Hi Mark,

The source I downloaded and compiled with to test just a few hours ago
today was actually from ftp://ftp.cac.washington.edu/mail/imap.tar.Z
(2004.88). 

If it was 2004a that I downloaded, then the issue doesn't appear to be
resolved in this version as upon logout or disconnect the PAM kerberos
ticket is still left in /tmp. 

If you are sure it is resolved in 2004b then I will wait for its
release, or if you can recommend what file(s) I can patch 2004a with I
would appreciate greatly.

Thanks,
Jason




-----Original Message-----
From: Mark Crispin [mailto:[EMAIL PROTECTED] 
Sent: Friday, September 10, 2004 3:10 PM
To: Jason Sauve
Cc: [EMAIL PROTECTED]
Subject: Re: Possible IMAP Bug Causes IMAP with PAM_KRB5 to rapidly
deplete INODEs and DISK space

You can't add a PAM_DELETE_CRED in checkpw(), because it will break your
access to DFS home space (if you have DFS).

The current release version, imap-2004a, adds a logout hook which will
do the PAM_DELETE_CRED at logout or disconnect time and should resolve
the issue.

You can always find the current version on:
        ftp://ftp.cac.washington.edu/mail/imap.tar.Z
There is also an experimental development snapshot of imap-2004b on:
        ftp://ftp.cac.washington.edu/mail/imap-2004b.DEV.tar.Z

By the way, just as an observation: I thought that inode depletion was
not considered to be an issue on Linux.  At least, the advocates of the
one-message/one-file class formats (such as maildir) have claimed that I
am silly for worrying about inode depletion...

Anyway, I've always been concerned about old PAM credential files not
being cleaned up, but the problem with DFS home space was a worse
problem. 
I think that this is all resolved in imap-2004b.

-- Mark --

http://staff.washington.edu/mrc
Science does not emerge from voting, party politics, or public debate.
Si vis pacem, para bellum.

Reply via email to