Re: sieveshell install without cyrus?

2002-09-19 Thread Chris Hilts

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Scott Russell wrote:
| Greets.
|
| For end users on Linux, does anyone have a package or instructions
| that will allow the user to download and install sieveshell without
| actually installing the entire Cyrus IMAPd?

Sieveshell is part of cyrus-admin (or in my case, cyrus21-admin).  It
requires perl, and the SASL libs, but you don't need to install the rest
of Cyrus to use it.

Hope this helps,
Chris Hilts
[EMAIL PROTECTED]

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE9idfhVoQRzGM4NJkRAhEjAJ9o4kCDfV+l63iLEiiHzROqVcl8wgCfQ6Q0
PHb+jZAAI4kwd07K9Pk9AR8=
=KfJ1
-END PGP SIGNATURE-




Re: sieveshell install without cyrus?

2002-09-19 Thread Chris Hilts

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Scott Russell wrote:
| Greets.
|
| For end users on Linux, does anyone have a package or instructions
| that will allow the user to download and install sieveshell without
| actually installing the entire Cyrus IMAPd?

Oh, lordy.  I thought I was still on one of the Debian lists. *whack self*

Sieveshell requires the SASL libs and perl.  You should be able to
install it manually without too much trouble, although I'm afraid I
don't know the exact steps involved.  Should just need to install SASL
as usual, then copy the sieveshell perl script someplace in your path.

Sorry for the confusion (on my part, of course).

Chris Hilts
[EMAIL PROTECTED]

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE9idjnVoQRzGM4NJkRAgDSAKDRSKou6UKkNtOpV/LDyCimgQVRbwCgth2F
2klkvGq4Y/fcZJO3cStWXi0=
=dk8N
-END PGP SIGNATURE-




Re: newbie question

2002-10-02 Thread Chris Hilts

> I just reinstalled debian (3.0) to my linux box and this time I
> installed cyrus-imapd from .deb packages.. (got exim as the mailerpart)
>
> Now I'm just wondering, how the hell do I create those mailboxes for
> users? I'm starting to lose hair due this. :-p

Assuming you've configured it the way you want it, now you can use cyradm
to connect and create mailboxes.  Check the documentation, this part is
documented quite well.  If you'll have trouble with anything, it'll be
SASL.  I just put up a Debian cyrus server, so if you get stuck again just
drop me a line.  Good luck.

-- 
Chris Hilts
[EMAIL PROTECTED]






SIEVE rejecting to recipient, not sender

2002-10-04 Thread Chris Hilts


I have added the following SIEVE rule as a test case:

if header :is "Subject" "mytest" {
reject "This message has been refused.";
stop;
}

When I get a message with the subject 'mytest' to this account, I get the
rejection notice.  I don't get the original message, and it doesn't send
the rejection to the sender.  I don't recognize anything significant in
the logs, of which I've attached an excerpt below.

Oct  4 16:18:10 central cyrus/lmtpd[12101]: telling master 3
Oct  4 16:18:10 central cyrus/lmtpd[12101]: lmtp connection preauth'd as
postman
Oct  4 16:18:10 central cyrus/master[11985]: service lmtpunix now has 0
workers
Oct  4 16:18:10 central cyrus/master[11985]: service lmtpunix now has 0
workers
Oct  4 16:18:10 central postfix/smtpd[12081]: disconnect from
localhost[127.0.0.1]
Oct  4 16:18:10 central cyrus/lmtpd[12101]: mystore: starting txn
2147483756 Oct  4 16:18:10 central cyrus/lmtpd[12101]: mystore: committing
txn 2147483756
Oct  4 16:18:10 central cyrus/lmtpd[12101]: duplicate_mark:
<[EMAIL PROTECTED]> .chilts+.sieve. 
1033762690
Oct  4 16:18:10 central cyrus/lmtpd[12101]: telling master 1
Oct  4 16:18:10 central cyrus/master[11985]: service lmtpunix now has 1
workers
Oct  4 16:18:10 central postfix/pipe[12083]: CA744219061:
to=<[EMAIL PROTECTED]>, relay=cyrus, delay=0, status=sent
(birdbrained.org)
Oct  4 16:18:10 central amavis[11897]: mail checking ended: DELIVERED Oct 
4 16:18:10 central postfix/smtp[12078]: 774ED21905D:
to=<[EMAIL PROTECTED]>, relay=127.0.0.1[127.0.0.1], delay=0,
status=sent (250 Ok, id=11897-07, from MTA: Ok: queued as CA744219061)

Any suggestions would be appreciated.
-- 
Chris Hilts
[EMAIL PROTECTED]


-- 
Chris Hilts
[EMAIL PROTECTED]






Re: SIEVE rejecting to recipient, not sender *SOLVED*

2002-10-07 Thread Chris Hilts

> When I get a message with the subject 'mytest' to this account, I get
> the rejection notice.  I don't get the original message, and it
> doesn't send the rejection to the sender.  I don't recognize anything
> significant in the logs, of which I've attached an excerpt below.

My MTA was configured to use cyrdeliver and was adding a Return-Path:
header with my address to it, so any rejections were coming right back
to me.  I've fooled around with it, and now postfix is using lmtp (which
to be honest I thought it already was - oops).

Now, if I can only figure out how to make my home machine (running Exim)
add a proper return-path header..

Hope this helps someone in my situation someday.

Chris







Re: lmtp via TCP (localhost)

2002-10-08 Thread Chris Hilts


> I setup sendmail 8.12.6 to use TCP for lmtp rather than UNIX sockets.

> Oct  8 08:48:02 miller sendmail[787]: g98Dm0CH000786:
> to=<[EMAIL PROTECTED]>,  ctladdr=<[EMAIL PROTECTED]> (106/20),
> delay=00:00:01,
> xdelay=00:00:00, mailer=cyrusv2, pri=30584, relay=localhost.foobar.com.
> [127.0.0.1], dsn=4.0.0, stat=Deferred: 430 Authentication requ
> ired

Edit your cyrus config file.  See the line like this:

lmtpcmd="lmtpd" listen="localhost:lmtp" prefork=0 maxchild=20

Add -a to the cmd portion.  (cmd="lmtpd -a").  Quick and easy, which means
there must be a downside.  And there is - anything that connects to the
lmtp port on localhost is automatically authenticated.  Might not be a
smokin' hot idea for boxes with shell accounts.

The alternative (and no, I haven't done this yet) is to configure your MTA
to use SASL to authenticate when it connects.  I know Postfix can do this,
but I haven't played with sendmail in a long, long time.  If you're going
to go this route, you don't add the -a to the lmtpd command like I
described above.

Hope this helps in some way.

Chris Hilts
[EMAIL PROTECTED]






Re: How to suppress "Couldn't find mech CRAM-MD5" message

2006-03-13 Thread Chris Hilts
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

> We don't support CRAM-MD5, but we don't want to be warned every time
> somebody tries to use it.  Cyrus SASL was compiled without CRAM-MD5
> support.  Here is some other configuration information:

Is Cyrus reporting it can do CRAM-MD5 in the CAPABILITY response?  What
have you got your "sasl_mech_list" set to?

- --
Chris Hilts
[EMAIL PROTECTED]
Say it with flowers -- Send them a triffid!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.1 (MingW32)

iD8DBQFEFYz/98ixrK2vMtARAs69AKCRGBKG6b+BL/tpcbib4XTJcVp71ACfTXrO
s0pFhstoa8fHtJWqYu57tio=
=8As2
-END PGP SIGNATURE-

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: setting up tls

2006-04-19 Thread Chris Hilts
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

nikhil BS wrote:
> how do i setup cyrus to use the starttls command?i tried creating some
> certificates using openssl set the tls_cert_* fields in the imapd.conf
> file and have gotten nowhere. help please

What have you tried?  Post the relevant portions of your config.  We
need details to be able to help.

- --
Chris Hilts
[EMAIL PROTECTED]
Say it with flowers -- Send them a triffid!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (MingW32)

iD8DBQFERj2R98ixrK2vMtARAjs2AJ4y2Dkc1QY91pwafF0Aw6IfpS5rVwCbBEG+
7Nsll2Ua4hJP9arvRG+s9AM=
=WY7L
-END PGP SIGNATURE-

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: autocreate: why do I need autocreatequota?

2006-04-25 Thread Chris Hilts
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Andreas Hasenack wrote:
> Regarding the autocreate patches, did I missread the documentation or do
> I need to set a default quota for an user? Why can't I just give these
> autocreated mailboxes unlimited quota?

I'd say you misread the documentation.  If you want unlimited quota and
autocreate enabled, try a negative number.

- From man imapd.conf:

autocreatequota: 0

If nonzero, normal users may create their  own  IMAP  accounts  by
   creating  the mailbox INBOX.  The user's quota is set to the
valueif it is positive, otherwise the user has unlimited quota.


- --
Chris Hilts
[EMAIL PROTECTED]
Say it with flowers -- Send them a triffid!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (MingW32)

iD8DBQFETlCm98ixrK2vMtARAi6qAKCdexnlL2R8TP5SiY2KqPOxuNpIzQCePfig
Nx+uqk6DdS1vIAI0k2T9GbI=
=9fK7
-END PGP SIGNATURE-

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Implementing IMAP advice for first timer

2006-05-24 Thread Chris Hilts
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Sebastian Hagedorn wrote:

> Don't bother with Courier, it's not a real IMAP server.

It isn't?  Since when?

- --
Chris Hilts
[EMAIL PROTECTED]
Say it with flowers -- Send them a triffid!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (MingW32)

iD8DBQFEdFPC98ixrK2vMtARAqk4AJ0Z4KP0Tf3ful8ZDNAy5V3JP7PY7gCfff0x
DEwpJy2L+vYrNOJmWTB2o2A=
=A83f
-END PGP SIGNATURE-

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Looking for a *good* X based GUI IMAP client for Cyrus IMAP ...

2006-06-13 Thread Chris Hilts
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Greg A. Woods wrote:
> The report about Thunderbird on Windoze not using the squat index is
> interesting though

I think that's a flawed report.  It's my understanding that the SQUAT
index is used behind the scenes, automatically, by Cyrus if it is
available.  There's no special IMAP request for a SQUAT search, so
there's no reason Cyrus has any idea that it's Thunderbird and not
SquirrelMail or Evolution doing the search.

Probably the user sitting in front of the keyboard going "gee, this
search is slow."
- --
Chris Hilts
[EMAIL PROTECTED]
Say it with flowers -- Send them a triffid!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (MingW32)

iD8DBQFEjytK98ixrK2vMtARAiUoAJ9GRmTcu/3xw5Kdy9HygIncnLygxQCgg9qC
/p51UPmGP28JLEL1KqSdH+M=
=/ioF
-END PGP SIGNATURE-

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: migrating from dovecot to cyrus

2006-06-26 Thread Chris Hilts
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Marten Lehmann wrote:
> What would be an recommended way to move maildirs (one file per message)
> to the cyrus storage for several thousand maildirs?

There was a recent thread about migration on this list; I believe the
consensus was to use a tool called 'imapsync'.  I've used it to move a
lot of messages around before, it worked really well.


- --
Chris Hilts
[EMAIL PROTECTED]
Say it with flowers -- Send them a triffid!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (MingW32)

iD8DBQFEoA7E98ixrK2vMtARAhL/AJoCszThwhwRv7KwdtOAF59BQeg+6wCfX6X/
kzJNlhlUzKKB/NUBctcpacY=
=uUsG
-END PGP SIGNATURE-

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Cyrus & Active Directory

2006-07-07 Thread Chris Hilts
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I have googled, read everything in /usr/share/doc/ and even tried
beating my head against the desk.  I am completely unable to get Cyrus
SASL and IMAP to use Active Directory to authenticate.  I have tried to
use kerberos, LDAP, libpam-ldap, and black magic.

Does anyone have a working recipe for getting Cyrus to authenticate via
Active Directory?  I would greatly appreciate any assistance you can offer.

Thanks in advance,
Chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.4 (MingW32)

iD8DBQFErnHb98ixrK2vMtARAhPbAKCOc4QzQHLPDWyNCaluRllxuGL+fgCfYmoB
niXk6buNkseg9sYc/LN9vYg=
=/xD/
-END PGP SIGNATURE-

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: (no subject)

2006-12-22 Thread Chris Hilts
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Wickham, Larry wrote:
> I am currently charged with administering our 1 semester old Cyrus
> server. When the server was introduced a policy was written which stated
> that emails over a certain age would be deleted. I can find no such
> function or feature in Cyrus or it's associated tools. Does anyone know
> of a means to accomplish this?

Check out the manpage for 'ipurge'.  Make sure you educate your users
about this policy; unless you're only purging mail from specific folders
(Trash, Sent, or something similar), you're setting your users up for
unexpected mail loss.

Chris
[EMAIL PROTECTED]
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFjB2p98ixrK2vMtARAm1tAJ4sioDkFlrkBo0x8veX6uiWNDXxPwCdFMzC
f7/EgZJdZWJhjb91mFIK5Z0=
=3lQH
-END PGP SIGNATURE-

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: cyradm - problem with dotted usernames?

2002-11-20 Thread Chris Hilts
> Lunar> cm user.administrator
> Lunar> cm user.mail.admin
> createmailbox: Permission denied

The . is the separator.  user.mail.admin is the 'admin' mailbox belonging
to the 'mail' user.  So you're probably trying to create a box for a user
(mail) that doesn't exist yet.

> Any workaround for this?  Thanks!!

Check out the "unixhierarchysep" directive in imapd.conf.

-- 
Chris Hilts
[EMAIL PROTECTED]



Re: mysql auxprop redhat 8.0 authentication problems

2003-01-28 Thread Chris Hilts
> sasl_mysql_statement: select pass from email where eaddr ='%u' and mid=1
> and active=1"

Well, assuming this isn't a transcription typo, you've got an unbalanced
quote at the end of your statement.

-- 
Chris Hilts
[EMAIL PROTECTED]



Trouble using cyrdeliver

2003-01-30 Thread Chris Hilts
I'm trying to set up procmail as my LDA so I can use SpamAssassin's
per-user SQL prefs feature.  I'm having trouble getting cyrdeliver to
actually deliver the mail.  If anyone could tell me what's going wrong
here I'd appreciate it.

$ zcat sample-nonspam.txt.gz | /usr/sbin/cyrdeliver -m user.chilts

couldn't connect to lmtpd: Success
421 4.3.0 deliver: couldn't connect to lmtpd

In the logs:

cyrus/lmtpd[22390]: connection from localhost [127.0.0.1] preauth'd as
postman
cyrus/deliver[22389]: lmtpengine do_auth: could not sasl_setprop the
security properties


-- 
Chris Hilts
[EMAIL PROTECTED]






Re: beginner's question

2003-02-21 Thread Chris Hilts
> thing is: I can't log me in. Although Cyrus is up and running (telnet
> localhost imap: "cyrus imap4 2.1.9 server ready"), when I try e.g. LOGIN
> cyrus, it will say LOGIN BAD please login first.

Just to be very clear, you can't just send LOGIN user pass and hope it
works, you have to follow the IMAP protocol.  Include a command tag at the
beginning.  For more detail, see RFC2060.  If you're already doing this,
er, then ignore this message ;)

a01 LOGIN youruser yourpass

a02 LOGOUT

-- 
Chris Hilts
[EMAIL PROTECTED]


Re: What to use when no AUTH=

2003-07-01 Thread Chris Hilts
> S: * CAPABILITY IMAP4rev1 CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT
> THREAD=REFERENCES SORT

> What mechanism is it using? What is the right thing to do?

The IMAP4 LOGIN command, I'd expect.  When there's no AUTH= offered, I'd
say that's the only thing to do, and pray that you're using SSL/TLS.


-- 
Chris Hilts
[EMAIL PROTECTED]



Re: Webmail -- What's recommended?

2003-07-15 Thread Chris Hilts
> Hi! Is it possible to use SSL/TLS connections to IMAP server from
> squirellmail?

Yes.  *IF* you have PHP 4.3.x, SquirrelMail 1.4.x,  and Cyrus listening
for IMAPS connections (ie. no STARTTLS command required)

-- 
Chris Hilts
[EMAIL PROTECTED]
[EMAIL PROTECTED]



Re: Webmail -- What's recommended?

2003-07-15 Thread Chris Hilts
> Squirrel mail has more plugins but is spread out over the system more

Say what?  SquirrelMail is completely self-contained in one directory
structure.  I have it in /projects/squirrelmail on my development machine,
and /usr/local/share/squirrelmail on my production server.  How is it
spread out?

You CAN put your data & attachment directories outside of SquirrelMail's
tree, but by default it's all contained.

-- 
Chris Hilts
[EMAIL PROTECTED]
[EMAIL PROTECTED]



Re: suppressing DIGEST-MD5

2003-07-18 Thread Chris Hilts
> How can I stop the Cyrus imapd from advertising DIGEST-MD5 and CRAM-MD5 in
> the capabilities?

Edit imapd.conf and edit the sasl_mech_list directive as appropriate.

-- 
Chris Hilts
[EMAIL PROTECTED]



Problem with deliver

2003-07-18 Thread Chris Hilts
I'm using procmail to pass my incoming mail through spamassassin, then
piping it into cyrdeliver (cyrus deliver, as renamed by the debian
package)

This is what I'm getting in my logs occassionally:

postfix/pipe[32673]: 80E5A2190A5: to=<[EMAIL PROTECTED]>,
relay=procmail, delay=180430, status=bounced (data format error.
Command output: procmail: Error while writing to "/usr/sbin/cyrdeliver"
procmail: Program failure (65) of "/usr/sbin/cyrdeliver" )

So.. what makes cyrdeliver return status 65?


-- 
Chris Hilts
[EMAIL PROTECTED]



Re: Sql based Spamassassin with sieve

2003-09-09 Thread Chris Hilts
> I am using a gateway spamassassin with Mailscanner. The problem is every
> user would like his own individual preferences stored.
>
> So I was looking if there was a way I could use sieve to fork
> spamassassin per user with the user name and the prefernces stored in
> Mysql database.

I didn't do it with Sieve.  I have Postfix using procmail as my LDA, which
filters the incoming mail through spamd, then delivers into Cyrus using
(Debian) cyrdeliver.

Here is my /etc/procmailrc.  I'm not good at procmail, so YMMV.

DELIVERMAIL="/usr/sbin/cyrdeliver"
IMAP="$DELIVERMAIL -e -a $USER $USER"
SPAMC="/usr/bin/spamc -u $USER"

## Trim out From: since Cyrus doesn't like it one bit
:0hfw
| /usr/bin/formail -I "From "

###
### Spam Assassin
###

:0fw
| $SPAMC


###
### Deliver it to the user inbox
###

:0 w
| $IMAP

:0 w
{
EXITCODE=$?
HOST
}




Re: moving message on nearly full mailbox with IMAP

2005-07-01 Thread Chris Hilts
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

> If i have a Mailbox with 5MB quota, there is 4.9MB in use and i want to
> move one message with 1 MB from one folder to another, cyrus gives me an
> error message that says i'm "over quota". Why does moving a message need
> space in the mailbox, i don't want to copy it but to move.

Because there is no such thing as a move when you're using IMAP.  It's
copy, then delete.  You don't have enough quota remaining for two
instances of that message at once, therefor the "move (copy then delete)"
fails.

For more details, see RFC 3501.

- -- 
Chris Hilts
[EMAIL PROTECTED]
Say it with flowers - send them a triffid.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)

iEYEARECAAYFAkLFkLMACgkQ98ixrK2vMtCa1wCfbqx1ZsiKNfIK9o7E3xWObvuH
in4An3ejpe/FGqYf3RLrhVRNZombSN5Y
=PhGE
-END PGP SIGNATURE-


---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: moving message on nearly full mailbox with IMAP

2005-07-01 Thread Chris Hilts
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

> Is it wise to modify these clients to instead FETCH, delete/expunge, then
> STORE?

Sounds like a recipe for lost messages should anything go wrong.. What
happens if as you FETCH, new messages arrive and take up just enough quota
that the STORE would put it over quota? What do you do with the message?

- -- 
Chris Hilts
[EMAIL PROTECTED]
Say it with flowers - send them a triffid.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)

iEYEARECAAYFAkLFng8ACgkQ98ixrK2vMtD1rACfaqxMq485Ofi0VaIz2YvYoO6S
2qMAn08s5nOkHUfblgqzVFqxQ+pT7sAy
=w6b6
-END PGP SIGNATURE-


---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Log level question

2005-09-27 Thread Chris Hilts
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

> not sure how he's accessing (dial-in, dsl, etc) but your could certainly
> catch him by doing a tcpdump filtering on pop3 (and hopefully) his ip
> address. you'll see the DELE command in the data section of the tcp
> packets ...
> 
> of course, some sort of transaction logging would be better :-), but if
> all else fails ...

Great googly moogly.  How about setting up telemetry? Granted you're
going to end up with all his mail in there too, but it'd be easier than
sniffing the traffic.

- From overview.html:

log Directory

The subdirectory "log" under the configuration directory permits
administrators to keep protocol telemetry logs on a per-user basis.

If a subdirectory of "log" exists with the same name as a user, the
IMAP and POP3 servers will keep a telemetry log of protocol sessions
authenticating as that user.  The telemetry log is stored in the
subdirectory with a filename of the server process-id and starts with
the first command following authentication.


- --
Chris Hilts
[EMAIL PROTECTED]
Say it with flowers -- Send them a triffid!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (MingW32)

iD8DBQFDOYP998ixrK2vMtARAjrRAJ9VjvyzfgYdBws5+6CdvqRK2ziUVACgkWIN
DGtc6PhiLMFq7qXxk7+oQi8=
=44BB
-END PGP SIGNATURE-

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: why does cyrus have to have a password

2005-12-19 Thread Chris Hilts
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Andreas Haase wrote:
>> I would really not like people to be able to ssh into the cyrus account.
> 
> set the login shell of your cyrus admin user to /bin/false or something
> similiar.

Specifically, check the AllowGroups/AllowUsers and DenyGroups/DenyUsers
parameters for sshd. (man 5 sshd_config)


- --
Chris Hilts
[EMAIL PROTECTED]
Say it with flowers -- Send them a triffid!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (MingW32)

iD8DBQFDpyNy98ixrK2vMtARAhetAJ4maBMr9SFTx2THR4RRczkhd4JUJwCfQPB4
P7NXFej9hquGhQsE9akpb08=
=co7S
-END PGP SIGNATURE-

Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html