Re: breakage issues that I haven't figured out how to resolve
On Sun, 2005-07-24 at 23:23 +0200, Simon Matter wrote: # cat /usr/share/cyrus-imapd/rpm/db.cfg CONFIG_DB_DUPLICATE=berkeley CONFIG_DB_MBOX=skiplist CONFIG_DB_SEEN=skiplist CONFIG_DB_SUBS=flat CONFIG_DB_TLS=berkeley CONFIG_DB_ANNOTATION=skiplist CONFIG_DB_SIEVE=2.2.3 Okay, I don't see where a db4 update could be related to you problems. Only duplicate and tls db are db4, and they can easily be removed without too much headache. What does file /var/lib/imap/*.db show you? --- # file /var/lib/imap/*.db /var/lib/imap/annotations.db: data /var/lib/imap/deliver.db: Berkeley DB (Btree, version 9, native byte-order) /var/lib/imap/mailboxes.db: data /var/lib/imap/recover-mailboxes.db: ASCII English text /var/lib/imap/tls_sessions.db: Berkeley DB (Btree, version 9, native byte-order) And, did you try to remove all the logs with something like this (after doing backups first!) rm -rf /var/lib/imap/db/* /var/lib/imap/db.backup? I thought I did You may also want to have a look at this: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160317 It's not directly discussing your problem but may help anyway. That is probably excellent info for recovering a problem and should probably be linked on cyrus-wiki. I sort of thought that my problem may have been closer to this... https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=91933 This is an athlon processor but of course not Fedora Core 2 but Whiteboxlinux 3 (RHEL 3) but my guess is that the compile flags might be the issue. I probably need to see the whiteboxlinux source db4 rpm to see what the spec file looks like. I am very frustrated though at my inability to solve the issues with my inability to have a subscription list and my inability to 'reconstruct - rf user.craig' which properly detects nested sub-folders and adds them to the mailbox list. I don't understand why that is not working. Hm, I don't think you are hit by the NPTL issue. Did you check permissions on /var/lib/imap and /var/spool/imap? Did you check rpm -V cyrus-imapd? And did you try to convert your skiplist dbs to BDB and back? Maybe you have a skiplist corruption somehow. Simon Thanks Craig --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Mail System Error - Returned Mail
This message was undeliverable due to the following reason: Your message could not be delivered because the destination server was not reachable within the allowed queue period. The amount of time a message is queued before it is returned depends on local configura- tion parameters. Most likely there is a network problem that prevented delivery, but it is also possible that the computer is turned off, or does not have a mail system running right now. Your message was not delivered within 1 days: Server 156.47.164.60 is not responding. The following recipients could not receive this message: info-cyrus@lists.andrew.cmu.edu Please reply to [EMAIL PROTECTED] if you feel this message to be in error. This part of message has been infected and was deleted! Dr.Web(R) Daemon report: infected with Win32.HLLM.MyDoom.49 --- Dr.Web(R) Antivirus Service: http://www.drweb.com/ ---
Problem configuring imsp
I downloaded from cvs the latest cyrus-imsp and compile/install it. The daemon start correctly without error, but when I try to login with imtest I receive the following error : www:~ # imtest -v -a vittorio -u vittorio -p 406 www.vitsoft.bz S: * OK Cyrus IMSP version 1.7b ready C: C01 CAPABILITY S: * CAPABILITY AUTH=CRAM-MD5 AUTH=DIGEST-MD5 AUTH=LOGIN AUTH=PLAIN LITERAL+ S: C01 OK capability completed C: A01 AUTHENTICATE CRAM-MD5 S: + PDE3NjkzMDg1ODkuMTQ5ODM3MDJAd3d3Pg== Please enter your password: C: dml0dG9yaW8gMWQ4YzkzODg3NzdhNDRkYjM3NjZjYTM2MzI1NjlmZTc= S: A01 NO user not found Authentication failed. generic failure Security strength factor: 0 in /var/log/messages : Jul 25 10:24:45 www imsp[17358]: imspd: start Jul 25 10:24:56 www imsp[17358]: no secret in database Jul 25 10:24:56 www imsp[17358]: badlogin: www.vitsoft.bz - cram-md5 user not found If I tried imtest to login on imap server and all work fine www:~ # imtest -v -a vittorio -u vittorio www.vitsoft.bz S: * OK www.vitsoft.bz Cyrus IMAP4 v2.2.12 server ready C: C01 CAPABILITY S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE STARTTLS AUTH=CRAM-MD5 AUTH=DIGEST-MD5 SASL-IR X-NETSCAPE S: C01 OK Completed C: A01 AUTHENTICATE CRAM-MD5 S: + PDQwNzE0Mzg2OTcuMTQ5ODQxMDRAd3d3LnZpdHNvZnQuYno+ Please enter your password: C: dml0dG9yaW8gYmY5NTUzZDFkNDVlN2VkNzU2NGI4ZjQ5ZjhhOTgwZTY= S: A01 OK Success (no protection) Authenticated. Security strength factor: 0 In /var/log/messages Jul 25 10:31:34 www imap[17390]: accepted connection Jul 25 10:31:37 www imap[17390]: login: www.vitsoft.bz [192.168.2.11] vittorio CRAM-MD5 User logged in I use the following configuration files : options common.date R common.delivery.hosts R (www.vitsoft.bz) common.domain R vitsoft.bz common.from R common.sent.mailbox R sentmail desc.common.from R The address that should be used in the From: header when sending email. imap.new.mailbox.servers N (www.vitsoft.bz) imsp.login.realms N (www.vitsoft.bz) imsp.admin.all N (cyrus,vittorio) imsp.create.new.users N + imsp.create.policy N parent imsp.log.level N 2 imsp.sasl.allowplaintext N + imsp.sasl.digest_md5 N + imsp.sasl.cram_md5 N + imsp.user.quota R 10 imsp.ldap.searchbase N dc=vitsoft,dc=bz imsp.ldap.scope N subtree imsp.ldap.host N localhost imsp.ldap.port N 389 imsp.ldap.fullnameattr N cn imsp.ldap.uniqueattr N uid imsp.ldap.attrmap N (name cn address postaladdress alias uid company ou email mail fax telephonenumber notes NULL phone-home telephonenumber phone-work telephonenumber urls labeleduri) /usr/lib/sasl2/imspd.conf pwcheck_method: auxprop auto_transition: false mech_list: DIGEST-MD5 CRAM-MD5 PLAIN LOGIN Any help please -- Vittorio Manfredini Senior Technical Consultant This message was sent using IMP, the Internet Messaging Program. --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
virus scan on cyrus mailboxes
Hello, I'm looking for a solution to clean cyrus' mailboxes from viruses (I already have mailscanner working on incoming mails). I'm running cyrus imapd 2.1 on debian sarge and I've found very little information about that matter. The most usable solution I've found comes from this link : http://www.irbs.net/internet/info-cyrus/0404/0261.html Maybe I've not looked at the good places but I'm surprised of having found so few informations on that problem so I ask my question here. How do you deal with the viruses that have slipped through your smtp antivirus solution ? Thanks in advance, -- Mikael --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
cyrus imapd auth
Hi, list. I try use ldap-autentication. When I try work with imap-server without TLS/SSL -- all work. When I try use starttls -- autentication not work and, as I can see in slapd debug -- nobody try connect to server in this moment. My configs: --- $ cat /usr/local/etc/imapd.conf configdirectory: /var/imap partition-default: /var/spool/imap sieveusehomedir: false sievedir: /var/imap/sieve sasl_pwcheck_method: saslauthd servername: free2.mow.oilspace.com admins: cyrus root dkirhlarov tls_ca_file: /usr/local/etc/ssl/cacert.pem tls_cert_file: /usr/local/etc/ssl/imap-free2.crt tls_key_file: /usr/local/etc/ssl/imap-free2.key --- $ cat /usr/local/etc/saslauthd.conf ldap_servers: ldaps://free2.mow.oilspace.com/ ldap_search_base: ou=users,o=oilspace ldap_tls_cacert_file: /usr/local/etc/openldap/ssl/cacert.pem --- /var/log/messages in moment of connect I get: Jul 25 12:38:29 free2 imap[66302]: auxpropfunc error invalid parameter supplied Jul 25 12:38:29 free2 imap[66302]: OTP unavailable because can't read/write key database /etc/opiekeys: Permission denied Jul 25 12:38:30 free2 imap[66302]: starttls: TLSv1 with cipher RC4-SHA (128/128 bits new) no authentication Jul 25 12:38:30 free2 imap[66302]: no user in db Jul 25 12:38:30 free2 imap[66302]: no user in db Jul 25 12:38:30 free2 imap[66302]: no secret in database Jul 25 12:38:30 free2 imap[66302]: badlogin: dkirhlarov.mow.oilspace.com [172.17.1.254] CRAM-MD5 [SASL(-13): user not found: no secret in database] --- $ uname -rs FreeBSD 5.4-STABLE I try use plaintext password over SSL for autentication. I must use only crypted connection between imap client-server, saslauthd-slapd. PS. Sorry for my english. -- Dmitriy Kirhlarov OILspace, 26 Leninskaya sloboda, bld. 2, 2nd floor, 115280 Moscow, Russia P:+7 095 105 7247 F:+7 095 105 7246 E:[EMAIL PROTECTED] OILspace - The resource enriched - www.oilspace.com --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: cyrus imapd auth
with cram-md5 your password should be stored in plaintext in ldap. is it encrypted ? -Thomas On Mon, 2005-07-25 at 13:45 +0100, Dmitriy Kirhlarov wrote: Hi, list. I try use ldap-autentication. When I try work with imap-server without TLS/SSL -- all work. When I try use starttls -- autentication not work and, as I can see in slapd debug -- nobody try connect to server in this moment. My configs: --- $ cat /usr/local/etc/imapd.conf configdirectory: /var/imap partition-default: /var/spool/imap sieveusehomedir: false sievedir: /var/imap/sieve sasl_pwcheck_method: saslauthd servername: free2.mow.oilspace.com admins: cyrus root dkirhlarov tls_ca_file: /usr/local/etc/ssl/cacert.pem tls_cert_file: /usr/local/etc/ssl/imap-free2.crt tls_key_file: /usr/local/etc/ssl/imap-free2.key --- $ cat /usr/local/etc/saslauthd.conf ldap_servers: ldaps://free2.mow.oilspace.com/ ldap_search_base: ou=users,o=oilspace ldap_tls_cacert_file: /usr/local/etc/openldap/ssl/cacert.pem --- /var/log/messages in moment of connect I get: Jul 25 12:38:29 free2 imap[66302]: auxpropfunc error invalid parameter supplied Jul 25 12:38:29 free2 imap[66302]: OTP unavailable because can't read/write key database /etc/opiekeys: Permission denied Jul 25 12:38:30 free2 imap[66302]: starttls: TLSv1 with cipher RC4-SHA (128/128 bits new) no authentication Jul 25 12:38:30 free2 imap[66302]: no user in db Jul 25 12:38:30 free2 imap[66302]: no user in db Jul 25 12:38:30 free2 imap[66302]: no secret in database Jul 25 12:38:30 free2 imap[66302]: badlogin: dkirhlarov.mow.oilspace.com [172.17.1.254] CRAM-MD5 [SASL(-13): user not found: no secret in database] --- $ uname -rs FreeBSD 5.4-STABLE I try use plaintext password over SSL for autentication. I must use only crypted connection between imap client-server, saslauthd-slapd. PS. Sorry for my english. --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: cyrus imapd auth
On Mon, Jul 25, 2005 at 03:09:42PM +0200, Thomas B?rnert wrote: with cram-md5 your password should be stored in plaintext in ldap. is it encrypted ? No. Many hosts use this ldap db for system auth. {CRYPT} mechanism used for userPasswd. -- Dmitriy Kirhlarov OILspace, 26 Leninskaya sloboda, bld. 2, 2nd floor, 115280 Moscow, Russia P:+7 095 105 7247 F:+7 095 105 7246 E:[EMAIL PROTECTED] OILspace - The resource enriched - www.oilspace.com --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: virus scan on cyrus mailboxes
I found clamav to work quite well. http://www.clamav.net/ It works through a sendmail-milter. It connects periodicly to the 'net to get virus sig updates. It blocks more than virii, too, including (configurable) encrypted archives, broken executables, phishing emails, etc. Phil Mikael wrote: Hello, I'm looking for a solution to clean cyrus' mailboxes from viruses (I already have mailscanner working on incoming mails). I'm running cyrus imapd 2.1 on debian sarge and I've found very little information about that matter. The most usable solution I've found comes from this link : http://www.irbs.net/internet/info-cyrus/0404/0261.html Maybe I've not looked at the good places but I'm surprised of having found so few informations on that problem so I ask my question here. How do you deal with the viruses that have slipped through your smtp antivirus solution ? Thanks in advance, --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Misc question about LDAP and admin stuff
On Saturday 23 July 2005 17.37, Igor Brezac wrote: On Fri, 22 Jul 2005, Per-Olov [iso-8859-1] Sjöholm wrote: On Thursday 21 July 2005 16.17, Igor Brezac wrote: On Thu, 21 Jul 2005, Per-Olov [iso-8859-1] Sjöholm wrote: Hi list Does anybody know if there are any work going on to implement the stuff that the third party cyrusmaster requires to work and extend the LDAP support in cyrus imapd? If not... Is there any work at all going on to add good LDAP or MySQL support? I really love cyrus imapd but think it lacks some stuff when it comes to LDAP or MySQL support. Can you be more specific? Your'e right... I am not just talking about LDAP auth using any PAM stuff. Cyrus imapd in not directly LDAP friendly. From the authentication/authorizaion stand point it is very friendly. Perhaps it is not easily configured. Take a look at ptloader/ldap and cyrus sasl documentation (there are several different ways to configure ldap based authentication). I am *not* talking about LDAP auth. I know that this is easily configured... I have already used it *a lot*. Me and my colleague have actually extended Cyrus sasl with extra Oracle auth through SQL*Net for a large Telecom/ISP customer. So yes... I know Cyrus SASL... Let's say you want to put quota info in LDAP. And in huge installations you maybe want to put as much info as possible into a central repository using LDAP protocol. And not just quota, It is fairly trivial to develop an ldap based cyrus db backend. But in a 'huge' installation I do not believe you can achieve desired performance and reliability. ldap just does not do well when you have to write to it often. Yes it is fairly trivial for a person with the correct programming skills (not me)... But it is not in the product today. And that is why I ask... Hmmm. I do know understand your LDAP performance comment Why should you write often to LDAP in a scenario like this??? You configure the attributes rarely and then read them often. I can only see writes during user password change or any other admin changes of user attributes. *One* of the golden rules to use LDAP is to have *many* more reads for each write (example 1000:1). I work with LDAP in my daily work. But I maybe missunderstood you... maybe alternate e-mail adresses and more. You can do this now. Did not know thatSorry. Thanks for telling me. But what I meant by more above could for example be quota, acl , virtual domain stuff etc. Between the lines I can read a try to defend cyrus as it is good as it is in the LDAP area. But there is definitely no need to do that, because I already think Cyrus imapd is the best OpenSource product in this area. And also better than many commercial ones. I have it in some customer installations, and it works really well. The cyrusmaster project looks nice. It looks like the most powerful admin software for cyrus and great for big installations. If we start to use it, we have to wait for LDAP extension patches from the cyrusmaster project after each cyrus update. Simple LDAP extension patches for basic (well.. almost) ldap features that could already have been in the product. And believe me... I would have helped the Cyrus project extending the LDAP support if I was a real programmer. But I am maybe the only person ansking for some more centralized LDAPified config stuff for Cyrus. If so. Let's skip the LDAP discussion. As said earlier, it's not important to me today. Just asked because of curiosity to see what is in the Cyrus developers pipe My question is just because I am interested to know if there is any work going on to make is more LDAP friendly. And the main reason for asking is because the cyrusmaster project has extended cyrus to contain some of this stuff. And the last... Excuse me if I totally missed something important here. Regards Per-Olov -- GPG keyID: 4DB283CE GPG fingerprint: 45E8 3D0E DE05 B714 D549 45BC CFB4 BBE9 4DB2 83CE pgpQlyaIhlIWx.pgp Description: PGP signature
Re: virus scan on cyrus mailboxes
Yes. it works really well. If you use it through milter you can use the build in clamav-milter or the third party smtp-vilter milter connector by Marc Balmer. I prefer the smtp-vilter as it seems more stable and also have more features. For example to also connect to spamassassin spamd and Symantec antivirus through ICAP and more. If you use smtp-vilter you do not have to rip up the mail twice with spam checking and then virus scanning. It's all done when the mail is open. Enjoy clamav. I love it. Regards /Per-Olov On Monday 25 July 2005 20.01, Philip Edelbrock wrote: I found clamav to work quite well. http://www.clamav.net/ It works through a sendmail-milter. It connects periodicly to the 'net to get virus sig updates. It blocks more than virii, too, including (configurable) encrypted archives, broken executables, phishing emails, etc. Phil Mikael wrote: Hello, I'm looking for a solution to clean cyrus' mailboxes from viruses (I already have mailscanner working on incoming mails). I'm running cyrus imapd 2.1 on debian sarge and I've found very little information about that matter. The most usable solution I've found comes from this link : http://www.irbs.net/internet/info-cyrus/0404/0261.html Maybe I've not looked at the good places but I'm surprised of having found so few informations on that problem so I ask my question here. How do you deal with the viruses that have slipped through your smtp antivirus solution ? Thanks in advance, --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html -- GPG keyID: 4DB283CE GPG fingerprint: 45E8 3D0E DE05 B714 D549 45BC CFB4 BBE9 4DB2 83CE pgp8gVk4eQGlT.pgp Description: PGP signature
Re: breakage issues that I haven't figured out how to resolve
On Mon, 2005-07-25 at 08:46 +0200, Simon Matter wrote: On Sun, 2005-07-24 at 23:23 +0200, Simon Matter wrote: # cat /usr/share/cyrus-imapd/rpm/db.cfg CONFIG_DB_DUPLICATE=berkeley CONFIG_DB_MBOX=skiplist CONFIG_DB_SEEN=skiplist CONFIG_DB_SUBS=flat CONFIG_DB_TLS=berkeley CONFIG_DB_ANNOTATION=skiplist CONFIG_DB_SIEVE=2.2.3 Okay, I don't see where a db4 update could be related to you problems. Only duplicate and tls db are db4, and they can easily be removed without too much headache. What does file /var/lib/imap/*.db show you? --- # file /var/lib/imap/*.db /var/lib/imap/annotations.db: data /var/lib/imap/deliver.db: Berkeley DB (Btree, version 9, native byte-order) /var/lib/imap/mailboxes.db: data /var/lib/imap/recover-mailboxes.db: ASCII English text /var/lib/imap/tls_sessions.db: Berkeley DB (Btree, version 9, native byte-order) And, did you try to remove all the logs with something like this (after doing backups first!) rm -rf /var/lib/imap/db/* /var/lib/imap/db.backup? I thought I did You may also want to have a look at this: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160317 It's not directly discussing your problem but may help anyway. That is probably excellent info for recovering a problem and should probably be linked on cyrus-wiki. I sort of thought that my problem may have been closer to this... https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=91933 This is an athlon processor but of course not Fedora Core 2 but Whiteboxlinux 3 (RHEL 3) but my guess is that the compile flags might be the issue. I probably need to see the whiteboxlinux source db4 rpm to see what the spec file looks like. I am very frustrated though at my inability to solve the issues with my inability to have a subscription list and my inability to 'reconstruct - rf user.craig' which properly detects nested sub-folders and adds them to the mailbox list. I don't understand why that is not working. Hm, I don't think you are hit by the NPTL issue. Did you check permissions on /var/lib/imap and /var/spool/imap? Yes - they are cyrus:mail (700/600 folders/files) Did you check rpm -V cyrus-imapd? seems pretty normal to me... # rpm -V cyrus-imapd S.5T c /etc/cyrus.conf S.5T c /etc/imapd.conf And did you try to convert your skiplist dbs to BDB and back? Maybe you have a skiplist corruption somehow. OK - given the above, do I change CONFIG_DB_SUBS=flat to CONFIG_DB_SUBS=berkeley in /var/lib/imap/rpm/db.cfg.cache ? restart cyrus-imapd service and it rebuilds it to bdb? change back to 'flat' in same file and restart cyrus-imapd service to put it back to flat? And that is the subscription stuff, do I do similar for 'MBOX'? Shouldn't the command # su - cyrus -c '/usr/lib/cyrus-imap/reconstruct -rf user.craig' automatically descend into the folders? If that rebuilt all of the 'first level folders in the INBOX, why didn't it descend deeper? Craig --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: breakage issues that I haven't figured out how to resolve
On Mon, 2005-07-25 at 15:08 -0700, Craig White wrote: On Mon, 2005-07-25 at 08:46 +0200, Simon Matter wrote: On Sun, 2005-07-24 at 23:23 +0200, Simon Matter wrote: # cat /usr/share/cyrus-imapd/rpm/db.cfg CONFIG_DB_DUPLICATE=berkeley CONFIG_DB_MBOX=skiplist CONFIG_DB_SEEN=skiplist CONFIG_DB_SUBS=flat CONFIG_DB_TLS=berkeley CONFIG_DB_ANNOTATION=skiplist CONFIG_DB_SIEVE=2.2.3 Okay, I don't see where a db4 update could be related to you problems. Only duplicate and tls db are db4, and they can easily be removed without too much headache. What does file /var/lib/imap/*.db show you? --- # file /var/lib/imap/*.db /var/lib/imap/annotations.db: data /var/lib/imap/deliver.db: Berkeley DB (Btree, version 9, native byte-order) /var/lib/imap/mailboxes.db: data /var/lib/imap/recover-mailboxes.db: ASCII English text /var/lib/imap/tls_sessions.db: Berkeley DB (Btree, version 9, native byte-order) And, did you try to remove all the logs with something like this (after doing backups first!) rm -rf /var/lib/imap/db/* /var/lib/imap/db.backup? I thought I did You may also want to have a look at this: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160317 It's not directly discussing your problem but may help anyway. That is probably excellent info for recovering a problem and should probably be linked on cyrus-wiki. I sort of thought that my problem may have been closer to this... https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=91933 This is an athlon processor but of course not Fedora Core 2 but Whiteboxlinux 3 (RHEL 3) but my guess is that the compile flags might be the issue. I probably need to see the whiteboxlinux source db4 rpm to see what the spec file looks like. I am very frustrated though at my inability to solve the issues with my inability to have a subscription list and my inability to 'reconstruct - rf user.craig' which properly detects nested sub-folders and adds them to the mailbox list. I don't understand why that is not working. Hm, I don't think you are hit by the NPTL issue. Did you check permissions on /var/lib/imap and /var/spool/imap? Yes - they are cyrus:mail (700/600 folders/files) Did you check rpm -V cyrus-imapd? seems pretty normal to me... # rpm -V cyrus-imapd S.5T c /etc/cyrus.conf S.5T c /etc/imapd.conf And did you try to convert your skiplist dbs to BDB and back? Maybe you have a skiplist corruption somehow. OK - given the above, do I change CONFIG_DB_SUBS=flat to CONFIG_DB_SUBS=berkeley in /var/lib/imap/rpm/db.cfg.cache ? restart cyrus-imapd service and it rebuilds it to bdb? change back to 'flat' in same file and restart cyrus-imapd service to put it back to flat? And that is the subscription stuff, do I do similar for 'MBOX'? Shouldn't the command # su - cyrus -c '/usr/lib/cyrus-imap/reconstruct -rf user.craig' automatically descend into the folders? If that rebuilt all of the 'first level folders in the INBOX, why didn't it descend deeper? sort of solved...kludgy su - cyrus -c '/usr/lib/cyrus-imap/reconstruct -rfx user.craig' ended up fixing the subscription issue. created a sub mailbox for user.craig.saved ended up causing above 'reconstruct' command to find the subfolders within 'saved' directory as the 'saved' folder (and probably the 'logs' folder) were created by a mail client application and didn't have the cyrus.header, cyrus.cache and cyrus.index files in them so the 'reconstruct' command didn't descend beyond that folder. I suppose I can always try the 'yum update' which will update db4 stuff for the final adventure but not tonight. Thanks for the help Simon Craig --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html