Re: [vchkpw] Failing logins - mysql issue?
On Thursday 08 July 2004 10:20 pm, Charles Sprickman wrote:
> On Thu, 8 Jul 2004, Jeremy Kitchen wrote:
> > http://untroubled.org/relay-ctrl
> >
> > safe over nfs
> > doesn't require rebuilding a cdb file every authentication
> > easy to install
>
> I know, I saw you mention this the other day, but I'm not using
> qmail-pop3d, I'm running courier. If I switch pop3 servers again, people
> will go nuts ("Why am I getting my WHOLE inbox again??", blah blah blah).
as far as I know, it works with courier-{pop3,imap} as well, or at least it
says it does :>
> I may try it on my own box though. I just finished setting up Bruce's
> smtpfront for someone else. Pretty nifty stuff.
yea, I've been running smtpfront for a while now. I really like the smtp-auth
interface :) Now just to make it use TLS :)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
Re: [vchkpw] Failing logins - mysql issue?
You should be able to use relay-ctrl with courier-pop. I'm using it
successfully with courier-imap and the courier-imap and courier-pop
daemons use the same backend auth stuff which is what you need (relay-ctrl
only needs the authenticated POP or IMAP login to open SMTP).
-Bill
> On Thu, 8 Jul 2004, Jeremy Kitchen wrote:
>
>> http://untroubled.org/relay-ctrl
>>
>> safe over nfs
>> doesn't require rebuilding a cdb file every authentication
>> easy to install
>
> I know, I saw you mention this the other day, but I'm not using
> qmail-pop3d, I'm running courier. If I switch pop3 servers again, people
> will go nuts ("Why am I getting my WHOLE inbox again??", blah blah blah).
>
> I may try it on my own box though. I just finished setting up Bruce's
> smtpfront for someone else. Pretty nifty stuff.
>
> Charles
>
>> -Jeremy
>>
*
Waveform Technology
UNIX Systems Administrator
Re: [vchkpw] Failing logins - mysql issue?
On Thu, 8 Jul 2004, Jeremy Kitchen wrote:
> http://untroubled.org/relay-ctrl
>
> safe over nfs
> doesn't require rebuilding a cdb file every authentication
> easy to install
I know, I saw you mention this the other day, but I'm not using
qmail-pop3d, I'm running courier. If I switch pop3 servers again, people
will go nuts ("Why am I getting my WHOLE inbox again??", blah blah blah).
I may try it on my own box though. I just finished setting up Bruce's
smtpfront for someone else. Pretty nifty stuff.
Charles
> -Jeremy
>
> --
> Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
> [EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l
> kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
>
>
Re: [vchkpw] Failing logins - mysql issue?
On Thursday 08 July 2004 09:11 pm, Charles Sprickman wrote: > > I always turn auth logging and roaming users off on replicated setups > > anyways, so I'm not 100% sure, but it's logical enough. > > I think I'll rebuild tonight and kill the authinfo logging. Still need > the roaming stuff, but might be able to push the few laggers to smtp-auth. > I've always hated the idea of pop-before-smtp anyway. http://untroubled.org/relay-ctrl safe over nfs doesn't require rebuilding a cdb file every authentication easy to install -Jeremy -- Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc. [EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
Re: [vchkpw] Failing logins - mysql issue?
On Thu, 8 Jul 2004, Jeremy Kitchen wrote: > On Thursday 08 July 2004 04:39 pm, Charles Sprickman wrote: > > Just following up to myself with a related question... > > > > If I have a seperate update server, and the read-only server is working > > fine, does any failure on the update server (doing relay and lastauth) > > cause pop/imap/smtp-auth logins to fail? > > I believe it may if you're using auth logging and roaming users, because it > has to update that information in the proper tables on the database server. If anyone can definitively give me a yes/no on this one, it would be a huge help in my troubleshooting. Neither answer is really good news, but that's OK. > I always turn auth logging and roaming users off on replicated setups anyways, > so I'm not 100% sure, but it's logical enough. I think I'll rebuild tonight and kill the authinfo logging. Still need the roaming stuff, but might be able to push the few laggers to smtp-auth. I've always hated the idea of pop-before-smtp anyway. C > -Jeremy > > -- > Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc. > [EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l > kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail > >
Re: [vchkpw] Failing logins - mysql issue?
On Thursday 08 July 2004 04:39 pm, Charles Sprickman wrote: > Just following up to myself with a related question... > > If I have a seperate update server, and the read-only server is working > fine, does any failure on the update server (doing relay and lastauth) > cause pop/imap/smtp-auth logins to fail? I believe it may if you're using auth logging and roaming users, because it has to update that information in the proper tables on the database server. I always turn auth logging and roaming users off on replicated setups anyways, so I'm not 100% sure, but it's logical enough. -Jeremy -- Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc. [EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
Re: [vchkpw] Failing logins - mysql issue?
Just following up to myself with a related question... If I have a seperate update server, and the read-only server is working fine, does any failure on the update server (doing relay and lastauth) cause pop/imap/smtp-auth logins to fail? I've temporarily offloaded the read-only stuff to a seperate box, but I saw a re-occurence today of database hiccups on the update server, and also saw a string of login failures, so I'm wondering if the problem has followed me to the new db box or if the updates bogging down can hang the password checking routines. Thanks, Charles On Thu, 1 Jul 2004, Charles Sprickman wrote: > Hi, > > I read with some interest the thread about 5.4.5 that mentions this > particular error: > > Jul 1 19:11:41 blah pop3d: vmysql: sql error[1]: Can't create database > 'vpopmail'. Database exists > > Today we've been getting a ton of complaints about users needing to enter > their passwords multiple times. This is pop, imap, and smtp-auth. > Additionally it looks like the chkusr patch is having issues as well; I've > seen a few bounces (my C-coding buddy is hopefully going to get that patch > to act a bit more nicely if it can't hit mysql). This is vpopmail 5.3.30, > mysql 4.0.17 on FreeBSD 4.8. > > Seeing as I'm getting failures across the board, I have to assume there's > some issue with accessing mysql. > > The box is working hard, but not struggling. I've seen the above errors > when the load is as low as .40. MySQL is set to a max-connections of > 2000. MySQL does not log anything interesting when I enable logging > except for the expected "Aborted connection" messages from the vpopmail > stuff not calling mysql_close(). > > I'm stumped here. MySQL seems to be fine, the load isn't insane, the > vpopmail user has no cpu/file limits, nor does MySQL's user, yet all > vpopmail stuff that hits the db fails periodically. > > Any ideas what to look at? > > I know I should get on 5.4.x, but I have to test that elsewhere for any > surprises first. >
Re: [vchkpw] Failing logins - mysql issue?
On Thu, 1 Jul 2004, Tom Collins wrote: > If you have roaming users (POP before SMTP) enabled, it stores the IP > information in a table. Every POP auth will generate an update or > replace into that table. Ah. Thanks, I thought there was something, but that slipped my mind. The more I look at this, the more it looks like a resource contention issue between mysql and qmail/vpopmail. While the load is low, there are blocked processes (according to vmstat) and context switches are through the roof. I've seen this before in other qmail installs; if I understand what "context switches" are correctly, it means that the kernel is spending an inordinate amount of time juggling processes... Any hints for large sites? Anyone here running vpopmail for more than a few thousand users? It looks like a quick band-aid is to run mysql on another server. Thanks, Charles > I think it also updates a "last login" timestamp for each user when > they authenticate (vuserinfo reports this information). > > -- > Tom Collins - [EMAIL PROTECTED] > QmailAdmin: http://qmailadmin.sf.net/ Vpopmail: http://vpopmail.sf.net/ > Info on the Sniffter hand-held Network Tester: http://sniffter.com/ > >
Re: [vchkpw] Failing logins - mysql issue?
On Jul 1, 2004, at 7:56 PM, Charles Sprickman wrote: Just to add a bit, it certainly looks mysql related. But one thing that's really got me stumped is that my db is showing almost as many "update" and "replace" queries as "select" queries, which seems kind of odd. I'm not creating new users, and the mysql logging is disabled. As far as I can recall, vpopmail is just doing select's right? If you have roaming users (POP before SMTP) enabled, it stores the IP information in a table. Every POP auth will generate an update or replace into that table. I think it also updates a "last login" timestamp for each user when they authenticate (vuserinfo reports this information). -- Tom Collins - [EMAIL PROTECTED] QmailAdmin: http://qmailadmin.sf.net/ Vpopmail: http://vpopmail.sf.net/ Info on the Sniffter hand-held Network Tester: http://sniffter.com/
Re: [vchkpw] Failing logins - mysql issue?
Just to add a bit, it certainly looks mysql related. But one thing that's really got me stumped is that my db is showing almost as many "update" and "replace" queries as "select" queries, which seems kind of odd. I'm not creating new users, and the mysql logging is disabled. As far as I can recall, vpopmail is just doing select's right? Charles On Thu, 1 Jul 2004, Charles Sprickman wrote: > Hi, > > I read with some interest the thread about 5.4.5 that mentions this > particular error: > > Jul 1 19:11:41 blah pop3d: vmysql: sql error[1]: Can't create database > 'vpopmail'. Database exists > > Today we've been getting a ton of complaints about users needing to enter > their passwords multiple times. This is pop, imap, and smtp-auth. > Additionally it looks like the chkusr patch is having issues as well; I've > seen a few bounces (my C-coding buddy is hopefully going to get that patch > to act a bit more nicely if it can't hit mysql). This is vpopmail 5.3.30, > mysql 4.0.17 on FreeBSD 4.8. > > Seeing as I'm getting failures across the board, I have to assume there's > some issue with accessing mysql. > > The box is working hard, but not struggling. I've seen the above errors > when the load is as low as .40. MySQL is set to a max-connections of > 2000. MySQL does not log anything interesting when I enable logging > except for the expected "Aborted connection" messages from the vpopmail > stuff not calling mysql_close(). > > I'm stumped here. MySQL seems to be fine, the load isn't insane, the > vpopmail user has no cpu/file limits, nor does MySQL's user, yet all > vpopmail stuff that hits the db fails periodically. > > Any ideas what to look at? > > I know I should get on 5.4.x, but I have to test that elsewhere for any > surprises first. >
