INPUT -p tcp --syn --dport 143 -m connlimit 
--connlimit-above 8 -j REJECT

This will limit established imap connections to 8 per ip


07.03.2019 17:39, Heiler Bemerguy via Info-cyrus ?????:
> Yes I've read imapd.conf and cyrus.conf and found no options to limit 
> connections per source IP or "idleness"..
> 
> It means anyone can open a lot of connections to any port (143, 25, 110 
> etc) and render the server unusable??
> 
> I'm using Debian, so I'll try to figure out how to do that with 
> iptables.. Thanks!
> 
> 
> Best Regards,
> 
> Heiler Bensimon Bemerguy - CINBESA
> Analista de Redes, Wi-Fi,
> Virtualiza??o e Servi?os Internet
> (55) 91 98151-4894
> 
> Em 07/03/2019 11:25, Willem Offermans escreveu:
>> Dear Cyrus friends and Heiler Bensimon?Bemerguy,
>>
>> You could use your firewall to achieve this.
>>
>> For ipfw:
>>
>> ${fwcmd} add pass tcp from any to ${ip_me} imap setup limit src-addr 10
>>
>> You have to lookup the right syntax for your firewall.
>>
>> Dit you check man imapd or man cyrus, maybe there is also an option 
>> for the daemon itself, but I would prefer the firewall.
>>
>>
>> Wiel Offermans
>> Willem at Offermans.Rompen.nl <mailto:Willem at Offermans.Rompen.nl>
>>
>>
>>
>>
>>> On 7 Mar 2019, at 14:53, Heiler Bemerguy via Info-cyrus 
>>> <info-cyrus at lists.andrew.cmu.edu 
>>> <mailto:info-cyrus at lists.andrew.cmu.edu>> wrote:
>>>
>>> Hail,
>>>
>>> I've noticed an user with ~200 open connections to cyrus imap port 
>>> (143) and, because of him, no one else could login to the server.
>>>
>>> I've noticed even with a single "telnet ip 143", the connection is 
>>> accepted and never ever dropped, even while still unauthenticated.
>>>
>>> How to stop that from happening?
>>>
>>> cyrus.conf:
>>> imap??????????? cmd="imapd -U 30" listen="imap" prefork=6 maxchild=200
>>>
>>>
>>> -- 
>>> Atenciosamente,
>>>
>>> Heiler Bensimon Bemerguy - CINBESA
>>> Analista de Redes, Wi-Fi,
>>> Virtualiza??o e Servi?os Internet
>>> (55) 91 98151-4894
>>>
>>> ----
>>> Cyrus Home Page: http://www.cyrusimap.org/
>>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>>> To Unsubscribe:
>>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>>
> 
> 
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> 

-- 
? ?????????, ???? ????????
???????????? ???????????? ??????

???????? "?????"
+7(812)60-60-555
+7(495)66-83-003
+7(921)740-72-61
http://www.solvo.ru

From wbreyha at gmx.net  Thu Mar  7 09:58:27 2019
From: wbreyha at gmx.net (Wolfgang Breyha)
Date: Thu, 7 Mar 2019 15:58:27 +0100
Subject: cyrus 2.5 imap idle/stuck connections (DOS like)
In-Reply-To: <9f4fa2d4-7a36-e739-60a5-036449f34911@cinbesa.com.br>
References: <143cafbf-ab34-3b26-9ff5-e8124692ef48@cinbesa.com.br>
 <009A6994-69AF-4EAA-8A63-8C214E3F1780@Offermans.Rompen.nl>
 <9f4fa2d4-7a36-e739-60a5-036449f34911@cinbesa.com.br>
Message-ID: <ead86af7-1cf1-04cf-c1ab-149a46484864@gmx.net>

Heiler Bemerguy via Info-cyrus wrote on 07/03/2019 15:39:
> Yes I've read imapd.conf and cyrus.conf and found no options to limit
> connections per source IP or "idleness"..
> 
> It means anyone can open a lot of connections to any port (143, 25, 110 etc)
> and render the server unusable??
You can try to set
imapidletimeout: <minutes>
as documented in "man imapd.conf".

To keep your server "RFC friendly" this value should not be lower than 30
minutes, because RFC 2177:3. recommends that clients show activity at least
every 29 minutes.

Greetings, Wolfgang
-- 
Wolfgang Breyha <wbreyha at gmx.net> | https://www.blafasel.at/
Vienna University Computer Center | Austria


From heiler.bemerguy at cinbesa.com.br  Thu Mar  7 10:11:01 2019
From: heiler.bemerguy at cinbesa.com.br (Heiler Bemerguy)
Date: Thu, 7 Mar 2019 12:11:01 -0300
Subject: cyrus 2.5 imap idle/stuck connections (DOS like)
In-Reply-To: <9fac5a52-67f6-98e1-e138-e0de78e77ee2@solvo.ru>
References: <143cafbf-ab34-3b26-9ff5-e8124692ef48@cinbesa.com.br>
 <009A6994-69AF-4EAA-8A63-8C214E3F1780@Offermans.Rompen.nl>
 <9f4fa2d4-7a36-e739-60a5-036449f34911@cinbesa.com.br>
 <9fac5a52-67f6-98e1-e138-e0de78e77ee2@solvo.ru>
Message-ID: <f3accfab-af30-cb91-0f0b-dde3dbb9a0ff@cinbesa.com.br>

Thank you very much, it worked perfectly.


Best Regards,

Heiler Bemerguy - CINBESA
Analista de Redes, Wi-Fi,
Virtualiza??o e Servi?os Internet
(55) 91 98151-4894

Em 07/03/2019 11:55, Ivan Kuznetsov escreveu:
> Hello
>
> iptables -A INPUT -p tcp --syn --dport 143 -m connlimit 
> --connlimit-above 8 -j REJECT
>
> This will limit established imap connections to 8 per ip
>
>
> 07.03.2019 17:39, Heiler Bemerguy via Info-cyrus ?????:
>> Yes I've read imapd.conf and cyrus.conf and found no options to limit 
>> connections per source IP or "idleness"..
>>
>> It means anyone can open a lot of connections to any port (143, 25, 
>> 110 etc) and render the server unusable??
>>
>> I'm using Debian, so I'll try to figure out how to do that with 
>> iptables.. Thanks!
>>
>>
>> Best Regards,
>>
>> Heiler Bensimon Bemerguy - CINBESA
>> Analista de Redes, Wi-Fi,
>> Virtualiza??o e Servi?os Internet
>> (55) 91 98151-4894
>>
>> Em 07/03/2019 11:25, Willem Offermans escreveu:
>>> Dear Cyrus friends and Heiler Bensimon?Bemerguy,
>>>
>>> You could use your firewall to achieve this.
>>>
>>> For ipfw:
>>>
>>> ${fwcmd} add pass tcp from any to ${ip_me} imap setup limit src-addr 10
>>>
>>> You have to lookup the right syntax for your firewall.
>>>
>>> Dit you check man imapd or man cyrus, maybe there is also an option 
>>> for the daemon itself, but I would prefer the firewall.
>>>
>>>
>>> Wiel Offermans
>>> Willem at Offermans.Rompen.nl <mailto:Willem at Offermans.Rompen.nl>
>>>
>>>
>>>
>>>
>>>> On 7 Mar 2019, at 14:53, Heiler Bemerguy via Info-cyrus 
>>>> <info-cyrus at lists.andrew.cmu.edu 
>>>> <mailto:info-cyrus at lists.andrew.cmu.edu>> wrote:
>>>>
>>>> Hail,
>>>>
>>>> I've noticed an user with ~200 open connections to cyrus imap port 
>>>> (143) and, because of him, no one else could login to the server.
>>>>
>>>> I've noticed even with a single "telnet ip 143", the connection is 
>>>> accepted and never ever dropped, even while still unauthenticated.
>>>>
>>>> How to stop that from happening?
>>>>
>>>> cyrus.conf:
>>>> imap??????????? cmd="imapd -U 30" listen="imap" prefork=6 maxchild=200
>>>>
>>>>
>>>> -- 
>>>> Atenciosamente,
>>>>
>>>> Heiler Bensimon Bemerguy - CINBESA
>>>> Analista de Redes, Wi-Fi,
>>>> Virtualiza??o e Servi?os Internet
>>>> (55) 91 98151-4894
>>>>
>>>> ----
>>>> Cyrus Home Page: http://www.cyrusimap.org/
>>>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>>>> To Unsubscribe:
>>>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>>>
>>
>>
>> ----
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>>
>

From ismael.tanguy at univ-brest.fr  Thu Mar  7 10:23:50 2019
From: ismael.tanguy at univ-brest.fr (=?UTF-8?Q?Isma=c3=abl_Tanguy?=)
Date: Thu, 7 Mar 2019 16:23:50 +0100
Subject: Murder, couldn't authenticate to backend server: no mechanism
 available
In-Reply-To: <20190307115536.Horde.abq94lJF-NZD553VbaecXd5@webmail.uni-tuebingen.de>
References: <50036990-66af-bfea-900d-ae9d64428c1c@solvo.ru>
 <87554ee5-c872-eea4-7ef9-cd31f984c7bf@oakton.edu>
 <69869d48-3eb4-ec65-99bc-6de60505c9df@solvo.ru>
 <b3899975-e6da-f493-4249-8fd596183962@solvo.ru>
 <8d6ba9fb-fb2e-4b56-96bf-47032a5980fc@www.fastmail.com>
 <dace03ae-0aca-7be7-da74-d86ad7db73b9@solvo.ru>
 <2f7373fb3eaae4627f35ff749871c275.squirrel@webmail.bi.invoca.ch>
 <c272da42-f08e-3511-e68d-24b90e6f2c81@univ-brest.fr>
 <20190307115536.Horde.abq94lJF-NZD553VbaecXd5@webmail.uni-tuebingen.de>
Message-ID: <75bc9d7f-b5aa-4df0-07b1-6e06848a894b@univ-brest.fr>

Hi Mickael,

thank you very much.
That's work.

I am now blocked in autocreating user on backend, but it's another 
problem ;-)

Thanks again,

Isma?l Tanguy

Le 07/03/2019 ? 11:55, Michael Menge a ?crit?:
> Hi,
>
>
> I suspect, lmtp it trying to proxy auth, which is not possible with 
> the PLAIN mech,
> (but e.g. with LOGIN). So as only PLAIN is availble "No worthy mechs 
> found".
>
> You can try not to set "mupdate_username: murder" in the frontend 
> imapd.conf.
> But keep "mupdate_authname: murder". This should result in normal 
> PLAIN authentication
> as user "murder".
>
> Even if you enable the LOGIN mech, setting mupdate_username can cause 
> some problems.
> I can't remember which problems, but I reminded myself not to set 
> mupdate_username
> with a comment in my own imapd.conf
>
> Regards
>
> ?? Michael Menge
>
>
> Quoting Isma?l Tanguy <ismael.tanguy at univ-brest.fr>:
>
>> Hello,
>>
>> I'm stucked in configuring a murder cluster with one frontend and one 
>> backend.
>> LMTP between frontend and backend doesn't work, the logs says that no 
>> mechanism is available.
>> I'm using sasl plain.
>> When turning saslauthd in debug mode, mta connection to frontend is 
>> OK, but there's no request for the connection between frontend and 
>> backend.
>> lmtptest -t "" -a murder backend is OK and goes over TLS.
>> Here's the debug log:
>>
>> ### /var/log/maillog -> frontend cyrus
>>
>> frontend cyrus/lmtp[19541]: accepted connection
>> frontend cyrus/lmtp[19541]: connection from mta.domain [IP]
>> frontend cyrus/lmtp[19541]: command: LHLO mta.domain
>> frontend cyrus/lmtp[19541]: TLS is available.
>> frontend cyrus/lmtp[19541]: command: STARTTLS
>> frontend cyrus/lmtp[19541]: TLS is available.
>> frontend cyrus/lmtp[19541]: SSL_accept() incomplete -> wait
>> frontend cyrus/lmtp[19541]: SSL_accept() succeeded -> done
>> frontend cyrus/lmtp[19541]: starttls: TLSv1.2 with cipher 
>> ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new) no authentication
>> frontend cyrus/lmtp[19541]: command: LHLO mta.domain
>> frontend cyrus/lmtp[19541]: TLS is available.
>> frontend cyrus/lmtp[19541]: command: AUTH PLAIN ***************
>> frontend cyrus/lmtp[19541]: login: mta.domain [IP] cyrus PLAIN+TLS 
>> User logged in
>> frontend cyrus/lmtp[19541]: command: MAIL FROM:<mail at domain> SIZE=576
>> frontend cyrus/lmtp[19541]: command: RCPT TO:<mail at domain>
>> frontend cyrus/lmtp[19541]: command: DATA
>> frontend cyrus/lmtp[19541]: USAGE <uid> user: 0.030932 sys: 0.017066
>> frontend cyrus/lmtp[19537]: accepted connection
>> frontend cyrus/lmtp[19537]: connection from frontend.domain [IP]
>> frontend cyrus/lmtp[19537]: command: LHLO lmtpproxyd
>> frontend cyrus/lmtp[19537]: TLS is available.
>> frontend cyrus/lmtp[19537]: command: STARTTLS
>> frontend cyrus/lmtp[19537]: TLS is available.
>> frontend cyrus/lmtp[19541]: tls_server_ca_dir=(NULL) 
>> tls_server_ca_file=/etc/ssl/certs/wildcard.ca
>> frontend cyrus/lmtp[19537]: SSL_accept() incomplete -> wait
>> frontend cyrus/lmtp[19541]: Doing a peer verify
>> frontend cyrus/lmtp[19541]: Doing a peer verify
>> frontend cyrus/lmtp[19541]: Doing a peer verify
>> frontend cyrus/lmtp[19537]: Doing a peer verify
>> frontend cyrus/lmtp[19537]: Doing a peer verify
>> frontend cyrus/lmtp[19537]: Doing a peer verify
>> frontend cyrus/lmtp[19537]: SSL_accept() incomplete -> wait
>> frontend cyrus/lmtp[19537]: SSL_accept() succeeded -> done
>> frontend cyrus/lmtp[19537]: received client certificate
>> frontend cyrus/lmtp[19537]: 
>> subject=***********************************************
>> frontend cyrus/lmtp[19537]: starttls: TLSv1.2 with cipher 
>> ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new) authenticated as *.domain
>> frontend cyrus/lmtp[19541]: received server certificate
>> frontend cyrus/lmtp[19541]: starttls: TLSv1.2 with cipher 
>> ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new client) no authentication
>> frontend cyrus/lmtp[19537]: command: LHLO lmtpproxyd
>> frontend cyrus/lmtp[19537]: TLS is available.
>> frontend cyrus/lmtp[19541]: couldn't authenticate to backend server: 
>> no mechanism available
>> frontend cyrus/lmtp[19537]: command: QUIT
>> frontend cyrus/lmtp[19541]: command: QUIT
>>
>>
>> ### saslauthd -d -a pam? >> cyrus is lmtpuser from mta, murder is 
>> lmtpuser for the backend,
>> ### lmtp connection to the backend doesn't go to saslauthd
>> saslauthd[19525] :rel_accept_lock : released accept lock
>> saslauthd[19527] :get_accept_lock : acquired accept lock
>> saslauthd[19525] :do_auth???????? : auth success: [user=cyrus] 
>> [service=lmtp] [realm=] [mech=pam]
>> saslauthd[19525] :do_request????? : response: OK
>>
>>
>> ### /var/log/messages
>> frontend cyrus/lmtp[19563]: No worthy mechs found
>> frontend cyrus/lmtp[19563]: No worthy mechs found
>>
>> ### /var/log/maillog -> mta postfix
>> mta postfix/smtpd[7678]: connect from client_test
>> mta postfix/smtpd[7678]: DCAEF10392E5: client=client_test
>> mta postfix/cleanup[7682]: DCAEF10392E5: message-id=<>
>> mta postfix/qmgr[2161]: DCAEF10392E5: from=<mail.domain>, size=576, 
>> nrcpt=1 (queue active)
>> mta postfix/smtpd[7678]: disconnect from client_test
>> mta postfix/lmtp[7683]: Untrusted TLS connection established to 
>> frontend:24: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 
>> bits)
>> mta postfix/lmtp[7683]: DCAEF10392E5: to=<mail.domain>, 
>> relay=frontend:24, delay=0.1, delays=0.01/0/0.07/0.02, dsn=4.4.3, 
>> status=deferred (host frontend said: 451 4.4.3 Remote server 
>> unavailable (in reply to end of DATA command))
>>
>>
>> ### /etc/imapd.conf -> frontend
>> sasl_pwcheck_method: saslauthd
>> sasl_mech_list: PLAIN
>> mupdate_server: cyrus-murder.univ-brest.fr
>> mupdate_username: murder
>> mupdate_authname: murder
>> mupdate_password: password
>> backend_password: password
>> proxy_authname: murder
>>
>>
>> ### /etc/cyrus.conf -> frontend
>> START {
>> ? recover?????? cmd="ctl_cyrusdb -r"
>> }
>> SERVICES {
>> ? # add or remove based on preferences
>> ? mupdate?????? cmd="mupdate" listen=3905 prefork=1
>> ? imap????????? cmd="imapd" listen="imap" prefork=5
>> ? imaps???????? cmd="imapd -s" listen="imaps" prefork=1
>> ? pop3????????? cmd="pop3d" listen="pop3" prefork=3
>> ? pop3s???????? cmd="pop3d -s" listen="pop3s" prefork=1
>> ? sieve???????? cmd="timsieved" listen="sieve" prefork=0
>> ? nntp????????? cmd="nntpd" listen="nntp" prefork=3
>> ? lmtp????????? cmd="lmtpd" listen="lmtp" prefork=0
>> }
>> EVENTS {
>> ? checkpoint??? cmd="ctl_cyrusdb -c" period=30
>> ? delprune????? cmd="cyr_expire -E 3" at=0400
>> ? tlsprune????? cmd="tls_prune" at=0400
>> }
>> DAEMON {
>> ? idled???????? cmd="idled"
>> }
>>
>> ### /etc/sysconfig/saslauthd
>> SOCKETDIR=/run/saslauthd
>> MECH=pam
>>
>> ### lmtptest frontend -> backend
>> (frontend)# lmtptest -t "" -a murder backend
>> S: 220 backend.domain Cyrus LMTP 3.0.8-7.el7.centos Fedora server ready
>> C: LHLO lmtptest
>> S: 250-backend.domain
>> S: 250-8BITMIME
>> S: 250-ENHANCEDSTATUSCODES
>> S: 250-PIPELINING
>> S: 250-SIZE
>> S: 250-STARTTLS
>> S: 250-AUTH PLAIN
>> S: 250-IGNOREQUOTA
>> S: 250 Ok SESSIONID=<cyrus-28058-1551952740-1-7710567405059874995>
>> C: STARTTLS
>> S: 220 Begin TLS negotiation now
>> verify error:num=19:self signed certificate in certificate chain
>> TLS connection established: TLSv1.2 with cipher 
>> ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
>> C: LHLO lmtptest
>> S: 250-backend.domain
>> S: 250-8BITMIME
>> S: 250-ENHANCEDSTATUSCODES
>> S: 250-PIPELINING
>> S: 250-SIZE
>> S: 250-AUTH PLAIN
>> S: 250-IGNOREQUOTA
>> S: 250 Ok SESSIONID=<cyrus-28058-1551952740-2-5714180577914972405>
>> Please enter your password:
>> C: AUTH PLAIN ***************************************
>> S: 235 Authenticated!
>> Authenticated.
>> Security strength factor: 256
>>
>>
>> It seems I miss something in imapd.conf to tell LMTP to use sasl 
>> plain but I didn't find the way.
>> Any help would be greatly appreciated.
>>
>> Thanks
>>
>>
>> Isma?l TANGUY
>> Universit? de Bretagne Occidentale
>> Brest - France
>>
>> ----
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>
>
>
> -------------------------------------------------------------------------------- 
>
> M.Menge??????????????????????????????? Tel.: (49) 7071/29-70316
> Universit?t T?bingen?????????????????? Fax.: (49) 7071/29-5912
> Zentrum f?r Datenverarbeitung????????? mail: 
> michael.menge at zdv.uni-tuebingen.de
> W?chterstra?e 76
> 72074 T?bingen
>
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190307/2927a08c/attachment-0001.html>

From heiler.bemerguy at cinbesa.com.br  Thu Mar  7 10:30:55 2019
From: heiler.bemerguy at cinbesa.com.br (Heiler Bemerguy)
Date: Thu, 7 Mar 2019 12:30:55 -0300
Subject: cyrus 2.5 imap idle/stuck connections (DOS like)
In-Reply-To: <ead86af7-1cf1-04cf-c1ab-149a46484864@gmx.net>
References: <143cafbf-ab34-3b26-9ff5-e8124692ef48@cinbesa.com.br>
 <009A6994-69AF-4EAA-8A63-8C214E3F1780@Offermans.Rompen.nl>
 <9f4fa2d4-7a36-e739-60a5-036449f34911@cinbesa.com.br>
 <ead86af7-1cf1-04cf-c1ab-149a46484864@gmx.net>
Message-ID: <149c38c9-c75f-d513-ae5c-eb49ceada91e@cinbesa.com.br>

My? "man imapd.conf" doesn't list this option at all. I think my Cyrus 
2.5.10 is older than it..

But I've added it to the .conf anyway. Won't hurt if it doesn't exist 
yet, right? lol


Atenciosamente,

Heiler Bemerguy - CINBESA
Analista de Redes, Wi-Fi,
Virtualiza??o e Servi?os Internet
(55) 91 98151-4894

Em 07/03/2019 11:58, Wolfgang Breyha escreveu:
> Heiler Bemerguy via Info-cyrus wrote on 07/03/2019 15:39:
>> Yes I've read imapd.conf and cyrus.conf and found no options to limit
>> connections per source IP or "idleness"..
>>
>> It means anyone can open a lot of connections to any port (143, 25, 110 etc)
>> and render the server unusable??
> You can try to set
> imapidletimeout: <minutes>
> as documented in "man imapd.conf".
>
> To keep your server "RFC friendly" this value should not be lower than 30
> minutes, because RFC 2177:3. recommends that clients show activity at least
> every 29 minutes.
>
> Greetings, Wolfgang

From wbreyha at gmx.net  Thu Mar  7 11:09:45 2019
From: wbreyha at gmx.net (Wolfgang Breyha)
Date: Thu, 7 Mar 2019 17:09:45 +0100
Subject: cyrus 2.5 imap idle/stuck connections (DOS like)
In-Reply-To: <149c38c9-c75f-d513-ae5c-eb49ceada91e@cinbesa.com.br>
References: <143cafbf-ab34-3b26-9ff5-e8124692ef48@cinbesa.com.br>
 <009A6994-69AF-4EAA-8A63-8C214E3F1780@Offermans.Rompen.nl>
 <9f4fa2d4-7a36-e739-60a5-036449f34911@cinbesa.com.br>
 <ead86af7-1cf1-04cf-c1ab-149a46484864@gmx.net>
 <149c38c9-c75f-d513-ae5c-eb49ceada91e@cinbesa.com.br>
Message-ID: <8c284ebc-e4c5-68e6-fc81-3d088528f9c1@gmx.net>

Heiler Bemerguy via Info-cyrus wrote on 07/03/2019 16:30:
> My? "man imapd.conf" doesn't list this option at all. I think my Cyrus 
> 2.5.10 is older than it..

Yes. It appeared in 2.5.11 according to my build environment.

But there already was the option
     timeout: 30
before. So every connection was closed by default after 30 minutes if there
was no activity.

"imapidletimeout" uses the value of "timeout" as upper limit default as well.

> But I've added it to the .conf anyway. Won't hurt if it doesn't exist 
> yet, right? lol
I currently don't remember if imapd ignores unknown options or fails on startup.

But maybe the better option is to use
tcp_keepalive: yes
anyway.

We had "dead" connections as well before imapidletimeout existed and I was
able to get rid of them by activating keepalives to trigger the "timeout: 30"
check.

Greetings, Wolfgang
-- 
Wolfgang Breyha <wbreyha at gmx.net> | https://www.blafasel.at/
Vienna University Computer Center | Austria


From brong at fastmailteam.com  Fri Mar  8 06:45:04 2019
From: brong at fastmailteam.com (Bron Gondwana)
Date: Fri, 08 Mar 2019 06:45:04 -0500
Subject: =?UTF-8?Q?Re:_thoughts_about_conversation_db_and_cyrus_[faild_to_rename_?=
 =?UTF-8?Q?deleted_mailbox,_or_how_conversation_db_sucks_again]?=
In-Reply-To: <20190304161728.Horde.Ygi8OBQxx-8SBZ-WFItC7VF@webmail.uni-tuebingen.de>
References: <20190301164951.Horde.jeNSlGiAd6d-zePfCrV_CJD@webmail.uni-tuebingen.de>
 <73b5ec6e-b6fa-488a-9025-01b5f7302ff9@www.fastmail.com>
 <6d2e9b01-da41-496e-957d-e37c20a19934@www.fastmail.com>
 <3c09ae41-be71-4473-a066-200326d8df0b@www.fastmail.com>
 <20190304161728.Horde.Ygi8OBQxx-8SBZ-WFItC7VF@webmail.uni-tuebingen.de>
Message-ID: <5c95af05-708a-4506-9cde-e96adcfa8d46@www.fastmail.com>

Thanks Michael - I don't have much time to give a longer response right now, but this is really valuable feedback into what we focus on over the next few months and into the 3.2 release plans. I really appreciate you taking the time to spell this out in detail.

Cheers,

Bron.

On Tue, Mar 5, 2019, at 02:17, Michael Menge wrote:
> Hi Ellie and Bron,
> 
> first thank you for your ideas for the workaround and for opening the issue.
> 
> I have to apologize about the original subject, but I was a bit 
> frustrated that
> I have encountered again a problem with the conversation db.
> 
> As I have discovered jet another, not jet reported problem with 
> conversation db
> (I am unsure if it's a problem with the conversation db or if only 
> shows an other
> problem some where else), I have decided to deactivate the conversation db for
> the moment.
> 
> I think I should elaborate the general problem I have with this 
> feature and the
> cyrus development as i have observed it.
> 
> I am an experienced linux and cyrus administrator. I am not an 
> software developer,
> or programmer, but I understand enough about programming to fix small problems
> and narrow down problems.
> 
> Cyrus code quality has grown in the last 14 years since i first set up 
> our first
> cyrus imap (2.3) server. Especially since Fastmail dedicated personal for the
> cyrus project. But also automatic testing and other design decisions helped to
> bring the project a big step forward.
> 
> I know we have a complex setup (murder, replication, meta- and archive 
> partition,
> delayed delete, delayed expunge) so that we use combinations of 
> features that are not
> that common. So fare we are happy with our cyrus setup.
> 
> We did not encounter any data loss, and where able to fix most 
> problems in short time.
> The system is very stable and expect for the slow search can't 
> complain about the performance.
> So thanks again to the devs for the work and also for the community 
> the help I received
> in the last 14 years.
> 
> I like new features, but I have always to balance the advantages of 
> these new features
> with the impact on stability, performance and administration overhead. 
> In that regard I
> tend to exercise caution.
> 
> While testing cyrus 3.0, on one hand neither conversation db nor 
> sphinx or xapian search
> engines looked particular interesting, as I had no need to improve 
> search speed in
> cyrus 2.4 with squatter ("If it isn't broken don't fix it"). On the 
> other hand i didn't
> have time to rigorous test these features, so I decided not to use 
> them as new feature
> have a tendency to contain more new bugs.
> 
> After upgrading the production system to cyrus 3.0 I discovered that 
> search was slow with
> squatter, conversation db did more than the documentation suggested 
> that it does.
> I don't know if it was intended that conversation db was required for 
> squatter to work
> or if it broke by one change to support multiple search engines but 
> the requirement
> was surprising. I did try to find the commit that did break the 
> squatter search but
> failed, as was unable to compile most commits git bisect suggested.
> 
> The problems I encountered with conversation db, confirmed my initial 
> caution not to enable
> conversation db without testing. But it would be unfair to blame only 
> the implementation of
> conversation db.
> 
> One problem was caused by "reconstruct -V max" not upgrading all 
> mailboxes, which i did
> miss in the logs. It would be nice if ctl_conversationsdb would check 
> mailbox version
> before creating a huge conversation db file in an endless loop.
> 
> The problem with "IOERROR: conversations_audit on load:" and "IOERROR: 
> conversations_audit on store:"
> is still a mystery to so it is unclear if it is really a bug in the 
> conversation db of if it shows
> an other problem with my installation.
> 
> The same is with the new problem i had no time to report jet. Deleting 
> users i see the following error
> popping up for some accounts.
> "Fatal error: Internal error: assertion failed: imap/conversations.c: 
> 2205: !status.exists"
> 
> But breaking an common use case of an other feature like "delete_mode: 
> delayed" is
> an other case. This should have been fixed before it was released in 
> the stable
> cyrus version. At least a WARNING in the documentation is required.
> 
> I would like to help to improve the documentation, but there are some 
> questions that need to be answered:
> 
> 1. Which search engines and combinations are currently supported?
>  Is a stand alone squatter still supported?
> 
> 2. What are to pros and cons for the supported search engines?
> 
> 3. Should, or to which extend should, the search engines work without 
> conversations db?
>  Or is enabling the conversations db a new requirement for some/all 
> search engines?
> 
> 4. Is the conversations db murder aware? And how do shared folders 
> (one user shared one
>  of his folders with other users) on the same server/cross server
>  affect search results and performances
> 
> 5. What is stored in the conversations db?
> 
> https://www.cyrusimap.org/dev/imap/concepts/deployment/databases.html#conversations-userid-conversations
>  is incomplete as conversations db also contains hashes of mime parts.
> 
> 6. Which Information is affected by conversations_expire_days
> 
> TLDR; I like cyrus, but there is some work to do regarding to 
> conversation db and search engines,
> in the field of documentation, code testing and feature interaction
> 
> 
> --------------------------------------------------------------------------------
> M.Menge Tel.: (49) 7071/29-70316
> Universit?t T?bingen Fax.: (49) 7071/29-5912
> Zentrum f?r Datenverarbeitung mail: 
> michael.menge at zdv.uni-tuebingen.de
> W?chterstra?e 76
> 72074 T?bingen
> 
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

--
 Bron Gondwana, CEO, FastMail Pty Ltd
 brong at fastmailteam.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190308/00218a98/attachment.html>

From hw at gc-24.de  Fri Mar  8 07:46:05 2019
From: hw at gc-24.de (hwilmer)
Date: Fri, 8 Mar 2019 13:46:05 +0100
Subject: sieve filters being ignored
Message-ID: <13e8e6fa-69b0-ef23-ec57-06f3cfddf56b@gc-24.de>


Hi,

with cyrus installed on Centos 7, my sieve filter is being ignored in 
that no incoming mail is being filtered into destination folders 
according to the filter rules.

The filter file is basically the same as I am using on another cyrus 
installation where it works fine.  The filter can also be found under 
/var/lib/imap/sieve in a sub directory, as I would expect.

I adjusted the filter rules because apparently there is no INBOX folder 
anymore.  Here's an example rule:


if header :contains "List-Id" "Discussion group for Cyrus email system" {
   fileinto "lists.software.cyrus";
   stop;
}


The folder does exist; cyradm shows:


user.hwilmer.lists.software.cyrus (\HasNoChildren)


Is there a way to debug the sieve filtering?  What can I do to get sieve 
to work?

From ismael.tanguy at univ-brest.fr  Fri Mar  8 08:58:53 2019
From: ismael.tanguy at univ-brest.fr (=?UTF-8?Q?Isma=c3=abl_Tanguy?=)
Date: Fri, 8 Mar 2019 14:58:53 +0100
Subject: Murder, autocreate in a cyrus murder
Message-ID: <e084ce44-4529-11ae-6732-7a6671682ca2@univ-brest.fr>

Hello,

we actually use Cyrus2.3.11 with the patch autocreate.
We plan to migrate to Cyrus3.0.8, patch is included, we also plan to use 
a murder to share loads between several frontends.

I'm now testing autocreation through a frontend and new mailboxes are 
always created on the frontend, not the backends.
I validate that creating folders on a existing mailbox is done on backends.

In imapd.conf, serverlist designates the backend where create mailboxes
Reading autocreate.c shows no reference for serverlist

Is anyone autocreate mailboxes in a murder cluster?
Thanks,
Isma?l Tanguy

From hw at gc-24.de  Fri Mar  8 12:11:07 2019
From: hw at gc-24.de (hwilmer)
Date: Fri, 8 Mar 2019 18:11:07 +0100
Subject: sieve filters being ignored
In-Reply-To: <13e8e6fa-69b0-ef23-ec57-06f3cfddf56b@gc-24.de>
References: <13e8e6fa-69b0-ef23-ec57-06f3cfddf56b@gc-24.de>
Message-ID: <622e3882-1374-27d3-d4a2-7c079cd3a16e@gc-24.de>


Never mind, I forgot to activate the filter, sorry.

BTW, is there a way to have the destination folders automatically 
created with 'fileinto'?


On 3/8/19 1:46 PM, hwilmer wrote:
> 
> Hi,
> 
> with cyrus installed on Centos 7, my sieve filter is being ignored in 
> that no incoming mail is being filtered into destination folders 
> according to the filter rules.
> 
> The filter file is basically the same as I am using on another cyrus 
> installation where it works fine.? The filter can also be found under 
> /var/lib/imap/sieve in a sub directory, as I would expect.
> 
> I adjusted the filter rules because apparently there is no INBOX folder 
> anymore.? Here's an example rule:
> 
> 
> if header :contains "List-Id" "Discussion group for Cyrus email system" {
>  ? fileinto "lists.software.cyrus";
>  ? stop;
> }
> 
> 
> The folder does exist; cyradm shows:
> 
> 
> user.hwilmer.lists.software.cyrus (\HasNoChildren)
> 
> 
> Is there a way to debug the sieve filtering?? What can I do to get sieve 
> to work?
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


From paul at vandervlis.nl  Sun Mar 10 10:11:33 2019
From: paul at vandervlis.nl (Paul van der Vlis)
Date: Sun, 10 Mar 2019 15:11:33 +0100
Subject: cyrus-imapd not starting after upgrade
In-Reply-To: <d1e264ec-2daa-4c4c-aca2-29ce3caa2693@gmx.net>
References: <2608b63d-2149-0b33-a261-0739baef0992@gmx.net>
 <1400e6b1-7fa6-5064-0aa3-19e41846ff5a@vandervlis.nl>
 <d1e264ec-2daa-4c4c-aca2-29ce3caa2693@gmx.net>
Message-ID: <96e03d13-922e-6b6b-7002-df7d76bd9971@vandervlis.nl>

Hi Daniel,

Sorry for my late response. I was very busy and did not check the
mailinglist.

Op 12-02-19 om 14:29 schreef Daniel Bareiro:
> 
> On 8/2/19 16:46, Paul van der Vlis wrote:
> 
>>> After quite some time, today I decided to update the mail server from
>>> Debian Jessie (cyrus-imapd 2.4.17) to Debian Stretch (cyrus-imapd 2.5.10-3).
> 
>> Hello Daniel,
> 
> Hello, Paul.
> 
>> I use cyrus-imapd 2.5.10-3 from Debian stable on serveral machines and I
>> can tell you that it gives much TLS problems.
>>
>> What I do is this using a cronjob every night, and after rebooting:
>> ----
>> service cyrus-imapd stop
>> mv /var/lib/cyrus/tls_sessions.db /var/lib/cyrus/tls_sessions.db-weg
>> touch /var/lib/cyrus/tls_sessions.db
>> chown cyrus:mail /var/lib/cyrus/tls_sessions.db
>> service cyrus-imapd start
>> ----
>>
>> But it takes sometimes 30 minutes before I see "imapd" in "ps aux" again.
>>
>> It seems to be better to use the patches from upstream, to backport the
>> version in testing, or to use 2.5.12 from the Debian salsa git repo.
>>
>> In a few days Cyrus 3.0.8 will be in unstable/testing it's autobuilding
>> at the moment.
> 
> Thank you for sharing this. I don't remember seeing errors with TLS in
> the syslog. Could you share some syslog entries to check? From what I
> see, for some reason you create a new tls_sessions.db file.

The point is, that the processes are not closed correctly.

So you get more and more processes. After some time the maxclient
variabele in /etc/cyrus.conf is too low, and you will have a problem.

> Have you opened a bug in Debian BTS about this?

There is a bug about it when I remember well, but not from me.

> The problem that I am observing after the update is the following at the
> time of trying to deliver each mail:
>  
> ----------
> [/var/run/cyrus/socket/lmtp]: Permission denied
> ----------
> 
> The delivery is normalized after executing this command:
> 
> ----------
> # dpkg-statoverride --force --update --add cyrus lmtp 750
> /var/run/cyrus/socket
> ----------

This is what I do too, but only once.

> But I have noticed that after doing a reboot I have this problem again.
> Any idea what could be a definitive solution?

I did not see this behaviour. What still saw was that Cyrus did not
start after a reboot. What I had to do for systemd was this:
update-rc.d cyrus-imapd enable

Cyrus-imapd 3.0.8 is Debian testing now. I've tested it and I do not see
problems anymore: https://packages.debian.org/cyrus-imapd

With regards,
Paul van der Vlis

> Kind regards,
> Daniel
> 
> 
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> 




-- 
Paul van der Vlis Linux systeembeheer Groningen
https://www.vandervlis.nl/


From michael.menge at zdv.uni-tuebingen.de  Mon Mar 11 05:07:40 2019
From: michael.menge at zdv.uni-tuebingen.de (Michael Menge)
Date: Mon, 11 Mar 2019 10:07:40 +0100
Subject: sieve filters being ignored
In-Reply-To: <622e3882-1374-27d3-d4a2-7c079cd3a16e@gc-24.de>
References: <13e8e6fa-69b0-ef23-ec57-06f3cfddf56b@gc-24.de>
 <622e3882-1374-27d3-d4a2-7c079cd3a16e@gc-24.de>
Message-ID: <20190311100740.Horde.a321kS1crLXBioNzrqM1GKE@webmail.uni-tuebingen.de>


Quoting hwilmer <hw at gc-24.de>:

> Never mind, I forgot to activate the filter, sorry.
>
> BTW, is there a way to have the destination folders automatically  
> created with 'fileinto'?
>

there was a patch older versions that was included into the official
build in version 2.5.0.


https://github.com/cyrusimap/cyrus-imapd/blob/master/doc/README.autosievefolder
The Patch for 2.3.16 can be found here,
http://code.uoa.gr/p/cyrus/autosievefolder/

I was able to apply the patch to 2.4, but i don't remember if I had
to change the patch.


>
> On 3/8/19 1:46 PM, hwilmer wrote:
>>
>> Hi,
>>
>> with cyrus installed on Centos 7, my sieve filter is being ignored  
>> in that no incoming mail is being filtered into destination folders  
>> according to the filter rules.
>>
>> The filter file is basically the same as I am using on another  
>> cyrus installation where it works fine.? The filter can also be  
>> found under /var/lib/imap/sieve in a sub directory, as I would  
>> expect.
>>
>> I adjusted the filter rules because apparently there is no INBOX  
>> folder anymore.? Here's an example rule:
>>
>>
>> if header :contains "List-Id" "Discussion group for Cyrus email system" {
>> ? fileinto "lists.software.cyrus";
>> ? stop;
>> }
>>
>>
>> The folder does exist; cyradm shows:
>>
>>
>> user.hwilmer.lists.software.cyrus (\HasNoChildren)
>>
>>
>> Is there a way to debug the sieve filtering?? What can I do to get  
>> sieve to work?
>> ----
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus



--------------------------------------------------------------------------------
M.Menge                                Tel.: (49) 7071/29-70316
Universit?t T?bingen                   Fax.: (49) 7071/29-5912
Zentrum f?r Datenverarbeitung          mail:  
michael.menge at zdv.uni-tuebingen.de
W?chterstra?e 76
72074 T?bingen


From falon at ruparpiemonte.it  Mon Mar 11 06:36:49 2019
From: falon at ruparpiemonte.it (Marco)
Date: Mon, 11 Mar 2019 11:36:49 +0100
Subject: strange getinfo result
Message-ID: <0f71309e-8a11-4514-af6b-d8f47846bd5a@ruparpiemonte.it>

Hello,

  just a minor detail, but I would like to know it, if it could change 
in near future. If I call getinfo with Cyrus::IMAP::Admin (Cyrus-Imapd 
3.x) on a mailbox I see something like this:

(
   "user/myname\@example.com",
   {
     private => {
                  "/mailbox//check" => "NIL",
                  "/mailbox//checkperiod" => "NIL",
                  "/mailbox//comment" => "NIL",
                  "/mailbox//sort" => "NIL",
                  "/mailbox//specialuse" => "NIL",
                  "/mailbox//thread" => "NIL",
                  "/mailbox//vendor/cmu/cyrus-imapd/expire" => "NIL",
                  "/mailbox//vendor/cmu/cyrus-imapd/news2mail" => "NIL",
                  "/mailbox//vendor/cmu/cyrus-imapd/sieve" => "NIL",
                  "/mailbox//vendor/cmu/cyrus-imapd/squat" => "NIL",
                },
     shared  => {
                  "/mailbox//check"                                   => 
"NIL",
                  "/mailbox//checkperiod"                             => 
"NIL",
                  "/mailbox//comment"                                 => 
"NIL",
                  "/mailbox//sort"                                    => 
"NIL",
                  "/mailbox//specialuse"                              => 
"NIL",
                  "/mailbox//thread"                                  => 
"NIL",
                  "/mailbox//vendor/cmu/cyrus-imapd/annotsize"        => 0,
                  "/mailbox//vendor/cmu/cyrus-imapd/duplicatedeliver" => 
"false",
                  "/mailbox//vendor/cmu/cyrus-imapd/expire"           => 
"NIL",
                  "/mailbox//vendor/cmu/cyrus-imapd/lastpop"          => 
"NIL",
                  "/mailbox//vendor/cmu/cyrus-imapd/lastupdate"       => 
"15-Feb-2019 11:55:03 +0100",
                  "/mailbox//vendor/cmu/cyrus-imapd/news2mail"        => 
"NIL",
                  "/mailbox//vendor/cmu/cyrus-imapd/partition"        => 
"maildatabig",
                  "/mailbox//vendor/cmu/cyrus-imapd/pop3newuidl"      => 
"true",
                  "/mailbox//vendor/cmu/cyrus-imapd/pop3showafter"    => 
"NIL",
                  "/mailbox//vendor/cmu/cyrus-imapd/sharedseen"       => 
"false",
                  "/mailbox//vendor/cmu/cyrus-imapd/sieve"            => 
"NIL",
                  "/mailbox//vendor/cmu/cyrus-imapd/size"             => 
2562,
                  "/mailbox//vendor/cmu/cyrus-imapd/squat"            => 
"NIL",
                  "/mailbox//vendor/cmu/cyrus-imapd/synccrcs"         => 
"836105806 1993713954",
                  "/mailbox//vendor/cmu/cyrus-imapd/uniqueid"         => 
"2r1e4dff8u5h23f5qmqrqn77",
                },
   },
)


My question is: why does the double slash ('//') after 'mailbox' appear?

Maybe did you think

	"/mailbox/vendor/..."

or maybe

	"/mailbox/myname at example.com/vendor/..."


Thank you very much
Marco

From ellie at fastmail.com  Mon Mar 11 20:48:36 2019
From: ellie at fastmail.com (ellie timoney)
Date: Mon, 11 Mar 2019 20:48:36 -0400
Subject: strange getinfo result
In-Reply-To: <0f71309e-8a11-4514-af6b-d8f47846bd5a@ruparpiemonte.it>
References: <0f71309e-8a11-4514-af6b-d8f47846bd5a@ruparpiemonte.it>
Message-ID: <801b3f4c-1b1d-467e-9c59-c1d8f12f2b64@www.fastmail.com>

Hi Marco,

Looks like it's just a concatenation bug.  The annotations are of the form "/some/key = value", and when preparing the the results, the function adds "/mailbox/" or "/server/" to the front of the key (depending on if it's a mailbox or server annotation) -- and so the "/" gets doubled up.  The correct behaviour would be to add "/mailbox" or "/server" without the extra slash.

It'll probably get fixed at some point (a PR would be great!).  But I don't have a good data set to test with, so I won't just quickly fix it now myself (in case I miss a detail and make it worse).  I've opened https://github.com/cyrusimap/cyrus-imapd/issues/2666 so it doesn't get forgotten :)

Cheers,

ellie

On Mon, Mar 11, 2019, at 9:41 PM, Marco wrote:
> Hello,
> 
>   just a minor detail, but I would like to know it, if it could change 
> in near future. If I call getinfo with Cyrus::IMAP::Admin (Cyrus-Imapd 
> 3.x) on a mailbox I see something like this:
> 
> (
>    "user/myname\@example.com",
>    {
>      private => {
>                   "/mailbox//check" => "NIL",
>                   "/mailbox//checkperiod" => "NIL",
>                   "/mailbox//comment" => "NIL",
>                   "/mailbox//sort" => "NIL",
>                   "/mailbox//specialuse" => "NIL",
>                   "/mailbox//thread" => "NIL",
>                   "/mailbox//vendor/cmu/cyrus-imapd/expire" => "NIL",
>                   "/mailbox//vendor/cmu/cyrus-imapd/news2mail" => "NIL",
>                   "/mailbox//vendor/cmu/cyrus-imapd/sieve" => "NIL",
>                   "/mailbox//vendor/cmu/cyrus-imapd/squat" => "NIL",
>                 },
>      shared  => {
>                   "/mailbox//check"                                   => 
> "NIL",
>                   "/mailbox//checkperiod"                             => 
> "NIL",
>                   "/mailbox//comment"                                 => 
> "NIL",
>                   "/mailbox//sort"                                    => 
> "NIL",
>                   "/mailbox//specialuse"                              => 
> "NIL",
>                   "/mailbox//thread"                                  => 
> "NIL",
>                   "/mailbox//vendor/cmu/cyrus-imapd/annotsize"        => 0,
>                   "/mailbox//vendor/cmu/cyrus-imapd/duplicatedeliver" => 
> "false",
>                   "/mailbox//vendor/cmu/cyrus-imapd/expire"           => 
> "NIL",
>                   "/mailbox//vendor/cmu/cyrus-imapd/lastpop"          => 
> "NIL",
>                   "/mailbox//vendor/cmu/cyrus-imapd/lastupdate"       => 
> "15-Feb-2019 11:55:03 +0100",
>                   "/mailbox//vendor/cmu/cyrus-imapd/news2mail"        => 
> "NIL",
>                   "/mailbox//vendor/cmu/cyrus-imapd/partition"        => 
> "maildatabig",
>                   "/mailbox//vendor/cmu/cyrus-imapd/pop3newuidl"      => 
> "true",
>                   "/mailbox//vendor/cmu/cyrus-imapd/pop3showafter"    => 
> "NIL",
>                   "/mailbox//vendor/cmu/cyrus-imapd/sharedseen"       => 
> "false",
>                   "/mailbox//vendor/cmu/cyrus-imapd/sieve"            => 
> "NIL",
>                   "/mailbox//vendor/cmu/cyrus-imapd/size"             => 
> 2562,
>                   "/mailbox//vendor/cmu/cyrus-imapd/squat"            => 
> "NIL",
>                   "/mailbox//vendor/cmu/cyrus-imapd/synccrcs"         => 
> "836105806 1993713954",
>                   "/mailbox//vendor/cmu/cyrus-imapd/uniqueid"         => 
> "2r1e4dff8u5h23f5qmqrqn77",
>                 },
>    },
> )
> 
> 
> My question is: why does the double slash ('//') after 'mailbox' appear?
> 
> Maybe did you think
> 
> 	"/mailbox/vendor/..."
> 
> or maybe
> 
> 	"/mailbox/myname at example.com/vendor/..."
> 
> 
> Thank you very much
> Marco
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>

From falon at ruparpiemonte.it  Tue Mar 12 08:27:52 2019
From: falon at ruparpiemonte.it (Marco)
Date: Tue, 12 Mar 2019 13:27:52 +0100
Subject: renaming INBOX
Message-ID: <1f07cb26-3431-3e69-f702-684a24bdc1ee@ruparpiemonte.it>

Hello,

  could you help me to understand how Cyrus IMAP works with rename at 
INBOX level?

RFC3501 says that "Renaming INBOX is permitted, and has special 
behavior.  It moves all messages in INBOX to a new mailbox with the 
given name, leaving INBOX empty."

If I try with Cyrus IMAP I see:

* OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE AUTH=PLAIN AUTH=LOGIN 
SASL-IR] cyrus.example.com Cyrus IMAP 3.0.8-2.el7 RHEL server ready
a login admin adminpassword
a OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxten QUOTA 
MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN 
MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SEARCH=FUZZY SORT 
SORT=MODSEQ SORT=DISPLAY SORT=UID THREAD=ORDEREDSUBJECT 
THREAD=REFERENCES THREAD=REFS ANNOTATEMORE ANNOTATE-EXPERIMENT-1 
METADATA LIST-EXTENDED LIST-STATUS LIST-MYRIGHTS LIST-METADATA WITHIN 
QRESYNC SCAN XLIST XMOVE MOVE SPECIAL-USE CREATE-SPECIAL-USE DIGEST=SHA1 
X-REPLICATION URLAUTH URLAUTH=BINARY LOGINDISABLED XCONVERSATIONS 
COMPRESS=DEFLATE X-QUOTA=STORAGE X-QUOTA=MESSAGE 
X-QUOTA=X-ANNOTATION-STORAGE X-QUOTA=X-NUM-FOLDERS IDLE] User logged in 
SESSIONID=<cyrus-25931-1552392442-1-2908508722121209112>
a rename user/name at example.com user/name/allcontent at example.com
a NO Operation is not supported on mailbox

So, it seems that Cyrus IMAP does not support rename at INBOX level. Is 
this right?

Many many thanks again for the support
Warm Regards
Marco

Ps imapd.conf is
allowusermoves: 1

From murch at fastmail.com  Tue Mar 12 08:30:23 2019
From: murch at fastmail.com (Ken Murchison)
Date: Tue, 12 Mar 2019 08:30:23 -0400
Subject: renaming INBOX
In-Reply-To: <1f07cb26-3431-3e69-f702-684a24bdc1ee@ruparpiemonte.it>
References: <1f07cb26-3431-3e69-f702-684a24bdc1ee@ruparpiemonte.it>
Message-ID: <20b12143-a9ea-79c5-2abe-9304c61241f7@fastmail.com>

If I remember correctly, Cyrus only permits the owner of the INBOX to 
rename it.? Proxy authenticate as name at example.com and try again.


On 3/12/19 8:27 AM, Marco wrote:
> Hello,
>
> ?could you help me to understand how Cyrus IMAP works with rename at 
> INBOX level?
>
> RFC3501 says that "Renaming INBOX is permitted, and has special 
> behavior.? It moves all messages in INBOX to a new mailbox with the 
> given name, leaving INBOX empty."
>
> If I try with Cyrus IMAP I see:
>
> * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE AUTH=PLAIN AUTH=LOGIN 
> SASL-IR] cyrus.example.com Cyrus IMAP 3.0.8-2.el7 RHEL server ready
> a login admin adminpassword
> a OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxten QUOTA 
> MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN 
> MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SEARCH=FUZZY SORT 
> SORT=MODSEQ SORT=DISPLAY SORT=UID THREAD=ORDEREDSUBJECT 
> THREAD=REFERENCES THREAD=REFS ANNOTATEMORE ANNOTATE-EXPERIMENT-1 
> METADATA LIST-EXTENDED LIST-STATUS LIST-MYRIGHTS LIST-METADATA WITHIN 
> QRESYNC SCAN XLIST XMOVE MOVE SPECIAL-USE CREATE-SPECIAL-USE 
> DIGEST=SHA1 X-REPLICATION URLAUTH URLAUTH=BINARY LOGINDISABLED 
> XCONVERSATIONS COMPRESS=DEFLATE X-QUOTA=STORAGE X-QUOTA=MESSAGE 
> X-QUOTA=X-ANNOTATION-STORAGE X-QUOTA=X-NUM-FOLDERS IDLE] User logged 
> in SESSIONID=<cyrus-25931-1552392442-1-2908508722121209112>
> a rename user/name at example.com user/name/allcontent at example.com
> a NO Operation is not supported on mailbox
>
> So, it seems that Cyrus IMAP does not support rename at INBOX level. 
> Is this right?
>
> Many many thanks again for the support
> Warm Regards
> Marco
>
> Ps imapd.conf is
> allowusermoves: 1
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-- 
Ken Murchison
Cyrus Development Team
FastMail US LLC

-------------- next part --------------
A non-text attachment was scrubbed...
Name: murch.vcf
Type: text/x-vcard
Size: 4 bytes
Desc: not available
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190312/fd7caa41/attachment.vcf>

From boutilpj at ednet.ns.ca  Tue Mar 12 08:46:22 2019
From: boutilpj at ednet.ns.ca (Patrick Boutilier)
Date: Tue, 12 Mar 2019 09:46:22 -0300
Subject: renaming INBOX
In-Reply-To: <1f07cb26-3431-3e69-f702-684a24bdc1ee@ruparpiemonte.it>
References: <1f07cb26-3431-3e69-f702-684a24bdc1ee@ruparpiemonte.it>
Message-ID: <b02e4f9d-e97e-5edc-e1f5-7cceb3567c3f@ednet.ns.ca>

On 3/12/19 9:27 AM, Marco wrote:
> Hello,
> 
>  ?could you help me to understand how Cyrus IMAP works with rename at 
> INBOX level?
> 
> RFC3501 says that "Renaming INBOX is permitted, and has special 
> behavior.? It moves all messages in INBOX to a new mailbox with the 
> given name, leaving INBOX empty."
> 
> If I try with Cyrus IMAP I see:
> 
> * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE AUTH=PLAIN AUTH=LOGIN 
> SASL-IR] cyrus.example.com Cyrus IMAP 3.0.8-2.el7 RHEL server ready
> a login admin adminpassword
> a OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxten QUOTA 
> MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN 
> MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SEARCH=FUZZY SORT 
> SORT=MODSEQ SORT=DISPLAY SORT=UID THREAD=ORDEREDSUBJECT 
> THREAD=REFERENCES THREAD=REFS ANNOTATEMORE ANNOTATE-EXPERIMENT-1 
> METADATA LIST-EXTENDED LIST-STATUS LIST-MYRIGHTS LIST-METADATA WITHIN 
> QRESYNC SCAN XLIST XMOVE MOVE SPECIAL-USE CREATE-SPECIAL-USE DIGEST=SHA1 
> X-REPLICATION URLAUTH URLAUTH=BINARY LOGINDISABLED XCONVERSATIONS 
> COMPRESS=DEFLATE X-QUOTA=STORAGE X-QUOTA=MESSAGE 
> X-QUOTA=X-ANNOTATION-STORAGE X-QUOTA=X-NUM-FOLDERS IDLE] User logged in 
> SESSIONID=<cyrus-25931-1552392442-1-2908508722121209112>
> a rename user/name at example.com user/name/allcontent at example.com
> a NO Operation is not supported on mailbox
> 
> So, it seems that Cyrus IMAP does not support rename at INBOX level. Is 
> this right?
> 

What version of Cyrus? In our 2.4.x installs we needed to set

allowusermoves: 1

in /etc/imapd.conf to rename users .










> Many many thanks again for the support
> Warm Regards
> Marco
> 
> Ps imapd.conf is
> allowusermoves: 1
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
-------------- next part --------------
A non-text attachment was scrubbed...
Name: boutilpj.vcf
Type: text/x-vcard
Size: 286 bytes
Desc: not available
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190312/e34fb22e/attachment.vcf>

From pgoetz at mail.utexas.edu  Tue Mar 12 12:39:08 2019
From: pgoetz at mail.utexas.edu (Patrick Goetz)
Date: Tue, 12 Mar 2019 11:39:08 -0500
Subject: Configuring cyrus-imapd for compilation
Message-ID: <82b5d640-3ff2-cc38-2a70-254a183a6ff7@mail.utexas.edu>

I'm finally getting around to updating the Arch linux cyrus-imapd 
package, and have a question.

Looking through the configuration options, it looks like there are a 
number of functionality critical decisions to be made:


CalDAV and CardDAV

     ./configure --enable-http --enable-calalarmd

Murder

     `./configure --enable-murder

Replication

     `./configure --enable-replication


The vast majority of cyrus admins are not going to need a Murder or 
Replication, but when you need it, you need it.

The issue is the Arch build system is based on using a single PKGBUILD 
file (which includes the configuration options) and one of the design 
principles is the outcome of building a binary package from a PKGBUILD 
should be deterministic; i.e. "A PKGBUILD should never be interactive. 
This is a rule that should never be broken."

So, my options are to create a single package configured for every 
possible use case, or to create multiple packages with different 
combinations of functionality, which suffers from something of a 
combinatorial explosion problem.

So, question, given that none of the configuration options appear to be 
mutually exclusive:  what are the downsides of compiling cyrus with 
everything, including the kitchen sink?  That appears to have been the 
original packaging philosophy for the 2.5.x version of the package.

Second question.  Quoting again from the documentation for 3.0.8:

     MariaDB or MySQL development headers, to allow Cyrus IMAP to use
     it as the backend for its databases.

     Configure option: --with-mysql, --with-mysql-incdir, 
--with-mysql-libdir


The 2.5.x package did not include any configuration flags for mysql 
support.  Does this mean the older package would not have worked with 
mysql (I've never tried using this, so can't confirm), or does it mean 
that this was previously a default configuration option in 2.5.x?

From murch at fastmail.com  Tue Mar 12 12:45:27 2019
From: murch at fastmail.com (Ken Murchison)
Date: Tue, 12 Mar 2019 12:45:27 -0400
Subject: Configuring cyrus-imapd for compilation
In-Reply-To: <82b5d640-3ff2-cc38-2a70-254a183a6ff7@mail.utexas.edu>
References: <82b5d640-3ff2-cc38-2a70-254a183a6ff7@mail.utexas.edu>
Message-ID: <8e7f84c0-4d33-e2f4-9214-666a03c3b2de@fastmail.com>

I don't see a downside to have one monolithic package.? I think its 
easier for an admin to have everything available to them in one package 
rather than having to go find the correct package for the optional piece 
they are looking for.? But that's just me.



On 3/12/19 12:39 PM, Patrick Goetz wrote:
> I'm finally getting around to updating the Arch linux cyrus-imapd 
> package, and have a question.
>
> Looking through the configuration options, it looks like there are a 
> number of functionality critical decisions to be made:
>
>
> CalDAV and CardDAV
>
> ??? ./configure --enable-http --enable-calalarmd
>
> Murder
>
> ??? `./configure --enable-murder
>
> Replication
>
> ??? `./configure --enable-replication
>
>
> The vast majority of cyrus admins are not going to need a Murder or 
> Replication, but when you need it, you need it.
>
> The issue is the Arch build system is based on using a single PKGBUILD 
> file (which includes the configuration options) and one of the design 
> principles is the outcome of building a binary package from a PKGBUILD 
> should be deterministic; i.e. "A PKGBUILD should never be interactive. 
> This is a rule that should never be broken."
>
> So, my options are to create a single package configured for every 
> possible use case, or to create multiple packages with different 
> combinations of functionality, which suffers from something of a 
> combinatorial explosion problem.
>
> So, question, given that none of the configuration options appear to 
> be mutually exclusive:? what are the downsides of compiling cyrus with 
> everything, including the kitchen sink?? That appears to have been the 
> original packaging philosophy for the 2.5.x version of the package.
>
> Second question.? Quoting again from the documentation for 3.0.8:
>
> ??? MariaDB or MySQL development headers, to allow Cyrus IMAP to use
> ??? it as the backend for its databases.
>
> ??? Configure option: --with-mysql, --with-mysql-incdir, 
> --with-mysql-libdir
>
>
> The 2.5.x package did not include any configuration flags for mysql 
> support.? Does this mean the older package would not have worked with 
> mysql (I've never tried using this, so can't confirm), or does it mean 
> that this was previously a default configuration option in 2.5.x?
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-- 
Ken Murchison
Cyrus Development Team
FastMail US LLC

-------------- next part --------------
A non-text attachment was scrubbed...
Name: murch.vcf
Type: text/x-vcard
Size: 4 bytes
Desc: not available
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190312/c923a750/attachment.vcf>

From falon at ruparpiemonte.it  Wed Mar 13 04:16:21 2019
From: falon at ruparpiemonte.it (Marco)
Date: Wed, 13 Mar 2019 09:16:21 +0100
Subject: renaming INBOX
In-Reply-To: <20b12143-a9ea-79c5-2abe-9304c61241f7@fastmail.com>
References: <1f07cb26-3431-3e69-f702-684a24bdc1ee@ruparpiemonte.it>
 <20b12143-a9ea-79c5-2abe-9304c61241f7@fastmail.com>
Message-ID: <1e384cb9-ba63-7d92-7bd2-c04294333756@ruparpiemonte.it>

Il 12/03/2019 13:30, Ken Murchison ha scritto:
> If I remember correctly, Cyrus only permits the owner of the INBOX to 
> rename it.? Proxy authenticate as name at example.com and try again.

Hello Ken,

  I tried with proxy authentication. It is the same. The operation is 
not allowed:

$ telnet 0 143
Trying 0.0.0.0...
Connected to 0.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE AUTH=PLAIN AUTH=LOGIN 
SASL-IR] imap.example.com Cyrus IMAP 3.0.8-2.el7 RHEL server ready
a01 AUTHENTICATE PLAIN dXRlkljfsllERWDFSDKL4Y3lydSSRXMAb3hjeXJ1cw==
a01 OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxten QUOTA 
MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN 
MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SEARCH=FUZZY SORT 
SORT=MODSEQ SORT=DISPLAY SORT=UID THREAD=ORDEREDSUBJECT 
THREAD=REFERENCES THREAD=REFS ANNOTATEMORE ANNOTATE-EXPERIMENT-1 
METADATA LIST-EXTENDED LIST-STATUS LIST-MYRIGHTS LIST-METADATA WITHIN 
QRESYNC SCAN XLIST XMOVE MOVE SPECIAL-USE CREATE-SPECIAL-USE DIGEST=SHA1 
X-REPLICATION URLAUTH URLAUTH=BINARY LOGINDISABLED XCONVERSATIONS 
COMPRESS=DEFLATE X-QUOTA=STORAGE X-QUOTA=MESSAGE 
X-QUOTA=X-ANNOTATION-STORAGE X-QUOTA=X-NUM-FOLDERS IDLE] Success (no 
protection) SESSIONID=<cyrus-11758-1552464348-1-14917766686469711061>
a01 LIST "" *
* LIST (\HasChildren) "/" INBOX
* LIST (\HasNoChildren) "/" "INBOX/Posta archiviata"
* LIST (\HasNoChildren) "/" INBOX/Sent
* LIST (\HasNoChildren) "/" INBOX/Spam
* LIST (\HasNoChildren \Trash) "/" INBOX/Trash
* LIST (\HasNoChildren) "/" INBOX/ciao',
* LIST (\HasNoChildren) "/" INBOX/ciao,bello
* LIST (\HasNoChildren) "/" "INBOX/my cent&AOA-"
a01 OK Completed (0.010 secs 8 calls)
a02 RENAME INBOX malloppone
a02 NO Operation is not supported on mailbox



- Cyrus version: 3.0.8
- imapd.conf
	allowusermoves: 1

Thank you
Marco

From boutilpj at ednet.ns.ca  Wed Mar 13 06:56:42 2019
From: boutilpj at ednet.ns.ca (Patrick Boutilier)
Date: Wed, 13 Mar 2019 07:56:42 -0300
Subject: renaming INBOX
In-Reply-To: <1e384cb9-ba63-7d92-7bd2-c04294333756@ruparpiemonte.it>
References: <1f07cb26-3431-3e69-f702-684a24bdc1ee@ruparpiemonte.it>
 <20b12143-a9ea-79c5-2abe-9304c61241f7@fastmail.com>
 <1e384cb9-ba63-7d92-7bd2-c04294333756@ruparpiemonte.it>
Message-ID: <4530a4e9-a192-3f02-942d-74014d56a7d9@ednet.ns.ca>

On 3/13/19 5:16 AM, Marco wrote:
> Il 12/03/2019 13:30, Ken Murchison ha scritto:
>> If I remember correctly, Cyrus only permits the owner of the INBOX to 
>> rename it.? Proxy authenticate as name at example.com and try again.
> 
> Hello Ken,
> 
>  ?I tried with proxy authentication. It is the same. The operation is 
> not allowed:
> 
> $ telnet 0 143
> Trying 0.0.0.0...
> Connected to 0.
> Escape character is '^]'.
> * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE AUTH=PLAIN AUTH=LOGIN 
> SASL-IR] imap.example.com Cyrus IMAP 3.0.8-2.el7 RHEL server ready
> a01 AUTHENTICATE PLAIN dXRlkljfsllERWDFSDKL4Y3lydSSRXMAb3hjeXJ1cw==
> a01 OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxten QUOTA 
> MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN 
> MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SEARCH=FUZZY SORT 
> SORT=MODSEQ SORT=DISPLAY SORT=UID THREAD=ORDEREDSUBJECT 
> THREAD=REFERENCES THREAD=REFS ANNOTATEMORE ANNOTATE-EXPERIMENT-1 
> METADATA LIST-EXTENDED LIST-STATUS LIST-MYRIGHTS LIST-METADATA WITHIN 
> QRESYNC SCAN XLIST XMOVE MOVE SPECIAL-USE CREATE-SPECIAL-USE DIGEST=SHA1 
> X-REPLICATION URLAUTH URLAUTH=BINARY LOGINDISABLED XCONVERSATIONS 
> COMPRESS=DEFLATE X-QUOTA=STORAGE X-QUOTA=MESSAGE 
> X-QUOTA=X-ANNOTATION-STORAGE X-QUOTA=X-NUM-FOLDERS IDLE] Success (no 
> protection) SESSIONID=<cyrus-11758-1552464348-1-14917766686469711061>
> a01 LIST "" *
> * LIST (\HasChildren) "/" INBOX
> * LIST (\HasNoChildren) "/" "INBOX/Posta archiviata"
> * LIST (\HasNoChildren) "/" INBOX/Sent
> * LIST (\HasNoChildren) "/" INBOX/Spam
> * LIST (\HasNoChildren \Trash) "/" INBOX/Trash
> * LIST (\HasNoChildren) "/" INBOX/ciao',
> * LIST (\HasNoChildren) "/" INBOX/ciao,bello
> * LIST (\HasNoChildren) "/" "INBOX/my cent&AOA-"
> a01 OK Completed (0.010 secs 8 calls)
> a02 RENAME INBOX malloppone
> a02 NO Operation is not supported on mailbox
> 
> 
> 
> - Cyrus version: 3.0.8
> - imapd.conf
>  ????allowusermoves: 1
> 

a02 RENAME INBOX malloppone

Pretty sure you can't rename INBOX for the same user. When I suggested 
"allowusermoves: 1" I thought the goal was to rename a user. Something like:

RENAME user/guy/INBOX user/otherguy/INBOX





> Thank you
> Marco
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-------------- next part --------------
A non-text attachment was scrubbed...
Name: boutilpj.vcf
Type: text/x-vcard
Size: 286 bytes
Desc: not available
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190313/37fe9ab8/attachment.vcf>

From pgoetz at mail.utexas.edu  Wed Mar 13 11:24:01 2019
From: pgoetz at mail.utexas.edu (Patrick Goetz)
Date: Wed, 13 Mar 2019 10:24:01 -0500
Subject: Configuring cyrus-imapd for compilation
In-Reply-To: <8e7f84c0-4d33-e2f4-9214-666a03c3b2de@fastmail.com>
References: <82b5d640-3ff2-cc38-2a70-254a183a6ff7@mail.utexas.edu>
 <8e7f84c0-4d33-e2f4-9214-666a03c3b2de@fastmail.com>
Message-ID: <160e6521-e1a6-dd72-2f3f-6bedee31692f@mail.utexas.edu>

Thanks, that helps.  A couple of follow up questions:

I found this comment in the documentation for compiling cyrus-imapd:

     MariaDB or MySQL development headers, to allow Cyrus IMAP to use
     it as the backend for its databases.

     Configure option: --with-mysql, --with-mysql-incdir, 
--with-mysql-libdir


Does this mean you can't use virtual email domains unless the 
executables are compiled with these options, or is this just about 
putting the cyrus-imap metadata into a database rather than keeping it 
in the mail folders?

Second question: There are still a lot of current 2.x users out there, 
so there is some utility in keeping a 2.5.x package around, assuming I 
can still get it to work on an up to date Arch system (a recent upgrade 
broke my cyrus 2.5.10 install).

Can I still find instructions for compiling 2.5.x somewhere?  I need to 
go over the build options in the PKGBUILD for this release, as I'm not 
convinced they include everything (for example, there is no mention of 
the mysql options mentioned above.)



On 3/12/19 11:45 AM, Ken Murchison wrote:
> I don't see a downside to have one monolithic package.? I think its 
> easier for an admin to have everything available to them in one package 
> rather than having to go find the correct package for the optional piece 
> they are looking for.? But that's just me.
> 
> 
> 
> On 3/12/19 12:39 PM, Patrick Goetz wrote:
>> I'm finally getting around to updating the Arch linux cyrus-imapd 
>> package, and have a question.
>>
>> Looking through the configuration options, it looks like there are a 
>> number of functionality critical decisions to be made:
>>
>>
>> CalDAV and CardDAV
>>
>> ??? ./configure --enable-http --enable-calalarmd
>>
>> Murder
>>
>> ??? `./configure --enable-murder
>>
>> Replication
>>
>> ??? `./configure --enable-replication
>>
>>
>> The vast majority of cyrus admins are not going to need a Murder or 
>> Replication, but when you need it, you need it.
>>
>> The issue is the Arch build system is based on using a single PKGBUILD 
>> file (which includes the configuration options) and one of the design 
>> principles is the outcome of building a binary package from a PKGBUILD 
>> should be deterministic; i.e. "A PKGBUILD should never be interactive. 
>> This is a rule that should never be broken."
>>
>> So, my options are to create a single package configured for every 
>> possible use case, or to create multiple packages with different 
>> combinations of functionality, which suffers from something of a 
>> combinatorial explosion problem.
>>
>> So, question, given that none of the configuration options appear to 
>> be mutually exclusive:? what are the downsides of compiling cyrus with 
>> everything, including the kitchen sink?? That appears to have been the 
>> original packaging philosophy for the 2.5.x version of the package.
>>
>> Second question.? Quoting again from the documentation for 3.0.8:
>>
>> ??? MariaDB or MySQL development headers, to allow Cyrus IMAP to use
>> ??? it as the backend for its databases.
>>
>> ??? Configure option: --with-mysql, --with-mysql-incdir, 
>> --with-mysql-libdir
>>
>>
>> The 2.5.x package did not include any configuration flags for mysql 
>> support.? Does this mean the older package would not have worked with 
>> mysql (I've never tried using this, so can't confirm), or does it mean 
>> that this was previously a default configuration option in 2.5.x?
>> ----
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> 
> 
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> 

From tibbs at math.uh.edu  Wed Mar 13 12:49:27 2019
From: tibbs at math.uh.edu (Jason Tibbitts)
Date: Wed, 13 Mar 2019 11:49:27 -0500
Subject: Configuring cyrus-imapd for compilation
In-Reply-To: <8e7f84c0-4d33-e2f4-9214-666a03c3b2de@fastmail.com> (Ken
 Murchison's message of "Tue, 12 Mar 2019 12:45:27 -0400")
References: <82b5d640-3ff2-cc38-2a70-254a183a6ff7@mail.utexas.edu>
 <8e7f84c0-4d33-e2f4-9214-666a03c3b2de@fastmail.com>
Message-ID: <31514_1552495771_x2DGnTJ5032244_87pnquiuso.fsf@math.uh.edu>

>>>>> "KM" == Ken Murchison <murch at fastmail.com> writes:

KM> I don't see a downside to have one monolithic package.? I think its
KM> easier for an admin to have everything available to them in one
KM> package rather than having to go find the correct package for the
KM> optional piece they are looking for.

In general I agree with you, but for a distro the issue generally comes
down to dependencies.

In Fedora, for example, we split the virus scanning portion out to a
separate package, because otherwise cyrus-imapd ends up with a
dependency on clamav.  We want to avoid that because not everyone wants
to maintain a clamav installation so we put the cyr_virusscan binary and
its manpage in a separate subpackage.

 - J<

From pgoetz at mail.utexas.edu  Wed Mar 13 13:52:00 2019
From: pgoetz at mail.utexas.edu (Patrick Goetz)
Date: Wed, 13 Mar 2019 12:52:00 -0500
Subject: Configuring cyrus-imapd for compilation
In-Reply-To: <31514_1552495771_x2DGnTJ5032244_87pnquiuso.fsf@math.uh.edu>
References: <82b5d640-3ff2-cc38-2a70-254a183a6ff7@mail.utexas.edu>
 <8e7f84c0-4d33-e2f4-9214-666a03c3b2de@fastmail.com>
 <31514_1552495771_x2DGnTJ5032244_87pnquiuso.fsf@math.uh.edu>
Message-ID: <da981042-4354-cf93-4d05-bae6d19b4344@mail.utexas.edu>

On 3/13/19 11:49 AM, Jason Tibbitts wrote:
 > In general I agree with you, but for a distro the issue
 > generally comes down to dependencies.
 >
 > In Fedora, for example, we split the virus scanning portion out to a
 > separate package, because otherwise cyrus-imapd ends up with a
 > dependency on clamav.  We want to avoid that because not everyone
 > wants to maintain a clamav installation so we put the cyr_virusscan
 > binary and its manpage in a separate subpackage.

Unfortunately that's not a model that works for the Arch Linux AUR.

Basically almost anyone can put out an AUR package (this is one of the 
reasons nearly everything in the linux ecosystem is readily available on 
Arch), but such packages are required to be text files only with 
absolutely no exceptions allowed. Most of the heavy lifting is done by a 
PKGBUILD file, which is essentially a fancy shell script which relies on 
the makepkg utility for interpretation.  The PKGBUILD orchestrates 
downloading, configuring, and compiling software directly from upstream 
sources into a binary pacman package (think of it as Gentoo, but just 
for extra goodies and not the base system).  In cases where only 
binaries are available, the PKGBUILD can download binaries from the 
official upstream source and convert them to an Arch package.  Users are 
encouraged to examine these PKGBUILD files in order to make sure no one 
is attempting to install malware on their systems, but of course most 
don't, and there have been a couple of cases of AUR packages which 
attempted to sneak malware into the AUR.  It's still a pretty good 
bazaar with no actual examples of serious malware deployment to date. 
Enough people do look at the PKGBUILD files, and most convenience 
utilities (e.g. yay or pacaur) try and make you look at the PKGBUILD 
even though they're doing the work for you.

Generally this system works amazingly well, but this is an example where 
it breaks down.  And yes, it's precisely the dependencies which are an 
issue.  I can list the packages found here:
  https://www.cyrusimap.org/imap/developer/compiling.html
as optional dependencies, but down the road someone will attempt to use 
a feature and likely won't run `pacman -Qi` to remind themselves of the 
necessity of these optional dependencies for that feature.  The 
alternative, requiring the installation of all possible dependencies, 
seems unreasonable as well.

The saving grace is perhaps that this is a package aimed at systems 
administrators rather than ordinary users, and as such I might be able 
to get away with setting up an Arch Wiki page explaining what all the 
optional dependencies are.


From falon at ruparpiemonte.it  Thu Mar 14 04:13:54 2019
From: falon at ruparpiemonte.it (Marco)
Date: Thu, 14 Mar 2019 09:13:54 +0100
Subject: renaming INBOX
In-Reply-To: <4530a4e9-a192-3f02-942d-74014d56a7d9@ednet.ns.ca>
References: <1f07cb26-3431-3e69-f702-684a24bdc1ee@ruparpiemonte.it>
 <20b12143-a9ea-79c5-2abe-9304c61241f7@fastmail.com>
 <1e384cb9-ba63-7d92-7bd2-c04294333756@ruparpiemonte.it>
 <4530a4e9-a192-3f02-942d-74014d56a7d9@ednet.ns.ca>
Message-ID: <171b248f-368d-ec4e-1c17-a8fcaa10cc1b@ruparpiemonte.it>

Il 13/03/2019 11:56, Patrick Boutilier ha scritto:
> Pretty sure you can't rename INBOX for the same user.

Thank you Patrick, I'm afraid so.
I have to definitively think that renaming INBOX is not allowed on Cyrus 
IMAP...

Cheers
Marco

From pgoetz at mail.utexas.edu  Thu Mar 14 04:32:26 2019
From: pgoetz at mail.utexas.edu (Patrick Goetz)
Date: Thu, 14 Mar 2019 03:32:26 -0500
Subject: Mailbox hierarchy determination?
Message-ID: <93f8a514-47c8-40b0-936d-9d444f5a1ade@mail.utexas.edu>

The first couple of times I set up cyrus-imapd I used Debian packages 
which separated mailboxes in the default partition into folders based on 
the starting letter of the mailbox; i.e. something like:

   /var/spool/cyrus/mail/{[A-Z,a-z,0-9]}/user

Since I have fewer than 50 users and since I found myself frequently 
"going to the files" so to speak to definitely determine the presence or 
absence of some message a user was concerned about, this hierarchy was 
something of a annoyance, so during the last major upgrade I switched 
this to:

    /srv/imap/{user1,user2,...,userN}

i.e. flattening the folder structure and moving the default partition to 
a large non-system disk unaffected by /var volatility.

Now for the life of me I can't figure out what setting in imapd.conf (if 
any) facilitated this structure (not the location of the default 
partition, but rather not using the [A-Z,a-z,0-9] subfolders.

Last time I left the sieve folders divided by letter; in the next 
iteration I'd like to flatten that folder structure to.

Looking at the Arch package post_install script, it pre-creates a ton of 
folders:

--------------------------
     # all kinds of directories needed for the IMAP spool
     for subdir in imap/{,db,log,msg,proc,socket,sieve} 
spool/imap/{,stage.}; do
         if [ ! -d /var/${subdir} ]; then
             mkdir -m 0750 -p "/var/${subdir}"
         fi
     done
     for subdir in imap/{user,quota,sieve} spool/imap; do
         for i in a b c d e f g h i j k l m n o p q r s t v u w x y z \
                  A B C D E F G H I J K L M N O P Q R S T U V W X Y Z \
                  0 1 2 3 4 5 6 7 8 9; do
             if [ ! -d /var/${subdir}/${i} ]; then
                 mkdir -m 0750 -p "/var/${subdir}/${i}"
             fi
         done
--------------------------

I'm wondering how much or if any of this is really necessary. Will cyrus 
autocreate the necessary folders if missing?



From simon.matter at invoca.ch  Thu Mar 14 04:50:20 2019
From: simon.matter at invoca.ch (Simon Matter)
Date: Thu, 14 Mar 2019 09:50:20 +0100
Subject: Mailbox hierarchy determination?
In-Reply-To: <93f8a514-47c8-40b0-936d-9d444f5a1ade@mail.utexas.edu>
References: <93f8a514-47c8-40b0-936d-9d444f5a1ade@mail.utexas.edu>
Message-ID: <b02d77ca345d579836cbb80ff1d226f9.squirrel@webmail.bi.invoca.ch>

> The first couple of times I set up cyrus-imapd I used Debian packages
> which separated mailboxes in the default partition into folders based on
> the starting letter of the mailbox; i.e. something like:
>
>    /var/spool/cyrus/mail/{[A-Z,a-z,0-9]}/user
>
> Since I have fewer than 50 users and since I found myself frequently
> "going to the files" so to speak to definitely determine the presence or
> absence of some message a user was concerned about, this hierarchy was
> something of a annoyance, so during the last major upgrade I switched
> this to:
>
>     /srv/imap/{user1,user2,...,userN}
>
> i.e. flattening the folder structure and moving the default partition to
> a large non-system disk unaffected by /var volatility.
>
> Now for the life of me I can't figure out what setting in imapd.conf (if
> any) facilitated this structure (not the location of the default
> partition, but rather not using the [A-Z,a-z,0-9] subfolders.
>
> Last time I left the sieve folders divided by letter; in the next
> iteration I'd like to flatten that folder structure to.
>
> Looking at the Arch package post_install script, it pre-creates a ton of
> folders:
>
> --------------------------
>      # all kinds of directories needed for the IMAP spool
>      for subdir in imap/{,db,log,msg,proc,socket,sieve}
> spool/imap/{,stage.}; do
>          if [ ! -d /var/${subdir} ]; then
>              mkdir -m 0750 -p "/var/${subdir}"
>          fi
>      done
>      for subdir in imap/{user,quota,sieve} spool/imap; do
>          for i in a b c d e f g h i j k l m n o p q r s t v u w x y z \
>                   A B C D E F G H I J K L M N O P Q R S T U V W X Y Z \
>                   0 1 2 3 4 5 6 7 8 9; do
>              if [ ! -d /var/${subdir}/${i} ]; then
>                  mkdir -m 0750 -p "/var/${subdir}/${i}"
>              fi
>          done
> --------------------------
>
> I'm wondering how much or if any of this is really necessary. Will cyrus
> autocreate the necessary folders if missing?

Dirhashing is controlled by "fulldirhash" and "hashimapspool".

IIRC creating the dirs like above is not needed, they are created on demand.

Regards,
Simon


From vladislav.kurz at webstep.net  Thu Mar 14 05:45:21 2019
From: vladislav.kurz at webstep.net (Vladislav Kurz)
Date: Thu, 14 Mar 2019 10:45:21 +0100
Subject: Cyrmaster at 100% cpu, defunct processes, connection timeouts
Message-ID: <10083845.jzcyqEcSb5@erwin>

Hello everybody

yesterday evening I have update a server with ubuntu 18.04 (just the routine 
security update, libc, kernel, not cyrus), and after reboot cyrus fails in 
quite strange way.

It works fine for a few minutes, but then the cyrmaster spins up to 100% cpu 
(1-core), and stops receiving new connections. Processes that exit stay in 
defunct/zombie state, and eventually all of them end up like that.

At first I suspected some SSL problems, so eptied the tls_sessions.db, even set 
tls_session_timeout: 0, tried to disable mailnotifier (I had it at log), 
enabled debug, but still can't find the problem. 

Anybody has/had the same problem and perhaps a solution?

Best regards
Vladislav Kurz

From pgoetz at mail.utexas.edu  Thu Mar 14 09:33:15 2019
From: pgoetz at mail.utexas.edu (Patrick Goetz)
Date: Thu, 14 Mar 2019 08:33:15 -0500
Subject: Mailbox hierarchy determination?
In-Reply-To: <b02d77ca345d579836cbb80ff1d226f9.squirrel@webmail.bi.invoca.ch>
References: <93f8a514-47c8-40b0-936d-9d444f5a1ade@mail.utexas.edu>
 <b02d77ca345d579836cbb80ff1d226f9.squirrel@webmail.bi.invoca.ch>
Message-ID: <ced693bc-1d92-8575-5289-2f75646058cc@mail.utexas.edu>

On 3/14/19 3:50 AM, Simon Matter wrote:
> 
> Dirhashing is controlled by "fulldirhash" and "hashimapspool".
> 


Right.  This is what it says in imapd.conf:

----
        fulldirhash: 0
   If enabled, uses an improved directory hashing scheme which hashes on
the entire username instead of using just the first letter as the hash. 
This changes hash algorithm used for quota and user directories and if 
hashimapspool is enabled, the entire mail spool.

    Note that this option CANNOT be changed on a live system. The server
must be quiesced and then the directories moved with the rehash utility.

        hashimapspool: 0
  If enabled, the partitions will also be hashed, in addition to the
hashing done on configuration directories. This is recommended if one 
partition has a very bushy mailbox tree.
----

I don't have these options enabled, and my interpretation of this 
description is that enabling them would facilitate my configuration, not 
the other way around.  This is what confused me in the first place.

What am I missing?



From vladislav.kurz at webstep.net  Thu Mar 14 10:14:36 2019
From: vladislav.kurz at webstep.net (Vladislav Kurz)
Date: Thu, 14 Mar 2019 15:14:36 +0100
Subject: Cyrmaster at 100% cpu, defunct processes, connection timeouts
In-Reply-To: <10083845.jzcyqEcSb5@erwin>
References: <10083845.jzcyqEcSb5@erwin>
Message-ID: <e41e701f-4f03-1872-6c57-115fdf39bf8a@webstep.net>

On 14/03/2019 10:45, Vladislav Kurz wrote:
> Hello everybody
> 
> yesterday evening I have update a server with ubuntu 18.04 (just the routine 
> security update, libc, kernel, not cyrus), and after reboot cyrus fails in 
> quite strange way.
> 
> It works fine for a few minutes, but then the cyrmaster spins up to 100% cpu 
> (1-core), and stops receiving new connections. Processes that exit stay in 
> defunct/zombie state, and eventually all of them end up like that.
> 
> At first I suspected some SSL problems, so eptied the tls_sessions.db, even set 
> tls_session_timeout: 0, tried to disable mailnotifier (I had it at log), 
> enabled debug, but still can't find the problem. 
> 
> Anybody has/had the same problem and perhaps a solution?

replying to myself, changing to prefork=1 (instead of prefork=0) solved
the issue.

I vaguely remembered that I changed to prefork=0 to fix some previous
problems...

For completenetes:

cyrus-imapd                           2.5.10-3ubuntu1
libc6:amd64                           2.27-3ubuntu1
linux-image-4.15.0-46-generic         4.15.0-46.49

-- 
Best regards
        Vladislav Kurz


From simon.matter at invoca.ch  Thu Mar 14 10:46:55 2019
From: simon.matter at invoca.ch (Simon Matter)
Date: Thu, 14 Mar 2019 15:46:55 +0100
Subject: Mailbox hierarchy determination?
In-Reply-To: <ced693bc-1d92-8575-5289-2f75646058cc@mail.utexas.edu>
References: <93f8a514-47c8-40b0-936d-9d444f5a1ade@mail.utexas.edu>
 <b02d77ca345d579836cbb80ff1d226f9.squirrel@webmail.bi.invoca.ch>
 <ced693bc-1d92-8575-5289-2f75646058cc@mail.utexas.edu>
Message-ID: <4c18181416d28b6a1daf9ab58553b3b1.squirrel@webmail.bi.invoca.ch>

> On 3/14/19 3:50 AM, Simon Matter wrote:
>>
>> Dirhashing is controlled by "fulldirhash" and "hashimapspool".
>>
>
>
> Right.  This is what it says in imapd.conf:
>
> ----
>         fulldirhash: 0
>    If enabled, uses an improved directory hashing scheme which hashes on
> the entire username instead of using just the first letter as the hash.
> This changes hash algorithm used for quota and user directories and if
> hashimapspool is enabled, the entire mail spool.
>
>     Note that this option CANNOT be changed on a live system. The server
> must be quiesced and then the directories moved with the rehash utility.
>
>         hashimapspool: 0
>   If enabled, the partitions will also be hashed, in addition to the
> hashing done on configuration directories. This is recommended if one
> partition has a very bushy mailbox tree.
> ----
>
> I don't have these options enabled, and my interpretation of this
> description is that enabling them would facilitate my configuration, not
> the other way around.  This is what confused me in the first place.
>
> What am I missing?

I guess you're missing the fact that these options have possibly changed
between releases. Another thing is that distribution packages can also
alter the defaults and if they don't do it correct, they may "forget" to
also change the docs accordingly.

Regards,
Simon


From falon at ruparpiemonte.it  Thu Mar 14 10:48:02 2019
From: falon at ruparpiemonte.it (Marco)
Date: Thu, 14 Mar 2019 15:48:02 +0100
Subject: renaming INBOX
In-Reply-To: <1e384cb9-ba63-7d92-7bd2-c04294333756@ruparpiemonte.it>
References: <1f07cb26-3431-3e69-f702-684a24bdc1ee@ruparpiemonte.it>
 <20b12143-a9ea-79c5-2abe-9304c61241f7@fastmail.com>
 <1e384cb9-ba63-7d92-7bd2-c04294333756@ruparpiemonte.it>
Message-ID: <726cbc44-2003-f114-4d3d-9e7900eb4d7c@ruparpiemonte.it>

Il 13/03/2019 09:16, Marco ha scritto:
> Il 12/03/2019 13:30, Ken Murchison ha scritto:
>> If I remember correctly, Cyrus only permits the owner of the INBOX to 
>> rename it.? Proxy authenticate as name at example.com and try again.
> 
> Hello Ken,
> 
>  ?I tried with proxy authentication. It is the same. The operation is 
> not allowed:

Ops, sorry, I'm confusing myself. I confirm that with proxy 
authentication it works as described by the RFC.

I can rename the INBOX :)

Thank you very much!!

Bye
Marco

From boutilpj at ednet.ns.ca  Thu Mar 14 11:29:26 2019
From: boutilpj at ednet.ns.ca (Patrick Boutilier)
Date: Thu, 14 Mar 2019 12:29:26 -0300
Subject: renaming INBOX
In-Reply-To: <726cbc44-2003-f114-4d3d-9e7900eb4d7c@ruparpiemonte.it>
References: <1f07cb26-3431-3e69-f702-684a24bdc1ee@ruparpiemonte.it>
 <20b12143-a9ea-79c5-2abe-9304c61241f7@fastmail.com>
 <1e384cb9-ba63-7d92-7bd2-c04294333756@ruparpiemonte.it>
 <726cbc44-2003-f114-4d3d-9e7900eb4d7c@ruparpiemonte.it>
Message-ID: <e446bc9a-182e-ce55-1278-b87f72aa4915@ednet.ns.ca>

On 3/14/19 11:48 AM, Marco wrote:
> Il 13/03/2019 09:16, Marco ha scritto:
>> Il 12/03/2019 13:30, Ken Murchison ha scritto:
>>> If I remember correctly, Cyrus only permits the owner of the INBOX to 
>>> rename it.? Proxy authenticate as name at example.com and try again.
>>
>> Hello Ken,
>>
>> ??I tried with proxy authentication. It is the same. The operation is 
>> not allowed:
> 
> Ops, sorry, I'm confusing myself. I confirm that with proxy 
> authentication it works as described by the RFC.
> 
> I can rename the INBOX :)

RFC says:

Renaming INBOX is permitted, and has special behavior.  It moves
all messages in INBOX to a new mailbox with the given name, leaving 
INBOX empty.




So you still have an INBOX right? Just an empty one and new mail still 
gets delivered to INBOX?




> 
> Thank you very much!!
> 
> Bye
> Marco
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
-------------- next part --------------
A non-text attachment was scrubbed...
Name: boutilpj.vcf
Type: text/x-vcard
Size: 286 bytes
Desc: not available
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190314/f32c9ef0/attachment.vcf>

From pgoetz at mail.utexas.edu  Thu Mar 14 12:23:29 2019
From: pgoetz at mail.utexas.edu (Patrick Goetz)
Date: Thu, 14 Mar 2019 11:23:29 -0500
Subject: Mailbox hierarchy determination?
In-Reply-To: <4c18181416d28b6a1daf9ab58553b3b1.squirrel@webmail.bi.invoca.ch>
References: <93f8a514-47c8-40b0-936d-9d444f5a1ade@mail.utexas.edu>
 <b02d77ca345d579836cbb80ff1d226f9.squirrel@webmail.bi.invoca.ch>
 <ced693bc-1d92-8575-5289-2f75646058cc@mail.utexas.edu>
 <4c18181416d28b6a1daf9ab58553b3b1.squirrel@webmail.bi.invoca.ch>
Message-ID: <ab1a3af0-9d09-ca9d-4b04-5195083e5d2e@mail.utexas.edu>

On 3/14/19 9:46 AM, Simon Matter wrote:
> I guess you're missing the fact that these options have possibly changed
> between releases. Another thing is that distribution packages can also
> alter the defaults and if they don't do it correct, they may "forget" to
> also change the docs accordingly.
> 

Thank you for your help with this.  I think what you're saying is that 
for my configuration I should have

   fulldirhash:   1
   hashimapspool: 1


I'm not 100% certain how the defaults are set for my installation -- is 
there any way to check this?



From boutilpj at ednet.ns.ca  Thu Mar 14 12:32:22 2019
From: boutilpj at ednet.ns.ca (Patrick Boutilier)
Date: Thu, 14 Mar 2019 13:32:22 -0300
Subject: Mailbox hierarchy determination?
In-Reply-To: <ab1a3af0-9d09-ca9d-4b04-5195083e5d2e@mail.utexas.edu>
References: <93f8a514-47c8-40b0-936d-9d444f5a1ade@mail.utexas.edu>
 <b02d77ca345d579836cbb80ff1d226f9.squirrel@webmail.bi.invoca.ch>
 <ced693bc-1d92-8575-5289-2f75646058cc@mail.utexas.edu>
 <4c18181416d28b6a1daf9ab58553b3b1.squirrel@webmail.bi.invoca.ch>
 <ab1a3af0-9d09-ca9d-4b04-5195083e5d2e@mail.utexas.edu>
Message-ID: <b506a623-9342-deee-ac05-efbaab0f5be1@ednet.ns.ca>

On 3/14/19 1:23 PM, Patrick Goetz wrote:
> On 3/14/19 9:46 AM, Simon Matter wrote:
>> I guess you're missing the fact that these options have possibly changed
>> between releases. Another thing is that distribution packages can also
>> alter the defaults and if they don't do it correct, they may "forget" to
>> also change the docs accordingly.
>>
> 
> Thank you for your help with this.? I think what you're saying is that 
> for my configuration I should have
> 
>  ? fulldirhash:?? 1
>  ? hashimapspool: 1
> 
> 
> I'm not 100% certain how the defaults are set for my installation -- is 
> there any way to check this?

Check the directories such as /var/imap/quota/E and see if all the 
userids start with e. If not you are most likely using fulldirhash . Do 
the same for your mail partition to see if hashimapspool is enabled.



> 
> 
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
-------------- next part --------------
A non-text attachment was scrubbed...
Name: boutilpj.vcf
Type: text/x-vcard
Size: 286 bytes
Desc: not available
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190314/daee6063/attachment.vcf>

From simon.matter at invoca.ch  Thu Mar 14 13:40:09 2019
From: simon.matter at invoca.ch (Simon Matter)
Date: Thu, 14 Mar 2019 18:40:09 +0100
Subject: Mailbox hierarchy determination?
In-Reply-To: <ab1a3af0-9d09-ca9d-4b04-5195083e5d2e@mail.utexas.edu>
References: <93f8a514-47c8-40b0-936d-9d444f5a1ade@mail.utexas.edu>
 <b02d77ca345d579836cbb80ff1d226f9.squirrel@webmail.bi.invoca.ch>
 <ced693bc-1d92-8575-5289-2f75646058cc@mail.utexas.edu>
 <4c18181416d28b6a1daf9ab58553b3b1.squirrel@webmail.bi.invoca.ch>
 <ab1a3af0-9d09-ca9d-4b04-5195083e5d2e@mail.utexas.edu>
Message-ID: <2743036f4b91393dd92c0f91bad2e4fb.squirrel@webmail.bi.corp.invoca.ch>

> On 3/14/19 9:46 AM, Simon Matter wrote:
>> I guess you're missing the fact that these options have possibly changed
>> between releases. Another thing is that distribution packages can also
>> alter the defaults and if they don't do it correct, they may "forget" to
>> also change the docs accordingly.
>>
>
> Thank you for your help with this.  I think what you're saying is that
> for my configuration I should have
>
>    fulldirhash:   1
>    hashimapspool: 1
>
>
> I'm not 100% certain how the defaults are set for my installation -- is
> there any way to check this?

Our RPMs create two files at build time:

/usr/share/cyrus-imapd/rpm/imapd.conf.dist
This is what the source distribution uses.

/usr/share/cyrus-imapd/rpm/imapd.conf.default
This is what the patched build uses.

Unfortunately I don't know of a way to get the same info at run time.

Regards,
Simon


From ellie at fastmail.com  Thu Mar 14 22:23:58 2019
From: ellie at fastmail.com (ellie timoney)
Date: Thu, 14 Mar 2019 22:23:58 -0400
Subject: Cyrus IMAP 3.0.9  released
Message-ID: <a056ba61-9383-4d5d-a267-6e63c2436db1@www.fastmail.com>

The Cyrus team is proud to announce the immediate availability of a new version of Cyrus IMAP: 3.0.9

I'm trialling hosting the release files using Github's releases feature.  Please use the Github download links if possible, and advise if you have any problems!  (It may even download faster due to Github's content delivery network.)

Download URLs:

    https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.9/cyrus-imapd-3.0.9.tar.gz
    https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.9/cyrus-imapd-3.0.9.tar.gz.sig

    https://www.cyrusimap.org/releases/cyrus-imapd-3.0.9.tar.gz
    https://www.cyrusimap.org/releases/cyrus-imapd-3.0.9.tar.gz.sig

Please consult the release notes and upgrade documentation before upgrading to 3.0.9:

    https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.9.html
    https://www.cyrusimap.org/imap/download/upgrade.html

And join us on Github at https://github.com/cyrusimap/cyrus-imapd to report issues, join in the deliberations of new features for the next Cyrus IMAP release, and to contribute to the documentation.

On behalf of the Cyrus team,

Kind regards,

ellie timoney

From falon at ruparpiemonte.it  Fri Mar 15 03:43:36 2019
From: falon at ruparpiemonte.it (Marco)
Date: Fri, 15 Mar 2019 08:43:36 +0100
Subject: renaming INBOX
In-Reply-To: <e446bc9a-182e-ce55-1278-b87f72aa4915@ednet.ns.ca>
References: <1f07cb26-3431-3e69-f702-684a24bdc1ee@ruparpiemonte.it>
 <20b12143-a9ea-79c5-2abe-9304c61241f7@fastmail.com>
 <1e384cb9-ba63-7d92-7bd2-c04294333756@ruparpiemonte.it>
 <726cbc44-2003-f114-4d3d-9e7900eb4d7c@ruparpiemonte.it>
 <e446bc9a-182e-ce55-1278-b87f72aa4915@ednet.ns.ca>
Message-ID: <5d0c85b2-f7e0-6344-f358-45319653fe8c@ruparpiemonte.it>

Il 14/03/2019 16:29, Patrick Boutilier ha scritto:
> On 3/14/19 11:48 AM, Marco wrote:
>> Il 13/03/2019 09:16, Marco ha scritto:
>>> Il 12/03/2019 13:30, Ken Murchison ha scritto:
>>>> If I remember correctly, Cyrus only permits the owner of the INBOX 
>>>> to rename it.? Proxy authenticate as name at example.com and try again.
>>>
>>> Hello Ken,
>>>
>>> ??I tried with proxy authentication. It is the same. The operation is 
>>> not allowed:
>>
>> Ops, sorry, I'm confusing myself. I confirm that with proxy 
>> authentication it works as described by the RFC.
>>
>> I can rename the INBOX :)
> 
> RFC says:
> 
> Renaming INBOX is permitted, and has special behavior.? It moves
> all messages in INBOX to a new mailbox with the given name, leaving 
> INBOX empty.
> 
> 
> So you still have an INBOX right? Just an empty one and new mail still 
> gets delivered to INBOX?

Oh yes, of course :)

Marco

From boutilpj at ednet.ns.ca  Sat Mar 16 08:14:08 2019
From: boutilpj at ednet.ns.ca (Patrick Boutilier)
Date: Sat, 16 Mar 2019 09:14:08 -0300
Subject: renaming INBOX
In-Reply-To: <5d0c85b2-f7e0-6344-f358-45319653fe8c@ruparpiemonte.it>
References: <1f07cb26-3431-3e69-f702-684a24bdc1ee@ruparpiemonte.it>
 <20b12143-a9ea-79c5-2abe-9304c61241f7@fastmail.com>
 <1e384cb9-ba63-7d92-7bd2-c04294333756@ruparpiemonte.it>
 <726cbc44-2003-f114-4d3d-9e7900eb4d7c@ruparpiemonte.it>
 <e446bc9a-182e-ce55-1278-b87f72aa4915@ednet.ns.ca>
 <5d0c85b2-f7e0-6344-f358-45319653fe8c@ruparpiemonte.it>
Message-ID: <4b7e33e4-aa75-676d-0137-96e99c0b6e8c@ednet.ns.ca>

On 3/15/19 4:43 AM, Marco wrote:
> Il 14/03/2019 16:29, Patrick Boutilier ha scritto:
>> On 3/14/19 11:48 AM, Marco wrote:
>>> Il 13/03/2019 09:16, Marco ha scritto:
>>>> Il 12/03/2019 13:30, Ken Murchison ha scritto:
>>>>> If I remember correctly, Cyrus only permits the owner of the INBOX 
>>>>> to rename it.? Proxy authenticate as name at example.com and try again.
>>>>
>>>> Hello Ken,
>>>>
>>>> ??I tried with proxy authentication. It is the same. The operation 
>>>> is not allowed:
>>>
>>> Ops, sorry, I'm confusing myself. I confirm that with proxy 
>>> authentication it works as described by the RFC.
>>>
>>> I can rename the INBOX :)
>>
>> RFC says:
>>
>> Renaming INBOX is permitted, and has special behavior.? It moves
>> all messages in INBOX to a new mailbox with the given name, leaving 
>> INBOX empty.
>>
>>
>> So you still have an INBOX right? Just an empty one and new mail still 
>> gets delivered to INBOX?
> 
> Oh yes, of course :)

Ok.

Before reading the RFC I thought you were trying to "rename" INBOX to 
another name and have Cyrus deliver new mail to the new name. I 
misunderstood. :-)



> 
> Marco
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-------------- next part --------------
A non-text attachment was scrubbed...
Name: boutilpj.vcf
Type: text/x-vcard
Size: 286 bytes
Desc: not available
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190316/99f58d8d/attachment.vcf>

From tcataldo at gmail.com  Mon Mar 18 03:25:49 2019
From: tcataldo at gmail.com (Thomas Cataldo)
Date: Mon, 18 Mar 2019 08:25:49 +0100
Subject: Which imap command to rename a root mailbox while maintaining its
 partition
Message-ID: <CAF-oWLUsJjdPZTE5kx8Jb=ca7Az5EV8AyJFruZStPmLs4ousvQ@mail.gmail.com>

Hi,

On cyrus 2.4.x we used to run
A1 RENAME mbox1 mbox2 our_partition

When we run that on cyrus 3.0.8 we get :
A1 NO Cross-server or cross-partition move w/rename not supported

Is there a way to do this rename with one command with cyrus3.
If we run A1 RENAME mbox1 mbox2
the mailbox is renamed as expected but it moves from our_partition to
default which is not what we want.

Any suggestion ?

Regards,
Thomas.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190318/ededaad5/attachment.html>

From Hagedorn at uni-koeln.de  Mon Mar 18 03:37:14 2019
From: Hagedorn at uni-koeln.de (Sebastian Hagedorn)
Date: Mon, 18 Mar 2019 08:37:14 +0100
Subject: Which imap command to rename a root mailbox while maintaining
 its partition
In-Reply-To: <CAF-oWLUsJjdPZTE5kx8Jb=ca7Az5EV8AyJFruZStPmLs4ousvQ@mail.gmail.com>
References: <CAF-oWLUsJjdPZTE5kx8Jb=ca7Az5EV8AyJFruZStPmLs4ousvQ@mail.gmail.com>
Message-ID: <AA2CC76123B23D8B7B3C9704@Sebbis-iMac.local>

Hi,

> On cyrus 2.4.x we used to run
> A1 RENAME mbox1 mbox2 our_partition
>
> When we run that on cyrus 3.0.8 we get :
> A1 NO Cross-server or cross-partition move w/rename not supported
>
> Is there a way to do this rename with one command with cyrus3.
> If we run A1 RENAME mbox1 mbox2
> the mailbox is renamed as expected but it moves from our_partition to
> default which is not what we want.
>
> Any suggestion ?

I have no idea, because we're not far enough along in our migration to 
Cyrus 3, but this is troubling me. We currently use RENAME specifically for 
moving users cross-partition. If that isn't supported anymore, is there a 
new alternative in Cyrus 3?
--
Sebastian Hagedorn - Weyertal 121, Zimmer 2.02
Regionales Rechenzentrum (RRZK)
Universit?t zu K?ln / Cologne University - Tel. +49-221-470-89578
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 262 bytes
Desc: not available
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190318/b0c71c97/attachment.sig>

From michael.menge at zdv.uni-tuebingen.de  Mon Mar 18 04:26:30 2019
From: michael.menge at zdv.uni-tuebingen.de (Michael Menge)
Date: Mon, 18 Mar 2019 09:26:30 +0100
Subject: Which imap command to rename a root mailbox while maintaining
 its partition
In-Reply-To: <AA2CC76123B23D8B7B3C9704@Sebbis-iMac.local>
References: <CAF-oWLUsJjdPZTE5kx8Jb=ca7Az5EV8AyJFruZStPmLs4ousvQ@mail.gmail.com>
 <AA2CC76123B23D8B7B3C9704@Sebbis-iMac.local>
Message-ID: <20190318092630.Horde.MR1qAilvvTIXjpAVCJD5MoR@webmail.uni-tuebingen.de>

Hi,

Quoting Sebastian Hagedorn <Hagedorn at uni-koeln.de>:

> Hi,
>
>> On cyrus 2.4.x we used to run
>> A1 RENAME mbox1 mbox2 our_partition
>>
>> When we run that on cyrus 3.0.8 we get :
>> A1 NO Cross-server or cross-partition move w/rename not supported
>>
>> Is there a way to do this rename with one command with cyrus3.
>> If we run A1 RENAME mbox1 mbox2
>> the mailbox is renamed as expected but it moves from our_partition to
>> default which is not what we want.
>>
>> Any suggestion ?
>
> I have no idea, because we're not far enough along in our migration  
> to Cyrus 3, but this is troubling me. We currently use RENAME  
> specifically for moving users cross-partition. If that isn't  
> supported anymore, is there a new alternative in Cyrus 3?


I have not tested this, but I think you can move cross-partition  
without rename
and rename without move cross-partition.

A1 RENAME mbox1 mbox1 our_partition
A2 RENAME mbox1 mbox2


     Michael Menge


--------------------------------------------------------------------------------
M.Menge                                Tel.: (49) 7071/29-70316
Universit?t T?bingen                   Fax.: (49) 7071/29-5912
Zentrum f?r Datenverarbeitung          mail:  
michael.menge at zdv.uni-tuebingen.de
W?chterstra?e 76
72074 T?bingen


From tcataldo at gmail.com  Mon Mar 18 04:57:59 2019
From: tcataldo at gmail.com (Thomas Cataldo)
Date: Mon, 18 Mar 2019 09:57:59 +0100
Subject: Which imap command to rename a root mailbox while maintaining its
 partition
In-Reply-To: <20190318092630.Horde.MR1qAilvvTIXjpAVCJD5MoR@webmail.uni-tuebingen.de>
References: <CAF-oWLUsJjdPZTE5kx8Jb=ca7Az5EV8AyJFruZStPmLs4ousvQ@mail.gmail.com>
 <AA2CC76123B23D8B7B3C9704@Sebbis-iMac.local>
 <20190318092630.Horde.MR1qAilvvTIXjpAVCJD5MoR@webmail.uni-tuebingen.de>
Message-ID: <CAF-oWLVmwamCutNoZcTvWOma4bvApBfO3sOaHrUPK9nB8d+FuA@mail.gmail.com>

Well yes, the case you describe are working.

As a workaround we do :
A1 RENAME old1 new1
A2 RENAME new1 new1 our_partition

But this is bothering us as our software works as a cyrus replication
protocol endpoint and we don't want to receive :
APPLY RENAME (old1 new1 partition default)
as default is not a usual partition that our software can handle.



On Mon, Mar 18, 2019 at 9:31 AM Michael Menge <
michael.menge at zdv.uni-tuebingen.de> wrote:

> Hi,
>
> Quoting Sebastian Hagedorn <Hagedorn at uni-koeln.de>:
>
> > Hi,
> >
> >> On cyrus 2.4.x we used to run
> >> A1 RENAME mbox1 mbox2 our_partition
> >>
> >> When we run that on cyrus 3.0.8 we get :
> >> A1 NO Cross-server or cross-partition move w/rename not supported
> >>
> >> Is there a way to do this rename with one command with cyrus3.
> >> If we run A1 RENAME mbox1 mbox2
> >> the mailbox is renamed as expected but it moves from our_partition to
> >> default which is not what we want.
> >>
> >> Any suggestion ?
> >
> > I have no idea, because we're not far enough along in our migration
> > to Cyrus 3, but this is troubling me. We currently use RENAME
> > specifically for moving users cross-partition. If that isn't
> > supported anymore, is there a new alternative in Cyrus 3?
>
>
> I have not tested this, but I think you can move cross-partition
> without rename
> and rename without move cross-partition.
>
> A1 RENAME mbox1 mbox1 our_partition
> A2 RENAME mbox1 mbox2
>
>
>      Michael Menge
>
>
>
> --------------------------------------------------------------------------------
> M.Menge                                Tel.: (49) 7071/29-70316
> Universit?t T?bingen                   Fax.: (49) 7071/29-5912
> Zentrum f?r Datenverarbeitung          mail:
> michael.menge at zdv.uni-tuebingen.de
> W?chterstra?e 76
> 72074 T?bingen
>
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190318/68501caa/attachment.html>

From Hagedorn at uni-koeln.de  Mon Mar 18 05:03:31 2019
From: Hagedorn at uni-koeln.de (Sebastian Hagedorn)
Date: Mon, 18 Mar 2019 10:03:31 +0100
Subject: Which imap command to rename a root mailbox while maintaining
 its partition
In-Reply-To: <20190318092630.Horde.MR1qAilvvTIXjpAVCJD5MoR@webmail.uni-tuebingen.de>
References: <CAF-oWLUsJjdPZTE5kx8Jb=ca7Az5EV8AyJFruZStPmLs4ousvQ@mail.gmail.com>
 <AA2CC76123B23D8B7B3C9704@Sebbis-iMac.local>
 <20190318092630.Horde.MR1qAilvvTIXjpAVCJD5MoR@webmail.uni-tuebingen.de>
Message-ID: <29A5BE1BFFC082FC3B117AFD@Sebbis-iMac.local>

Hi,

>> I have no idea, because we're not far enough along in our migration
>> to Cyrus 3, but this is troubling me. We currently use RENAME
>> specifically for moving users cross-partition. If that isn't
>> supported anymore, is there a new alternative in Cyrus 3?
>
>
> I have not tested this, but I think you can move cross-partition without
> rename
> and rename without move cross-partition.
>
> A1 RENAME mbox1 mbox1 our_partition
> A2 RENAME mbox1 mbox2

thanks for the clarification! I misunderstood the scenario.
--
Sebastian Hagedorn - Weyertal 121, Zimmer 2.02
Regionales Rechenzentrum (RRZK)
Universit?t zu K?ln / Cologne University - Tel. +49-221-470-89578
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 262 bytes
Desc: not available
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190318/f262bbca/attachment-0001.sig>

From falon at ruparpiemonte.it  Mon Mar 18 05:13:04 2019
From: falon at ruparpiemonte.it (Marco)
Date: Mon, 18 Mar 2019 10:13:04 +0100
Subject: Which imap command to rename a root mailbox while maintaining its
 partition
In-Reply-To: <CAF-oWLUsJjdPZTE5kx8Jb=ca7Az5EV8AyJFruZStPmLs4ousvQ@mail.gmail.com>
References: <CAF-oWLUsJjdPZTE5kx8Jb=ca7Az5EV8AyJFruZStPmLs4ousvQ@mail.gmail.com>
Message-ID: <66c6f90f-5f5f-9031-e523-e4d785248ce9@ruparpiemonte.it>

Il 18/03/2019 08:25, Thomas Cataldo ha scritto:
> Hi,
> 
> On cyrus 2.4.x we used to run
> A1 RENAME mbox1 mbox2 our_partition
> 
> When we run that on cyrus 3.0.8 we get :
> A1 NO Cross-server or cross-partition move w/rename not supported
> 
> Is there a way to do this rename with one command with cyrus3.
> If we run A1 RENAME mbox1 mbox2
> the mailbox is renamed as expected but it moves from our_partition to 
> default which is not what we want.
> 
> Any suggestion ?

Hello, no suggestions, I verified too. :( But if you have a mailbox with:

folder1 --> part1
folder2 --> part2

then you can do:

A1 RENAME folder1 folder2/folder1

and folder1 is now on part2. So, under some circumstances, a cross 
partition rename seems to be still supported...

Bye
Marco

Ps: on the above example unixhierarchysep: 1

From murch at fastmail.com  Mon Mar 18 07:52:15 2019
From: murch at fastmail.com (Ken Murchison)
Date: Mon, 18 Mar 2019 07:52:15 -0400
Subject: Which imap command to rename a root mailbox while maintaining its
 partition
In-Reply-To: <CAF-oWLVmwamCutNoZcTvWOma4bvApBfO3sOaHrUPK9nB8d+FuA@mail.gmail.com>
References: <CAF-oWLUsJjdPZTE5kx8Jb=ca7Az5EV8AyJFruZStPmLs4ousvQ@mail.gmail.com>
 <AA2CC76123B23D8B7B3C9704@Sebbis-iMac.local>
 <20190318092630.Horde.MR1qAilvvTIXjpAVCJD5MoR@webmail.uni-tuebingen.de>
 <CAF-oWLVmwamCutNoZcTvWOma4bvApBfO3sOaHrUPK9nB8d+FuA@mail.gmail.com>
Message-ID: <bb73ea07-cc90-6dcd-9789-47229b9ced7f@fastmail.com>

I will take look as to how/why this restriction was put into place.? At 
the very least, renaming a top-level mailbox and keeping it on the same 
partition should be allowed.


On 3/18/19 4:57 AM, Thomas Cataldo wrote:
> Well yes, the case you describe are working.
>
> As a workaround we do :
> A1 RENAME old1 new1
> A2 RENAME new1 new1 our_partition
>
> But this is bothering us as our software works as a cyrus replication 
> protocol endpoint and we don't want to receive :
> APPLY RENAME (old1 new1 partition default)
> as default is not a usual partition that our software can handle.
>
>
>
> On Mon, Mar 18, 2019 at 9:31 AM Michael Menge 
> <michael.menge at zdv.uni-tuebingen.de 
> <mailto:michael.menge at zdv.uni-tuebingen.de>> wrote:
>
>     Hi,
>
>     Quoting Sebastian Hagedorn <Hagedorn at uni-koeln.de
>     <mailto:Hagedorn at uni-koeln.de>>:
>
>     > Hi,
>     >
>     >> On cyrus 2.4.x we used to run
>     >> A1 RENAME mbox1 mbox2 our_partition
>     >>
>     >> When we run that on cyrus 3.0.8 we get :
>     >> A1 NO Cross-server or cross-partition move w/rename not supported
>     >>
>     >> Is there a way to do this rename with one command with cyrus3.
>     >> If we run A1 RENAME mbox1 mbox2
>     >> the mailbox is renamed as expected but it moves from
>     our_partition to
>     >> default which is not what we want.
>     >>
>     >> Any suggestion ?
>     >
>     > I have no idea, because we're not far enough along in our migration
>     > to Cyrus 3, but this is troubling me. We currently use RENAME
>     > specifically for moving users cross-partition. If that isn't
>     > supported anymore, is there a new alternative in Cyrus 3?
>
>
>     I have not tested this, but I think you can move cross-partition
>     without rename
>     and rename without move cross-partition.
>
>     A1 RENAME mbox1 mbox1 our_partition
>     A2 RENAME mbox1 mbox2
>
>
>     ? ? ?Michael Menge
>
>
>     --------------------------------------------------------------------------------
>     M.Menge? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? Tel.: (49) 7071/29-70316
>     Universit?t T?bingen? ? ? ? ? ? ? ? ? ?Fax.: (49) 7071/29-5912
>     Zentrum f?r Datenverarbeitung? ? ? ? ? mail:
>     michael.menge at zdv.uni-tuebingen.de
>     <mailto:michael.menge at zdv.uni-tuebingen.de>
>     W?chterstra?e 76
>     72074 T?bingen
>
>     ----
>     Cyrus Home Page: http://www.cyrusimap.org/
>     List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>     To Unsubscribe:
>     https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>
>
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-- 
Ken Murchison
Cyrus Development Team
FastMail US LLC

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190318/d24427be/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: murch.vcf
Type: text/x-vcard
Size: 4 bytes
Desc: not available
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190318/d24427be/attachment.vcf>

From pgoetz at mail.utexas.edu  Mon Mar 18 08:29:05 2019
From: pgoetz at mail.utexas.edu (Patrick Goetz)
Date: Mon, 18 Mar 2019 07:29:05 -0500
Subject: cyrus-imapd build dependencies
Message-ID: <0841d9a2-37f9-10f6-b7ce-9457f7d39fc6@mail.utexas.edu>

This page on compiling cyrus-imapd:

   https://www.cyrusimap.org/imap/developer/compiling.html

shows a number of build dependencies; however I was just able to compile 
cyrus-imapd without these installed:

    gperf
    libbsd


Are these actually necessary?

Later in the page, under "Alternate database formats" it shows the 
configure flags to use in order to use mysql/mariadb as a backend for 
cyrus databases.  I think this is needed if one plans to use virtual 
domains, but I couldn't get a confirmation on this.  In any case, the 
configure options are given as

  --with-mysql, --with-mysql-incdir, --with-mysql-libdir

with no clear indication of what each of these does.  For example, is 
the --with-mysql all inclusive, or does one need to set all 3?

Finally a couple of items in the "Other" category are a real head 
scratcher.  For example, what is the purpose of net-snmp?

libnghttp2 is listed as needed for "HTTP/2 support for httpd" -- what's 
using httpd?  Is this to faciliate CalDAV/CardDAV?


From biggosh at gmail.com  Mon Mar 18 08:46:09 2019
From: biggosh at gmail.com (Christian Fontana)
Date: Mon, 18 Mar 2019 13:46:09 +0100
Subject: IP based Authentication
Message-ID: <CAO0+iX0qUM_zGxqMTP4j6ppQmGFwqQ1J5rLedO4HntLY+4x_+Q@mail.gmail.com>

Hi All,

I'm trying to configure Cyrus IMAP so that some user account can ne read
only from fixed IP. The scenario is this:

* there are two employees group
* the first one are mobile employees who access mails from mobile phones
* the second group of employees are person who works in the office and
access the most critical mailboxes.

I want to restrict the access for this second group only from the public IP
address of the office.

The mail domain has to be the same for both groups.

How can I proceed?

thanks in advance
Chris
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190318/94858a9f/attachment.html>

From stephane.branchoux at univ-perp.fr  Mon Mar 18 09:32:43 2019
From: stephane.branchoux at univ-perp.fr (Stephane Branchoux)
Date: Mon, 18 Mar 2019 14:32:43 +0100
Subject: script to check quota failed
Message-ID: <2d0ed95f-ecae-ec74-c5c9-e583f8033ae5@univ-perp.fr>

Hello,

We run cyrus-imapd-2.3.16-6 on a Red Hat Enterprise Linux Server release 
6.10.

2 days ago, a power crash occured in our Datacenter.

After reboot of cyrus imap, all seems ok except our script to check quota :

su - cyrus -c "/usr/lib/cyrus-imapd/quota user"
failed building quota list for 'user': System I/O error: %m

I tried :

 ?su - cyrus -c "/usr/lib/cyrus-imapd/quota -f"
failed building quota list for '*': System I/O error: %m

Any idea ?

Many thanks in advance

-- 
Stephane BRANCHOUX
Centre de Ressources Informatiques de l'Universit? de Perpignan.
Syst?mes/R?seaux - RSSI
mailto:stephane.branchoux at univ-perp.fr
04 68 66 21 24 / 07 60 73 38 42


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3662 bytes
Desc: Signature cryptographique S/MIME
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190318/cb878c48/attachment-0001.p7s>

From anthony.prades at chezouam.net  Mon Mar 18 11:49:16 2019
From: anthony.prades at chezouam.net (Anthony Prades)
Date: Mon, 18 Mar 2019 16:49:16 +0100
Subject: Which imap command to rename a root mailbox while maintaining its
 partition
In-Reply-To: <66c6f90f-5f5f-9031-e523-e4d785248ce9@ruparpiemonte.it>
References: <CAF-oWLUsJjdPZTE5kx8Jb=ca7Az5EV8AyJFruZStPmLs4ousvQ@mail.gmail.com>
 <66c6f90f-5f5f-9031-e523-e4d785248ce9@ruparpiemonte.it>
Message-ID: <cc724fbe-d5d0-024f-64d6-beb0b7bde149@chezouam.net>

Hi,

seems that there is a problem with your cyrus quota tree
(/var/lib/cyrus/quota) or at least some of its files.

Maybe strace command may help you find which files are corrupt:
su - cyrus -c "strace /usr/lib/cyrus-imapd/quota user"

Anthony Prades


On 3/18/19 10:13 AM, Marco wrote:
> Il 18/03/2019 08:25, Thomas Cataldo ha scritto:
>> Hi,
>>
>> On cyrus 2.4.x we used to run
>> A1 RENAME mbox1 mbox2 our_partition
>>
>> When we run that on cyrus 3.0.8 we get :
>> A1 NO Cross-server or cross-partition move w/rename not supported
>>
>> Is there a way to do this rename with one command with cyrus3.
>> If we run A1 RENAME mbox1 mbox2
>> the mailbox is renamed as expected but it moves from our_partition to
>> default which is not what we want.
>>
>> Any suggestion ?
>
> Hello, no suggestions, I verified too. :( But if you have a mailbox with:
>
> folder1 --> part1
> folder2 --> part2
>
> then you can do:
>
> A1 RENAME folder1 folder2/folder1
>
> and folder1 is now on part2. So, under some circumstances, a cross
> partition rename seems to be still supported...
>
> Bye
> Marco
>
> Ps: on the above example unixhierarchysep: 1
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

From anthony.prades at chezouam.net  Mon Mar 18 12:05:42 2019
From: anthony.prades at chezouam.net (Anthony Prades)
Date: Mon, 18 Mar 2019 17:05:42 +0100
Subject: script to check quota failed
In-Reply-To: <2d0ed95f-ecae-ec74-c5c9-e583f8033ae5@univ-perp.fr>
References: <2d0ed95f-ecae-ec74-c5c9-e583f8033ae5@univ-perp.fr>
Message-ID: <94b3dfa1-0fa8-32b0-2793-25584bc33245@chezouam.net>

Hi,

seems that there is a problem with your cyrus quota tree
(/var/lib/cyrus/quota) or at least some of its files.

Maybe strace command may help you find which files are corrupt:
su - cyrus -c "strace /usr/lib/cyrus-imapd/quota user"

Anthony Prades

On 3/18/19 2:32 PM, Stephane Branchoux wrote:
> Hello,
>
> We run cyrus-imapd-2.3.16-6 on a Red Hat Enterprise Linux Server
> release 6.10.
>
> 2 days ago, a power crash occured in our Datacenter.
>
> After reboot of cyrus imap, all seems ok except our script to check
> quota :
>
> su - cyrus -c "/usr/lib/cyrus-imapd/quota user"
> failed building quota list for 'user': System I/O error: %m
>
> I tried :
>
> ?su - cyrus -c "/usr/lib/cyrus-imapd/quota -f"
> failed building quota list for '*': System I/O error: %m
>
> Any idea ?
>
> Many thanks in advance
>
>
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190318/ad3cbd19/attachment.html>

From anthony.prades at chezouam.net  Mon Mar 18 12:06:13 2019
From: anthony.prades at chezouam.net (Anthony Prades)
Date: Mon, 18 Mar 2019 17:06:13 +0100
Subject: Which imap command to rename a root mailbox while maintaining its
 partition
In-Reply-To: <cc724fbe-d5d0-024f-64d6-beb0b7bde149@chezouam.net>
References: <CAF-oWLUsJjdPZTE5kx8Jb=ca7Az5EV8AyJFruZStPmLs4ousvQ@mail.gmail.com>
 <66c6f90f-5f5f-9031-e523-e4d785248ce9@ruparpiemonte.it>
 <cc724fbe-d5d0-024f-64d6-beb0b7bde149@chezouam.net>
Message-ID: <12e31612-4b11-04da-7d77-a6af34abb785@chezouam.net>

Sorry, bad thread...

On 3/18/19 4:49 PM, Anthony Prades via Info-cyrus wrote:
> Hi,
>
> seems that there is a problem with your cyrus quota tree
> (/var/lib/cyrus/quota) or at least some of its files.
>
> Maybe strace command may help you find which files are corrupt:
> su - cyrus -c "strace /usr/lib/cyrus-imapd/quota user"
>
> Anthony Prades
>
>
> On 3/18/19 10:13 AM, Marco wrote:
>> Il 18/03/2019 08:25, Thomas Cataldo ha scritto:
>>> Hi,
>>>
>>> On cyrus 2.4.x we used to run
>>> A1 RENAME mbox1 mbox2 our_partition
>>>
>>> When we run that on cyrus 3.0.8 we get :
>>> A1 NO Cross-server or cross-partition move w/rename not supported
>>>
>>> Is there a way to do this rename with one command with cyrus3.
>>> If we run A1 RENAME mbox1 mbox2
>>> the mailbox is renamed as expected but it moves from our_partition to
>>> default which is not what we want.
>>>
>>> Any suggestion ?
>> Hello, no suggestions, I verified too. :( But if you have a mailbox with:
>>
>> folder1 --> part1
>> folder2 --> part2
>>
>> then you can do:
>>
>> A1 RENAME folder1 folder2/folder1
>>
>> and folder1 is now on part2. So, under some circumstances, a cross
>> partition rename seems to be still supported...
>>
>> Bye
>> Marco
>>
>> Ps: on the above example unixhierarchysep: 1
>> ----
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

From simon.matter at invoca.ch  Mon Mar 18 12:06:30 2019
From: simon.matter at invoca.ch (Simon Matter)
Date: Mon, 18 Mar 2019 17:06:30 +0100
Subject: Which imap command to rename a root mailbox while maintaining
 its partition
In-Reply-To: <cc724fbe-d5d0-024f-64d6-beb0b7bde149@chezouam.net>
References: <CAF-oWLUsJjdPZTE5kx8Jb=ca7Az5EV8AyJFruZStPmLs4ousvQ@mail.gmail.com>
 <66c6f90f-5f5f-9031-e523-e4d785248ce9@ruparpiemonte.it>
 <cc724fbe-d5d0-024f-64d6-beb0b7bde149@chezouam.net>
Message-ID: <6aa79a38213530692a8fef56410549ff.squirrel@webmail.bi.corp.invoca.ch>

> Hi,
>
> seems that there is a problem with your cyrus quota tree
> (/var/lib/cyrus/quota) or at least some of its files.

In the case of RHEL6 this will be /var/lib/imap/quota/.

I suggest to look at the quota files there, they have names like
user.<username> and are text files with two lines. Should be easy to find
the broken file.

Regards,
Simon

>
> Maybe strace command may help you find which files are corrupt:
> su - cyrus -c "strace /usr/lib/cyrus-imapd/quota user"
>
> Anthony Prades
>
>
> On 3/18/19 10:13 AM, Marco wrote:
>> Il 18/03/2019 08:25, Thomas Cataldo ha scritto:
>>> Hi,
>>>
>>> On cyrus 2.4.x we used to run
>>> A1 RENAME mbox1 mbox2 our_partition
>>>
>>> When we run that on cyrus 3.0.8 we get :
>>> A1 NO Cross-server or cross-partition move w/rename not supported
>>>
>>> Is there a way to do this rename with one command with cyrus3.
>>> If we run A1 RENAME mbox1 mbox2
>>> the mailbox is renamed as expected but it moves from our_partition to
>>> default which is not what we want.
>>>
>>> Any suggestion ?
>>
>> Hello, no suggestions, I verified too. :( But if you have a mailbox
>> with:
>>
>> folder1 --> part1
>> folder2 --> part2
>>
>> then you can do:
>>
>> A1 RENAME folder1 folder2/folder1
>>
>> and folder1 is now on part2. So, under some circumstances, a cross
>> partition rename seems to be still supported...
>>
>> Bye
>> Marco
>>
>> Ps: on the above example unixhierarchysep: 1
>> ----
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>



From simon.matter at invoca.ch  Mon Mar 18 12:23:31 2019
From: simon.matter at invoca.ch (Simon Matter)
Date: Mon, 18 Mar 2019 17:23:31 +0100
Subject: script to check quota failed
In-Reply-To: <94b3dfa1-0fa8-32b0-2793-25584bc33245@chezouam.net>
References: <2d0ed95f-ecae-ec74-c5c9-e583f8033ae5@univ-perp.fr>
 <94b3dfa1-0fa8-32b0-2793-25584bc33245@chezouam.net>
Message-ID: <9239af57307d955c597fa21400a53506.squirrel@webmail.bi.corp.invoca.ch>

> Hi,
>
> seems that there is a problem with your cyrus quota tree
> (/var/lib/cyrus/quota) or at least some of its files.

In the case of RHEL6 this will be /var/lib/imap/quota/.

I suggest to look at the quota files there, they have names like
user.<username> and are text files with two lines. Should be easy to find
the broken file.

Regards,
Simon

>
> Maybe strace command may help you find which files are corrupt:
> su - cyrus -c "strace /usr/lib/cyrus-imapd/quota user"
>
> Anthony Prades
>
> On 3/18/19 2:32 PM, Stephane Branchoux wrote:
>> Hello,
>>
>> We run cyrus-imapd-2.3.16-6 on a Red Hat Enterprise Linux Server
>> release 6.10.
>>
>> 2 days ago, a power crash occured in our Datacenter.
>>
>> After reboot of cyrus imap, all seems ok except our script to check
>> quota :
>>
>> su - cyrus -c "/usr/lib/cyrus-imapd/quota user"
>> failed building quota list for 'user': System I/O error: %m
>>
>> I tried :
>>
>> ?su - cyrus -c "/usr/lib/cyrus-imapd/quota -f"
>> failed building quota list for '*': System I/O error: %m
>>
>> Any idea ?
>>
>> Many thanks in advance
>>
>>
>> ----
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus



From ellie at fastmail.com  Mon Mar 18 20:55:25 2019
From: ellie at fastmail.com (ellie timoney)
Date: Mon, 18 Mar 2019 20:55:25 -0400
Subject: cyrus-imapd build dependencies
In-Reply-To: <0841d9a2-37f9-10f6-b7ce-9457f7d39fc6@mail.utexas.edu>
References: <0841d9a2-37f9-10f6-b7ce-9457f7d39fc6@mail.utexas.edu>
Message-ID: <dd375090-0753-4e0e-8e7c-9007177d243b@www.fastmail.com>

Hi Patrick,

On Mon, Mar 18, 2019, at 11:33 PM, Patrick Goetz wrote:
> This page on compiling cyrus-imapd:
> 
>    https://www.cyrusimap.org/imap/developer/compiling.html

This page is in the developer section, so its context is for people who are Cyrus developers (especially for new contributors needing to get rolling quickly).  Expect a certain amount of detail to be glossed over on the assumption that it's already known and/or reasonably documented elsewhere.

> shows a number of build dependencies; however I was just able to compile 
> cyrus-imapd without these installed:
> 
>     gperf
>     libbsd
> 
> 
> Are these actually necessary?

Probably depends on which features you enable.  If you run './configure' without arguments, a number of large features won't be enabled, so any libraries they depend on won't be used.  Some of these features are important enough that we (developers) kind of think of them as being probably-always-included even if they default to not.

> Later in the page, under "Alternate database formats" it shows the 
> configure flags to use in order to use mysql/mariadb as a backend for 
> cyrus databases.  I think this is needed if one plans to use virtual 
> domains, but I couldn't get a confirmation on this.  

These are literally just "alternate database formats" -- maybe you already have extensive expertise in some other database and would rather use that than one of the builtin ones.  It has nothing to do with virtual domains.  Documentation about the databases used by Cyrus are here: https://www.cyrusimap.org/imap/concepts/deployment/databases.html

> In any case, the 
> configure options are given as
>   --with-mysql, --with-mysql-incdir, --with-mysql-libdir
> 
> with no clear indication of what each of these does.  For example, is 
> the --with-mysql all inclusive, or does one need to set all 3?

The canonical source of information on configure options is the output from './configure --help'.  It's kind of assumed that a developer will look there to find this information.

> Finally a couple of items in the "Other" category are a real head 
> scratcher.  For example, what is the purpose of net-snmp?

You can click on any of those package names to go to the website for that package and get a description of what it does.  For example,

> Simple Network Management Protocol (SNMP) is a widely used 
> protocol for monitoring the health and welfare of network equipment
>  (eg. routers), computer equipment and even devices like UPSs. 
> Net-SNMP is a suite of applications used to implement SNMP v1, 
> SNMP v2c and SNMP v3 using both IPv4 and IPv6. 
 
> libnghttp2 is listed as needed for "HTTP/2 support for httpd" -- what's 
> using httpd?  Is this to faciliate CalDAV/CardDAV?

The Cyrus httpd provides DAV services (which use the HTTP protocol).  If you want the Cyrus httpd to support HTTP/2, you will need libnghttp2.  Otherwise it will only support HTTP/1.

Hope this helps :)

ellie

From me at anatoli.ws  Tue Mar 19 00:34:47 2019
From: me at anatoli.ws (Anatoli)
Date: Tue, 19 Mar 2019 01:34:47 -0300
Subject: cyrus-imapd build dependencies
In-Reply-To: <dd375090-0753-4e0e-8e7c-9007177d243b@www.fastmail.com>
References: <0841d9a2-37f9-10f6-b7ce-9457f7d39fc6@mail.utexas.edu>
 <dd375090-0753-4e0e-8e7c-9007177d243b@www.fastmail.com>
Message-ID: <44e92ec9-033f-e967-b334-8fcfe67e1fad@anatoli.ws>

Hi Ellie,

 > The Cyrus httpd provides DAV services (which use the HTTP protocol).? 
If you want the Cyrus httpd to support HTTP/2, you will need 
libnghttp2.? Otherwise it will only support HTTP/1.

Always wanted to ask what the nghttp2 dependency was for. From what you 
say I infer that it's only needed for HTTP/2. But what DAV service could 
benefit from this? Are there DAV clients that know HTTP/2?

And speaking about the SNMP agent, are there any plans to complete the 
transfer of its code from the master process to an independent daemon, 
issue #1765 <https://github.com/cyrusimap/cyrus-imapd/issues/1765>? (It 
needs to be moved out to implement efficient chroot)

Regards,
Anatoli

*From:* Ellie Timoney <ellie at fastmail.com>
*Sent:* Monday, March 18, 2019 21:55
*To:* Info-cyrus <info-cyrus at lists.andrew.cmu.edu>
*Subject:* Re: cyrus-imapd build dependencies

Hi Patrick,

On Mon, Mar 18, 2019, at 11:33 PM, Patrick Goetz wrote:

> This page on compiling cyrus-imapd:
>
>     https://www.cyrusimap.org/imap/developer/compiling.html

This page is in the developer section, so its context is for people who are Cyrus developers (especially for new contributors needing to get rolling quickly).  Expect a certain amount of detail to be glossed over on the assumption that it's already known and/or reasonably documented elsewhere.

> shows a number of build dependencies; however I was just able to compile
> cyrus-imapd without these installed:
>
>      gperf
>      libbsd
>
>
> Are these actually necessary?

Probably depends on which features you enable.  If you run './configure' without arguments, a number of large features won't be enabled, so any libraries they depend on won't be used.  Some of these features are important enough that we (developers) kind of think of them as being probably-always-included even if they default to not.

> Later in the page, under "Alternate database formats" it shows the
> configure flags to use in order to use mysql/mariadb as a backend for
> cyrus databases.  I think this is needed if one plans to use virtual
> domains, but I couldn't get a confirmation on this.

These are literally just "alternate database formats" -- maybe you already have extensive expertise in some other database and would rather use that than one of the builtin ones.  It has nothing to do with virtual domains.  Documentation about the databases used by Cyrus are here: https://www.cyrusimap.org/imap/concepts/deployment/databases.html

> In any case, the
> configure options are given as
>    --with-mysql, --with-mysql-incdir, --with-mysql-libdir
>
> with no clear indication of what each of these does.  For example, is
> the --with-mysql all inclusive, or does one need to set all 3?

The canonical source of information on configure options is the output from './configure --help'.  It's kind of assumed that a developer will look there to find this information.

> Finally a couple of items in the "Other" category are a real head
> scratcher.  For example, what is the purpose of net-snmp?

You can click on any of those package names to go to the website for that package and get a description of what it does.  For example,

> Simple Network Management Protocol (SNMP) is a widely used
> protocol for monitoring the health and welfare of network equipment
>   (eg. routers), computer equipment and even devices like UPSs.
> Net-SNMP is a suite of applications used to implement SNMP v1,
> SNMP v2c and SNMP v3 using both IPv4 and IPv6.

  

> libnghttp2 is listed as needed for "HTTP/2 support for httpd" -- what's
> using httpd?  Is this to faciliate CalDAV/CardDAV?

The Cyrus httpd provides DAV services (which use the HTTP protocol).  If you want the Cyrus httpd to support HTTP/2, you will need libnghttp2.  Otherwise it will only support HTTP/1.

Hope this helps :)

ellie
----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190319/3655c7f4/attachment.html>

From ellie at fastmail.com  Tue Mar 19 02:29:50 2019
From: ellie at fastmail.com (ellie timoney)
Date: Tue, 19 Mar 2019 02:29:50 -0400
Subject: cyrus-imapd build dependencies
In-Reply-To: <44e92ec9-033f-e967-b334-8fcfe67e1fad@anatoli.ws>
References: <0841d9a2-37f9-10f6-b7ce-9457f7d39fc6@mail.utexas.edu>
 <dd375090-0753-4e0e-8e7c-9007177d243b@www.fastmail.com>
 <44e92ec9-033f-e967-b334-8fcfe67e1fad@anatoli.ws>
Message-ID: <a08179d9-340b-4551-84e9-b2ba20ea87c4@www.fastmail.com>

On Tue, Mar 19, 2019, at 3:39 PM, Anatoli via Info-cyrus wrote:
>  > The Cyrus httpd provides DAV services (which use the HTTP protocol). If you want the Cyrus httpd to support HTTP/2, you will need libnghttp2. Otherwise it will only support HTTP/1.
> 
>  Always wanted to ask what the nghttp2 dependency was for. From what you say I infer that it's only needed for HTTP/2. But what DAV service could benefit from this? Are there DAV clients that know HTTP/2?
> 

No idea, but it's there if you want it! Speculating wildly, it might be useful for JMAP?

>  And speaking about the SNMP agent, are there any plans to complete the transfer of its code from the master process to an independent daemon, issue #1765 <https://github.com/cyrusimap/cyrus-imapd/issues/1765>? (It needs to be moved out to implement efficient chroot) 

It's more likely to disappear entirely (see https://github.com/cyrusimap/cyrus-imapd/pull/2100) in favour of Prometheus (which is more powerful, more flexible, more human-readable, and is actually used by Fastmail -- and therefore more tested). But it won't disappear from a stable branch, so it won't be a surprise when it does.

Cheers,

ellie
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190319/05869069/attachment.html>

From stephane.branchoux at univ-perp.fr  Tue Mar 19 04:45:41 2019
From: stephane.branchoux at univ-perp.fr (Stephane Branchoux)
Date: Tue, 19 Mar 2019 09:45:41 +0100
Subject: script to check quota failed
In-Reply-To: <9239af57307d955c597fa21400a53506.squirrel@webmail.bi.corp.invoca.ch>
References: <2d0ed95f-ecae-ec74-c5c9-e583f8033ae5@univ-perp.fr>
 <94b3dfa1-0fa8-32b0-2793-25584bc33245@chezouam.net>
 <9239af57307d955c597fa21400a53506.squirrel@webmail.bi.corp.invoca.ch>
Message-ID: <7d29155c-99f2-a899-4d94-f29b102cf0a3@univ-perp.fr>

Hello,

My solution was to rename a user sub folder whose length was 240 
caracters ( file name too long).

open("/var/lib/imap/quota/a/user.myuser.Diffusion 2nd 
degr&AOk-.Circulaire relative au d&AOk-tachement de fonctionnaires dans 
les corps enseignants du second degr&AOk-, des personnels 
d'&AOk-ducation et des psychologues de l'&AOk-ducation nationale 
relevant du minist&AOg-re de l'&AOk-ducation nationale", O_RDWR) = -1 
ENAMETOOLONG (File name too long)

And now my script runs without any problem.

Thanks

Le 18/03/2019 ? 17:23, Simon Matter via Info-cyrus a ?crit?:
>> Hi,
>>
>> seems that there is a problem with your cyrus quota tree
>> (/var/lib/cyrus/quota) or at least some of its files.
> In the case of RHEL6 this will be /var/lib/imap/quota/.
>
> I suggest to look at the quota files there, they have names like
> user.<username> and are text files with two lines. Should be easy to find
> the broken file.
>
> Regards,
> Simon
>
>> Maybe strace command may help you find which files are corrupt:
>> su - cyrus -c "strace /usr/lib/cyrus-imapd/quota user"
>>
>> Anthony Prades
>>
>> On 3/18/19 2:32 PM, Stephane Branchoux wrote:
>>> Hello,
>>>
>>> We run cyrus-imapd-2.3.16-6 on a Red Hat Enterprise Linux Server
>>> release 6.10.
>>>
>>> 2 days ago, a power crash occured in our Datacenter.
>>>
>>> After reboot of cyrus imap, all seems ok except our script to check
>>> quota :
>>>
>>> su - cyrus -c "/usr/lib/cyrus-imapd/quota user"
>>> failed building quota list for 'user': System I/O error: %m
>>>
>>> I tried :
>>>
>>>  ?su - cyrus -c "/usr/lib/cyrus-imapd/quota -f"
>>> failed building quota list for '*': System I/O error: %m
>>>
>>> Any idea ?
>>>
>>> Many thanks in advance
>>>
>>>
>>> ----
>>> Cyrus Home Page: http://www.cyrusimap.org/
>>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>>> To Unsubscribe:
>>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>> ----
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-- 
Stephane BRANCHOUX
Centre de Ressources Informatiques de l'Universit? de Perpignan.
Syst?mes/R?seaux - RSSI
mailto:stephane.branchoux at univ-perp.fr
04 68 66 21 24 / 07 60 73 38 42


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3662 bytes
Desc: Signature cryptographique S/MIME
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190319/f3d40a86/attachment-0001.p7s>

From murch at fastmail.com  Tue Mar 19 08:09:39 2019
From: murch at fastmail.com (Ken Murchison)
Date: Tue, 19 Mar 2019 08:09:39 -0400
Subject: cyrus-imapd build dependencies
In-Reply-To: <44e92ec9-033f-e967-b334-8fcfe67e1fad@anatoli.ws>
References: <0841d9a2-37f9-10f6-b7ce-9457f7d39fc6@mail.utexas.edu>
 <dd375090-0753-4e0e-8e7c-9007177d243b@www.fastmail.com>
 <44e92ec9-033f-e967-b334-8fcfe67e1fad@anatoli.ws>
Message-ID: <58864377-9368-e029-5507-632163d73e72@fastmail.com>


On 3/19/19 12:34 AM, Anatoli via Info-cyrus wrote:
> Hi Ellie,
>
> > The Cyrus httpd provides DAV services (which use the HTTP 
> protocol).? If you want the Cyrus httpd to support HTTP/2, you will 
> need libnghttp2.? Otherwise it will only support HTTP/1.
>
> Always wanted to ask what the nghttp2 dependency was for. From what 
> you say I infer that it's only needed for HTTP/2. But what DAV service 
> could benefit from this? Are there DAV clients that know HTTP/2?


Mozilla Lightning uses HTTP/2 for CalDAV if the server supports it.



>
> And speaking about the SNMP agent, are there any plans to complete the 
> transfer of its code from the master process to an independent daemon, 
> issue #1765 <https://github.com/cyrusimap/cyrus-imapd/issues/1765>? 
> (It needs to be moved out to implement efficient chroot)
>
> Regards,
> Anatoli
>
> *From:* Ellie Timoney <ellie at fastmail.com>
> *Sent:* Monday, March 18, 2019 21:55
> *To:* Info-cyrus <info-cyrus at lists.andrew.cmu.edu>
> *Subject:* Re: cyrus-imapd build dependencies
>
> Hi Patrick,
>
> On Mon, Mar 18, 2019, at 11:33 PM, Patrick Goetz wrote:
>> This page on compiling cyrus-imapd:
>>
>>     https://www.cyrusimap.org/imap/developer/compiling.html
> This page is in the developer section, so its context is for people who are Cyrus developers (especially for new contributors needing to get rolling quickly).  Expect a certain amount of detail to be glossed over on the assumption that it's already known and/or reasonably documented elsewhere.
>
>> shows a number of build dependencies; however I was just able to compile
>> cyrus-imapd without these installed:
>>
>>      gperf
>>      libbsd
>>
>>
>> Are these actually necessary?
> Probably depends on which features you enable.  If you run './configure' without arguments, a number of large features won't be enabled, so any libraries they depend on won't be used.  Some of these features are important enough that we (developers) kind of think of them as being probably-always-included even if they default to not.
>
>> Later in the page, under "Alternate database formats" it shows the
>> configure flags to use in order to use mysql/mariadb as a backend for
>> cyrus databases.  I think this is needed if one plans to use virtual
>> domains, but I couldn't get a confirmation on this.
> These are literally just "alternate database formats" -- maybe you already have extensive expertise in some other database and would rather use that than one of the builtin ones.  It has nothing to do with virtual domains.  Documentation about the databases used by Cyrus are here:https://www.cyrusimap.org/imap/concepts/deployment/databases.html
>
>> In any case, the
>> configure options are given as
>>    --with-mysql, --with-mysql-incdir, --with-mysql-libdir
>>
>> with no clear indication of what each of these does.  For example, is
>> the --with-mysql all inclusive, or does one need to set all 3?
> The canonical source of information on configure options is the output from './configure --help'.  It's kind of assumed that a developer will look there to find this information.
>
>> Finally a couple of items in the "Other" category are a real head
>> scratcher.  For example, what is the purpose of net-snmp?
> You can click on any of those package names to go to the website for that package and get a description of what it does.  For example,
>
>> Simple Network Management Protocol (SNMP) is a widely used
>> protocol for monitoring the health and welfare of network equipment
>>   (eg. routers), computer equipment and even devices like UPSs.
>> Net-SNMP is a suite of applications used to implement SNMP v1,
>> SNMP v2c and SNMP v3 using both IPv4 and IPv6.
>   
>> libnghttp2 is listed as needed for "HTTP/2 support for httpd" -- what's
>> using httpd?  Is this to faciliate CalDAV/CardDAV?
> The Cyrus httpd provides DAV services (which use the HTTP protocol).  If you want the Cyrus httpd to support HTTP/2, you will need libnghttp2.  Otherwise it will only support HTTP/1.
>
> Hope this helps :)
>
> ellie
> ----
> Cyrus Home Page:http://www.cyrusimap.org/
> List Archives/Info:http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>
>
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-- 
Ken Murchison
Cyrus Development Team
FastMail US LLC

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190319/067e2f8b/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: murch.vcf
Type: text/x-vcard
Size: 4 bytes
Desc: not available
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190319/067e2f8b/attachment.vcf>

From a.piesk at mailbox.org  Tue Mar 19 14:36:00 2019
From: a.piesk at mailbox.org (Andreas Piesk)
Date: Tue, 19 Mar 2019 19:36:00 +0100
Subject: segfaults with cyrus-imapd 3.0.9 on latest arch linux
Message-ID: <9cee911b-baf4-6faa-4dac-dd97e0eaa550@mailbox.org>

Hello list,

i'm trying to get cyrus-imapd 3.0.9 (testet 3.0.8 too) running on latest arch linux. Here's the configure summary:

Cyrus Server configured components

     event notification: yes
     gssapi:             yes
     autocreate:         no
     idled:              yes
     httpd:              yes
     kerberos V4:        no
     murder:             yes
     nntpd:              yes
     replication:        yes
     sieve:              yes
     calalarmd:          yes
     objectstore:        no
     backup:             yes
     com_err:

External dependencies:
     ldap:               no
     openssl:            yes
     zlib:               yes
     pcre:               yes
     clamav:             no
     -----------------------
     caringo:            no
     openio:             no
     -----------------------
     nghttp2:            yes
     brotli:             no
     xml2:               yes
     ical:               yes
     icu4c:              yes
     shapelib:           no

Database support:
     mysql:              no
     postgresql:         no
     sqlite:             yes
     lmdb:               no

Search engine:
     squat:              yes
     sphinx:             no
     xapian:             no
     xapian_flavor:      none

Hardware support:
     SSE4.2:             yes

Installation directories:
     prefix:             /usr
     sysconfdir:         /etc


The software builds succesful but executing commands with cyradm produces core dumps like this one:

localhost.localdomain> cm user.test
localhost.localdomain> lm

localhost.localdomain>

cyrus/master[20901]: process type:SERVICE name:imap path:/usr/lib/cyrus/imapd age:33.405s pid:20904 signaled to death by signal 6 (Aborted, core dumped)
systemd-coredump[20913]: Process 20904 (imapd) of user 1001 dumped core.
                                                                     
                                                                     Stack trace of thread 20904:
                                                                     #0  0x00007fc4aa2e8d7f raise (libc.so.6)
                                                                     #1  0x00007fc4aa2d3672 abort (libc.so.6)
                                                                     #2  0x00007fc4aa32b878 __libc_message (libc.so.6)
                                                                     #3  0x00007fc4aa33218a malloc_printerr (libc.so.6)
                                                                     #4  0x00007fc4aa3354ac _int_malloc (libc.so.6)
                                                                     #5  0x00007fc4aa337736 __libc_calloc (libc.so.6)
                                                                     #6  0x00007fc4aa385050 re_acquire_state_context (libc.so.6)
                                                                     #7  0x00007fc4aa3907d4 re_compile_internal (libc.so.6)
                                                                     #8  0x00007fc4aa391511 regcomp (libc.so.6)
                                                                     #9  0x00007fc4aaaf09a0 glob_init (libcyrus.so.0)
                                                                     #10 0x00007fc4aabe2c46 mboxlist_do_find (libcyrus_imap.so.0)
                                                                     #11 0x00007fc4aabe8f87 mboxlist_findallmulti (libcyrus_imap.so.0)
                                                                     #12 0x00005558cc431ef6 list_data (imapd)
                                                                     #13 0x00005558cc43e37f cmdloop (imapd)
                                                                     #14 0x00005558cc44282f service_main (imapd)
                                                                     #15 0x00005558cc41f823 main (imapd)
                                                                     #16 0x00007fc4aa2d5223 __libc_start_main (libc.so.6)
                                                                     #17 0x00005558cc41fe3e _start (imapd)

# cyrdump -v user.test
Segmentation fault

in gdb:

Starting program: /usr/bin/cyrdump user.test
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/libthread_db.so.1".

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff7c90205 in re_compile_internal () from /usr/lib/libc.so.6
(gdb) bt
#0  0x00007ffff7c90205 in re_compile_internal () from /usr/lib/libc.so.6
#1  0x00007ffff7c91511 in regcomp () from /usr/lib/libc.so.6
#2  0x00007ffff7e549a0 in glob_init (str=<optimized out>, sep=sep at entry=47 '/') at lib/glob.c:112
#3  0x00007ffff7f46c46 in mboxlist_do_find (rock=rock at entry=0x7fffffffeaf0, patterns=patterns at entry=0x555555571680) at imap/mboxlist.c:2723
#4  0x00007ffff7f4cf87 in mboxlist_findallmulti (namespace=<optimized out>, patterns=0x555555571680, isadmin=<optimized out>, userid=0x0, auth_state=<optimized out>,
      proc=<optimized out>, rock=0x7fffffffebb4) at imap/mboxlist.c:2942
#5  0x00005555555561aa in main (argc=<optimized out>, argv=0x7fffffffecc8) at imap/cyrdump.c:121

looks like the imapd stack trace. the mailbox file seems to be fine:

# file /var/lib/cyrus/mailboxes.db
/var/lib/cyrus/mailboxes.db: Cyrus twoskip DB

# cyr_dbtool /var/lib/cyrus/mailboxes.db twoskip consistent
Yes, consistent

and has an entry for user.test:

# cyr_dbtool /var/lib/cyrus/mailboxes.db twoskip dump
HEADER: v=1 fl=0 num=1 sz=(000001F8/00000150)
00000040 DUMMY kl=0 dl=0 lvl=31 ()
	00000000
	00000150 00000000 00000000 00000000 00000000 00000000 00000000 00000000
	00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
	00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
	00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000150 RECORD kl=9 dl=97 lvl=1 (user^test)
	00000000
	00000000
000001E0 COMMIT start=00000150

I looked at permissions but both imapd and cyrdump open the mailbox file sucessfully in r/w mode. I use the configs from /doc/examples/*/normal.conf.

I'm lost. Any hints?

Best Regards,
-ap


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2912 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190319/33637f98/attachment.p7s>

From tibbs at math.uh.edu  Tue Mar 19 14:47:15 2019
From: tibbs at math.uh.edu (Jason L Tibbitts III)
Date: Tue, 19 Mar 2019 13:47:15 -0500
Subject: segfaults with cyrus-imapd 3.0.9 on latest arch linux
In-Reply-To: <9cee911b-baf4-6faa-4dac-dd97e0eaa550@mailbox.org> (Andreas
 Piesk's message of "Tue, 19 Mar 2019 19:36:00 +0100")
References: <9cee911b-baf4-6faa-4dac-dd97e0eaa550@mailbox.org>
Message-ID: <108839_1553021239_x2JIlI3P012833_ufak1gu66rw.fsf@epithumia.math.uh.edu>

>>>>> "AP" == Andreas Piesk <a.piesk at mailbox.org> writes:

AP> Hello list, i'm trying to get cyrus-imapd 3.0.9 (testet 3.0.8 too)
AP> running on latest arch linux. Here's the configure summary:

AP> External dependencies: ldap: no openssl: yes zlib: yes pcre: yes

AP> #6 0x00007fc4aa385050 re_acquire_state_context (libc.so.6)
AP> #7 0x00007fc4aa3907d4 re_compile_internal (libc.so.6)
AP> #8 0x00007fc4aa391511 regcomp (libc.so.6)

You have pcre enabled but you are calling glibc regex functions.  You
may wish to double check that you are linking properly.  Fedora went
through a similar issue a while back when --Wl,--as-needed was added to
the default set of compiler flags, which caused subtle variations in the
link order.  The end result was that Fedora picked up a set of pcre
patches similar to what some other distros have to avoid duplicating the
glibc symbol names.

 - J<

From a.piesk at mailbox.org  Tue Mar 19 16:38:03 2019
From: a.piesk at mailbox.org (Andreas Piesk)
Date: Tue, 19 Mar 2019 21:38:03 +0100
Subject: segfaults with cyrus-imapd 3.0.9 on latest arch linux
In-Reply-To: <ufak1gu66rw.fsf@epithumia.math.uh.edu>
References: <9cee911b-baf4-6faa-4dac-dd97e0eaa550@mailbox.org>
 <ufak1gu66rw.fsf@epithumia.math.uh.edu>
Message-ID: <e3783ede-7fbb-5d32-70bb-e76928beb50e@mailbox.org>

Am 19.03.19 um 19:47 schrieb Jason L Tibbitts III:
>>>>>> "AP" == Andreas Piesk <a.piesk at mailbox.org> writes:
> 
> AP> Hello list, i'm trying to get cyrus-imapd 3.0.9 (testet 3.0.8 too)
> AP> running on latest arch linux. Here's the configure summary:
> 
> AP> External dependencies: ldap: no openssl: yes zlib: yes pcre: yes
> 
> AP> #6 0x00007fc4aa385050 re_acquire_state_context (libc.so.6)
> AP> #7 0x00007fc4aa3907d4 re_compile_internal (libc.so.6)
> AP> #8 0x00007fc4aa391511 regcomp (libc.so.6)
> 
> You have pcre enabled but you are calling glibc regex functions.  You
> may wish to double check that you are linking properly.  Fedora went
> through a similar issue a while back when --Wl,--as-needed was added to
> the default set of compiler flags, which caused subtle variations in the
> link order.  The end result was that Fedora picked up a set of pcre
> patches similar to what some other distros have to avoid duplicating the
> glibc symbol names.

These are the default LDFLAGS Arch Linux uses:

LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now"

If I link without '--as-needed' crydump etc. do work without segfaulting.

"configure --disable-pcre" does not work:

lib/glob.h:57:5: error: unknown type name ?regex_t?

I have no idea how to change the linkage order to put pcre before glibc (don't know if and how this is possible, I'm a hardware guy), I'm just building with

autoreconf -f
./configure

so I think my only option is to drop '--as-needed' from LDFLAGS and execute

./configure LDFLAGS=${LDFLAGS/,--as-needed/}

Thanks for pointing me in the right direction, highly appreciated.

Best Regards,
-ap

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2912 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190319/5f35d7ff/attachment.p7s>

From pgoetz at mail.utexas.edu  Tue Mar 19 17:00:29 2019
From: pgoetz at mail.utexas.edu (Patrick Goetz)
Date: Tue, 19 Mar 2019 16:00:29 -0500
Subject: segfaults with cyrus-imapd 3.0.9 on latest arch linux
In-Reply-To: <e3783ede-7fbb-5d32-70bb-e76928beb50e@mailbox.org>
References: <9cee911b-baf4-6faa-4dac-dd97e0eaa550@mailbox.org>
 <ufak1gu66rw.fsf@epithumia.math.uh.edu>
 <e3783ede-7fbb-5d32-70bb-e76928beb50e@mailbox.org>
Message-ID: <16f63075-b579-f910-4d11-b08644793fea@mail.utexas.edu>

Hi Andreas -

Have you tried the 3.0.9 AUR package?

   https://aur.archlinux.org/packages/cyrus-imapd

Once you get the dependencies down, this one compiles and runs.

On 3/19/19 3:38 PM, Andreas Piesk wrote:
> Am 19.03.19 um 19:47 schrieb Jason L Tibbitts III:
>>>>>>> "AP" == Andreas Piesk <a.piesk at mailbox.org> writes:
>>
>> AP> Hello list, i'm trying to get cyrus-imapd 3.0.9 (testet 3.0.8 too)
>> AP> running on latest arch linux. Here's the configure summary:
>>
>> AP> External dependencies: ldap: no openssl: yes zlib: yes pcre: yes
>>
>> AP> #6 0x00007fc4aa385050 re_acquire_state_context (libc.so.6)
>> AP> #7 0x00007fc4aa3907d4 re_compile_internal (libc.so.6)
>> AP> #8 0x00007fc4aa391511 regcomp (libc.so.6)
>>
>> You have pcre enabled but you are calling glibc regex functions.? You
>> may wish to double check that you are linking properly.? Fedora went
>> through a similar issue a while back when --Wl,--as-needed was added to
>> the default set of compiler flags, which caused subtle variations in the
>> link order.? The end result was that Fedora picked up a set of pcre
>> patches similar to what some other distros have to avoid duplicating the
>> glibc symbol names.
> 
> These are the default LDFLAGS Arch Linux uses:
> 
> LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now"
> 
> If I link without '--as-needed' crydump etc. do work without segfaulting.
> 
> "configure --disable-pcre" does not work:
> 
> lib/glob.h:57:5: error: unknown type name ?regex_t?
> 
> I have no idea how to change the linkage order to put pcre before glibc 
> (don't know if and how this is possible, I'm a hardware guy), I'm just 
> building with
> 
> autoreconf -f
> ./configure
> 
> so I think my only option is to drop '--as-needed' from LDFLAGS and execute
> 
> ./configure LDFLAGS=${LDFLAGS/,--as-needed/}
> 
> Thanks for pointing me in the right direction, highly appreciated.
> 
> Best Regards,
> -ap
> 
> 
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> 

From a.piesk at mailbox.org  Tue Mar 19 18:37:37 2019
From: a.piesk at mailbox.org (Andreas Piesk)
Date: Tue, 19 Mar 2019 23:37:37 +0100
Subject: segfaults with cyrus-imapd 3.0.9 on latest arch linux
In-Reply-To: <16f63075-b579-f910-4d11-b08644793fea@mail.utexas.edu>
References: <9cee911b-baf4-6faa-4dac-dd97e0eaa550@mailbox.org>
 <ufak1gu66rw.fsf@epithumia.math.uh.edu>
 <e3783ede-7fbb-5d32-70bb-e76928beb50e@mailbox.org>
 <16f63075-b579-f910-4d11-b08644793fea@mail.utexas.edu>
Message-ID: <57f4ab86-ece1-b6ba-0120-80e175a2999c@mailbox.org>

Am 19.03.19 um 22:00 schrieb Patrick Goetz:
> 
> Have you tried the 3.0.9 AUR package?
> 
>  ? https://aur.archlinux.org/packages/cyrus-imapd
> 
> Once you get the dependencies down, this one compiles and runs.
> 

I noticed the package, it's good to see a recent version in AUR but it has too many dependecies for my taste, I need a stripped down version.

Unfortunately the AUR package doesn't work for me either, i build it in a VM with a fresh installed arch and it has the same problem:

Starting program: /usr/bin/cyrdump user/test
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/libthread_db.so.1".

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff7c76205 in re_compile_internal () from /usr/lib/libc.so.6
(gdb) bt
#0  0x00007ffff7c76205 in re_compile_internal () from /usr/lib/libc.so.6
#1  0x00007ffff7c77511 in regcomp () from /usr/lib/libc.so.6
#2  0x00007ffff7e3d980 in glob_init () from /usr/lib/libcyrus.so.0
#3  0x00007ffff7f38276 in ?? () from /usr/lib/libcyrus_imap.so.0
#4  0x00007ffff7f3e5b7 in mboxlist_findallmulti () from /usr/lib/libcyrus_imap.so.0
#5  0x00005555555561aa in ?? ()
#6  0x00007ffff7bbb223 in __libc_start_main () from /usr/lib/libc.so.6
#7  0x00005555555561ee in ?? ()


Best Regards,
-ap

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2912 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190319/af41721d/attachment.p7s>

From me at anatoli.ws  Tue Mar 19 22:34:58 2019
From: me at anatoli.ws (Anatoli)
Date: Tue, 19 Mar 2019 23:34:58 -0300
Subject: cyrus-imapd build dependencies
In-Reply-To: <a08179d9-340b-4551-84e9-b2ba20ea87c4@www.fastmail.com>
References: <0841d9a2-37f9-10f6-b7ce-9457f7d39fc6@mail.utexas.edu>
 <dd375090-0753-4e0e-8e7c-9007177d243b@www.fastmail.com>
 <44e92ec9-033f-e967-b334-8fcfe67e1fad@anatoli.ws>
 <a08179d9-340b-4551-84e9-b2ba20ea87c4@www.fastmail.com>
Message-ID: <98e4cfc3-417c-ceda-8a11-e40c720f2152@anatoli.ws>

Ken, Ellie,

Thanks for the information.

Ellie, I see that #2100 has everything to be merged, hasn't it? What's 
blocking it?

Regards,
Anatoli

*From:* Ellie Timoney <ellie at fastmail.com>
*Sent:* Tuesday, March 19, 2019 03:29
*To:* Info-cyrus <info-cyrus at lists.andrew.cmu.edu>
*Subject:* Re: cyrus-imapd build dependencies

On Tue, Mar 19, 2019, at 3:39 PM, Anatoli via Info-cyrus wrote:
> > The Cyrus httpd provides DAV services (which use the HTTP 
> protocol).? If you want the Cyrus httpd to support HTTP/2, you will 
> need libnghttp2.? Otherwise it will only support HTTP/1.
>
> Always wanted to ask what the nghttp2 dependency was for. From what 
> you say I infer that it's only needed for HTTP/2. But what DAV service 
> could benefit from this? Are there DAV clients that know HTTP/2?
>

No idea, but it's there if you want it! ?Speculating wildly, it might be 
useful for JMAP?

> And speaking about the SNMP agent, are there any plans to complete the 
> transfer of its code from the master process to an independent daemon, 
> issue #1765 <https://github.com/cyrusimap/cyrus-imapd/issues/1765>? 
> (It needs to be moved out to implement efficient chroot)

It's more likely to disappear entirely (see 
https://github.com/cyrusimap/cyrus-imapd/pull/2100) in favour of 
Prometheus (which is more powerful, more flexible, more human-readable, 
and is actually used by Fastmail -- and therefore more tested). ?But it 
won't disappear from a stable branch, so it won't be a surprise when it 
does.

Cheers,

ellie

----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190319/a6929cca/attachment.html>

From falon at ruparpiemonte.it  Wed Mar 20 08:28:20 2019
From: falon at ruparpiemonte.it (Marco)
Date: Wed, 20 Mar 2019 13:28:20 +0100
Subject: ACL management
Message-ID: <d8cde6de-7091-774f-dd99-15ad9f77d788@ruparpiemonte.it>

Hello,

  uhm, just a trivial question about ACL management. When I delete or 
rename a mailbox, does Cyrus IMAP provide a process to find out all 
orphan permissions and delete them on all other mailboxes rights?

Maybe something like "expire" could be useful, or a process that delete 
all permissions when a mailbox with elsewhere rights has been deleted or 
renamed.

For instance:

# lam user/sharedmailbox at example.com
user1.example.com lrswipkxtecda
user2 at example.com lrswipkxtecda

Well, I delete user1 at example.com. How can I remove the user1 at example.com 
from user/sharedmailbox at example.com rights?

Thank you
Marco

From pgoetz at mail.utexas.edu  Wed Mar 20 08:39:44 2019
From: pgoetz at mail.utexas.edu (Patrick Goetz)
Date: Wed, 20 Mar 2019 07:39:44 -0500
Subject: segfaults with cyrus-imapd 3.0.9 on latest arch linux
In-Reply-To: <57f4ab86-ece1-b6ba-0120-80e175a2999c@mailbox.org>
References: <9cee911b-baf4-6faa-4dac-dd97e0eaa550@mailbox.org>
 <ufak1gu66rw.fsf@epithumia.math.uh.edu>
 <e3783ede-7fbb-5d32-70bb-e76928beb50e@mailbox.org>
 <16f63075-b579-f910-4d11-b08644793fea@mail.utexas.edu>
 <57f4ab86-ece1-b6ba-0120-80e175a2999c@mailbox.org>
Message-ID: <f5f8771e-8a72-9abd-4e79-066478e0d6d8@mail.utexas.edu>

Hi -

I can confirm this segmentation fault on my own Arch VM with cyrus 
installed from the AUR package.

As an experiment, I tried building the package with

    --disable-pcre

but then I can't even get the program to compile:

----------------------------
In file included from lib/glob.c:50:
lib/glob.h:57:5: error: unknown type name ?regex_t?
      regex_t regex;
      ^~~~~~~
lib/glob.c: In function ?glob_init?:
lib/glob.c:112:5: warning: implicit declaration of function ?regcomp?; 
did you mean ?memcmp?? [-Wimplicit-function-declaration]
      regcomp(&g->regex, buf_cstring(&buf), REG_EXTENDED);
      ^~~~~~~
      memcmp
lib/glob.c:112:43: error: ?REG_EXTENDED? undeclared (first use in this 
function)
      regcomp(&g->regex, buf_cstring(&buf), REG_EXTENDED);
                                         ^~~~~~~~~~~~
----------------------------

It would appear that --disable-pcre is a configuration option you can't 
actually use.


On 3/19/19 5:37 PM, Andreas Piesk wrote:
> Am 19.03.19 um 22:00 schrieb Patrick Goetz:
>>
>> Have you tried the 3.0.9 AUR package?
>>
>> ?? https://aur.archlinux.org/packages/cyrus-imapd
>>
>> Once you get the dependencies down, this one compiles and runs.
>>
> 
> I noticed the package, it's good to see a recent version in AUR but it 
> has too many dependecies for my taste, I need a stripped down version.
> 
> Unfortunately the AUR package doesn't work for me either, i build it in 
> a VM with a fresh installed arch and it has the same problem:
> 
> Starting program: /usr/bin/cyrdump user/test
> [Thread debugging using libthread_db enabled]
> Using host libthread_db library "/usr/lib/libthread_db.so.1".
> 
> Program received signal SIGSEGV, Segmentation fault.
> 0x00007ffff7c76205 in re_compile_internal () from /usr/lib/libc.so.6
> (gdb) bt
> #0? 0x00007ffff7c76205 in re_compile_internal () from /usr/lib/libc.so.6
> #1? 0x00007ffff7c77511 in regcomp () from /usr/lib/libc.so.6
> #2? 0x00007ffff7e3d980 in glob_init () from /usr/lib/libcyrus.so.0
> #3? 0x00007ffff7f38276 in ?? () from /usr/lib/libcyrus_imap.so.0
> #4? 0x00007ffff7f3e5b7 in mboxlist_findallmulti () from 
> /usr/lib/libcyrus_imap.so.0
> #5? 0x00005555555561aa in ?? ()
> #6? 0x00007ffff7bbb223 in __libc_start_main () from /usr/lib/libc.so.6
> #7? 0x00005555555561ee in ?? ()
> 
> 
> Best Regards,
> -ap
> 
> 
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> 

From pgoetz at mail.utexas.edu  Wed Mar 20 12:11:01 2019
From: pgoetz at mail.utexas.edu (Patrick Goetz)
Date: Wed, 20 Mar 2019 11:11:01 -0500
Subject: segfaults with cyrus-imapd 3.0.9 on latest arch linux
In-Reply-To: <57f4ab86-ece1-b6ba-0120-80e175a2999c@mailbox.org>
References: <9cee911b-baf4-6faa-4dac-dd97e0eaa550@mailbox.org>
 <ufak1gu66rw.fsf@epithumia.math.uh.edu>
 <e3783ede-7fbb-5d32-70bb-e76928beb50e@mailbox.org>
 <16f63075-b579-f910-4d11-b08644793fea@mail.utexas.edu>
 <57f4ab86-ece1-b6ba-0120-80e175a2999c@mailbox.org>
Message-ID: <7268abd5-40cf-654e-fd79-cb15e74948c1@mail.utexas.edu>

Hi Andreas -

Jakob has already updated the AUR package, which appears to have 
resolved this issue.  The related upstream bug is #2629.

Regarding the dependencies in the cyrus-imapd PKGBUILD.  I recommend 
starting with Jakob's PKGBUILD and just stripping out the stuff you 
don't need.  I've spent so much time looking at it at this point, if you 
tell me what you don't want, I can probably post a PKGBUILD that works 
for your requirements.

In any case, please try cyrus-imapd 3.0.9-2 and let me know if this 
resolves the issue for you, too.

Here is an explanation (provided by the AUR package maintainer) of the 
purpose of the various dependencies he's included (also the ones listed 
as requirements which he did not include).  We had pre-agreed that there 
is no harm in compiling in all the authentication hooks and 
CalDAV/CalCard dependencies.  Without the authentication hooks, the 
package isn't really general purpose.

- gperf seems to be useful for development only (maintainer mode)
- libbsd is only required for krb5afspts which is disabled (because IIRC 
it looks for static libraries which Arch doesn?t package)
- ICU: This seems to be genuinely missing, though as you noticed it is 
already required indirectly. It is probably still a good idea to make 
that dependency explicit. But since it?s a relatively minor problem I?ll 
wait to see if anything else comes up in our conversation so I can 
?bundle? the changes.
- clamav is in fact already in optdepends, however in order to build 
against it it needs to be in makedepends as well
- xapian-core provides efficient indexed search, which I?d argue is 
quite a useful feature to have in a mail server. It is linked into 
libcyrus_imap.so though, which is in turn linked into imapd (unlike 
clamav), therefore it is a hard dependency.
- libcap allows Cyrus?s services to restrict their own capabilities(7) 
for enhanced security
- libnghttp2 and brotli add support for HTTP/2 and Brotli compression of 
HTTP responses, respectively; which is relevant to CalDAV, CardDAV and 
other HTTP services (including JMAP in future versions)
- shapelib allows Cyrus?s Time Zone Distribution Service[2] to associate 
time zones with geographical locations
- python-sphinx, perl-pod-pom-view-restructured: required for generation 
of some manpages (which are included in the regular package, not the 
-docs one. I?d argue that manpages are actually useful to have around). 
These are only needed at buildtime and need not be present on the actual 
server system.



On 3/19/19 5:37 PM, Andreas Piesk wrote:
> Am 19.03.19 um 22:00 schrieb Patrick Goetz:
>>
>> Have you tried the 3.0.9 AUR package?
>>
>> ?? https://aur.archlinux.org/packages/cyrus-imapd
>>
>> Once you get the dependencies down, this one compiles and runs.
>>
> 
> I noticed the package, it's good to see a recent version in AUR but it 
> has too many dependecies for my taste, I need a stripped down version.
> 
> Unfortunately the AUR package doesn't work for me either, i build it in 
> a VM with a fresh installed arch and it has the same problem:
> 
> Starting program: /usr/bin/cyrdump user/test
> [Thread debugging using libthread_db enabled]
> Using host libthread_db library "/usr/lib/libthread_db.so.1".
> 
> Program received signal SIGSEGV, Segmentation fault.
> 0x00007ffff7c76205 in re_compile_internal () from /usr/lib/libc.so.6
> (gdb) bt
> #0? 0x00007ffff7c76205 in re_compile_internal () from /usr/lib/libc.so.6
> #1? 0x00007ffff7c77511 in regcomp () from /usr/lib/libc.so.6
> #2? 0x00007ffff7e3d980 in glob_init () from /usr/lib/libcyrus.so.0
> #3? 0x00007ffff7f38276 in ?? () from /usr/lib/libcyrus_imap.so.0
> #4? 0x00007ffff7f3e5b7 in mboxlist_findallmulti () from 
> /usr/lib/libcyrus_imap.so.0
> #5? 0x00005555555561aa in ?? ()
> #6? 0x00007ffff7bbb223 in __libc_start_main () from /usr/lib/libc.so.6
> #7? 0x00005555555561ee in ?? ()
> 
> 
> Best Regards,
> -ap
> 
> 
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> 

From a.piesk at mailbox.org  Wed Mar 20 14:33:30 2019
From: a.piesk at mailbox.org (Andreas Piesk)
Date: Wed, 20 Mar 2019 19:33:30 +0100
Subject: segfaults with cyrus-imapd 3.0.9 on latest arch linux
In-Reply-To: <f5f8771e-8a72-9abd-4e79-066478e0d6d8@mail.utexas.edu>
References: <9cee911b-baf4-6faa-4dac-dd97e0eaa550@mailbox.org>
 <ufak1gu66rw.fsf@epithumia.math.uh.edu>
 <e3783ede-7fbb-5d32-70bb-e76928beb50e@mailbox.org>
 <16f63075-b579-f910-4d11-b08644793fea@mail.utexas.edu>
 <57f4ab86-ece1-b6ba-0120-80e175a2999c@mailbox.org>
 <f5f8771e-8a72-9abd-4e79-066478e0d6d8@mail.utexas.edu>
Message-ID: <89d2f9df-b74e-9030-ecbd-ba18ceb16313@mailbox.org>

Am 20.03.19 um 13:39 schrieb Patrick Goetz:
> 
> It would appear that --disable-pcre is a configuration option you can't actually use.
> 

yes, it seems so. the defines in the header:

#ifdef ENABLE_REGEX
# ifdef HAVE_PCREPOSIX_H
#  include <pcre.h>
#  include <pcreposix.h>
# else /* !HAVE_PCREPOSIX_H */
#  ifdef HAVE_RXPOSIX_H
#   include <rxposix.h>
#  else /* !HAVE_RXPOSIX_H */
#   include <regex.h>
#  endif /* HAVE_RXPOSIX_H */
# endif /* HAVE_PCREPOSIX_H */
#endif /* ENABLE_REGEX */

configure.ac:

if test "$enable_pcre" != "no"; then
         AC_CHECK_HEADER(pcreposix.h)
         if test "$ac_cv_header_pcreposix_h" = "yes"; then
             AC_MSG_CHECKING(for utf8 enabled pcre)
             AC_CACHE_VAL(cyrus_cv_pcre_utf8, AC_TRY_CPP([#include <pcreposix.h>
#ifndef REG_UTF8
#include </nonexistent>
#endif],cyrus_cv_pcre_utf8=yes,cyrus_cv_pcre_utf8=no))
             AC_MSG_RESULT($cyrus_cv_pcre_utf8)
         else
             cyrus_cv_pcre_utf8="no"
         fi

         if test "$cyrus_cv_pcre_utf8" = "yes"; then
                 LIBS="$LIBS -lpcre -lpcreposix";
                 AC_DEFINE(ENABLE_REGEX, [], [Do we have a regex library?])
                 AC_DEFINE(HAVE_PCREPOSIX_H, [], [Do we have usable pcre library?])
         else
                 AC_CHECK_HEADERS(rxposix.h)
                 if test "$ac_cv_header_rxposix_h" = "yes"; then
                         LIBS="$LIBS -lrx"
                         AC_DEFINE(ENABLE_REGEX, [],
                                   [Do we have a regex library?])
                 else
                         AC_SEARCH_LIBS(regcomp, regex,
                                         AC_DEFINE(ENABLE_REGEX, [],
                                         [Do we have a regex library?]), [])
                 fi
         fi
fi

the whole block depends on "$enable_pcre", so if I disable pcre, i disable regexp conpletely. I think, it should look like this:

if test "$enable_pcre" != "no"; then
         AC_CHECK_HEADER(pcreposix.h)
         if test "$ac_cv_header_pcreposix_h" = "yes"; then
             AC_MSG_CHECKING(for utf8 enabled pcre)
             AC_CACHE_VAL(cyrus_cv_pcre_utf8, AC_TRY_CPP([#include <pcreposix.h>
#ifndef REG_UTF8
#include </nonexistent>
#endif],cyrus_cv_pcre_utf8=yes,cyrus_cv_pcre_utf8=no))
             AC_MSG_RESULT($cyrus_cv_pcre_utf8)
         else
             cyrus_cv_pcre_utf8="no"
         fi

         if test "$cyrus_cv_pcre_utf8" = "yes"; then
                 LIBS="$LIBS -lpcre -lpcreposix";
                 AC_DEFINE(ENABLE_REGEX, [], [Do we have a regex library?])
                 AC_DEFINE(HAVE_PCREPOSIX_H, [], [Do we have usable pcre library?])
         fi
else
         cyrus_cv_pcre_utf8="no"
         AC_CHECK_HEADERS(rxposix.h)
         if test "$ac_cv_header_rxposix_h" = "yes"; then
                 LIBS="$LIBS -lrx"
                 AC_DEFINE(ENABLE_REGEX, [], [Do we have a regex library?])
         else
                 AC_SEARCH_LIBS(regcomp, regex, AC_DEFINE(ENABLE_REGEX, [], [Do we have a regex libra
ry?]), [])
         fi
fi

if you don't disable pcre, you must have pcre available, otherwise no regexp because there's no fallback.
if you disable pcre, it checks for rposix.h and fallsback to anything providing regcomp. if nothing is found, no regexp support.

As diff:

--- configure.ac.org	2019-03-15 01:31:20.000000000 +0100
+++ configure.ac	2019-03-20 19:19:05.077550582 +0100
@@ -674,18 +674,16 @@ if test "$enable_pcre" != "no"; then
                  LIBS="$LIBS -lpcre -lpcreposix";
                  AC_DEFINE(ENABLE_REGEX, [], [Do we have a regex library?])
                  AC_DEFINE(HAVE_PCREPOSIX_H, [], [Do we have usable pcre library?])
-        else
-                AC_CHECK_HEADERS(rxposix.h)
-                if test "$ac_cv_header_rxposix_h" = "yes"; then
-                        LIBS="$LIBS -lrx"
-                        AC_DEFINE(ENABLE_REGEX, [],
-                                  [Do we have a regex library?])
-                else
-                        AC_SEARCH_LIBS(regcomp, regex,
-                                        AC_DEFINE(ENABLE_REGEX, [],
-                                        [Do we have a regex library?]), [])
-                fi
          fi
+else
+	cyrus_cv_pcre_utf8="no"
+	AC_CHECK_HEADERS(rxposix.h)
+	if test "$ac_cv_header_rxposix_h" = "yes"; then
+		LIBS="$LIBS -lrx"
+		AC_DEFINE(ENABLE_REGEX, [], [Do we have a regex library?])
+	else
+		AC_SEARCH_LIBS(regcomp, regex, AC_DEFINE(ENABLE_REGEX, [], [Do we have a regex library?]), [])
+	fi
  fi
  
  dnl look for an option to disable sign-comparison warnings (needed for

with this change:

./configure --disable-pcre

$ egrep 'REGEX|PCRE' config.h
#define ENABLE_REGEX /**/
/* #undef HAVE_PCREPOSIX_H */

./configure --disable-pcre

$ egrep 'REGEX|PCRE' config.h
#define ENABLE_REGEX /**/
#define HAVE_PCREPOSIX_H /**/


seems to work, but as I said, I'm not a software guy and i don't know autotools, there's probably a better solution.

Regards,
-ap

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2912 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190320/50554605/attachment.p7s>

From a.piesk at mailbox.org  Wed Mar 20 14:47:20 2019
From: a.piesk at mailbox.org (Andreas Piesk)
Date: Wed, 20 Mar 2019 19:47:20 +0100
Subject: segfaults with cyrus-imapd 3.0.9 on latest arch linux
In-Reply-To: <7268abd5-40cf-654e-fd79-cb15e74948c1@mail.utexas.edu>
References: <9cee911b-baf4-6faa-4dac-dd97e0eaa550@mailbox.org>
 <ufak1gu66rw.fsf@epithumia.math.uh.edu>
 <e3783ede-7fbb-5d32-70bb-e76928beb50e@mailbox.org>
 <16f63075-b579-f910-4d11-b08644793fea@mail.utexas.edu>
 <57f4ab86-ece1-b6ba-0120-80e175a2999c@mailbox.org>
 <7268abd5-40cf-654e-fd79-cb15e74948c1@mail.utexas.edu>
Message-ID: <9a28db6c-d517-3fa7-fb6f-0e85c87995de@mailbox.org>

Am 20.03.19 um 17:11 schrieb Patrick Goetz:
> 
> Jakob has already updated the AUR package, which appears to have resolved this issue.? The related upstream bug is #2629.
> 

After looking at the new PKGBUILD I knew it works because it's identical to my solution ;-)

I appreciate your detailed explanation about the packaging but please let's stop here and not hijack this mailing list for arch linux or AUR topics, maybe we read again at https://aur.archlinux.org/packages/cyrus-imapd/

Best Regards,
-ap

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2912 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190320/df20c12c/attachment-0001.p7s>

From pgoetz at mail.utexas.edu  Wed Mar 20 15:09:12 2019
From: pgoetz at mail.utexas.edu (Patrick Goetz)
Date: Wed, 20 Mar 2019 14:09:12 -0500
Subject: cyrus-imapd build dependencies
In-Reply-To: <dd375090-0753-4e0e-8e7c-9007177d243b@www.fastmail.com>
References: <0841d9a2-37f9-10f6-b7ce-9457f7d39fc6@mail.utexas.edu>
 <dd375090-0753-4e0e-8e7c-9007177d243b@www.fastmail.com>
Message-ID: <75e9c76f-7510-c4f4-5eb2-11126560b3da@mail.utexas.edu>

Thanks, Ellie -- that was helpful.  A couple of follow up comments, though.

On 3/18/19 7:55 PM, ellie timoney wrote:
> This page is in the developer section, so its context is for people who are Cyrus developers (especially for new contributors needing to get rolling quickly).

Unfortunately not just developers needs access to this information.  On 
Arch linux, any package not included in the official repo lands in the 
AUR, which requires that packages be built and compiled from source. 
(And since Arch already has dovecot in the official repos, it's unlikely 
that Cyrus would be added.)  I could be mistaken, but it appears the 
mainstream distros are mostly stuck with very old versions of Cyrus. 
I'm an Arch user, but would argue that the Arch AUR package is a great 
canonical reference distribution, since Arch adheres as closely to 
upstream as possible, and the PKGBUILDs are required to be 100% 
deterministic.  With minimal effort, someone who knows something about 
building/compiling linux programs can look at the PKGBUILD and know 
exactly what to do to create a functional cyrus installation.


>  Expect a certain amount of detail to be glossed over on the assumption that it's already known and/or reasonably documented elsewhere.

"already known" is a less than optimal method, and I've had trouble 
finding alternative documentation on a number of points.


> 
> These are literally just "alternate database formats" -- maybe you already have extensive expertise in some other database and would rather use that than one of the builtin ones.  It has nothing to do with virtual domains.  Documentation about the databases used by Cyrus are here: https://www.cyrusimap.org/imap/concepts/deployment/databases.html

I read through the databases page and didn't see anything I don't 
already know (although it sure would have been nice to have this page 
available when I first started using cyrus!).  When I run

     ./configure --help

I see this:

   --with-mysql-libdir=DIR  MySQL lib files are in DIR
   --with-mysql-incdir=DIR  MySQL include files are in DIR
   --with-mysql=DIR         use MySQL (in DIR) [no]


The AUR PKGBUILD (instructions for how to automatically build the 
executable + auxiliary files) includes --with-msyql and depends on 
mariadb-libs.  I'm guessing that the configuration utility looks in the 
standard places for mysql header and include files if --with-mysql is 
passed to configure (/usr/include/mysql and and /usr/lib) and you only 
need to specify the other 2 if your mysql libs are installed in a 
standard location.  It would be nice if this were explicitly documented 
somewhere, though.


> The canonical source of information on configure options is the output from './configure --help'.  It's kind of assumed that a developer will look there to find this information.
>

Yes, but that information is pretty sparse, as per the example above. 
Most of the options are self-explanatory, but, for example, as an 
experiment I tried adding the option

  --disable-pcre

which resulted in the compile failing (so I guess you can't actually 
disable pcre?).


>> Simple Network Management Protocol (SNMP) is a widely used
>> protocol for monitoring the health and welfare of network equipment
>>   (eg. routers), computer equipment and even devices like UPSs.
>> Net-SNMP is a suite of applications used to implement SNMP v1,
>> SNMP v2c and SNMP v3 using both IPv4 and IPv6.


Right.  So I know about the SNMP protocol, but have no idea how or why 
cyrus would be using this.




From pgoetz at mail.utexas.edu  Thu Mar 21 09:59:19 2019
From: pgoetz at mail.utexas.edu (Patrick Goetz)
Date: Thu, 21 Mar 2019 08:59:19 -0500
Subject: cyrus_sasl 2.1.26 to 2.1.27 upgrade changed PAM behavior?
Message-ID: <7b354aa0-e855-ddfd-b439-11138103e068@mail.utexas.edu>

This is more of a curiosity question than a problem, as I finally 
figured out why authentication stopped working on my cyrus-imapd 2.5.12 
server.

I use sasl in PAM mode: /usr/sbin/saslauthd -a pam

A recent Arch linux system upgrade broke authentication on my email 
server.  The only related change was cyrus_sasl was updated from 2.1.26 
to 2.1.27.  After eliminating virtually every other possibility   I 
finally tracked this down to the PAM configuration file for cyrus-imapd. 
  The previous file (perhaps incorrectly) was simply this:

   auth  sufficient  pam_unix.so
   auth  required  pam_deny.so


I changed this to


   auth  sufficient  pam_unix.so
   auth  required  pam_deny.so
   account  required  pam_unix.so


which fixed the problem.  I can understand the account entry being 
necessary for sasl authentication, but what I can't understand is why it 
was not necessary for 2.1.26, but subsequently necessary for 2.1.27 -- 
what changed that led to this?



From byrnejb at harte-lyne.ca  Mon Mar 25 10:01:25 2019
From: byrnejb at harte-lyne.ca (James B. Byrne)
Date: Mon, 25 Mar 2019 10:01:25 -0400
Subject: ipurge seg fault and core dump
Message-ID: <8102d7988b0a3d661d0bb994dfffe31a.squirrel@webmail.harte-lyne.ca>

Cyrus Imapd 3.0.8 on FreeBSD-12.0p3

We are obtaining these error messages on a regular basis:


Mar 25 04:20:00 inet17 kernel: pid 39793 (ipurge), uid 60: exited on
signal 11 (core dumped)

Mar 25 04:20:00 inet17 CYRUS/master[56223]: process type:EVENT
name:postmaster path:/usr/local/cyrus/sbin/ipurge age:0.092s pid:39793
signaled to death by signal 11 (Segmentation fault, core dumped)

Mar 25 04:20:01 inet17 kernel: pid 39724 (ipurge), uid 60: exited on
signal 11 (core dumped)

Mar 25 04:20:01 inet17 CYRUS/master[56223]: process type:EVENT
name:sysadmin path:/usr/local/cyrus/sbin/ipurge age:1.091s pid:39724
signaled to death by signal 11 (Segmentation fault, core dumped)

Mar 25 04:20:02 inet17 kernel: pid 39619 (ipurge), uid 60: exited on
signal 11 (core dumped)

Mar 25 04:20:02 inet17 CYRUS/master[56223]: process type:EVENT
name:sysadminroot path:/usr/local/cyrus/sbin/ipurge age:2.135s
pid:39619 signaled to death by signal 11 (Segmentation fault, core
dumped)

Does anyone know what would cause this behaviour?


-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3


From lists at localguru.de  Mon Mar 25 14:25:23 2019
From: lists at localguru.de (Marcus Schopen)
Date: Mon, 25 Mar 2019 19:25:23 +0100
Subject: Upgrade cyrus 2.4.17 to 2.4.18 on Ubuntu
Message-ID: <3ddba17031a58aeba4e7b8b4e090565ffe4e1704.camel@localguru.de>

Hi,

I have to upgrade an internal Ubuntu 14.04 LTS with cyrus 2.4.17 to
Ubuntu 16.04 LTS, which comes with cyrus 2.4.18. Is there anything to
consider when upgrading from cyrus 2.4.17 to 2.4.18 (beside good
backup)? Cyrus runs as replica (master/slave). Probably it makes sense
to shut down the slave during the master upgrade and vice versa?
Downtimes are no problem.

Is there actually a way to check whether master and slave are on the
same state?

And are there any cyrus 3.x packages available for Ubuntu 16.04 or
18.04 LTS. Even Ubuntu 18.04 LTS comes with an old 2.5 cyrus version?

Cioa
Marcus



From pgoetz at mail.utexas.edu  Mon Mar 25 15:43:32 2019
From: pgoetz at mail.utexas.edu (Patrick Goetz)
Date: Mon, 25 Mar 2019 14:43:32 -0500
Subject: Upgrade cyrus 2.4.17 to 2.4.18 on Ubuntu
In-Reply-To: <3ddba17031a58aeba4e7b8b4e090565ffe4e1704.camel@localguru.de>
References: <3ddba17031a58aeba4e7b8b4e090565ffe4e1704.camel@localguru.de>
Message-ID: <5635bdc1-19eb-a8eb-5d16-e9677a51f52a@mail.utexas.edu>

I believe the version number change (incremental change to stable 
release) indicates you shouldn't have any problems, but of course shut 
down the service while it's being updated.

Re: Cyrus 3.x packages for Ubuntu:

I thought Debian was the one distro the cyrus crew provided up-to-date 
packages for?  See for example here:

   https://packages.debian.org/sid/amd64/cyrus-imapd/download

Grab the Debian source package and build it on your system for maximum 
compatibility (although the binary packages should be fine.   On Ubuntu, 
just download the debs and install by hand:

   # dpkg -i cyrus-imapd_3.0.8-4_amd64.deb


On 3/25/19 1:25 PM, Marcus Schopen wrote:
> Hi,
> 
> I have to upgrade an internal Ubuntu 14.04 LTS with cyrus 2.4.17 to
> Ubuntu 16.04 LTS, which comes with cyrus 2.4.18. Is there anything to
> consider when upgrading from cyrus 2.4.17 to 2.4.18 (beside good
> backup)? Cyrus runs as replica (master/slave). Probably it makes sense
> to shut down the slave during the master upgrade and vice versa?
> Downtimes are no problem.
> 
> Is there actually a way to check whether master and slave are on the
> same state?
> 
> And are there any cyrus 3.x packages available for Ubuntu 16.04 or
> 18.04 LTS. Even Ubuntu 18.04 LTS comes with an old 2.5 cyrus version?
> 
> Cioa
> Marcus
> 
> 
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> 

From ellie at fastmail.com  Mon Mar 25 21:08:25 2019
From: ellie at fastmail.com (ellie timoney)
Date: Mon, 25 Mar 2019 21:08:25 -0400
Subject: Upgrade cyrus 2.4.17 to 2.4.18 on Ubuntu
In-Reply-To: <5635bdc1-19eb-a8eb-5d16-e9677a51f52a@mail.utexas.edu>
References: <3ddba17031a58aeba4e7b8b4e090565ffe4e1704.camel@localguru.de>
 <5635bdc1-19eb-a8eb-5d16-e9677a51f52a@mail.utexas.edu>
Message-ID: <28ba11d5-72e9-4d96-9d8d-bfb09a3b73b4@www.fastmail.com>

On Tue, Mar 26, 2019, at 6:50 AM, Patrick Goetz wrote:
> I believe the version number change (incremental change to stable 
> release) indicates you shouldn't have any problems, but of course shut 
> down the service while it's being updated.

Yep, no major changes within a single x.y series.  Of course, read the release notes (they're on the website), they will tell you anything special you need to be aware of.

> I thought Debian was the one distro the cyrus crew provided up-to-date 
> packages for?  See for example here:

We don't directly provide any distro packages, but the maintainers of the cyrus packages for Debian and Fedora are doing a great job.  We don't hear directly from other distros much, but I guess that's because most other distros leverage Debian and/or Fedora's work?

Most of us cyrus developers are running Debian on our own systems, and FastMail's servers run Debian, so even without an official package, a source build on Debian will generally just work (but then you have to choose/configure features/dependencies yourself, of course...).

Cheers,

ellie