Re: lmtpd rejecting valid messages

2004-07-07 Thread Jukka Salmi
Ken Murchison --> info-cyrus (2004-07-07 20:45:54 -0400): > This is a bug in Cyrus. Getting it to accept these messages is trivial, > getting the rest of the code to treat the message correctly (missing > body rather than empty body) is not. > > I'll bugzilla this and take a look. Thanks. Re

Re: Cyrus IMAP, sendmail and LDAP

2004-07-07 Thread Andrzej Filip
AJ wrote: Thanks. I have reviewed the sendmail page numerous times, but my question is what is the difference between the way I have things set up now, i.e just using cyrus as a local mailer, as opposed to ldap_routing. I am not sure why one would go one way or the other, just trying to clarify

Re: unable to login

2004-07-07 Thread Rob Siemborski
On Wed, 7 Jul 2004, Wil Cooley wrote: > On Wed, 2004-07-07 at 12:45, Mike Beattie wrote: > > > And I hate to point out, but then, if a malicious user manages to find a > > flaw in cyrus they could hypothetically use that flaw to get a copy of > > /etc/shadow. (If I'm mistaken, *please* correct me)

Re: [unix socket] header

2004-07-07 Thread Rob Siemborski
On Wed, 7 Jul 2004, Cameron Knowlton wrote: > actually, it's my own home brewed applescript, but that's not > important... I'd like to remove the header if possible. > > any ideas? Change the source code in lmtpengine.c to say what you need. -Rob -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Re: Cyrus IMAP, sendmail and LDAP

2004-07-07 Thread AJ
Thanks, I understand, but now, how can I go about setting up sendmail/ldap to deliver to my cyrus server, which happens to be the same name as my sendmail server.. i.e.: server name is: rabbit.domain.com my email address is: [EMAIL PROTECTED] I have an ldap entry for the user john.smith, and

RE: Cyrus IMAP, sendmail and LDAP

2004-07-07 Thread John Arthur
> Thanks.. is there any LDAP attribute that will tell sendmail what server > and cyrus mailbox to deliver to. Yes, mailLocalAddress -- Addresses to accept email to (as many as you want) mailRoutingAddress -- The address to send the mail to mailHost -- The host to deliver mail

RE: Cyrus IMAP, sendmail and LDAP

2004-07-07 Thread John Arthur
The way you have it setup now Sendmail accepts all mail before trying to deliver it via cyrus (just like most secondary and some primary mx servers do). So if I send 1000 emails to non existant users your sendmail will accept them all (regardless of weather they exist or not) before trying to deliv

Re: Cyrus IMAP, sendmail and LDAP

2004-07-07 Thread Igor Brezac
On Thu, 8 Jul 2004, Andrzej Filip wrote: > AJ wrote: > > My setup is cyrus, sendmail and openldap for all users data. > > The way I have things set up now is sendmail use cyrus local mailer, and > > is not compile w/ LDAP support, so if a mailbox does not exist in cyrus, > > it gets bounced.

Deliver can't connect to lmtpd

2004-07-07 Thread Louis LeBlanc
This is just frustrating. I've put off the authentication headaches for now, in favor of actually getting mail delivered, which is proving difficult. maillog indicates procmail is failing with EX_TEMPFAIL, the procmial log shows the following: procmail: Executing "/usr/local/cyrus/bin/deliver,-q

Re: lmtpd rejecting valid messages

2004-07-07 Thread Ken Murchison
Jukka Salmi wrote: Hello, I'm using Cyrus IMAPd 2.2.6. Cyrus' lmtpd seems to reject header-only messages, i.e. messages which don't have a blank line (CRLF) after the last header line. AFAICT such messages should be accepted, at least they're valid according to RFC 2822. The problem is that the MTA

Re: Cyrus IMAP, sendmail and LDAP

2004-07-07 Thread AJ
Thanks.. is there any LDAP attribute that will tell sendmail what server and cyrus mailbox to deliver to. It seems that using ldap routing w/ mailLocalAddress and mailHost will cause a loop if everything is all one one server. AJ Wil Cooley wrote: On Wed, 2004-07-07 at 15:51, AJ wrote: Thanks.

Re: Cyrus IMAP, sendmail and LDAP

2004-07-07 Thread Wil Cooley
On Wed, 2004-07-07 at 15:51, AJ wrote: > Thanks. I have reviewed the sendmail page numerous times, but my > question is what is the difference between the way I have things set up > now, i.e just using cyrus as a local mailer, as opposed to ldap_routing. > I am not sure why one would go one way

Re: Cyrus IMAP, sendmail and LDAP

2004-07-07 Thread AJ
Basically, i have sendmail, cyrus and ldap all on the same box, so I am not sure I need ldap routing in sendmail. What do you think? Andrzej Filip wrote: > AJ wrote: > >> My setup is cyrus, sendmail and openldap for all users data. >> The way I have things set up now is sendmail use cyrus local ma

lmtpd rejecting valid messages

2004-07-07 Thread Jukka Salmi
Hello, I'm using Cyrus IMAPd 2.2.6. Cyrus' lmtpd seems to reject header-only messages, i.e. messages which don't have a blank line (CRLF) after the last header line. AFAICT such messages should be accepted, at least they're valid according to RFC 2822. The problem is that the MTA accepts header

Re: Cyrus IMAP, sendmail and LDAP

2004-07-07 Thread AJ
Thanks. I have reviewed the sendmail page numerous times, but my question is what is the difference between the way I have things set up now, i.e just using cyrus as a local mailer, as opposed to ldap_routing. I am not sure why one would go one way or the other, just trying to clarify. Thanks.

Re: Cyrus IMAP, sendmail and LDAP

2004-07-07 Thread Andrzej Filip
AJ wrote: My setup is cyrus, sendmail and openldap for all users data. The way I have things set up now is sendmail use cyrus local mailer, and is not compile w/ LDAP support, so if a mailbox does not exist in cyrus, it gets bounced. Sendmail does not do user/mailbox lookups via LDAP. This se

Cyrus IMAP, sendmail and LDAP

2004-07-07 Thread AJ
Hi, My setup is cyrus, sendmail and openldap for all users data. The way I have things set up now is sendmail use cyrus local mailer, and is not compile w/ LDAP support, so if a mailbox does not exist in cyrus, it gets bounced. Sendmail does not do user/mailbox lookups via LDAP. This seems to

Re: unable to login

2004-07-07 Thread Wil Cooley
On Wed, 2004-07-07 at 12:45, Mike Beattie wrote: > And I hate to point out, but then, if a malicious user manages to find a > flaw in cyrus they could hypothetically use that flaw to get a copy of > /etc/shadow. (If I'm mistaken, *please* correct me) > > Only the second worst thing after actually

Re: [unix socket] header

2004-07-07 Thread Cameron Knowlton
actually, it's my own home brewed applescript, but that's not important... I'd like to remove the header if possible. any ideas? thanks in advance guys, cameron >I don't know why this is messing up your SpamCop reporting; I have the same >thing, and the SpamCop report ignores it completely. >

Re: unable to login

2004-07-07 Thread Mike Beattie
On Wed, Jul 07, 2004 at 10:47:39AM -0700, Wil Cooley wrote: > No, saslauthd runs as root--it's role is to provide authentication > services, often for PAM or shadow authentication, which requires root > access. It's a much better solution than creating a 'shadow' group and > making /etc/shadow rea

Re: unable to login

2004-07-07 Thread Mike Beattie
On Wed, Jul 07, 2004 at 07:19:11PM +0200, Dudi Goldenberg wrote: > Thank you all people! > > The problem was that /etc/default/saslauthd was reset to default values > after a apt-get update. > > Once I noticed that saslauthd was not running it didn't take much to > find & fix it. Speaking with m

[unix socket] header

2004-07-07 Thread Cameron Knowlton
Title: [unix socket] header total Cyrus newbie, so please bear with me. I couldn't find this on the engines anywhere. how would I go about removing the ([unix socket]) Cyrus header below? it really does mess up my spam cop process, and causes confusion. thanks! cameron Return-Path: <[EMAIL PR

Re: unable to login

2004-07-07 Thread Wil Cooley
On Wed, 2004-07-07 at 08:44, Patrick Welche wrote: > > What about saslauthd? > > I don't actually use saslauthd, but assume that it too will become user cyrus.. No, saslauthd runs as root--it's role is to provide authentication services, often for PAM or shadow authentication, which requires roo

Re: cyrus IMAP4 v2.1.16 and TLS

2004-07-07 Thread Wil Cooley
On Wed, 2004-07-07 at 15:25, victor wrote: > I try to use tls but I have some problems. > The log error: > Jul 7 15:14:03 mail68 imapd[17167]: accepted connection > Jul 7 15:14:03 mail68 imaps[17168]: executed > Jul 7 15:14:11 mail68 imapd[17167]: imaps TLS negotiation failed: > dgfp.ambra.ro[8

Re: unable to login

2004-07-07 Thread Alexander Dalloz
Am Mi, den 07.07.2004 schrieb Louis LeBlanc um 17:09: > > > This kinda begs the question, what exactly *should* the permissions be > > > for sasldb2.db? > > > > > > Lou > > > > chown root:root /etc/sasldb2 > > chmod 600 /etc/sasldb2 > > > > (the database has no .db ending) > > It appears that

Sasl-cvs

2004-07-07 Thread [EMAIL PROTECTED]
Here is a casino giving away $25 Free when you sign up an account. No credit card required http://acecasino.cls2.org/iwin.html James

RE: unable to login

2004-07-07 Thread Dudi Goldenberg
Thank you all people! The problem was that /etc/default/saslauthd was reset to default values after a apt-get update. Once I noticed that saslauthd was not running it didn't take much to find & fix it. Regards, Dudi --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://c

Re: unable to login

2004-07-07 Thread Patrick Welche
On Wed, Jul 07, 2004 at 11:10:48AM -0400, Louis LeBlanc wrote: > > > On 07/07/04 02:29 PM, Patrick Welche sat at the `puter and typed: > > I happen to use > > > > -rw--- 1 cyrus mail 24576 May 10 23:43 /etc/sasldb2 > > This is helpful. I guess you're running imapd as cyrus:mail? Well, I

Re: unable to login

2004-07-07 Thread Louis LeBlanc
On 07/07/04 03:25 PM, Patrick Welche sat at the `puter and typed: > On Wed, Jul 07, 2004 at 09:56:31AM -0400, Louis LeBlanc wrote: > > On 07/07/04 02:29 PM, Patrick Welche sat at the `puter and typed: > > > On Wed, Jul 07, 2004 at 12:03:12AM +0200, Dudi Goldenberg wrote: > > > > Jul 6 23:58:32 mai

Re: unable to login

2004-07-07 Thread Louis LeBlanc
On 07/07/04 04:29 PM, Alexander Dalloz sat at the `puter and typed: > Am Mi, den 07.07.2004 schrieb Louis LeBlanc um 15:56: > > > This kinda begs the question, what exactly *should* the permissions be > > for sasldb2.db? > > > > Lou > > chown root:root /etc/sasldb2 > chmod 600 /etc/sasldb2 > >

Re: unable to login

2004-07-07 Thread Alexander Dalloz
Am Mi, den 07.07.2004 schrieb Louis LeBlanc um 15:56: > This kinda begs the question, what exactly *should* the permissions be > for sasldb2.db? > > Lou chown root:root /etc/sasldb2 chmod 600 /etc/sasldb2 (the database has no .db ending) Alexander -- Alexander Dalloz | Enger, Germany | GPG

Re: unable to login

2004-07-07 Thread Patrick Welche
On Wed, Jul 07, 2004 at 09:56:31AM -0400, Louis LeBlanc wrote: > On 07/07/04 02:29 PM, Patrick Welche sat at the `puter and typed: > > On Wed, Jul 07, 2004 at 12:03:12AM +0200, Dudi Goldenberg wrote: > > > Jul 6 23:58:32 mail cyrus/imapd[2205]: badlogin: localhost[127.0.0.1] > > > Any hint what to

Re: unable to login

2004-07-07 Thread Louis LeBlanc
On 07/07/04 02:29 PM, Patrick Welche sat at the `puter and typed: > On Wed, Jul 07, 2004 at 12:03:12AM +0200, Dudi Goldenberg wrote: > > Jul 6 23:58:32 mail cyrus/imapd[2205]: badlogin: localhost[127.0.0.1] > > Any hint what to look for? > > Clues in /var/log/authlog ? file permissions on /etc/sa

Re: High availability ... again

2004-07-07 Thread Rob Siemborski
On Tue, 6 Jul 2004, Kevin Baker wrote: How would we indicate our interest to the development team? How are updates and future development project priorities decided? Several methods.. Supplied patches often get a high priority (though not in this case, since we have a patch that is very complicate

Re: unable to login

2004-07-07 Thread Patrick Welche
On Wed, Jul 07, 2004 at 12:03:12AM +0200, Dudi Goldenberg wrote: > Jul 6 23:58:32 mail cyrus/imapd[2205]: badlogin: localhost[127.0.0.1] > Any hint what to look for? Clues in /var/log/authlog ? file permissions on /etc/sasldb2 ? capability string when trying to connect with imtest ? (Just guessin

Re: cyrus IMAP4 v2.1.16 and TLS

2004-07-07 Thread Andreas
On Wed, Jul 07, 2004 at 03:25:47PM -0700, victor wrote: > I try to use tls but I have some problems. > The log error: > Jul 7 15:14:03 mail68 imapd[17167]: accepted connection > Jul 7 15:14:03 mail68 imaps[17168]: executed > Jul 7 15:14:11 mail68 imapd[17167]: imaps TLS negotiation failed: > dg

Re: Secure Password Authentication

2004-07-07 Thread Andreas
On Wed, Jul 07, 2004 at 12:28:11PM -0700, victor wrote: > I don't have AUTH=NTLM. > This is strange. > Is there something wrong with the mandrake 10 rpm's? Do you have the ntlm sasl plugin installed in /usr/lib/sasl2? You will also need an auxprop plugin (sasldb for passwords stored in /etc/sasldb

Re: High availability ... again

2004-07-07 Thread Igor Brezac
On Tue, 6 Jul 2004, Kevin Baker wrote: > The cyrus/replication would be amazing. Application level > replication seems to be the best option if the setup is > straight forward. > > How would we indicate our interest to the development > team? How are updates and future development project > prior

cyrus IMAP4 v2.1.16 and TLS

2004-07-07 Thread victor
I try to use tls but I have some problems. The log error: Jul 7 15:14:03 mail68 imapd[17167]: accepted connection Jul 7 15:14:03 mail68 imaps[17168]: executed Jul 7 15:14:11 mail68 imapd[17167]: imaps TLS negotiation failed: dgfp.ambra.ro[80.97.24.235] Jul 7 15:14:11 mail68 imapd[17167]: Fatal

Re: Perl-Cyrus-SIEVE-managesieve

2004-07-07 Thread Alain Turbide
Hi Etienne, I'd be interested in having a peek at those mods for SASL if you still have them.. I have been away from the websieve project for a while but I'm sure a few people might be interested and I could add it to the CVS storage on Sourceforge. http://sourceforge.net/project/showfiles.php?grou

Re: encoded packet size too big

2004-07-07 Thread Jukka Salmi
Rob Siemborski --> cyrus-sasl (2004-07-06 17:57:23 -0400): > After talking with Sam Hartman, it became apparent that MIT gets the > implementation of gss_wrap_size_limit right and Heimdal gets it > oh...so...wrong. > > I've committed a patch that should make this work in both cases, however. I'm

Re: Secure Password Authentication

2004-07-07 Thread victor
I don't have AUTH=NTLM. This is strange. Is there something wrong with the mandrake 10 rpm's? [EMAIL PROTECTED] imap]# telnet 127.0.0.1 143 Trying 127.0.0.1... Connected to localhost (127.0.0.1). Escape character is '^]'. * OK cyrus.ambranet.com Cyrus IMAP4 v2.2.6 server ready . CAPABILITY * CAPABI

Secure Password Authentication

2004-07-07 Thread victor
I have a Mandrake 10 distribution and the packages: libsasl2-plug-ntlm-2.1.15-10mdk.i586.rpm libsasl2 cyrus-sasl And I compiled cyrus-imapd-2.2.6. When I try to login using SPA - The mail client(Outlook) says: "General authentication failure. None of the authenticat