Re: [vchkpw] vchkpw with mysql

2004-08-25 Thread Brian
That' not the problem, Dave .. I still have the same problem ..

Error message in outlook

There was a problem logging onto your mail server. Your Password was
rejected. Account: 'Kai', Server: 'smtp.mydomain.tld', Protocol: POP3,
Server Response: 'vmysql: sql error[1]: Can't create database 'MyMailDB'.
Database exists', Port: 110, Secure(SSL): No, Server Error: 0x800CCC90,
Error Number: 0x800CCC92

the request try to create the database .. ??

error message in logfile

430 Connect [EMAIL PROTECTED] on
430 Query   create database mailuserdb
430 Query   INSERT INTO vlog set user=name,
passwd=xx, domain=mydomain.tld, [EMAIL PROTECTED],
remoteip=80.184.xxx.xx, message=vchkpw-pop3: vpopmail user not found
[EMAIL PROTECTED]:80.184.xx.xxx, error=1, timestamp=1093432933
430 Query   CREATE TABLE vlog ( id BIGINT PRIMARY
KEY AUTO_INCREMENT,   user char(32), passwd CHAR(32),   domain
CHAR(64), logon VARCHAR(200),   remoteip char(18), message VARCHAR(255),
timestamp bigint default 0 NOT NULL, error INT,   INDEX user_idx (user),
INDEX domain_idx (domain), INDEX remoteip_idx (remoteip),   INDEX
error_idx (error), INDEX message_idx (message) )
430 Query   INSERT INTO vlog set user=name,
passwd=xx, domain=friends69.com, logon=[EMAIL PROTECTED],
remoteip=80.184.xxx.xx, message=vchkpw-pop3: vpopmail user not found
[EMAIL PROTECTED]:80.184.xx.xxx, error=1, timestamp=1093432933
430 Quit


when everything is ok, it look like the follow,


040825 11:26:57 435 Connect [EMAIL PROTECTED] on mailuserdb
435 Query   select pw_name, pw_passwd, pw_uid,
pw_gid, pw_gecos, pw_dir, pw_shell from bihaatch_com where pw_name = user
435 Query   replace into lastauth set user=user,
domain=mydomain.tld, remote_ip=80.184.xxx.xx, timestamp=1093433217


It shows like the vpopmail try to create the database ... why ?? I try 10
times to recive my mail ... 9 are successfully. one time i have this
problem..


cheers, brian


- Original Message - 
From: Dave Goodrich [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, August 25, 2004 12:13 AM
Subject: Re: [vchkpw] vchkpw with mysql


 Brian wrote:

  Thanx for your help,
 
  I found sampels for smale, medium, large and huge systems. Now I have
  something to do ;-)
 
 No problem. I would suggest though if you are new to MySQL you first get
   vpopmail and qmail up and running, learn them and what they can do
 before you add MySQL auth.

 Other than ease of dealing with large numbers of users, there is no real
 advantage to using MySQL IMO. I found the standard vpopmail using cdb to
 very reliable, robust and quite fast. We only moved to MySQL auth to
 gain a better interface for user/domain management.

 DAve


  in debian is it in /usr/share/doc/mysql-server/examples/
 
  thanx, Brian
 
 
  - Original Message - 
  From: Dave Goodrich [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Tuesday, August 24, 2004 8:33 PM
  Subject: Re: [vchkpw] vchkpw with mysql
 
 
 
 Brian wrote:
 
 
 current my settings on my debian host
 
 key_buffer= 16M
 max_allowed_packet  = 1M
 
 that's the only places where I can change something ..
 
 Where is this? /etc/my.cnf? There are a lot of tunable vars that can be
 set in your my.cnf file. Look in your MySQL source, maybe in
 /usr/local/share/mysql, there are some sample *.cnf files in there. A
 lot depends on how much memory your system has, and how much it is
using.
 
 
 right to change this? I'm not a mysql professional :-(
 
 Sure, that is why it is there. Just make sure you know what you are
 changing, I'm no MySQL guru either.
 
 I would first get your bin log running and see what is going on with the
 mysql daemon. The select may not even be happening which is what I saw.
 
 http://dev.mysql.com/doc/mysql/en/Binary_log.html
 
 I'm no expert and may not be the best person to guide you through this
;^)
 
 DAve
 
 
 
 thanx for your help, Brian
 
 
 - Original Message - 
 From: Dave Goodrich [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Tuesday, August 24, 2004 7:52 PM
 Subject: Re: [vchkpw] vchkpw with mysql
 
 
 
 
 I have seen some similar issues with using vpopmail and MySQL. Most
 notably a failure to authenticate becasue MySQL doesn't respond
 correctly. Not sure if it was timing out or what. The solution was to
 give MySQL more resources over the default install.
 
 I upped my key, index, and table cache, increased my thread cache, now
I
 have no problems. I use MySQL heavliy though, three cluster machines
 hitting it all day, plus spamassassin uses it as well. YMMV.
 
 DAve
 
 Brian wrote:
 
 
 
 Hello List,
 
 I have installed vpopmail with mysql-support. It's running well but
 
 sometimes my mail client ask about username and password. Error message
 
  is
 
 the 

[vchkpw] problems with vpopmail + LDAP

2004-08-25 Thread Sebastian Shumari
Hello,

I have a few programs when I go to add a new domain :


[EMAIL PROTECTED] vpopmail]# /home/vpopmail/bin/vadddomain domain.org
password
Error: Invalid credentials (49)
Error. Failed while attempting to add domain to auth backend
Failed while attempting to delete domain from dir_control
Error: no auth connection


The steps that I make to arrive this are:
*

I compile vpopmail with this options:

[rootserver vpopmail-5.4.5]# ./configure --enable-logging=v
--enable-auth-module=ldap 

[...]
   vpopmail 5.4.5   
Current settings
---

vpopmail directory = /home/vpopmail
   uid = 89
   gid = 89
 roaming users = OFF --disable-roaming-users (default)
 password learning = OFF --disable-learn-passwords (default)
 md5 passwords = ON  --enable-md5-passwords (default)
  file locking = ON  --enable-file-locking (default)
vdelivermail fsync = OFF --disable-file-sync (default)
 make seekable = ON  --enable-make-seekable (default)
  clear passwd = ON  --enable-clear-passwd (default)
 user dir hashing  = ON  --enable-users-big-dir (default)
address extensions = OFF --disable-qmail-ext (default)
  ip alias = OFF --disable-ip-alias-domains (default)
 domain quotas = OFF --disable-domainquotas (default)
   auth module = ldap --enable-auth-module=ldap
  auth inc = -I/usr/local/include
  auth lib = -L/usr/local/lib -lldap -llber -lresolv
  system passwords = OFF --disable-passwd (default)
pop syslog = log success and errors including passwords
 --enable-logging=v
  auth logging = ON  --enable-auth-logging (default)




Obviusly then I do make  make install-strip.
Now I start the OpenLDP server without errors with this sladp.conf:

#
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/qmailUser.schema
schemacheck off

pidfile /var/run/slapd.pid
argsfile/var/run/slapd.args

databasebdb
suffix  o=vpopmail
rootdn  cn=vpopmailuser, o=vpopmail
rootpw  vpoppasswd
directory   /var/lib/ldap
index   objectClass pres,eq
index   cn,sn,uid   eq
index   qmailUID,qmailGID   eq
access to *
by self write
by dn=cn=vpopmailuser,o=vpopmail write
by * write


And the interface is listenning:
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address   Foreign Address
State   PID/Program name   
tcp0  0 0.0.0.0:389 0.0.0.0:*  
LISTEN  27398/slapd 


I create the vpopmail DB in the ldap system and I make sure that the
vpopmail DB exists:
[EMAIL PROTECTED] openldap]# ldapadd -f /var/lib/ldap/vpopmail.ldif -x -w
vpoppasswd -D'cn=vpopmailuser,o=vpopmail'
adding new entry o=vpopmail

All seems to be all right, but don't let me to add not any dommain as
you can see at the beginning. Also I have made a lot of tests changing
the vldap.h file from the vpopmail sources before doing configure and
make for all the night without positive results.

Any ideas and help are welcome.

Sebastian Shumari (Zmi)



Re: [vchkpw] vchkpw with mysql

2004-08-25 Thread Tom Collins
On Aug 25, 2004, at 4:40 AM, Brian wrote:
the request try to create the database .. ??
Upgrade to 5.4.5 or later (it would be best to go to 5.4.6 due to a 
security fix in that release).

At some point in the 5.3.x series, the MySQL code to connect to the 
database got changed around in a way that could result in the errors 
you see when MySQL was heavily loaded.  The change introduced in 5.4.5 
(by Françoi Wautier) uses an improved method.

--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/


Re: [vchkpw] vchkpw with mysql

2004-08-25 Thread Dave Goodrich
Brian wrote:
That' not the problem, Dave .. I still have the same problem ..
Error message in outlook
There was a problem logging onto your mail server. Your Password was
rejected. Account: 'Kai', Server: 'smtp.mydomain.tld', Protocol: POP3,
Server Response: 'vmysql: sql error[1]: Can't create database 'MyMailDB'.
Database exists', Port: 110, Secure(SSL): No, Server Error: 0x800CCC90,
Error Number: 0x800CCC92
the request try to create the database .. ??
Ahh, shame on me for not asking for more specifics about the error.
I believe Mr, Collins has given you the answer you are looking for.
DAve
error message in logfile
430 Connect [EMAIL PROTECTED] on
430 Query   create database mailuserdb
430 Query   INSERT INTO vlog set user=name,
passwd=xx, domain=mydomain.tld, [EMAIL PROTECTED],
remoteip=80.184.xxx.xx, message=vchkpw-pop3: vpopmail user not found
[EMAIL PROTECTED]:80.184.xx.xxx, error=1, timestamp=1093432933
430 Query   CREATE TABLE vlog ( id BIGINT PRIMARY
KEY AUTO_INCREMENT,   user char(32), passwd CHAR(32),   domain
CHAR(64), logon VARCHAR(200),   remoteip char(18), message VARCHAR(255),
timestamp bigint default 0 NOT NULL, error INT,   INDEX user_idx (user),
INDEX domain_idx (domain), INDEX remoteip_idx (remoteip),   INDEX
error_idx (error), INDEX message_idx (message) )
430 Query   INSERT INTO vlog set user=name,
passwd=xx, domain=friends69.com, logon=[EMAIL PROTECTED],
remoteip=80.184.xxx.xx, message=vchkpw-pop3: vpopmail user not found
[EMAIL PROTECTED]:80.184.xx.xxx, error=1, timestamp=1093432933
430 Quit
when everything is ok, it look like the follow,
040825 11:26:57 435 Connect [EMAIL PROTECTED] on mailuserdb
435 Query   select pw_name, pw_passwd, pw_uid,
pw_gid, pw_gecos, pw_dir, pw_shell from bihaatch_com where pw_name = user
435 Query   replace into lastauth set user=user,
domain=mydomain.tld, remote_ip=80.184.xxx.xx, timestamp=1093433217
It shows like the vpopmail try to create the database ... why ?? I try 10
times to recive my mail ... 9 are successfully. one time i have this
problem..
cheers, brian
- Original Message - 
From: Dave Goodrich [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, August 25, 2004 12:13 AM
Subject: Re: [vchkpw] vchkpw with mysql


Brian wrote:

Thanx for your help,
I found sampels for smale, medium, large and huge systems. Now I have
something to do ;-)
No problem. I would suggest though if you are new to MySQL you first get
 vpopmail and qmail up and running, learn them and what they can do
before you add MySQL auth.
Other than ease of dealing with large numbers of users, there is no real
advantage to using MySQL IMO. I found the standard vpopmail using cdb to
very reliable, robust and quite fast. We only moved to MySQL auth to
gain a better interface for user/domain management.
DAve

in debian is it in /usr/share/doc/mysql-server/examples/
thanx, Brian
- Original Message - 
From: Dave Goodrich [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, August 24, 2004 8:33 PM
Subject: Re: [vchkpw] vchkpw with mysql



Brian wrote:

current my settings on my debian host
key_buffer= 16M
max_allowed_packet  = 1M
that's the only places where I can change something ..
Where is this? /etc/my.cnf? There are a lot of tunable vars that can be
set in your my.cnf file. Look in your MySQL source, maybe in
/usr/local/share/mysql, there are some sample *.cnf files in there. A
lot depends on how much memory your system has, and how much it is
using.

right to change this? I'm not a mysql professional :-(
Sure, that is why it is there. Just make sure you know what you are
changing, I'm no MySQL guru either.
I would first get your bin log running and see what is going on with the
mysql daemon. The select may not even be happening which is what I saw.
http://dev.mysql.com/doc/mysql/en/Binary_log.html
I'm no expert and may not be the best person to guide you through this
;^)
DAve


thanx for your help, Brian
- Original Message - 
From: Dave Goodrich [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, August 24, 2004 7:52 PM
Subject: Re: [vchkpw] vchkpw with mysql



I have seen some similar issues with using vpopmail and MySQL. Most
notably a failure to authenticate becasue MySQL doesn't respond
correctly. Not sure if it was timing out or what. The solution was to
give MySQL more resources over the default install.
I upped my key, index, and table cache, increased my thread cache, now
I
have no problems. I use MySQL heavliy though, three cluster machines
hitting it all day, plus spamassassin uses it as well. YMMV.
DAve
Brian wrote:


Hello List,
I have installed vpopmail with mysql-support. It's running well but
sometimes my mail client ask about username and password. Error message
is


[vchkpw] Vpopmail with Clamd

2004-08-25 Thread Juan Enciso Condeña
Is there a software able of use .qmail-default file for scanning viruses
using clamd? I don't want use qmail-scanner.

I only saw that spamc work with vpopmail.



Re: [vchkpw] Vpopmail with Clamd

2004-08-25 Thread Tom Collins
On Aug 25, 2004, at 8:57 AM, Juan Enciso Condeña wrote:
Is there a software able of use .qmail-default file for scanning 
viruses
using clamd? I don't want use qmail-scanner.
Take a look at qscanq http://www.qscanq.org/.  It goes in front of 
qmail-queue and will block incoming messages that contain viruses.  
Saves a lot of processing time (since it doesn't queue, scan, and 
generate a bounce).

--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/


Re: [vchkpw] Vpopmail with Clamd

2004-08-25 Thread Payal Rathod
On Wed, Aug 25, 2004 at 10:57:49AM -0500, Juan Enciso Conde?a wrote:
 Is there a software able of use .qmail-default file for scanning viruses
 using clamd? I don't want use qmail-scanner.

clamdscan itself can work from .qmail file or you might want to try 
qmvc.

-Payal


Re: [vchkpw] Qmail SMTP AUTH + vchkpw on 64 bit...

2004-08-25 Thread Jacob S.
On Thu, 19 Aug 2004 10:36:47 -0700
Tom Collins [EMAIL PROTECTED] wrote:

 Could someone with this problem use strace (or ptrace?) to get a trace
 
 of what happens when vchkpw is called?
 
 It should be as easy as adding: /usr/bin/strace -ff -o 
 /tmp/vchkpw.dump right before /home/vpopmail/bin/vchkpw in the 
 qmail-smtpd/run file.
 
 Attempt a SMTP AUTH connection, and then send me a copy of the 
 /tmp/vchkpw.dump file and I'll try to isolate the source of the 
 problem.

Is an strace from a working 64 bit installation of any help?

I'm unable to duplicate this bug on a new vpopmail 5.4.5 installation
using the qmailrocks.org toaster on a Sun Ultra 10 with a 64bit Sparc
processor.

Jacob

-- 
GnuPG Key: 1024D/16377135

Random .signature #9:
Going from DOS to Linux is like trading a glider for an F117. 


pgpH8JE2X06ii.pgp
Description: PGP signature


Re: [vchkpw] vchkpw with mysql

2004-08-25 Thread Brian
Thanx Tom.

current I use 5.4.0 . I try to update it to 5.4.6.

Cheers, Brian

- Original Message - 
From: Tom Collins [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, August 25, 2004 4:41 PM
Subject: Re: [vchkpw] vchkpw with mysql


On Aug 25, 2004, at 4:40 AM, Brian wrote:
 the request try to create the database .. ??

Upgrade to 5.4.5 or later (it would be best to go to 5.4.6 due to a
security fix in that release).

At some point in the 5.3.x series, the MySQL code to connect to the
database got changed around in a way that could result in the errors
you see when MySQL was heavily loaded.  The change introduced in 5.4.5
(by Françoi Wautier) uses an improved method.

--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/



Re: [vchkpw] Vpopmail with Clamd

2004-08-25 Thread Japheth Cleaver
At 08:57 AM 8/25/2004, Juan Enciso Condeña wrote:
Is there a software able of use .qmail-default file for scanning viruses
using clamd? I don't want use qmail-scanner.
I only saw that spamc work with vpopmail.

I couldn't find any, and so wrote my own that does something similar to that :)
Solution we used:
1) Patch vdelivermail to, upon finding a BLAH environment variable, leave 
the message in Maildir/tmp and run an external program specified in BLAH a 
la the QMQ patch. (We call this vrecordmail). Several arguments are given 
to BLAH: the user, domain, msg size, and the full path to the message.
   - Program BLAH stores a record of the message in a MySQL DB (a queue) 
and flags it in the queue for processing.
   - Program BLAH exits cleanly to vdelivermail, which exits with success 
to qmail-local.

2) Replace ~vpopmail/bin/vdelivermail with a simple ash script that sets 
the BLAH environment variable to the program, and then exec's the original 
vdelivermail with the arguments it was given. (Just like the QMQ patch, it 
can be selectively enabled.)

3) A separate process (we call vprocessmail) runs via supervise and 
queries for entries from the queue DB that need to be processed. We read 
each entry, checking for race conditions at each step  along the way, and:
   a) Punt if over a specific size,
   b) Use ripmime to expand the message to tempdir on a RAM disk
   c) Clamdscan the tempdir
   d) If dirty, replace the body with a warning message including the 
virus found, time spent, and boilerplate; otherwise perform spam scanning 
(Mail::SpamAssassin, dspam) and other other message tweaking/rewriting per 
user prefs.
   e) Add headers with info about d)
   f) Update the queue DB with the same info
   g) If message is being deleted, delete message, and move on to the next 
msg.
   h) Otherwise write the re-written message back out as 
Maildir/tmp/.tmp.(origfilename)
   i) rename to Maildir/tmp/origfilename
   j) rename to Maildir/new/origfilename
   k) Record success and move onto the next message.
   l) If last message has been reached, sleep 7-12 seconds (randomly), 
query the queue again, and repeat.

It works great for us, and also has the benefit of not spending any 
processing power on messages that aren't being delivered locally (ie, the 
final delivery). For scanning mail on a server used primarily for outgoing 
mail (or forwarding messages), a qmail-queue-based solution might work better.

Having the queue DB based makes for really easy reporting and forensics 
too, and it's all written in Perl, so the sky's the limit in terms of 
functionality.

YMMV... but let me know if you want any more info on the setup, or code :)

Regards,
Japheth Cleaver
[EMAIL PROTECTED]
[EMAIL PROTECTED]