Re: POP3 Trouble

2004-11-23 Thread Roland Pope
- Original Message - From: "Jim Miller" <[EMAIL PROTECTED]> > > > > sasl_mech_list: PLAIN > > > > # Allow use of the POP3 APOP authentication command. > > # Note that this command requires that the plaintext passwords are > > # available in a SASL auxprop backend (eg. sasldb), and that th

RE: POP3 Trouble

2004-11-23 Thread Jim Miller
> Hi all, > > I've been happily using cyrus-imap 2.2.8 for some time now, but > I've only had cause to use the IMAP/IMAPS service. Recently one > of my users tried to connect via POP3 to the server and was > getting connection timeout errors. So I decided to test the connection. > > netstat shows

Re: Strange message...

2004-11-23 Thread Carl P. Corliss
Johan Barelds wrote: Hi all, I tried to forward a message and it failed with the following message. I couldn't reproduced it but it still worries me. Anyone any clue's? - To: [EMAIL PROTECTED] Attachments: 0 Content-Transfer-Encoding: 7bit Attachment is a forward Fatal err

Re: Strange message...

2004-11-23 Thread Dick Davies
* Johan Barelds <[EMAIL PROTECTED]> [1138 20:38]: > Hi all, > > I tried to forward a message and it failed with the following message. > I couldn't reproduced it but it still worries me. > Anyone any clue's? Looks like a bug in your webmail library - is there any indication of a problem in you cy

Strange message...

2004-11-23 Thread Johan Barelds
Hi all, I tried to forward a message and it failed with the following message. I couldn't reproduced it but it still worries me. Anyone any clue's? - To: [EMAIL PROTECTED] Attachments: 0 Content-Transfer-Encoding: 7bit Attachment is a forward Fatal error: Allowed memory

Cyrus IMAPd 2.2.10 Released

2004-11-23 Thread Derrick J Brashear
I'm pleased to announce the release of Cyrus IMAPd 2.2.10. This release implements several bugfixes, including a pre-authentication buffer overrun in "imap magic plus" support in proxyd (CAN-2004-1015) and a potential string copy without terminating null in mysasl_canon_user. It contains no new

RE: remote cyrus exploits?

2004-11-23 Thread Derrick J Brashear
On Tue, 23 Nov 2004, Michael Sims wrote: No, not necessarily. In fact, I haven't really investigated it fully yet. I just wanted clarification on whether the 2.1.x line was still being maintained/supported. Apparently it is, because I see now that there is a 2.1.17 tarball in ftp://ftp.andrew.c

Cyrus IMAPd 2.1.17 Released

2004-11-23 Thread Derrick J Brashear
I'm pleased to announce the release of Cyrus IMAPd 2.2.9. This release implements several bugfixes, notably lack of bounds checking and null termination problems, as backported from Cyrus 2.2.10. Cyrus 2.1 series releases are in bugfix only mode. A full list of changes is available in doc/chan

RE: remote cyrus exploits?

2004-11-23 Thread Michael Sims
Derrick J Brashear wrote: > On Tue, 23 Nov 2004, Michael Sims wrote: >> Hi, >> >> Are there any plans to release an official 2.1.17 to address these >> issues or should those of us running 2.1.x (who don't wish to >> maintain local patches) upgrade to >> 2.2.9? > > I think we would prefer you upgra

RE: remote cyrus exploits?

2004-11-23 Thread Derrick J Brashear
On Tue, 23 Nov 2004, Derrick J Brashear wrote: Are there any plans to release an official 2.1.17 to address these issues or should those of us running 2.1.x (who don't wish to maintain local patches) upgrade to 2.2.9? I think we would prefer you upgraded, but, are there cases where this would ca

RE: remote cyrus exploits?

2004-11-23 Thread Derrick J Brashear
On Tue, 23 Nov 2004, Michael Sims wrote: Hi, Are there any plans to release an official 2.1.17 to address these issues or should those of us running 2.1.x (who don't wish to maintain local patches) upgrade to 2.2.9? I think we would prefer you upgraded, but, are there cases where this would cause

Re: cyradm - MOVE mailbox to new partition

2004-11-23 Thread Eddy Beliveau
Hi! Ken, Many thanks, Eddy - Original Message - From: "Ken Murchison" <[EMAIL PROTECTED]> To: "Eddy Beliveau" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, November 22, 2004 9:49 PM Subject: Re: cyradm - MOVE mailbox to new partition renamemailbox user/bob user/bob parti

Re: db4 backend alternative

2004-11-23 Thread info-cyrus -- Amos Gouaux
Incidentally, any experiences with Berkeley DB 4.3? Michael Sims wrote: Mark Hannessen wrote: just wondering... are there alternatives to the db4 backend for storing mail and such? I am thinking in the direction of mysql. (I have openldap as well, but that doesn't seem to be the right place to stor

Re: sasl & crypted password

2004-11-23 Thread Sergey
On Tuesday 23 November 2004 19:11, Igor Brezac wrote: > Please see the following thread: > http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&msg=6497 Ok. Thanks for point to it. I will be reply to cyrus-sasl list. -- С уважением, Сергей [EMAIL PROTECTED] --- Cyrus Home Page:

Re: sasl & crypted password

2004-11-23 Thread Igor Brezac
On Tue, 23 Nov 2004, Sergey wrote: Hello. Why is sasl not work with MD5 crypted password with arbitrary salt ? I have a patch for addition of this functionality (I'm not the author, but the author work in one room with me). You can give patch from ftp://ftp.kraft-s.ru/pub/temp/cyrus-sasl2-unixpass

RE: db4 backend alternative

2004-11-23 Thread Michael Sims
Mark Hannessen wrote: > just wondering... > > are there alternatives to the db4 backend for storing mail and such? > I am thinking in the direction of mysql. (I have openldap as well, > but that doesn't seem to be the right place to store mail) > > I am really wondering about this because I just

RE: remote cyrus exploits?

2004-11-23 Thread Michael Sims
Derrick J Brashear wrote: > On Mon, 22 Nov 2004, David Powicki wrote: >> What's the word on susceptibility of versions based on the remote >> vulnerability documented at: >> >> http://security.e-matters.de/advisories/152004.html >> >> Are ALL versions of cyrus pre-2.2.9 vulnerable, including 2.1.X?

sasl & crypted password

2004-11-23 Thread Sergey
Hello. Why is sasl not work with MD5 crypted password with arbitrary salt ? I have a patch for addition of this functionality (I'm not the author, but the author work in one room with me). You can give patch from ftp://ftp.kraft-s.ru/pub/temp/cyrus-sasl2-unixpasswd.patch The autor: Dmitry Kokorev

Re: Cyrus IMAPd 2.2.9 Released

2004-11-23 Thread Andreas
On Mon, Nov 22, 2004 at 06:01:49PM -0500, Derrick J Brashear wrote: > I'm pleased to announce the release of Cyrus IMAPd 2.2.9. This release > implements several bugfixes, notably one where lmtpproxyd could reuse a > freed connection, another involving a pre-authentication buffer overrun > in "

Re: remote cyrus exploits?

2004-11-23 Thread David Carter
On Tue, 23 Nov 2004, Derrick J Brashear wrote: > The relevant portions of the patch between 2.2.8 and 2.2.9 can be > applied (most likely by hand) to 2.1.x. Here's the (trivial) subset of patches which are relevant to 2.1.16: http://www-uxsup.csx.cam.ac.uk/~dpc22/cyrus/patches/2.1.16/peek.patch

Re: imap transport returned 75

2004-11-23 Thread Dick Davies
* Klaus Boehm <[EMAIL PROTECTED]> [1110 08:10]: > Hello, > > i use exim3 with cyrus 1.5 an now i would like to change > to exim4 and cyrus 2.1. > in the old version i use in the exim.conf > this line > command = "/usr/sbin/cyrdeliver ${local_part}" > > but this dont work in the new version. > >

Re: remote cyrus exploits?

2004-11-23 Thread lst_hoe01
Zitat von Derrick J Brashear <[EMAIL PROTECTED]>: > On Mon, 22 Nov 2004, David Powicki wrote: > > > > > What's the word on susceptibility of versions based on the remote > > vulnerability documented at: > > > > http://security.e-matters.de/advisories/152004.html > > > > Are ALL versions of cyrus p

Re: What hardware to handle this

2004-11-23 Thread Simon Matter
> > > On Mon, 22 Nov 2004, Jim Bartus wrote: > >> I'm looking to redo our companys mailserver setup, and I want to move >> from >> our current system of POP3 to an IMAP based system. I've done a fair >> amount >> of reading and Cyrus looks like the right answer, so I was hoping you >> guys >> coul

imap transport returned 75

2004-11-23 Thread Klaus Boehm
Hello, i use exim3 with cyrus 1.5 an now i would like to change to exim4 and cyrus 2.1. in the old version i use in the exim.conf this line command = "/usr/sbin/cyrdeliver ${local_part}" but this dont work in the new version. I get this error: Child process of imap transport returned 75 (could mea