Re: cyrus murder environment and http proxy?
On 2020-02-17 12:17, Khalid Mehmood Khan via Info-cyrus wrote: > Hi! > > Does http proxy work in a cyrus murder environment? I keep getting ""PUT > /dav/addressbooks/user/testuser/6ecc0a66-74a1412-1581679269354-210887/ef37977290d43113e709f68848aa9a8a5ff8a24f.vcf > HTTP/1.1" (if-none-match=*) => "HTTP/1.1 403 Forbidden"" on the frontend > while trying to add an entry into addressbook/calendar. The log on backend > gives the the follwoing error. > "Cyrus-SASL/2.1.27 OpenSSL/1.1 Nghttp2/1.33.0 Zlib/1.2.11 LibXML/2.9.7 > SQLite/3.26.0 LibiCal/3.0 ICU4C/60.3 Jansson/2.11"; "OPTIONS * HTTP/1.1" => > "HTTP/1.1 401 Unauthorized" (error=Authentication failed)" > In a discrete murder setup the frontend and backend both use > "http_sasl_mech_list: PLAIN" in imapd.conf. > > I'm running the latest stable version of cyrus-imapd 3.0.13. I had the same issue and posted it to the list (last April 2019) but can't solve the problem. I removed http services from cyrus murder and put them on a standalone server. Regards. > > Thanks. > > Regards. > > KMK > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus > Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
HTTP proxy in murder
Hi, I'm always stucked in configuring a murder cluster for Cyrus HTTP. Is it possible to disable http on both backend and frontend, and only use https ? I have tried with only entries https in cyrus.conf on both backend/frontend and I notice connexion refused from the frontend. imap cyrus/https[1502]: [ID 130975 local3.error] connect(backend.eurecom.fr) failed: Connection refused to be sure, if I disable http entry in services getaddrinfo(backend.eurecom.fr) failed: service name not available for the specified socket type Is it necessary to have http between frontend and backend for the proxy to work ? Has anybody have a running configuration for Calendars over murder agregator ? Thanks Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: cyrus http proxy in murder HTTP/1.1 403 Forbidden
On 4/2/19 7:15 PM, Ken Murchison wrote: > > On 4/2/19 1:02 PM, Jean-Christophe Delaye wrote: >> Hello, >> >> We're testing Cyrus3.0.9 in a murder configuration. >> It works fine for imap/imaps services. I can access mailboxes from >> differents frontend, and move mailboxes from on backend to another ! >> >> I'm now blocked with the calendar features in this configuration. >> It works fine in both read and write mode directly from the backend. >> >> http://backend.eurecom.fr/dav/calendars/user//Default/ >> >> PUT >> /dav/calendars/user//Default/8d6377bb-7c3f-4a55-a183-a05dae6fce0d.ics >> HTTP/1.1" (if-match="970dfe515581407e1f4eeaa887316530b3ef3020") => >> "HTTP/1.1 204 No Content" >> >> I've configured http/https also on the frontend to enable accessing >> calendars from there: >> >> http://frontend.eurecom.fr/dav/calendars/user//Default/ >> >> It work perfectly in read only mode from the frontend, but if I try to >> do some changes, it does not complete with Forbidden message. >> >> "PUT >> /dav/calendars/user//Default/8d6377bb-7c3f-4a55-a183-a05dae6fce0d.ics >> HTTP/1.1" (if-match="970dfe515581407e1f4eeaa887316530b3ef3020") => >> "HTTP/1.1 403 Forbidden" > Thanks for your reply. I've activated telemetry and debug mode on both frontend and backend. My feeling is that the frontend do not forward to selected backend when operate in WRITE mode [:method: PUT] (can't see authentication request on the backend nor network activity between them while monitored with snoop). But it works fine when just accessing and browsing the calendar without modification [:method: PROPFIND] or even delete events [:method: DELETE] http log for user on backend: <1554373427 > Is there any body in the 403 response with more information? You might > have to enable telemetry on the backend. > > Is the frontend proxy authenticating as the owner of the calendar? > Check the cyrus log on the backend. > > >> I've compiled backend and frontend with the same options >> >> Server: Cyrus-HTTP/3.0.9 Cyrus-SASL/2.1.26 OpenSSL/1.0.0 Nghttp2/1.35.0 >> Zlib/1.2.11 LibXML2.9.5 SQLite/3.24.0 LibiCal/3.0 ICU4C/59.1 Jansson/2.10 >> WWW-Authenticate: Basic realm="frontend.eurecom.fr" >> DAV: 1, 2, 3, access-control, extended-mkcol, resource-sharing >> DAV: calendar-access, calendar-auto-schedule >> DAV: calendar-query-extended, calendar-availability, >> calendar-managed-attachments >> DAV: calendarserver-sharing, inbox-availability >> DAV: addressbook >> Allow: OPTIONS, GET, HEAD, POST, PUT, PATCH, DELETE, TRACE >> Allow: PROPFIND, REPORT, COPY, MOVE, PROPPATCH, MKCOL, LOCK, UNLOCK, ACL >> Allow: MKCALENDAR >> Content-Length: 0 >> >> The question is: >> Is there specific configuration parameters to enable proxy http/https in >> murder configuration ? I can't find usefull informations in the >> documentation. I've seen the Interactive HTTP test program httptest, but >> can't find parameters to simulate calendar clients. >> >> Thank you >> >> >> Cyrus Home Page: http://www.cyrusimap.org/ >> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ >> To Unsubscribe: >> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus > > > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus > cyrus/https[1651]: [ID 560950 local3.debug] tls_client_ca_dir=(NULL) tls_client_ca_file=/global/cyrus/etc/ssl/DigiCertCA.crt cyrus/https[1651]: [ID 810032 local3.debug] tls_server_cert=/global/cyrus/etc/ssl/imap_eurecom_fr.crt tls_server_key=/global/cyrus/etc/ssl/imap.eurecom.fr.key cyrus/https[1651]: [ID 817102 local3.notice] inittls: Loading hard-coded DH parameters cyrus/https[1651]: [ID 495959 local3.debug] Set client CA list: Client cert requested, not required cyrus/https[1651]: [ID 704172 local3.debug] TLS Server Name Indication (SNI) Extension: "imap.eurecom.fr" cyrus/https[1651]: [ID 574029 local3.debug] SSL_accept() incomplete -> wait cyrus/https[1651]: [ID 867439 local3.debug] SSL_accept() succeeded -> done cyrus/https[1651]: [ID 702911 local3.notice] starttls: TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits new) no authentication; application protocol = h2 cyrus/https[1651]: [ID 652924 local3.debug] http2_send_cb(15): 0 cyrus/https[1651]: [ID 739106 local3.debug] ret: 0, eo
cyrus http proxy in murder HTTP/1.1 403 Forbidden
Hello, We're testing Cyrus3.0.9 in a murder configuration. It works fine for imap/imaps services. I can access mailboxes from differents frontend, and move mailboxes from on backend to another ! I'm now blocked with the calendar features in this configuration. It works fine in both read and write mode directly from the backend. http://backend.eurecom.fr/dav/calendars/user//Default/ PUT /dav/calendars/user//Default/8d6377bb-7c3f-4a55-a183-a05dae6fce0d.ics HTTP/1.1" (if-match="970dfe515581407e1f4eeaa887316530b3ef3020") => "HTTP/1.1 204 No Content" I've configured http/https also on the frontend to enable accessing calendars from there: http://frontend.eurecom.fr/dav/calendars/user//Default/ It work perfectly in read only mode from the frontend, but if I try to do some changes, it does not complete with Forbidden message. "PUT /dav/calendars/user//Default/8d6377bb-7c3f-4a55-a183-a05dae6fce0d.ics HTTP/1.1" (if-match="970dfe515581407e1f4eeaa887316530b3ef3020") => "HTTP/1.1 403 Forbidden" I've compiled backend and frontend with the same options Server: Cyrus-HTTP/3.0.9 Cyrus-SASL/2.1.26 OpenSSL/1.0.0 Nghttp2/1.35.0 Zlib/1.2.11 LibXML2.9.5 SQLite/3.24.0 LibiCal/3.0 ICU4C/59.1 Jansson/2.10 WWW-Authenticate: Basic realm="frontend.eurecom.fr" DAV: 1, 2, 3, access-control, extended-mkcol, resource-sharing DAV: calendar-access, calendar-auto-schedule DAV: calendar-query-extended, calendar-availability, calendar-managed-attachments DAV: calendarserver-sharing, inbox-availability DAV: addressbook Allow: OPTIONS, GET, HEAD, POST, PUT, PATCH, DELETE, TRACE Allow: PROPFIND, REPORT, COPY, MOVE, PROPPATCH, MKCOL, LOCK, UNLOCK, ACL Allow: MKCALENDAR Content-Length: 0 The question is: Is there specific configuration parameters to enable proxy http/https in murder configuration ? I can't find usefull informations in the documentation. I've seen the Interactive HTTP test program httptest, but can't find parameters to simulate calendar clients. Thank you Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Solaris (11) support
On 06/18/2018 03:26 PM, Marty Lee wrote: > Jean-Crishtophe, > > we use Cyrus on Solaris, but at the moment, haven’t used Murder - > so can’t offer advice etc on that one directly. > > We’ve got a couple of big projects under way at the moment > for some customers - once we’ve got those sorted, I can try to > get a test setup going and see what happens - but it would be > in a couple of weeks time at the earliest… Great, thank you very much marty ! I keep on working on my configuration. Thanks Jean-Christophe. > > marty > > > - > Marty Lee e: ma...@maui-systems.co.uk > Technical Directorv: +44 131 564 1980 > Maui Systems Ltd w: http://www.maui-systems.co.uk > Scotland, UK > >> On 18 Jun 2018, at 11:03, Jean-Christophe Delaye >> wrote: >> >> On 06/18/2018 05:25 AM, ellie timoney wrote: >>> Hi Jean-Christophe, >> >> Thanks Ellie for your inputs. >>> >>> On Fri, Jun 15, 2018, at 5:49 PM, Jean-Christophe Delaye wrote: >>>> So this is why the first part of my >>>> question was to known if there are many running murder systems running >>>> on Solaris (11) and why I can't find specifics notes about >>>> compiling/installing Cyrus imapd on this operating system. >>> >>> The main contributors to Cyrus development are not running Solaris, either >>> personally or organisationally, so Solaris support doesn't get a lot of >>> direct attention. >>> >>> There are a few people out there running Cyrus on Solaris (not sure if >>> they're using murder or not). They usually pop up on the list with >>> Solaris-compatibility issues/patches not long after new releases where >>> we've accidentally broken something on Solaris, which we greatly >>> appreciate! :) >> >> Yes, I tried the running unit tests (Version 2.1-3) on my setup and >> found the following issue on the backend: >> >> Suite: backend >> Test: badhost ...passed >> Test: badservice ...passed >> Test: sasl_plain ...Server failed to find requested SASL mechanism >> "PLAIN" FAILED >>1. ./cunit/backend.testc:198 - CU_ASSERT_PTR_NOT_NULL_FATAL(be) >> Test: sasl_digestmd5 ...passed >> Test: multiline_caps ...Server failed to find requested SASL mechanism >> "PLAIN" FAILED >>1. ./cunit/backend.testc:314 - CU_ASSERT_PTR_NOT_NULL_FATAL(be) >> Test: oneline_caps ...Server failed to find requested SASL mechanism >> "PLAIN" FAILED >>1. ./cunit/backend.testc:314 - CU_ASSERT_PTR_NOT_NULL_FATAL(be) >> Test: starttls ...Server failed to find requested SASL mechanism >> "PLAIN" FAILED >>1. ./cunit/backend.testc:408 - CU_ASSERT_PTR_NOT_NULL_FATAL(be) >> >> But,it's not easy for me to go further; I'll continue investigating >> >> >> Run Summary:Type TotalRan Passed Failed Inactive >> suites 39 39n/a 00 >> tests432432427 50 >> asserts 829800 829800 829795 5 n/a >> >> >> Cheers >> >>> >>> I have no access to Solaris, and so additional insight to offer. But I'd >>> be very happy to accept/merge patches to code/documentation for you if you >>> get things working properly. >>> >>> Cheers, >>> >>> ellie >>> >>> Cyrus Home Page: http://www.cyrusimap.org/ >>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ >>> To Unsubscribe: >>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus >>> >> >> >> Cyrus Home Page: http://www.cyrusimap.org/ >> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ >> To Unsubscribe: >> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus > Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Solaris (11) support
On 06/18/2018 05:25 AM, ellie timoney wrote: > Hi Jean-Christophe, Thanks Ellie for your inputs. > > On Fri, Jun 15, 2018, at 5:49 PM, Jean-Christophe Delaye wrote: >> So this is why the first part of my >> question was to known if there are many running murder systems running >> on Solaris (11) and why I can't find specifics notes about >> compiling/installing Cyrus imapd on this operating system. > > The main contributors to Cyrus development are not running Solaris, either > personally or organisationally, so Solaris support doesn't get a lot of > direct attention. > > There are a few people out there running Cyrus on Solaris (not sure if > they're using murder or not). They usually pop up on the list with > Solaris-compatibility issues/patches not long after new releases where we've > accidentally broken something on Solaris, which we greatly appreciate! :) Yes, I tried the running unit tests (Version 2.1-3) on my setup and found the following issue on the backend: Suite: backend Test: badhost ...passed Test: badservice ...passed Test: sasl_plain ...Server failed to find requested SASL mechanism "PLAIN" FAILED 1. ./cunit/backend.testc:198 - CU_ASSERT_PTR_NOT_NULL_FATAL(be) Test: sasl_digestmd5 ...passed Test: multiline_caps ...Server failed to find requested SASL mechanism "PLAIN" FAILED 1. ./cunit/backend.testc:314 - CU_ASSERT_PTR_NOT_NULL_FATAL(be) Test: oneline_caps ...Server failed to find requested SASL mechanism "PLAIN" FAILED 1. ./cunit/backend.testc:314 - CU_ASSERT_PTR_NOT_NULL_FATAL(be) Test: starttls ...Server failed to find requested SASL mechanism "PLAIN" FAILED 1. ./cunit/backend.testc:408 - CU_ASSERT_PTR_NOT_NULL_FATAL(be) But,it's not easy for me to go further; I'll continue investigating Run Summary:Type TotalRan Passed Failed Inactive suites 39 39n/a 00 tests432432427 50 asserts 829800 829800 829795 5 n/a Cheers > > I have no access to Solaris, and so additional insight to offer. But I'd be > very happy to accept/merge patches to code/documentation for you if you get > things working properly. > > Cheers, > > ellie > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus > Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Solaris (11) support
On 06/14/2018 07:00 PM, André Schild wrote: > Hello Jean-Christophe, Thanks André, > > > Am 14.06.2018 um 18:44 schrieb Jean-Christophe Delaye: >> I have spent several days working in trying to have a running murder >> configuration using Cyrus Imap 3.0.x on Solaris 11.3. >> I checked and installed the required software components (gcc and >> tools). Everything is compliling and installing fine, but I have issue >> with mupdate process specially from slave to master sync. > > Some more specific problem description might be usefull if you need > help... ;) Yes, of course. I can give details on my mupdate issues (with logs and settings). As before posting to the list, I launched same self compiled and configuration on a slave murder running RHEL without any problem; I suspect a problem with Solaris (11). So this is why the first part of my question was to known if there are many running murder systems running on Solaris (11) and why I can't find specifics notes about compiling/installing Cyrus imapd on this operating system. PS: we were currently running murder cyrus 2.4 on Solaris 10/ZFS for years !! - > > André > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Solaris (11) support
I have spent several days working in trying to have a running murder configuration using Cyrus Imap 3.0.x on Solaris 11.3. I checked and installed the required software components (gcc and tools). Everything is compliling and installing fine, but I have issue with mupdate process specially from slave to master sync. As it is described, Cyrus IMAP should support the following platforms : Solaris https://www.cyrusimap.org/imap/concepts/deployment/supported-platforms.html Does anybody use Cyrus (murder) on Solaris 11 ? I can't find many usefull links on Cyrus Imap and Solaris on cyrusimap.org. Thank you. Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Cannot move mailbox between backend
Hi,
Our running configuration has a frontend/mupdate master (imap) with 2
backends (imap1 & 2) (all imapd-3.0.7 with sasl-2.1.27)
Creating mailbox from the master with cyradm works fine (in automatic
mode (no backend specified) or with backend name specified.
I have the following settings in backend's imapd.conf
# Which partition to use for default mailboxes
defaultpartition: default
partition-default: /global/cyrus/mail
cyradm --user cyrus imap (from the master/frontend).
imap.eurecom.fr> cm user/foo
imap.eurecom.fr> info user/foo
{user/foo}:
shared:
partition: default
server: imap2.eurecom.fr
or
imap.eurecom.fr> cm user/foo1 imap1.eurecom.fr!default
imap.eurecom.fr> info user/foo1
{user/foo1}:
shared:
partition: default
server: imap1.eurecom.fr
Now, if I tried to relocate (move) user/foo1 from imap1 to imap2 with renm
imap.eurecom.fr> renm user/foo1 user/foo1 imap2.eurecom.fr!default
imap.eurecom.fr>
I do not see any errors, but user/foo1 is still on his primary backend
(imap1). Logs show the following
on source backend1 ==>
cyrus1/imap[5631]: [ID 515622 local7.warning] requested partition
directory for unknown partition 'user/foo1'
cyrus1/imap[5631]: [ID 605502 local7.info] XFER: connecting to server
'imap2.eurecom.fr'
cyrus1/imap[5631]: [ID 943968 local7.info] XFER: destination supports
replication
cyrus1/imap[5631]: [ID 241566 local7.info] XFER: disconnecting from servers
on target backend2 ==>
cyrus2/imap[5628]: [ID 886222 local4.notice] command: N01 Noop
cyrus2/imap[5628]: [ID 886222 local4.notice] command: Q01 Logout
cyrus2/imap[5628]: [ID 866165 local4.notice] USAGE mailproxy user:
0.026592 sys: 0.028425
NB: mailproxy user is admin on backends.
My questions are:
- do I have an error in my rename command ? I also tried with xfer
command without any success !
- What does mean XFER: destination supports replication ? I compiled all
my servers without enbling replication
Cyrus Server configured components
event notification: yes
gssapi: no
autocreate: no
idled: yes
httpd: yes
kerberos V4:no
murder: yes
nntpd: no
replication:no
sieve: yes
calalarmd: yes
objectstore:no
backup: no
Thank you.
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Solved Re: Frontend couldn't authenticate to backend server: authentication failure
On 06/04/2018 03:30 PM, Dan White wrote:
> !!!
> Please be aware that the password for mailproxy was exposed below in
> uuencoded form.
> !!!
Thanks, this is an (internal) lab platform !
I finally focus on the fact that authentication fails if userid and
authid differ.
So, my primary setup was (without sasldb)
Installed and properly configured auxprop mechanisms are:
>>
I recompiled sasl with sasldb
then auxprop was not empty
Installed and properly configured auxprop mechanisms are:
sasldb
List of auxprop plugins follows
Plugin "sasldb" , API version: 8
supports store: yes
and now everything works fine:
[root@cassandra etc]# /opt/cyrus-imapd_3.0.7-cyrus/bin/imtest -m plain
-a mailproxy -u delaye imap1.eurecom.fr
S: * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE
MUPDATE=mupdate://cassandra.eurecom.fr/ STARTTLS AUTH=PLAIN SASL-IR]
imap1.eurecom.fr Cyrus IMAP 3.0.7 server ready
Please enter your password:
..
Authenticated.
Security strength factor: 0
* BYE idle for too long
Connection closed.
Thanks for your help.
>
> On 06/04/18 11:23 +0200, Jean-Christophe Delaye wrote:
>> On 06/01/2018 07:54 PM, Dan White wrote:
>>> On 06/01/18 18:03 +0200, Jean-Christophe Delaye wrote:
>>
>> [root@cassandra etc]# /opt/cyrus-imapd_3.0.7-cyrus/bin/imtest -m plain
>> -a mailproxy imap1.eurecom.fr
>> S: * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE
>> MUPDATE=mupdate://cassandra.eurecom.fr/ STARTTLS AUTH=PLAIN SASL-IR]
>> imap1.eurecom.fr Cyrus IMAP 3.0.7 server ready
>> Please enter your password:
>> C: A01 AUTHENTICATE PLAIN
>> Authenticated.
>> Security strength factor: 0
>> . LIST "" "*"
>> . OK Completed (0.000 secs)
>>
>>> imtest -m plain -a mailproxy -u imap1.eurecom.fr
>>
>> [root@cassandra etc]# /opt/cyrus-imapd_3.0.7-cyrus/bin/imtest -m plain
>> -a mailproxy -u delaye imap1.eurecom.fr
>> S: * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE
>> MUPDATE=mupdate://cassandra.eurecom.fr/ STARTTLS AUTH=PLAIN SASL-IR]
>> imap1.eurecom.fr Cyrus IMAP 3.0.7 server ready
>> Please enter your password:
>> C: A01 AUTHENTICATE PLAIN
>> S: A01 NO no mechanism available
>> Authentication failed. generic failure
>> Security strength factor: 0
>>
>> Note, if I choose login mech , it works !
>
>> [root@cassandra etc]# /opt/cyrus-imapd_3.0.7-cyrus/bin/imtest -m login
>> -a mailproxy -u delaye imap1.eurecom.fr
>> S: * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE
>> MUPDATE=mupdate://cassandra.eurecom.fr/ STARTTLS AUTH=PLAIN SASL-IR]
>> imap1.eurecom.fr Cyrus IMAP 3.0.7 server ready
>> Please enter your password:
>> C: L01 LOGIN mailproxy {7}
>> S: + go ahead
>> Authenticated.
>
> You may need 'sasl_minimum_layer: 0' within imapd.conf, on the backend.
>
> If that doesn't work, please include syslog output for the above two
> authentication attempts.
>
>> root@ipso:/opt/cyrus-imapd_3.0.7-cyrus1/sbin#
>> /opt/cyrus-sasl_2.1.27-cyrus1/sbin/pluginviewer -m plain
>> Installed and properly configured auxprop mechanisms are:
>>
>> Installed and properly configured SASL (server side) mechanisms are:
>> SCRAM-SHA-1 SCRAM-SHA-256 DIGEST-MD5 EXTERNAL CRAM-MD5 PLAIN ANONYMOUS
>> Available SASL (server side) mechanisms matching your criteria are:
>> PLAIN
>> List of server plugins follows
>> Plugin "plain" [loaded], API version: 4
>> Available SASL (client side) mechanisms matching your criteria are:
>> SCRAM-SHA-1 SCRAM-SHA-256 DIGEST-MD5 EXTERNAL CRAM-MD5 PLAIN ANONYMOUS
>> List of client plugins follows
>> Plugin "plain" [loaded], API version: 4
>>
>> mailproxy credentials are ok !
>>
>> root@ipso:/opt/cyrus-imapd_3.0.7-cyrus1/sbin#
>> /opt/cyrus-sasl_2.1.27-cyrus1/sbin/pluginviewer
>> Installed and properly configured auxprop mechanisms are:
>>
>> Installed and properly configured SASL (server side) mechanisms are:
>> SCRAM-SHA-1 SCRAM-SHA-256 DIGEST-MD5 EXTERNAL CRAM-MD5 PLAIN ANONYMOUS
>> Available SASL (server side) mechanisms matching your criteria are:
>> SCRAM-SHA-1 SCRAM-SHA-256 DIGEST-MD5 CRAM-MD5 PLAIN ANONYMOUS
>> List of server plugins follows
>> Plugin "scram" [loaded], API version: 4
>> Plugin "scram" [loaded], API version: 4
>> Plugin "digestmd5" [loaded], API version: 4
>> Plugin "crammd5" [loaded], API version: 4
>> Plugin "plain" [loaded], API version: 4
>> Plugin "anonymous" [loaded], API version: 4
>> Installed and properly configured SASL (client side) mech
Frontend couldn't authenticate to backend server: authentication failure
Dear all, I'm trying to complete setup Cyrus Murder : 1 frontend with mupdate and 1 backend (initial config). Machines are running Solaris 11.3 (for ZFS, HA clustering and zone capabilities), SASL 2.1.27(rc8) and Cyrus 3.0.7. Services seems running fine on both master/frontend (hostname cassandra) and backend (hostname imap1). I can create mailboxes on backend and location is maintained on the mupdate server. Backend# root@imap1:# ./ctl_mboxlist -C /global/cyrus1/etc/imapd.conf -d user.delaye 0 default delayelrswipkxtecdan user.delaye.INBOX.JCD 0 default delayelrswipkxtecdan user.delaye.Trash 0 default delayelrswipkxtecdan user.standard 0 default standard lrswipkxtecdan delaye lrswipkxtecdan titilrswipkxtecdan user.standart 0 default standart lrswipkxtecdan Master# [root@cassandra sbin]# ./ctl_mboxlist -C /global/cyrus/etc/imapd.conf -d user.delaye 1 imap1.eurecom.fr!default delaye lrswipkxtecdan user.delaye.INBOX.JCD 1 imap1.eurecom.fr!default delaye lrswipkxtecdan user.delaye.Trash 1 imap1.eurecom.fr!default delaye lrswipkxtecdan user.standard 1 imap1.eurecom.fr!default standard lrswipkxtecdan delaye lrswipkxtecdan titilrswipkxtecdan user.standart 1 imap1.eurecom.fr!default standart lrswipkxtecdan From client, connection to backend is ok # telnet imap1 imap Trying 192.168.106.208... Connected to imap1.eurecom.fr. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE MUPDATE=mupdate://cassandra.eurecom.fr/ STARTTLS AUTH=PLAIN SASL-IR] imap1.eurecom.fr Cyrus IMAP 3.0.7 server ready 001 login standard XXX 001 OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxten QUOTA MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SEARCH=FUZZY SORT SORT=MODSEQ SORT=DISPLAY SORT=UID THREAD=ORDEREDSUBJECT THREAD=REFERENCES THREAD=REFS ANNOTATEMORE ANNOTATE-EXPERIMENT-1 METADATA LIST-EXTENDED LIST-STATUS LIST-MYRIGHTS LIST-METADATA WITHIN QRESYNC SCAN XLIST XMOVE MOVE SPECIAL-USE CREATE-SPECIAL-USE DIGEST=SHA1 X-REPLICATION URLAUTH URLAUTH=BINARY MUPDATE=mupdate://cassandra.eurecom.fr/ LOGINDISABLED COMPRESS=DEFLATE X-QUOTA=STORAGE X-QUOTA=MESSAGE X-QUOTA=X-ANNOTATION-STORAGE X-QUOTA=X-NUM-FOLDERS IDLE] User logged in SESSIONID= A001 SELECT INBOX * 0 EXISTS * 0 RECENT * FLAGS (\Answered \Flagged \Draft \Deleted \Seen) * OK [PERMANENTFLAGS (\Answered \Flagged \Draft \Deleted \Seen \*)] Ok * OK [UIDVALIDITY 1527674348] Ok * OK [UIDNEXT 1] Ok * OK [HIGHESTMODSEQ 3] Ok * OK [URLMECH INTERNAL] Ok * OK [ANNOTATIONS 65536] Ok A001 OK [READ-WRITE] Completed The problem seems to be the proxy connections through frontend to the server with a backend role. The frontend is forwarding the imap requests to the backend using proxy_authname username saslauthd[18753] :auth success: [user=mailproxy] [service=imap] [realm=] [mech=shadow] From client(s), connection to frontend is the issue 001 login standard xxx 001 OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxten QUOTA MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SEARCH=FUZZY SORT SORT=MODSEQ SORT=DISPLAY SORT=UID THREAD=ORDEREDSUBJECT THREAD=REFERENCES THREAD=REFS ANNOTATEMORE ANNOTATE-EXPERIMENT-1 METADATA LIST-EXTENDED LIST-STATUS LIST-MYRIGHTS LIST-METADATA WITHIN QRESYNC SCAN XLIST XMOVE MOVE SPECIAL-USE CREATE-SPECIAL-USE DIGEST=SHA1 X-REPLICATION URLAUTH URLAUTH=BINARY MUPDATE=mupdate://cassandra.eurecom.fr/ LOGINDISABLED COMPRESS=DEFLATE X-QUOTA=STORAGE X-QUOTA=MESSAGE X-QUOTA=X-ANNOTATION-STORAGE X-QUOTA=X-NUM-FOLDERS IDLE] User logged in SESSIONID= Once I get connected and authenticated, I launch the command “select inbox”, but I receive the message A001 SELECT INBOX A001 NO Server(s) unavailable to complete operation In the log files there is an error from both frontend and backend From frontend: cassandra cyrus/imap[19868]: couldn't authenticate to backend server: authentication failure From backend: imap1 cyrus1/master about to exec /opt/cyrus-imapd_3.0.7-cyrus1/libexec/imapd imap1 cyrus1/imap[11632]: SASL could not find auxprop plugin, was searching for '[all]' badlogin: cassandra.eurecom.fr [192.168.106.61] PLAIN [SASL(-4): no mechanism available: Password verification failed] It seems to me that the imap process on the backend is unable to use the correct sasl authentication library. (I've compiled imapd with standard dynamic sasl). Any help would be appreciated. I have spent several days working in this problem without getting any progress at all. Here are my configuration files (cyr_info conf) On the backend: admins: cyrus1 cyrus postman allowallsubscribe: yes allowplaintext: yes allowusermoves: yes auditlog: yes configdirectory: /global/cyrus1/var/mail defaultpartition: default duplicate_db_path: /var/run/cyrus1/deliver.db hashimapspool: yes debug: yes httpmodules: caldav carddav
Re: [Murder issue] Connection closed
On 05/16/2018 06:39 PM, Jean-Christophe Delaye wrote:
> Hello,
Hi,
I finally succeded in running a (3.0.7) mupdate master on Solaris (11.3)
using gcc.
I remember my previous notes with Studio compiler and an issue with
pthread option on Solaris :
"When Compiling on Solaris
Do not use "-pthread", this option does not exist on Solaris".
As my issue was on mupdate process only, I removed the -pthread
in Makefile.in
imap_mupdate_CFLAGS = $(AM_CFLAGS) -pthread
Now, testing with mupdatetest do not result in "Connection closed." and
seems to work fine !
> I'm currently trying to setup a running murder Cyrus configuration.
>
> I'm using a frontend (which is also the master mupdate) and a backend.
> Imapd process seems ok, i'm able to connect and authenticate.
>
> imap.eurecom.fr> ver
> name : Cyrus IMAPD
> version: 3.0.6
> vendor : Project Cyrus
> support-url: https://www.cyrusimap.org
> os : SunOS
> os-version : 5.11
> environment: Built w/Cyrus SASL 2.1.27
> Running w/Cyrus SASL 2.1.27
> Built w/OpenSSL 1.0.2n 7 Dec 2017
> Running w/OpenSSL 1.0.2n 7 Dec 2017
> Built w/zlib 1.2.11
> Running w/zlib 1.2.11
> CMU Sieve 3.0
> mmap = shared
> lock = fcntl
> nonblock = fcntl
> idle = idled
>
> But, I have an issue with mupdate part.
> It's running on the frontend/master side, but I can't connect from the
> backend (trying with ctl_mboxlist or even mupdatetest).
>
> mupdatetest can authenticate with the murder user but immediatly closed
> the connection (I can't run any command).
>
> postman@ipso:~$ /opt/cyrus-imapd_3.0.6-cyrus1-g/bin/mupdatetest -u
> postman -m plain -v imap
> S: * AUTH "PLAIN"
> S: * STARTTLS
> S: * COMPRESS "DEFLATE"
> S: * PARTIAL-UPDATE
> S: * OK MUPDATE "imap.eurecom.fr" "Cyrus IMAP" "3.0.6" "(master)"
> Please enter your password: x
> C: A01 AUTHENTICATE "PLAIN" {32+}
> cG9zdG1hbgBwb3N0#bWFuAG9yYWNsZTE=
> S: A01 OK "Authenticated"
> Authenticated.
> Security strength factor: 0
> Connection closed.
>
> Any ideas ? I tried to increase the debug level (and snoop the network),
> but without success.
>
> Thank you.
>
>
>
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
[Murder issue] Connection closed
Hello,
I'm currently trying to setup a running murder Cyrus configuration.
I'm using a frontend (which is also the master mupdate) and a backend.
Imapd process seems ok, i'm able to connect and authenticate.
imap.eurecom.fr> ver
name : Cyrus IMAPD
version: 3.0.6
vendor : Project Cyrus
support-url: https://www.cyrusimap.org
os : SunOS
os-version : 5.11
environment: Built w/Cyrus SASL 2.1.27
Running w/Cyrus SASL 2.1.27
Built w/OpenSSL 1.0.2n 7 Dec 2017
Running w/OpenSSL 1.0.2n 7 Dec 2017
Built w/zlib 1.2.11
Running w/zlib 1.2.11
CMU Sieve 3.0
mmap = shared
lock = fcntl
nonblock = fcntl
idle = idled
But, I have an issue with mupdate part.
It's running on the frontend/master side, but I can't connect from the
backend (trying with ctl_mboxlist or even mupdatetest).
mupdatetest can authenticate with the murder user but immediatly closed
the connection (I can't run any command).
postman@ipso:~$ /opt/cyrus-imapd_3.0.6-cyrus1-g/bin/mupdatetest -u
postman -m plain -v imap
S: * AUTH "PLAIN"
S: * STARTTLS
S: * COMPRESS "DEFLATE"
S: * PARTIAL-UPDATE
S: * OK MUPDATE "imap.eurecom.fr" "Cyrus IMAP" "3.0.6" "(master)"
Please enter your password: x
C: A01 AUTHENTICATE "PLAIN" {32+}
cG9zdG1hbgBwb3N0#bWFuAG9yYWNsZTE=
S: A01 OK "Authenticated"
Authenticated.
Security strength factor: 0
Connection closed.
Any ideas ? I tried to increase the debug level (and snoop the network),
but without success.
Thank you.
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Solaris Compiling 3.0.5 with libical3.0
On 04/20/2018 05:23 AM, ellie timoney wrote: > On Thu, Apr 19, 2018, at 2:53 AM, Jason L Tibbitts III wrote: >>>>>>> "JD" == Jean-Christophe Delaye <jean-christophe.del...@eurecom.fr> >>>>>>> writes: >> >> JD> Is Libical 3.0.0 supported with 3.0.5 ? Any idea ? >> >> It is not, but you can apply >> https://github.com/cyrusimap/cyrus-imapd/commit/1966c22fc4249a1157a4d4c1224138ce78653514 >> >> At least that's what I do in Fedora. > > That commit has already been cherry-picked to the cyrus-imapd-3.0 branch, as > https://github.com/cyrusimap/cyrus-imapd/commit/299d89acedc4342b0ffca9750f5a39773c14d26b Thanks ! Works fine with 299d89acedc4342b0ffca9750f5a39773c14d26b and libical_3.0.3-40 Cyrus-HTTP/3.0.5 Cyrus-SASL/2.1.27 OpenSSL/1.0.0 Zlib/1.2.11 LibXML2.9.5 SQLite/3.17.0 LibiCal/3.0 ICU4C/59.1 Jansson/2.7 Server at cyrus6.eurecom.fr Port 80 > > So, I believe libical 3.0.0 should be supported in the upcoming 3.0.6 release > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus > Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Solaris Compiling 3.0.5 with libical3.0
Hi, I'm trying to compile latest stable 3.0.5 with gcc version 5.4.0 on Solaris 11.3 (x86). With libical 2.0.0, it went fine but if I tried to use 3.x version for libical, it failed with the following: imap/http_caldav.c: In function ‘icaltime_from_rfc3339_string’: imap/http_caldav.c:2034:7: error: ‘struct icaltimetype’ has no member named ‘is_utc’ tt.is_utc = 1; ^ gmake[2]: *** [imap/http_caldav.o] Error 1 It seems that Libical 3.0.0 removed is_utc from icaltimetype struct "Set icaltimetype.zone to icaltimezone_get_utc_timezone() to change a time to UTC Use icaltime_is_utc() to check if a time is in UTC" Is Libical 3.0.0 supported with 3.0.5 ? Any idea ? Thank you. Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: backends with different altnamespace in a murder configuration
On 04/11/2018 06:52 PM, Ken Murchison wrote: > Do you have any frontend proxys? They would also have to be using > altnamespace. Yes, respectively 2 frontend proxys which are also the murder master and slave. So how can I managed from these proxys that I have backend servers with different altnamespace settings ? ... if it's possible ? > > > > On 04/11/2018 12:20 PM, Jean-Christophe Delaye wrote: >> Hello, >> >> We are currently running cyrus 2.4 in a murder configuration: 2 murder >> servers (master and slave) and 5 backend servers. >> As in 2.x version, the altnamespace value is set to its legacy value >> :off on all the server's imapd.conf. >> >> We would like to change the altnamespace value to on BUT only for some >> backend servers. The idea is to have a better integration for specific >> users depending of their mail clients. >> >> My question is: Is it possible in a murder cluster configuration to have >> backend servers with different altnamespace settings. If so, what is the >> impact of the murder servers altnamespace value ? >> >> Greetings. >> >> Cyrus Home Page: http://www.cyrusimap.org/ >> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ >> To Unsubscribe: >> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus > > > > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus > Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
backends with different altnamespace in a murder configuration
Hello, We are currently running cyrus 2.4 in a murder configuration: 2 murder servers (master and slave) and 5 backend servers. As in 2.x version, the altnamespace value is set to its legacy value :off on all the server's imapd.conf. We would like to change the altnamespace value to on BUT only for some backend servers. The idea is to have a better integration for specific users depending of their mail clients. My question is: Is it possible in a murder cluster configuration to have backend servers with different altnamespace settings. If so, what is the impact of the murder servers altnamespace value ? Greetings. Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Cyrus IMAP 3.0.0 and Oracle Solaris/Compiler
On 05/04/17 15:38, Stefan Rapp wrote:
> Hello,
Hi
What is your native compiler version ?
(solarisstudio12.4 or developerstudio12.5)
>
> i tried to compile Cyrus IMAP 3.0.0 on Oracle Solaris (x86) using the
> native compiler in 64bit mode. I used the same settings as for a working
> 2.5.10 setup. During start up i got "twoskip header CRC failure" opening
> mailboxes.db.
>
> To test my setup and to experiment with code changes i compiled the
> CUnit checks, found and solved some problems:
>
> - The command_popen for /usr/bin/tr in cunit/command.testc needs
> brackets ("[" and "]") for character classes.
>
> - LITTLE_ENDIAN used in lib/crc32.c, lib/crc32c.c and lib/xsha1.c is not
> defined. The configure script generates a correct definition of
> WORDS_BIGENDIAN. So the checks for LITTLE_ENDIAN should be replaced with
> negated checks for WORDS_BIGENDIAN.
>
> - The regcomp-call in lib/glob.c needs REG_EXTENDED as the last parameter.
>
> - There is no qsort_r support in Solaris and the construct used for GNUC
> doesn't work with the Oracle Compiler. I ended up using the BSD-Source
> for qsort_r.
>
> - The function cmpstringp_mbox in lib/bsearch.c returns 0 for strings
> that are of differing lengths and identical until the end of the first
> string (error in Suite: strarray, Test: sortuniq, mbox order sort). Adding
>
> if (cmp == 0) {
> cmp = TOCOMPARE(*s1) - TOCOMPARE(*s2);
> }
>
> before "return cmp;" helped (this error is also in 2.5.10, but i didn't
> notice before because i did no CUnit checks).
>
>
> I still have 16 errors in the CUnit sieve checks, but this is identical
> to 2.5.10. As the sieve scripts (seem to) work in our setup this could
> be a problem of the checks ???
>
>
> Greetings,
>
> Stefan
>
>
>
>
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Cyrus Squatter: No left space on device.
On 15/06/15 16:06, Tecnología UNNOBA wrote: Hello! i'm using cyrus IMAPD since 11 years, on Debian VM. [0] Now, I found this problem and I can't find docs or comments about it on web: # cyrus squatter -riv user/jgcha...@comunidad.unnoba.edu.ar Indexing mailbox user/jgcha...@comunidad.unnoba.edu.ar... Writing index update: No space left on device [0] localhost ver name : Cyrus IMAPD version: v2.4.17-caldav-beta10-Debian-2.4.17+caldav~beta10-18 97aa1c46 2014-07-22 vendor : Project Cyrus support-url: http://www.cyrusimap.org os : Linux os-version : 3.14-1-amd64 environment: Built w/Cyrus SASL 2.1.26 Running w/Cyrus SASL 2.1.26 Built w/Berkeley DB 5.3.28: (September 9, 2013) Running w/Berkeley DB 5.3.28: (September 9, 2013) Built w/OpenSSL 1.0.1k 8 Jan 2015 Running w/OpenSSL 1.0.2a 19 Mar 2015 Built w/zlib 1.2.8 Running w/zlib 1.2.8 CMU Sieve 2.4 TCP Wrappers NET-SNMP mmap = shared lock = fcntl nonblock = fcntl idle = poll * Partition has 1.3 TB and only 400 GB used. May be full in inode space??? Have you tried df -i * User mailbox has correct permissions. mda:/var/spool/cyrus/mail/domain/c/comunidad.unnoba.edu.ar/j/user/jgcharne# ls -all drwx-- 1 cyrus mail 150 jun 15 10:38 . drwx-- 1 cyrus mail 16 abr 13 11:17 .. -rw--- 1 cyrus mail 1105 jun 15 10:22 7. -rw--- 1 cyrus mail 7412 jun 15 10:22 cyrus.cache -rw--- 1 cyrus mail 227 jun 15 10:15 cyrus.header -rw--- 1 cyrus mail 800 jun 15 10:26 cyrus.index -rw--- 1 cyrus mail 112 jun 15 10:17 cyrus.squat drwx-- 1 cyrus mail 90 jun 10 05:17 Drafts drwx-- 1 cyrus mail 122 jun 15 10:00 Sent drwx-- 1 cyrus mail 90 jun 10 05:17 Spam drwx-- 1 cyrus mail 90 jun 10 05:17 Templates drwx-- 1 cyrus mail 90 jun 15 10:16 Trash Someone had this problem? Thanks in advance. Javier.- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Cyrus Caldav Murder integration
Hi, After successfully tested Cyrus IMAPD v2.4.17-caldav on a stand-alone Cyrus IMAP server, I wonder how to integrate CalDAV features in our running Imap systems. We're currently using 2 murder hosts and 4 backend servers, running in a cluster (Solaris) environment. Users mailboxes are distributed on 4 backends and I plan to offer caldendars to those users. I understand that the CalDAV module will automatically create the required calendars for a user the first time that the user authenticates to the CalDAV server; but what's happen if mailboxes are located on different backends ? - Do I have to configure CalDAV server only on the murder agreggator hosts ? - Is there (or in the future) such a proxy mode for http services (or referrals like sieve) ? - Or shall I consider using a separate Cyrus Caldav server acting as stand-alone calendar server with LOCAL mailboxes containing ONLY CAL information? Of course I'd like to published only one calendar url for all. Thanks. Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: PROPFIND Method Not Allowed caldav-beta9
On 03/06/2014 20:20, Ken Murchison wrote: Can you telnet to port 80 on the server and give it the following command (followed by 2 carriage returns): OPTIONS * HTTP/1.0 Thanks Ken, Connected to cyrus0.eurecom.fr. Escape character is '^]'. OPTIONS * HTTP/1.0 HTTP/1.1 200 OK Connection: close Date: Wed, 04 Jun 2014 08:00:23 GMT Cache-Control: no-cache Server: Cyrus/v2.4.17-caldav-beta9 (Murder) Cyrus-SASL/2.1.26 OpenSSL/1.0.0 zlib/1.2.3 libxml2/2.6.23 Allow: OPTIONS, GET, HEAD Content-Length: 0 On 06/03/2014 11:30 AM, Jean-Christophe Delaye wrote: We're trying to use calendars with Cyrus IMAPD v2.4.17-caldav-beta9. The following caldav settings are in imapd.conf httpmodules: caldav httpprettytelemetry: 1 calendarprefix: #calendars http/https process are listening. master[27932]: [ID local2.debug] listening for messages from http master[27932]: [ID local2.debug] listening for messages from https When trying to use calendars features with Thunderbird/24.5.0 Lightning/2.6.5, Create a new calendar (network) Format CalDAV Location http://cyrus0.eurecom.fr/dav/calendars/users/foo/Default/ I have errors in log: http[1360]: [ID 213405 local2.debug] read parse request-line http[1360]: [ID 472354 local2.debug] read parse headers http[1360]: [ID 702911 local2.info] x.eurecom.fr with Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 Lightning/2.6.5; PROPFIND /dav/calendars/users/foo/Default/ HTTP/1.1 (depth=0) = 405 Method Not Allowed (error=The requested method is not allowed for the URL.) http[1360]: [ID 286617 local2.debug] read_body(0x8) does anyone have any ideas what could be causing this ? Thanks in advance. Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: PROPFIND Method Not Allowed caldav-beta9
On 04/06/2014 13:08, Ken Murchison wrote: On 06/04/2014 04:03 AM, Jean-Christophe Delaye wrote: On 03/06/2014 20:20, Ken Murchison wrote: Can you telnet to port 80 on the server and give it the following command (followed by 2 carriage returns): OPTIONS * HTTP/1.0 Thanks Ken, Connected to cyrus0.eurecom.fr. Escape character is '^]'. OPTIONS * HTTP/1.0 HTTP/1.1 200 OK Connection: close Date: Wed, 04 Jun 2014 08:00:23 GMT Cache-Control: no-cache Server: Cyrus/v2.4.17-caldav-beta9 (Murder) Cyrus-SASL/2.1.26 OpenSSL/1.0.0 zlib/1.2.3 libxml2/2.6.23 Allow: OPTIONS, GET, HEAD Content-Length: 0 OK. It looks like configure didn't find some of the necessary prerequisites for CalDAV support when you compiled Cyrus. You need to have both SQLite and libical. When support for CalDAV is compiled in and enabled, your OPTIONS response should look something like this: HTTP/1.1 200 OK Connection: close Date: Wed, 04 Jun 2014 11:02:57 GMT Cache-Control: no-cache Server: Cyrus/git2.4.17-caldav-beta9+163 (Murder) Cyrus-SASL/2.1.26 OpenSSL/1.0.1e zlib/1.2.7 libxml/2.9.1 SQLite/3.7.13 libical/0.48 DAV: 1, 2, 3, access-control, extended-mkcol DAV: calendar-access, calendar-auto-schedule Allow: OPTIONS, GET, HEAD, POST, PUT, DELETE, TRACE Allow: PROPFIND, REPORT, COPY, MOVE, LOCK, UNLOCK, PROPPATCH, MKCOL, ACL Allow: MKCALENDAR Content-Length: 0 Ok that's it. It was a configure issue using ICAL_LIBS the linker flags for ICAL which had overriding pkg-config. Now, I have the following http response: HTTP/1.1 200 OK Connection: close Date: Wed, 04 Jun 2014 14:57:38 GMT Cache-Control: no-cache Server: Cyrus/v2.4.17-caldav-beta9 (Murder) Cyrus-SASL/2.1.26 OpenSSL/1.0.0 zlib /1.2.3 libxml2/2.6.23 SQLite/3.8.4.3 libical/1.0 iSchedule-Version: 1.0 DAV: 1, 2, 3, access-control, extended-mkcol DAV: calendar-access, calendar-auto-schedule Allow: OPTIONS, GET, HEAD, POST, PUT, DELETE Allow: PROPFIND, REPORT, COPY, MOVE, LOCK, UNLOCK, PROPPATCH, MKCOL, ACL Allow: MKCALENDAR Content-Length: 0 I confirm that module automatically create the required calendars for a user at the first login. cyrus0.eurecom.fr lm user.standard.%.% user.standard.#addressbooks.Default (\HasNoChildren) user.standard.#calendars.Default (\HasNoChildren) user.standard.#calendars.Inbox (\HasNoChildren) user.standard.#calendars.Outbox (\HasNoChildren) user.standard.Junk.Spam_Client (\HasNoChildren) user.standard.Junk.Spam_Server (\HasNoChildren) cyrus0.eurecom.fr lam user.standard.#calendars.Default standard lrswipkxtecda9 anyone 9 But, I have to deal with 404 Not Found. [ID 596527 local2.notice] login: standard Basic+TLS User logged in [ID 693975 local2.debug] dav_exec(standard.dav): CREATE TABLE IF NOT EXISTS ical_objs ( rowid INTEGER PRIMARY KEY, creationdate INTEGER, mailbox TEXT NOT NULL, resource TEXT NOT NULL, imap_uid INTEGER, lock_token TEXT, lock_owner TEXT, lock_ownerid TEXT, lock_expire INTEGER, comp_type INTEGER, ical_uid TEXT, organizer TEXT, dtstart TEXT, dtend TEXT, recurring INTEGER, transp INTEGER, sched_tag TEXT, UNIQUE( mailbox, resource ) ); [ID 693975 local2.debug] dav_exec(standard.dav): CREATE INDEX IF NOT EXISTS idx_ical_uid ON ical_objs ( ical_uid ); [ID 693975 local2.debug] dav_exec(standard.dav): CREATE TABLE IF NOT EXISTS vcard_objs ( rowid INTEGER PRIMARY KEY, creationdate INTEGER, mailbox TEXT NOT NULL, resource TEXT NOT NULL, imap_uid INTEGER, lock_token TEXT, lock_owner TEXT, lock_ownerid TEXT, lock_expire INTEGER, version INTEGER, vcard_uid TEXT, kind INTEGER, fullname TEXT, name TEXT, nickname TEXT, email TEXT, UNIQUE( mailbox, resource ) ); [ID 693975 local2.debug] dav_exec(standard.dav): CREATE INDEX IF NOT EXISTS idx_vcard_uid ON vcard_objs ( vcard_uid ); [ID 702911 local2.info] as standard with Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 Lightning/2.6.5; PROPFIND /dav/calendars/users/standard/Default/ HTTP/1.1 (depth=0) = 404 Not Found (error=The requested URL was not found on this server.) On 06/03/2014 11:30 AM, Jean-Christophe Delaye wrote: We're trying to use calendars with Cyrus IMAPD v2.4.17-caldav-beta9. The following caldav settings are in imapd.conf httpmodules: caldav httpprettytelemetry: 1 calendarprefix: #calendars http/https process are listening. master[27932]: [ID local2.debug] listening for messages from http master[27932]: [ID local2.debug] listening for messages from https When trying to use calendars features with Thunderbird/24.5.0 Lightning/2.6.5, Create a new calendar (network) Format CalDAV Location http://cyrus0.eurecom.fr/dav/calendars/users/foo/Default/ I have errors in log: http[1360]: [ID 213405 local2.debug] read parse request-line http[1360]: [ID 472354 local2.debug] read parse headers http[1360]: [ID 702911 local2.info] x.eurecom.fr with Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 Lightning/2.6.5; PROPFIND /dav/calendars/users/foo/Default/ HTTP/1.1 (depth=0) = 405
Re: PROPFIND Method Not Allowed caldav-beta9
On 04/06/2014 18:03, Ken Murchison wrote: On 06/04/2014 11:59 AM, Jean-Christophe Delaye wrote: On 04/06/2014 13:08, Ken Murchison wrote: On 06/04/2014 04:03 AM, Jean-Christophe Delaye wrote: On 03/06/2014 20:20, Ken Murchison wrote: Can you telnet to port 80 on the server and give it the following command (followed by 2 carriage returns): OPTIONS * HTTP/1.0 Thanks Ken, Connected to cyrus0.eurecom.fr. Escape character is '^]'. OPTIONS * HTTP/1.0 HTTP/1.1 200 OK Connection: close Date: Wed, 04 Jun 2014 08:00:23 GMT Cache-Control: no-cache Server: Cyrus/v2.4.17-caldav-beta9 (Murder) Cyrus-SASL/2.1.26 OpenSSL/1.0.0 zlib/1.2.3 libxml2/2.6.23 Allow: OPTIONS, GET, HEAD Content-Length: 0 OK. It looks like configure didn't find some of the necessary prerequisites for CalDAV support when you compiled Cyrus. You need to have both SQLite and libical. When support for CalDAV is compiled in and enabled, your OPTIONS response should look something like this: HTTP/1.1 200 OK Connection: close Date: Wed, 04 Jun 2014 11:02:57 GMT Cache-Control: no-cache Server: Cyrus/git2.4.17-caldav-beta9+163 (Murder) Cyrus-SASL/2.1.26 OpenSSL/1.0.1e zlib/1.2.7 libxml/2.9.1 SQLite/3.7.13 libical/0.48 DAV: 1, 2, 3, access-control, extended-mkcol DAV: calendar-access, calendar-auto-schedule Allow: OPTIONS, GET, HEAD, POST, PUT, DELETE, TRACE Allow: PROPFIND, REPORT, COPY, MOVE, LOCK, UNLOCK, PROPPATCH, MKCOL, ACL Allow: MKCALENDAR Content-Length: 0 Ok that's it. It was a configure issue using ICAL_LIBS the linker flags for ICAL which had overriding pkg-config. Now, I have the following http response: HTTP/1.1 200 OK Connection: close Date: Wed, 04 Jun 2014 14:57:38 GMT Cache-Control: no-cache Server: Cyrus/v2.4.17-caldav-beta9 (Murder) Cyrus-SASL/2.1.26 OpenSSL/1.0.0 zlib /1.2.3 libxml2/2.6.23 SQLite/3.8.4.3 libical/1.0 iSchedule-Version: 1.0 DAV: 1, 2, 3, access-control, extended-mkcol DAV: calendar-access, calendar-auto-schedule Allow: OPTIONS, GET, HEAD, POST, PUT, DELETE Allow: PROPFIND, REPORT, COPY, MOVE, LOCK, UNLOCK, PROPPATCH, MKCOL, ACL Allow: MKCALENDAR Content-Length: 0 I confirm that module automatically create the required calendars for a user at the first login. cyrus0.eurecom.fr lm user.standard.%.% user.standard.#addressbooks.Default (\HasNoChildren) user.standard.#calendars.Default (\HasNoChildren) user.standard.#calendars.Inbox (\HasNoChildren) user.standard.#calendars.Outbox (\HasNoChildren) user.standard.Junk.Spam_Client (\HasNoChildren) user.standard.Junk.Spam_Server (\HasNoChildren) cyrus0.eurecom.fr lam user.standard.#calendars.Default standard lrswipkxtecda9 anyone 9 But, I have to deal with 404 Not Found. [ID 596527 local2.notice] login: standard Basic+TLS User logged in [ID 693975 local2.debug] dav_exec(standard.dav): CREATE TABLE IF NOT EXISTS ical_objs ( rowid INTEGER PRIMARY KEY, creationdate INTEGER, mailbox TEXT NOT NULL, resource TEXT NOT NULL, imap_uid INTEGER, lock_token TEXT, lock_owner TEXT, lock_ownerid TEXT, lock_expire INTEGER, comp_type INTEGER, ical_uid TEXT, organizer TEXT, dtstart TEXT, dtend TEXT, recurring INTEGER, transp INTEGER, sched_tag TEXT, UNIQUE( mailbox, resource ) ); [ID 693975 local2.debug] dav_exec(standard.dav): CREATE INDEX IF NOT EXISTS idx_ical_uid ON ical_objs ( ical_uid ); [ID 693975 local2.debug] dav_exec(standard.dav): CREATE TABLE IF NOT EXISTS vcard_objs ( rowid INTEGER PRIMARY KEY, creationdate INTEGER, mailbox TEXT NOT NULL, resource TEXT NOT NULL, imap_uid INTEGER, lock_token TEXT, lock_owner TEXT, lock_ownerid TEXT, lock_expire INTEGER, version INTEGER, vcard_uid TEXT, kind INTEGER, fullname TEXT, name TEXT, nickname TEXT, email TEXT, UNIQUE( mailbox, resource ) ); [ID 693975 local2.debug] dav_exec(standard.dav): CREATE INDEX IF NOT EXISTS idx_vcard_uid ON vcard_objs ( vcard_uid ); [ID 702911 local2.info] as standard with Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 Lightning/2.6.5; PROPFIND /dav/calendars/users/standard/Default/ HTTP/1.1 (depth=0) = 404 Not Found (error=The requested URL was not found on this server.) /dav/calendars/users/standard/Default/ should be: /dav/calendars/user/standard/Default/ Thanks a lot ! Works fine -- Kenneth Murchison Principal Systems Software Engineer Carnegie Mellon University Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
PROPFIND Method Not Allowed caldav-beta9
We're trying to use calendars with Cyrus IMAPD v2.4.17-caldav-beta9. The following caldav settings are in imapd.conf httpmodules: caldav httpprettytelemetry: 1 calendarprefix: #calendars http/https process are listening. master[27932]: [ID local2.debug] listening for messages from http master[27932]: [ID local2.debug] listening for messages from https When trying to use calendars features with Thunderbird/24.5.0 Lightning/2.6.5, Create a new calendar (network) Format CalDAV Location http://cyrus0.eurecom.fr/dav/calendars/users/foo/Default/ I have errors in log: http[1360]: [ID 213405 local2.debug] read parse request-line http[1360]: [ID 472354 local2.debug] read parse headers http[1360]: [ID 702911 local2.info] x.eurecom.fr with Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 Lightning/2.6.5; PROPFIND /dav/calendars/users/foo/Default/ HTTP/1.1 (depth=0) = 405 Method Not Allowed (error=The requested method is not allowed for the URL.) http[1360]: [ID 286617 local2.debug] read_body(0x8) does anyone have any ideas what could be causing this ? Thanks in advance. Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Enabling IDLE with murder configuration
Hi, I am testing IDLE feature in our murder configuration (2 murder hosts + 4 backend servers). I understand I have to compile imapd with --enable-idled option. But I wonder on which server(s) i have to start the idled daemon in cyrus.conf ? on murder frontend only or imap backend only or both ? Of course mail clients are all connected to murder frontends only. Thank you, J-Christophe. Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
Re: Cyrus IMAP Murder and (SUN)Solaris Cluster
Gavin Gray wrote: We want to try and improve the resilience of our setup and are looking at a number of options to provide High Availability: . 2. Use Sun cluster to provide automatic failover for the backends somehow or another. . We do use Sun cluster at EURECOM. We are running Sun Cluster 3.2 on 2 nodes Solaris10 connected on San network with EMC Clariion Storage. Our Sun Cluster ressources groups are based on : - logical hosts (with IPMP) - HA storage zfs with zpool on EMC Lun. - GDS application hold the cyrus sasl and imap services. We are using separate ressources groups for backends, murder and frontend (a total of five at this time). We recently upgrade the configuration and introduce Solaris containers on each cluster node. The benefit is the possibility to run backends in non global zone within different subnet (for example in DMZ using IP Exclusive zone). Of course, this specific type of ressources groups can switch in non global zones on each cluster node, providing high availability. It works fine for us. Jean-Christophe. Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Retreiving folders size from clients
Hi, We're using cyrus server with quotas on top level user's mailbox. Quotawarn is set to inform user when the the limit has been reached. When the user is warned for quota size over limit, they'd like to look how big their folder are. It looks that some imap client can do it (Outlook), and others not (Thunderbird). I wonder if there's a standard way for retreive folders size from the client side ? thanks JC Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Best way to All Mark as Read
Hi, I wonder if there is a mechanism which provides a way to mark an entire Cyrus Imap hierachy (whith folders, messages and sub-folders etc) as Read. I find this feature usefull when migrating users in conjunction with Adaptive Filters for Junk mail controls. Thanks in advance! --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
filesystem directories not removed
Hey all, We have Cyrus IMAP server (2.1.9) with sasl (2.1.9) running on Solaris 2.8. This server works fine; users can create/delete/rename folders whitout problems. On the filesystem view, I noticed that when a user delete an imap folder from his imap client, the directory in the filesystem tree still remains present. Of course, the user can create again the same folder name, but I'm just wonder if there is a way to change this behavior. Thanks. Jean-Christophe DELAYE. --- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
locating vacation info
I've got a question about vacation informations associated with vacation sieve script. Where does sieve/cyrus store informations about expire date and sender user adress when vacation feature is activate for a particular user. Thanks. JC Delaye. --- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Using mailbox referrals
Hi, I've installed cyrus-imapd 2.2.3 and cyrus-sasl 2.1.17 and everything works fine. I'm just wondered how can I use the MAILBOX-REFERRALS capabilities of the imap server. I'm looking for a mechanism of mailbox location that would allow to dispatch some mailboxes within user space (specially for SPAM and/or Archives purposes) amongst different imap servers. I think the Cyrus IMAP is designed to implement the RFC2193. Is it possible to create such mailbox referrals between servers or is it a client feature ? I search the archive for mailbox referrals and found no useful information, except with the Cyrus Murder functionnality (xfermailbox and renamemailbox). Is murder the right way for using the mailbox-referral feature ? Thank you Jean-Christophe. --- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
