Nick Fisher | 1 Nov 2002 01:01

timsieved isn't listing any auth methods

Hi People,
  I can't get timsieve to list it's one auth method... PLAIN and thus
can't get sieveshell to work. This is the second set of posts I've made so
if this seems a little familiar that's because it is ;)
I've been working on and off on this bug for about two months now :(

The problem is that timsieved isn't listing it's auth method and I don't
know why. I'm using PLAIN as my auth method becuase I'm using pam_mysql to
authenticate against a MySQL DB. I know that Plain is insecure but I have
a firewall. I have tryed a number of things mostly revolving around the
sasl2 plugins and none have helped in the least. I am intrested in ANY
wild ideas that anyone might have about what to try next but please read
the stuff below detailing what I have already tryed.

I would also be most intrested to know if anyone managed to get PLAIN auth
against PAM to work with timsieve...
Or if anyone has timsieve working with *just* the PLAIN auth method.

The one idea I still have is that timsieve isn't reading it's config data
from /etc/imapd.conf. I have no clue as to how to check if this is a
problem.... any ideas most welcome.

Many thanks.....

  Nick

>>>>>>> Things I have already tryed <<<<<<<<<<<<

libs in the workng place or libs with the wrong permissions.
I was advised to use strace on timsieved and see if there were any file
(Continue reading)

Joe Finkle | 1 Nov 2002 03:31
Picon
Favicon

RE: Massive Problems (lmtp, db corruption) - Ahh!

Hey All,
I wanted to let you know that the problem has been resolved. Following 
Robert's advice i exported the contents of the mailboxes.db file by running: 
ctl_mboxlist -d > filename , then I removed /var/imap/mailboxes.db, 
/var/imap/deliver.db, and /var/imap/deliverdb/* . I then reimported the dump 
file by running ctl_mboxlist -u < filename. Immediately all the queued mail 
started to be delivered and all the rest of the problems dissapeared.

It seems as though a corrupt deliver.db or mailboxes.db file will cause the 
majority of lmtp processes to sleep in an active state (bringing delivery to 
a virtual halt), which also quickly maxes out server resources, eventually 
causing the server to stop allowing users to login/read mail as well.

Anyway, thanks again to everyone for helping. Especially thanks to Robert.

Sincerely,
Lee

>From: Rob Siemborski <rjs3 <at> andrew.cmu.edu>
>To: Su Li <sli <at> rim.net>
>CC: Joe Finkle <scrasher21212121 <at> hotmail.com>,   
><info-cyrus <at> lists.andrew.cmu.edu>
>Subject: RE: Massive Problems (lmtp, db corruption) - Ahh!
>Date: Thu, 31 Oct 2002 11:00:28 -0500 (EST)
>
>On Thu, 31 Oct 2002, Su Li wrote:
>
> > Then use gdb step through and see what service does Services[5] stand 
>for 8-).
> >
(Continue reading)

Liu Jinhui | 1 Nov 2002 06:24
Picon

cyrus-dir-hash?

    When I compile cyrus-2.0.16, I used a patch called cyrus-dir-hash from http://mail.cc.umanitoba.ca/source/
It simply centralizes all directory hashing into one function: dir_hash_c(). By default, 
this function uses the old hashing scheme, based on the first letter of the user name. 
When the compile-time symbol USE_DIR_FULL is defined, it uses the new scheme that hashes 
all letters of the user name to provide an even hash distribution. 
    I wonder how much it will help the performance of cryrus-imap.
    In my situation , almost all users name are beginning with the same letter: 'u'.

        Liu Jinhui
        hui <at> student.dlut.edu.cn
          2002-11-01

Simon Matter | 1 Nov 2002 08:26

Re: timsieved isn't listing any auth methods

Nick Fisher schrieb:
> 
> Hi People,
>   I can't get timsieve to list it's one auth method... PLAIN and thus
> can't get sieveshell to work. This is the second set of posts I've made so
> if this seems a little familiar that's because it is ;)
> I've been working on and off on this bug for about two months now :(
> 
> The problem is that timsieved isn't listing it's auth method and I don't
> know why. I'm using PLAIN as my auth method becuase I'm using pam_mysql to
> authenticate against a MySQL DB. I know that Plain is insecure but I have
> a firewall. I have tryed a number of things mostly revolving around the
> sasl2 plugins and none have helped in the least. I am intrested in ANY
> wild ideas that anyone might have about what to try next but please read
> the stuff below detailing what I have already tryed.
> 
> I would also be most intrested to know if anyone managed to get PLAIN auth
> against PAM to work with timsieve...
> Or if anyone has timsieve working with *just* the PLAIN auth method.

Yes, I do:
[root <at> dhcp-141-104 root]# telnet localhost sieve
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
"IMPLEMENTATION" "Cyrus timsieved v1.1.0-Invoca-RPM-2.1.9-6"
"SASL" "PLAIN"
"SIEVE" "fileinto reject envelope vacation imapflags notify subaddress
relational regex"
"STARTTLS"
(Continue reading)

Ian McDonald | 1 Nov 2002 11:41

Re: emergancy help needed

I hope these questions do not come over as terse or rude. I am genuinely
trying to understand how to get login/sasldb authentication working, and
confused by messages that appear - to me - to be contradictory.

On Wed, Oct 30, 2002 at 04:46:14PM -0500, Rob Siemborski wrote:
> On Wed, 30 Oct 2002, Guy Cohen wrote:
>
> > apperently pwcheck_method: auxprop is not enough
> > to make it work with mysql I had to add:
> > auxprop_plugin: mysql login plain crammd5 digestmd5
>
> Um, you just need:
>
> auxprop_plugin: mysql
>
> The rest aren't auxprop plugins.

Then why are the source files for 'login' in the plugin directory, and why
it 'login' not mentioned as a possible pwcheck_method value in
doc/options.html?

This is not a rhetorical question; I genuinely want to understand (and get
Cyrus working).

----- Original Message -----
From: "Rob Siemborski" <rjs3 <at> andrew.cmu.edu>
To: "Guy Cohen" <rcs <at> rshell.org>
Cc: <cyrus-sasl <at> lists.andrew.cmu.edu>
Sent: Thursday, October 31, 2002 1:58 PM
Subject: Re: emergancy help needed [SOLVED]
(Continue reading)

Erik Enge | 1 Nov 2002 14:22

How do I migrate seen databases to skiplist?

Hi.

I've converted all my databases in Cyrus (2.1.9) to skiplist in hopes of
stopping those annoying DBERROR messages.  In that process I came to
realize that I could not use the seen-files any more because they would
be incompatible with the new format.

Is there any way I can migrate those old files to the new format (I
believe they were Berkley DB - whatever is the default - and now they
are skiplist)?

Thanks in advance,

Erik.

Harris Landgarten | 1 Nov 2002 14:56

RE: How do I migrate seen databases to skiplist?

I used cvt_cyrusdb to convert the .seen files to skiplist. They were in
flat format on my machine. You should have a man page.

Harris

-----Original Message-----
From: owner-info-cyrus <at> lists.andrew.cmu.edu
[mailto:owner-info-cyrus <at> lists.andrew.cmu.edu] On Behalf Of Erik Enge
Sent: Friday, November 01, 2002 8:23 AM
To: info-cyrus <at> lists.andrew.cmu.edu
Subject: How do I migrate seen databases to skiplist?

Hi.

I've converted all my databases in Cyrus (2.1.9) to skiplist in hopes of
stopping those annoying DBERROR messages.  In that process I came to
realize that I could not use the seen-files any more because they would
be incompatible with the new format.

Is there any way I can migrate those old files to the new format (I
believe they were Berkley DB - whatever is the default - and now they
are skiplist)?

Thanks in advance,

Erik.

Rob Siemborski | 1 Nov 2002 15:09
Picon

Re: emergancy help needed

On Fri, 1 Nov 2002, Ian McDonald wrote:

> Then why are the source files for 'login' in the plugin directory, and why
> it 'login' not mentioned as a possible pwcheck_method value in
> doc/options.html?
>
> This is not a rhetorical question; I genuinely want to understand (and get
> Cyrus working).

login.c is the source file for the LOGIN plugin, which is an (extreemly
weak) SASL mechanism, it's not an auxilliary property plugin.

-Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper

Gary Mills | 1 Nov 2002 15:20
Picon
Picon
Favicon

Re: cyrus-dir-hash?

On Fri, Nov 01, 2002 at 01:24:56PM +0800, Liu Jinhui wrote:
>     When I compile cyrus-2.0.16, I used a patch called cyrus-dir-hash from http://mail.cc.umanitoba.ca/source/

This patch is included with recent version of Cyrus.  Only a configure
option is required to activate it.

> It simply centralizes all directory hashing into one function: dir_hash_c(). By default, 
> this function uses the old hashing scheme, based on the first letter of the user name. 
> When the compile-time symbol USE_DIR_FULL is defined, it uses the new scheme that hashes 
> all letters of the user name to provide an even hash distribution. 
>     I wonder how much it will help the performance of cryrus-imap.
>     In my situation , almost all users name are beginning with the same letter: 'u'.

The performance improvement depends on how many users you have, and on
how well your UFS implimentation handles large directories.  With Solaris,
for example, performance is pretty bad with 20,000 entries in one directory.
It's reasonable with only 1000 entries.

--

-- 
-Gary Mills-    -Unix Support-    -U of M Academic Computing and Networking-

Rob Siemborski | 1 Nov 2002 15:23
Picon

Re: How do I migrate seen databases to skiplist?

On 1 Nov 2002, Erik Enge wrote:

> Is there any way I can migrate those old files to the new format (I
> believe they were Berkley DB - whatever is the default - and now they
> are skiplist)?

The cvt_cyrusdb program, in a form like:

(all one line, you'll need to modify for your specific needs)

find /var/imap/user -name \*.seen -exec /usr/cyrus/bin/cvt_cyrusdb \{\}
flat \{\}.new skiplist \; -exec mv \{\}.new \{\} \;

-Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper


Gmane