Re: Basic FAQs and HOWTOs

2005-02-17 Thread Wil Cooley
On 2005-02-16, Craig White [EMAIL PROTECTED] wrote: I am also interested in knowing how to generate self-signed certificates for tls connections on pop3/imap This is what I used... # openssl req -new -x509 -nodes -out /etc/ssl/cyrus-global.pem \ -keyout /etc/ssl/cyrus-global.pem -days 3650

Re: Cyrus logging

2005-02-17 Thread Rob MacGregor
On Thu, 17 Feb 2005 11:05:59 +1100, JB Hewit [EMAIL PROTECTED] wrote: I've been searching about and haven't been able to find anywhere to change the verbosity of Cyrus imap (ver 2.1.x). Check the settings of your syslog.conf file. Avoiding the debug level will help. On another note, I

Re: Treo 650 SSL Interaction with Cyrus

2005-02-17 Thread Alec H. Peterson
--On February 17, 2005 0:28:31 -0500 Derrick J Brashear [EMAIL PROTECTED] wrote: It is claimed that Versamail 3.0 on the Treo 650 works with SSL certs both from a ca and self-signed. I don't know, I only have a 600. But, on that basis I'd expect the API is capable of doing it. I have no

Re: Cyrus in ISP environment?

2005-02-17 Thread Marco Colombo
Jure Pe_ar wrote: On Wed, 16 Feb 2005 16:21:09 +0100 Attila Nagy [EMAIL PROTECTED] wrote: Amavisd was slow like hell, but cyrus could easily put email down to disk at a rate of 10-15 MBps. Take the above numbers with a grain of salt, because the testing was pretty lame 10-15MBps ... then add

Re: Treo 650 SSL Interaction with Cyrus

2005-02-17 Thread Ken Murchison
Alec H. Peterson wrote: Hi there, I am using a Treo 650 with Chatter IMAP (which has IDLE support) to sync with my Cyrus IMAP folders. It works great over port 143, however over port 993 the SSL refuses to synchronize. I've already been in contact with the developer of Chatter, and he says

Listing common user's ACLs from the admin's point of view (perl or PHP)

2005-02-17 Thread LaurentG
Hello, In order to manage common users status changes (indicated by the update of the LDAP directory) I'd need to enumerate all the granted ACLs my common user owns. As an admin, I don't have his password, so can't connect as his identity but need to list all ACLs he owns (except his own

Re: Cyrus in ISP environment?

2005-02-17 Thread Jure Pe_ar
On Thu, 17 Feb 2005 14:54:11 +0100 Marco Colombo [EMAIL PROTECTED] wrote: 10-15MBps ... then add a few hundred concurrent pop imap sessions plus some monitoring/statistical script walking your spool doing various operations and see this number fall down dramatically ... Because with

User directory hashing

2005-02-17 Thread Tucsek János
Title: User directory hashing Hi, Does anybody know, how to turn on directory hashing on users directory? So, for example: Our user's messages are in: /imap/domain/foobar.com/user/foo . . /imap/domain/foobar.com/user/bar directories. And the question is: is there any directory hashing

Re: User directory hashing

2005-02-17 Thread Jure Pe_ar
On Thu, 17 Feb 2005 16:56:57 +0100 Tucsek Jnos [EMAIL PROTECTED] wrote: Hi, Does anybody know, how to turn on directory hashing on users directory? So, for example: Our user's messages are in: /imap/domain/foobar.com/user/foo . . /imap/domain/foobar.com/user/bar directories.

Re: Treo 650 SSL Interaction with Cyrus

2005-02-17 Thread Alec H. Peterson
Oh man that's twisted, as soon as I started looking at it with ssldump it started working properly. Now I'm thoroughly confused. Alec --On February 17, 2005 9:27:55 -0500 Ken Murchison [EMAIL PROTECTED] wrote: Alec H. Peterson wrote: Hi there, I am using a Treo 650 with Chatter IMAP (which has

Re: Hardware RAID Level Performance

2005-02-17 Thread Aleksandar Milivojevic
Norman Zhang wrote: May I ask has anyone consider SATA RAID yet? I seems to be a very inexpensive solution. All inexpensive SATA RAID solutions are fake RAID. This includes almost all SATA controlers that are integrated into motherboards and marketed as RAID capable. They are software RAID.

Re: Basic FAQs and HOWTOs

2005-02-17 Thread Kevin P. Fleming
Wil Cooley wrote: Lately I've been trying to migrate my self-signed certs to certs generated with TinyCA from a self-signed root cert; that way once I import my root CA I can bypass all of the prompts. Yes, that is a much better plan. I do that for my clients who have private webmail/intranet

Re: Hardware RAID Level Performance

2005-02-17 Thread Andrew Morgan
On Thu, 17 Feb 2005, Aleksandar Milivojevic wrote: Norman Zhang wrote: May I ask has anyone consider SATA RAID yet? I seems to be a very inexpensive solution. All is not dark. There are several companies making real hardware RAID solutions that use SATA disks. 3ware is one of them and seems

Re: Hardware RAID Level Performance

2005-02-17 Thread Kevin P. Fleming
Andrew Morgan wrote: You may want to look into Dell's AX100 SAN (a rebranded version of the EMC Clariion AX100). These use SATA drives with a FC front end. They are relatively inexpensive for the amount of storage you can get, if your I/O needs match. You can also go a little more upscale

Re: Hardware RAID Level Performance

2005-02-17 Thread Aleksandar Milivojevic
Norman Zhang wrote: Thanks for your explanation. How's this one http://www.supermicro.com/products/accessories/addon/DAC-ZCRINT.cfm It uses Intel 80303 I/O processor boards? I'm planning to build my Cyrus-IMAPD on this HW. Don't know much about it. Looks as if it might be real hardware RAID. --

Re: Hardware RAID Level Performance

2005-02-17 Thread Jure Pe_ar
On Thu, 17 Feb 2005 10:19:28 -0800 (PST) Andrew Morgan [EMAIL PROTECTED] wrote: You may want to look into Dell's AX100 SAN (a rebranded version of the EMC Clariion AX100). These use SATA drives with a FC front end. They are relatively inexpensive for the amount of storage you can get, if

Re: Hardware RAID Level Performance

2005-02-17 Thread Jared Watkins
Andrew Morgan wrote: You may want to look into Dell's AX100 SAN (a rebranded version of the EMC Clariion AX100). These use SATA drives with a FC front end. They are relatively inexpensive for the amount of storage you can get, if your I/O needs match. You can also go a little more upscale

Re: Hardware RAID Level Performance

2005-02-17 Thread Henrique de Moraes Holschuh
On Thu, 17 Feb 2005, Aleksandar Milivojevic wrote: Norman Zhang wrote: Thanks for your explanation. How's this one http://www.supermicro.com/products/accessories/addon/DAC-ZCRINT.cfm It uses Intel 80303 I/O processor boards? I'm planning to build my Cyrus-IMAPD on this HW. Well, I have

Re: Hardware RAID Level Performance

2005-02-17 Thread Jure Pe_ar
On Thu, 17 Feb 2005 20:50:56 +0100 [EMAIL PROTECTED] wrote: If you want the benefits of host independant RAID and cheap SATA disks you may have a look at this one : http://www.icp-vortex.com/english/product/pci/rz_sata_8/8586rz_e.htm I'm actually very afraif of all those cards with plenty of

Re: Hardware RAID Level Performance

2005-02-17 Thread Norman Zhang
Henrique de Moraes Holschuh wrote: Thanks for your explanation. How's this one http://www.supermicro.com/products/accessories/addon/DAC-ZCRINT.cfm It uses Intel 80303 I/O processor boards? I'm planning to build my Cyrus-IMAPD on this HW. Well, I have something like it, an Intel SRCZCR. It is

Re: Hardware RAID Level Performance

2005-02-17 Thread Jim Bartus
Kevin P. Fleming wrote: Even better, they just released the AX100i, which uses iSCSI for the host interface. The array units are about the same price, but connectivity for 6-8 hosts is far, far cheaper than FC. FYI iSCSI eats up a ton of CPU unless you're using a TOE NIC. -jim --- Cyrus Home

Re: Hardware RAID Level Performance

2005-02-17 Thread David R Bosso
--On Thursday, February 17, 2005 10:56 PM +0100 Jure Pe ar [EMAIL PROTECTED] wrote: Because of that (and because I already have FC infrastructure in place) I'm mostly interested in standalone disk enclosures doing their own raid with cheap sata drives and big caches with batteries. I just ran

Re: Hardware RAID Level Performance

2005-02-17 Thread Norman Zhang
Henrique de Moraes Holschuh wrote: From the top of my head, about 4MB/s write and 10-30MB/s reading on a 5-disc RAID5 array. If that's enough for your needs, go for it. Linux software RAID can do better than that (but it eats some CPU *and* it doesn't drive the SAFTE enclosure, nor can it do

Re: Hardware RAID Level Performance

2005-02-17 Thread Henrique de Moraes Holschuh
On Thu, 17 Feb 2005, Norman Zhang wrote: Do you have some figures? From the top of my head, about 4MB/s write and 10-30MB/s reading on a 5-disc RAID5 array. If that's enough for your needs, go for it. Linux software RAID can do better than that (but it eats some CPU *and* it doesn't drive the

Re: Horde/IMP authentication to Cyrus via client certificates?

2005-02-17 Thread Edward Rudd
On Wed, 16 Feb 2005 21:18:07 -0700, Kevin P. Fleming wrote: [snip] Any thoughts on how difficult it would be to get Cyrus IMAP to accept a client certificate, validate it and automatically log in the user once that is done? I'll happily contribute the code back to CMU if I get it

Re: Hardware RAID Level Performance

2005-02-17 Thread Jure Pe_ar
On Thu, 17 Feb 2005 14:41:29 -0800 David R Bosso [EMAIL PROTECTED] wrote: I just ran across these today: http://www.synetic.net/Synetic-Products/SyneRAID-Units/SyneRAID6-16-3U/S yneRAID6-SATA.htm No experience with them, but they're the best specs I've seen for SATA external RAID -

Re: Horde/IMP authentication to Cyrus via client certificates?

2005-02-17 Thread Kevin P. Fleming
Edward Rudd wrote: This is really a Cyrus-SASL topic. as Cyrus IMAP doesn't really care how the user gets authenticated, only that the SASL layer authenticates the users. So client certificate authentication would have to be added as a SASL authentication module. It's never been clear to me where

Re: Hardware RAID Level Performance

2005-02-17 Thread Henrique de Moraes Holschuh
On Thu, 17 Feb 2005, Norman Zhang wrote: Henrique de Moraes Holschuh wrote: *All* Intel hardware RAID adapters look the same to the OS, AFAIK. So yes, it is supported by Linux 2.4 and 2.6, and very well supported at that.

Re: Horde/IMP authentication to Cyrus via client certificates?

2005-02-17 Thread Igor Brezac
On Thu, 17 Feb 2005, Edward Rudd wrote: On Wed, 16 Feb 2005 21:18:07 -0700, Kevin P. Fleming wrote: [snip] Any thoughts on how difficult it would be to get Cyrus IMAP to accept a client certificate, validate it and automatically log in the user once that is done? I'll happily contribute the code

Re: Horde/IMP authentication to Cyrus via client certificates?

2005-02-17 Thread pascal
Quoting Kevin P. Fleming [EMAIL PROTECTED]: Edward Rudd wrote: This is really a Cyrus-SASL topic. as Cyrus IMAP doesn't really care how the user gets authenticated, only that the SASL layer authenticates the users. So client certificate authentication would have to be added as a SASL

Re: Horde/IMP authentication to Cyrus via client certificates?

2005-02-17 Thread Kevin P. Fleming
Igor Brezac wrote: SASL/EXTERNAL is what you want although I have to not tried it. OpenLDAP works great. In theory, the CN part of the client certitificate subject needs to be a valid mailbox. You can test this with imtest -t client_cert_file -m EXTERNAL I assume that you have SSL/TLS

Re: Horde/IMP authentication to Cyrus via client certificates?

2005-02-17 Thread Kevin P. Fleming
[EMAIL PROTECTED] wrote: cyrus/imapd[15511]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication cyrus/imapd[15511]: login: localhost[127.0.0.1] pascal plaintext+TLS The no authentication at the end of the first line is due to client certicats are not allowed with

headers of letters on cyrus vs real

2005-02-17 Thread Golovanoff Sergio
Hi, pls sorry for my bad english. The source of the local copy: // ... X-UID: 8849 X-Length: 6462 Status: RO X-Status: ORT X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: This is a multi-part message in MIME format. --050605030209000904040105

Re: Horde/IMP authentication to Cyrus via client certificates?

2005-02-17 Thread pascal
Quoting Kevin P. Fleming [EMAIL PROTECTED]: [EMAIL PROTECTED] wrote: cyrus/imapd[15511]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication cyrus/imapd[15511]: login: localhost[127.0.0.1] pascal plaintext+TLS The no authentication at the end of the first line is due to

Re: Basic FAQs and HOWTOs

2005-02-17 Thread Forrest Aldrich
I ran into the infamous /var/imap/socket/lmtp write problem - all the permissions were correct. The issue was solved by completely removing Cyrus (and all directories) then rebuilding (FreeBSD port) and reinstalling. Then it work. I'm getting mail on my test machine - but now receiving this

Re: Horde/IMP authentication to Cyrus via client certificates?

2005-02-17 Thread Igor Brezac
On Thu, 17 Feb 2005, Kevin P. Fleming wrote: Igor Brezac wrote: SASL/EXTERNAL is what you want although I have to not tried it. OpenLDAP works great. In theory, the CN part of the client certitificate subject needs to be a valid mailbox. You can test this with imtest -t client_cert_file -m

Delete folders via another IMAP client

2005-02-17 Thread Forrest Aldrich
Using Cyrus IMAP 2.1.10 (FreeBSD port), I'm able to create folders within my account, but cannot delete them. The mailbox was created via standard cyradm: cyradm --user admin my.domain.com cm user/username Perhaps I missed a step here - I assume that creating a mailbox will permit for full

Re: Delete folders via another IMAP client

2005-02-17 Thread Craig White
On Fri, 2005-02-18 at 00:53 -0500, Forrest Aldrich wrote: Using Cyrus IMAP 2.1.10 (FreeBSD port), I'm able to create folders within my account, but cannot delete them. The mailbox was created via standard cyradm: cyradm --user admin my.domain.com cm user/username Perhaps I missed a