(no subject)
Hi, I'm new to this list and new to Cyrus. I have a problem on a Mac OS X 10.4.4 Server. The problem may be due to something that Apple has added but I've been unable to get help from any of the Apple forums. It may be that someone on this list can figure out the problem but more than likely, if someone on this list can give me a debugging approach, I think that may help a great deal. The problem seems simple: I get IOERROR's unexpected end of file. I also get SQUAT failed to open index file (and just SQUAT failed). I have tried reconstruct -r user/pedz several times. I've tried deleting via the mail client the mail box. I *think* it is always the "Deleted Messages" mail box that gets clobbered but I'm not sure. Some of the IOERROR end of file messages come when it appears that IMAP is looking through the user settings. Apple has things so that "reconstruct -m" does not work (its not supported -- it just replies back immediately with a not supported message. I've also tried blowing away /var/imap and doing the mkimap. I am doing the reconstruct and the mkimap as cyrusimap (Apples cyrus/imap user). This is a fresh install of Mac OS X 10.4.4. I've tried reinstalling and the problem keeps happening. Note: I also get errors from sieve not being able to find files but I am assuming that is not a major problem and (I'm assuming) not connected to this problem. I mention it just in case it is important. ANY HELP... would be much much appreciated. Thank you, Perry Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: imap IOERRORs on Mac OS X Server
Anyone looking for the fix to this, please look here: http://discussions.apple.com/message.jspa?messageID=1675657#1675657 (BTW, the SQUAT messages may be ignored) On Feb 3, 2006, at 2:55 PM, Perry Smith wrote: On Feb 3, 2006, at 1:01 PM, Ken Murchison wrote: Perry Smith wrote: I posted this to question to info but got no response so I am trying this list. Sorry for the duplication. I'm new to this list and new to Cyrus. I have a problem on a Mac OS X 10.4.4 Server. The problem may be due to something that Apple has added but I've been unable to get help from any of the Apple forums. It may be that someone on this list can figure out the problem but more than likely, if someone on this list can give me a debugging approach, I think that may help a great deal. The problem seems simple: I get IOERROR's unexpected end of file. I also get SQUAT failed to open index file (and just SQUAT failed). The SQUAT messages are most likely debug messages which can be eliminated by changing syslog.conf. What version of Cyrus? Apple's opensource.apple.com site has a tarball named "CyrusIMAP-156.9". I don't see a version in the syslog output. The CyrusIMAP-156.9 has a version file and CYRUS_VERSION is set to v2.2.12. The command: strings -a imapd | egrep '^v2\.' gives me: v2.2.12-OS X 10.4.0 What filesystem is being used? The file system is Apple's "Mac OS Extended (Journaled)" What user settings in particular? I'm not sure how to answer this. Do you want me to post /etc/ cyrus.conf? admins: cyrusimap configdirectory: /var/imap partition-default: /var/spool/imap unixhierarchysep: yes altnamespace: yes servername: easeserver.easesoftware.net sievedir: /usr/sieve sendmail: /usr/sbin/sendmail imap_auth_clear: no lmtp_downcase_rcpt: 1 pop_auth_gssapi: yes tls_cert_file: /etc/certificates/Default.crt pop_auth_clear: no log_rolling_days: 0 log_rolling_days_enabled: false tls_key_file: /etc/certificates/Default.key imap_auth_gssapi: yes I do have logging set pretty debug trying to track this down. Its not the error messages so much as the general user interface (from the client). When I send mail, it takes a long time to actually get the mail out. The smtp log shows that the mail goes out immediately. So I am guessing that the extra time involved is when the client is trying to copy a copy of the message to "Sent" (which is on the imap server). Also, the client interface is just slow and sluggish. The client and server are on the same machine -- the machine is not doing much else. It appears that the client gets stuck at the same time as the "unexpected end of file" messages. I see the man page for imapd has a -D option but I don't know how to turn that on or if it would do me any good. Thank you, Perry Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
IOERRORS -- the saga continues
I have tracked down my problems to a call to sasl_decode in prot_fill. To recap: I am getting IOERROR: unexpected end of file in my log file. It turns out that if the client has Kerberos GSSAI authentication and the client tries to do an "APPEND" command, it frequently fails (but not always). The rest of my Kerberos stuff appears to be fine. The APPEND is sent across to the server. The client can be set up to do LITERAL+ or not. The client sends all of the message in either case. The server reads all of the packets. Usually the first packets go through the sasl_decode and result in valid text. But after the first block (4096) or so of data, the remaining data is lost and sasl_decode reports back that there is only two valid characters. No errors are reported back (that I am aware of). I ended my quest at this point last night and I probably will not pick it up again. For now, I can work around the problem by switching to plain authentication and just set up a VPN before using mail. I hope this helps whoever follows in my footsteps... Perry Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: IOERRORS -- the saga continues
I believe so. Unfortunately, I am vague on this stuff. The Mac OS X server advertises "single login"using Kerberos. On the client, I select authenticate via Kerberos GSSAI, and the problem happens. (The login authentication is also done via Kerberos from the same server). If I change my client to authenticate via "password", then I do not have the problem. The client can be running on the same machine as the server or a seperate machine and I have the same symptoms. On Feb 7, 2006, at 2:34 PM, Ken Murchison wrote: Perry Smith wrote: I have tracked down my problems to a call to sasl_decode in prot_fill. To recap: I am getting IOERROR: unexpected end of file in my log file. It turns out that if the client has Kerberos GSSAI authentication and the client tries to do an "APPEND" command, it frequently fails (but not always). The rest of my Kerberos stuff appears to be fine. Are you using a Kerberos security layer (integrity and/or confidentiality)? -- Kenneth Murchison Project Cyrus Developer/Maintainer Carnegie Mellon University Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: IOERRORS -- the saga continues
Ken, I am not sure I answered your question before. I went back and used Mac's tcpdump utility to look at the data coming over the wire. It is *not* clear text. So, I am assuming it is using Kerberos to encrypt the data. If I still have not answered your question, I can either dig further into the code and/or ask some Mac guys on the net -- but I've not found Mac guys that really know the details like this. Looking at prot_fill in prot.c, s->saslssf is true when the client is authenticating using Kerberos and false when the client is using "password" (which I assume is clear text password authentication). Perry On Feb 7, 2006, at 2:34 PM, Ken Murchison wrote: Perry Smith wrote: I have tracked down my problems to a call to sasl_decode in prot_fill. To recap: I am getting IOERROR: unexpected end of file in my log file. It turns out that if the client has Kerberos GSSAI authentication and the client tries to do an "APPEND" command, it frequently fails (but not always). The rest of my Kerberos stuff appears to be fine. Are you using a Kerberos security layer (integrity and/or confidentiality)? -- Kenneth Murchison Project Cyrus Developer/Maintainer Carnegie Mellon University Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: IOERRORS -- the saga continues
Yes. I am using GSSAPI. On Feb 7, 2006, at 7:12 PM, Ken Murchison wrote: Perry Smith wrote: Ken, I am not sure I answered your question before. I went back and used Mac's tcpdump utility to look at the data coming over the wire. It is *not* clear text. So, I am assuming it is using Kerberos to encrypt the data. If I still have not answered your question, I can either dig further into the code and/or ask some Mac guys on the net -- but I've not found Mac guys that really know the details like this. Looking at prot_fill in prot.c, s->saslssf is true when the client is authenticating using Kerberos and false when the client is using "password" (which I assume is clear text password authentication). Right, I assumed that the problem is in the security layer code. So you're using GSSAPI, not KERBEROS_V4, correct? -- Kenneth Murchison Project Cyrus Developer/Maintainer Carnegie Mellon University Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: ACL problems
On Feb 8, 2006, at 1:25 AM, Andrew Morgan wrote: On Tue, 7 Feb 2006, Robert Schmid wrote: On Tue, February 7, 2006 20:38, Andrew Morgan wrote: Perhaps if I can get this login problem fixed... If you can't login as the cyrus admin user, then I don't know if you can fix this... If you are at the command prompt (Terminal app), then do: sudo -u cyrusimap command_line and give the Admin's psasword, it will execute command_line as cyrusimap. HTH Perry Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
