Re: Ploblem with creating user withount domain part (cyrus-sasl2-2.1.19)

2004-11-13 Thread Sascha Wuestemann
On Sat, Nov 13, 2004 at 12:51:58PM +0400 or thereabouts, Sergey wrote:
 Hello.
 
 Can I create sasl user without domain ? I attemt to run 
 cyradm --user cyrus localhost
 but password isn't accepted:
 # cyradm --user cyrus localhost
 Password:
 Segmentation fault
 #
 (another question: Is Segmentation fault normal for bad password ? 
 cyrus-imapd-2.2.8 )

Hi Sergey,

no, I am shure, it is not. I have never had segmentation faults.

 
 I was attempt to create user by 
 
 saslpasswd2 -c -u  cyrus
 saslpasswd2 -c -u '' cyrus
 saslpasswd2 -c cyrus
 
 In all cases sasl create login [EMAIL PROTECTED] I can set [EMAIL PROTECTED]
 as cyrus administrator, but I think what it not good.

As far as I have understand the docs, saslpasswd2 _always_ takes the
domain name of the local machine if you don't set it at the command
line when initialising the password. That is a pitfall, if you change
it after having implememted your mailusers. That is because password 
is correct, but login doesn't match anymore.

Think it over, Sergey, how should sasl destinguish between
[EMAIL PROTECTED] and [EMAIL PROTECTED] if you have user.name,
too? Does it belong to domain.one, domain.two, all or none?

cu
Sascha
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: POP3 re-downloading mail

2004-11-08 Thread Sascha Wuestemann
On Sun, Nov 07, 2004 at 11:53:52PM -0500 or thereabouts, Warrick FitzGerald 
wrote:
 They are using POP3 and have outlook set to leave messages on the 
 server. Is it possible that Outlook got confused with the mail server 
 change and now somehow can not figure out that it's downloaded emial 
 that's have already been downloaded?

Hi Warrick,

seen information is saved at server side for imap and pop3, too.
If you have moved the server sided pop3 mailboxes using a mailclient
tool, this information might have changed, so they have the status not
seen and outlook behaves right. If you have moved them at filesystem
level their status should not have changed and outlook misbehaves.

cu
Sascha


---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: POP3 re-downloading mail

2004-11-08 Thread Sascha Wuestemann
On Mon, Nov 08, 2004 at 12:44:08PM -0500 or thereabouts, Warrick FitzGerald 
wrote:
 seen information is saved at server side for imap and pop3, too.
 If you have moved the server sided pop3 mailboxes using a mailclient
 tool, this information might have changed, so they have the status not
 seen and outlook behaves right. If you have moved them at filesystem
 level their status should not have changed and outlook misbehaves.
 
 
 Thanks for the response, but that doesn't make sense (to my feeble mind 
 anyway ;-) ).
 
 Let's say you have two POP3 clients one set to leave mail on the server 
 for a week and one set to leave mail on the server for a day.
 
 If the one that's leaving thing on the server for a week pick's up mail, 
 the other is not effected in any way .. and you're messages are not 
 marked as seen in any way. Are you sure POP3 has seen state on the server?

Hi again,

I am no expert and I do not know the correspondig rfcs without looking
them up, but that is what my experience is.

This is what I can remember:
If I (somehow) have downloaded from the pop3 server but not flushed
emails, they stay at the server which I have prooven by telneting to it
and asked the server myself. I had to tell fetchmail the fetchall
keyword which is Fetch all messages wether seen or not to get them,
too, and not only new, unseen mails.
...I don't know how outlook behaves at such, but this shows pop3 _has_ a
seen state.

cu
Sascha

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: suppress cyrus version information possible?

2004-10-30 Thread Sascha Wuestemann
On Fri, Oct 29, 2004 at 11:36:14PM -0500 or thereabouts, Jim Levie wrote:
 cracker simply runs a tool kit that attempts to exploit all known
 vulnerabilities for that OS. If one works, they are in, and if not they
 move on to another system. The tools themselves seldom check version
 information since it may be hidden, or in the case of some Linux systems
 not reflect the real security state of the package due to back ports of
 fixes from later versions.

Hi Jim and others,

interesting discussion and information about how to see suppressing
cyrus information from the crackers and others sight.

But that was not my question. I don't want to theorize about goods or
bads about this, I simply want to do it, and I am asking _how_ to do it.

Can one supply me with this information?

cu
Sascha

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


suppress cyrus version information possible?

2004-10-29 Thread Sascha Wuestemann
Hi,

when sending email over cyrus imap, it gives full information about
version. So, an attacker has just to telnet at port 25 to see if his
bunch of exploits fits to it.

That is a dangerous and I would like to suppress all version
information, even that it is cyrus answering, if possible.

Can you do that by just configuring it somehow, or does it need a patch?

cu
Sascha

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Global sieve script

2004-10-27 Thread Sascha Wuestemann
On Mon, Oct 25, 2004 at 12:32:26PM -0500 or thereabouts, Adi Linden wrote:
 Is it possible to have a global sieve script, like /etc/procmailrc, which
 is run before any users sieve scripts? If so, where does it live?
 

Hi,

sorry that I can't answer this question I only wanted to mention that I
am very interested in this, too.

One very important example would be this:

placing emails' subject: or to: matching a couple of rules into one shared
folder.

I hope somebody can lighten this darkness :-)

cu
Sascha
-- 
GNU Linux | Opinions are like assholes, everyone's got one, but nobody
2.6.7 | wants to look at the other guy's. -- Hal Hickman  
on a  |  
i586  | 
  | 
  | 
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: reset cyrus mailbox.db

2004-10-17 Thread Sascha Wuestemann
On Sun, Oct 17, 2004 at 03:44:07AM +0200 or thereabouts, Simon Matter wrote:
  Hi,
 
  I want to erase all information for mailboxes to have a fresh start.
 
  I am running cyrus version 2.1.16 at a debian testing server.
 
  I have had copied hundreds of user mailboxes and shared folders partly
  by mistake to the wrong sytstem path and have built the mailboxes.db
  by a script running reconstrut for all folders and all user mailboxes
  which led to a mailbox.db which has information about mailboxes which
  are not used. FYI: I have had a mistake at my rsync script because of
  whitespaces, so subfolders were not sent to the right place but spread
  over to incorrect folders.
 
  When detecting the malplaced folders, I decided to correct my rsync
  script and run it after having erased all folders and user mailboxes.
  Now I have the correct system path structure, that is ok so far.
 
  How do I rebuild the cyrus mailboxes internal information from scratch
  getting cyrus forget about nonexistent mailboxes?
 
  The argument -m is unfortunately not supported at this version of cyrus.
 
  Can I echo  mailboxes.db and run a reconstruct again and everything
  is fine?
 
 I think you have to create a mailbox list with a suitable script. Then you
 can remove the mailboxes.db and import the mailbox list into a new
 mailboxes.db.

Hi Simon and others,

the script is already done and waiting to be run :)

I am just unsure if this single action does the trick and no harm.

What are the other db files at /var/lib/cyrus/db for? Are they affected
by this action?

cu
Sascha

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: adding new user to mysql database with cyradm.

2004-10-17 Thread Sascha Wuestemann
On Sun, Oct 17, 2004 at 01:40:50PM +0800 or thereabouts, sam wrote:
 Hi,
 
 I installed cyrus-imap22 with sasl2 and mysql4 with pam-mysql for 
 storing user login info.
 As all user credential go into mysql database. Is there anyway I can 
 instruct cyradm to write new user ID and password into mysql database 
 when using cyradm tool?

Hi Sam,

IMHO no, but you can use a bash script feeding mysql if you use the -e
command to mysql.

cu
Sascha

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


reset cyrus mailbox.db

2004-10-16 Thread Sascha Wuestemann
Hi,

I want to erase all information for mailboxes to have a fresh start.

I am running cyrus version 2.1.16 at a debian testing server.

I have had copied hundreds of user mailboxes and shared folders partly
by mistake to the wrong sytstem path and have built the mailboxes.db
by a script running reconstrut for all folders and all user mailboxes
which led to a mailbox.db which has information about mailboxes which
are not used. FYI: I have had a mistake at my rsync script because of
whitespaces, so subfolders were not sent to the right place but spread
over to incorrect folders.

When detecting the malplaced folders, I decided to correct my rsync
script and run it after having erased all folders and user mailboxes.
Now I have the correct system path structure, that is ok so far.

How do I rebuild the cyrus mailboxes internal information from scratch
getting cyrus forget about nonexistent mailboxes?

The argument -m is unfortunately not supported at this version of cyrus.

Can I echo  mailboxes.db and run a reconstruct again and everything
is fine?
BTW: Is there a wildcard allowed to rebuild all shared folders (placed
below the user directory) and all user mailboxes so that you don't have
to call reconstruct for each?

cu
Sascha

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: upgrading from UW to Cyrus

2004-10-15 Thread Sascha Wuestemann
On Fri, Oct 15, 2004 at 12:02:42PM -0500 or thereabouts, Stephen Rasmussen wrote:
Hello,
 
I am upgrading from UW IMAP to Cyrus IMAP.  I have compiled and
installed, and I THINK that it was successful.  However, the old imap
server is still running, and I am not quite sure how to go about
replacing it with cyrus as a service since the old one came already
installed on my Redhat box.  Any suggestions?
 

Hi,

if you have only user-mailboxes and if you know login/password, I would
try mailsync which mails from the source to the target.

If you don't, and have root access, rsync to the target and build the
mailboxes with reconstruct.

cu
Sascha

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


mails in shared folder mailboxes don't show up

2004-10-12 Thread Sascha Wuestemann
Hi,

I have problems listing mails at shared folders. Let me describe the way
how I came to it:

I have set up a debian testing email server with cyrus and the testuser
sascha works fine, cyrus is at version 2.1.16 from the debian package
system.

I am to copy all mailboxes and shared folders from an Suse Email Server
3, cyrus at version 2.0.16, to it. The old server has user mailboxes at
/var/spool/imap/user/wuestemann for example and shared folders at e. g.
/var/spool/imap/shared_folder. Indeed there are hundreds of each.

I have sasl2passwd' all users and they can be identified by pam_ldap,
too, e.g id wuestemann works (wuestemann is not at /etc/passwd).

I have dumped the old mailbox.db and pumped it into cyrus 2.1.16 using
ctl_mboxlist.

I have rsynced the mailboxes to the new server to for example
/var/spool/cyrus/mail/s/user/sascha and the shared folders to e.g.
/var/spool/cyrus/mail/s/shared_folder.

I have written a script to collect all shared folder names and all user
mailboxes to pipe them to a file like this:

shared_folder
user.sascha

stopped all mail depending services, sued to cyrus and run

for i in `cat file`; do reconstruct -rf $i; done

and restarted the stopped services.

Now I can use imap capable clients to test user logins concerning the
emails they should have, and I have noticed, that there is one problem 
I have encountered so far.

mailadmin, a pseudo user running sieve scripts, which is at all 
groups and subscribed to none, can see all folders at the new server
like he does at the old because of being member of all groups and all
folders, shared folder and user mailboxes have this user with admin
ACLs.
But, if descending to subdirectories of shared folders at the new 
server, there are no mails listed, the folders seem empty, but they
aren't. This is not the case for mailadmin at his inbox nor at user
mailboxes and their subfolders, mails do show up there, for example at
user/wuestemann.
I can not find errors referring to this at mail nor syslog - everthing 
seems normal.

What have I missed? Why isn't mailadmin capable to see mails at shared
folders? What to do to get this done?

cu
Sascha

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html