Re: SASL w/ Encrypted SQL Password Security (Comment, Suggestion and Possible Solution)

2011-01-25 Thread Raymond T. Sundland
l look at using something like kerberos, but it seems like an awful lot of work given my installation requirements. I'm up for the challenge, nonetheless. Thanks again. On 1/25/2011 1:08 PM, Dan White wrote: > On 25/01/11 12:48 -0500, Raymond T. Sundland wrote: >>So given that it&

SASL w/ Encrypted SQL Password Security (Comment, Suggestion and Possible Solution)

2011-01-25 Thread Raymond T. Sundland
Maybe this isn't the correct list for this question as it has to do more with SASL, but I am setting up a new mail server on a new box.  This is my 4th iteration of "starting fresh" using Cyrus Imap with some sort of 3rd party database backend, using both LDAP and MySQL

Re: Attachment corruption when downloading with Thunderbird...

2009-04-20 Thread Raymond T. Sundland
I use Thunderbird exclusively with Cyrus and have never had issues with attachments. Am running cyrus 2.2, but I don't see why 2.3 would suddenly break that functionality. Bron Gondwana wrote: On Mon, Apr 20, 2009 at 06:15:12PM +, Andy Fiddaman wrote: I'm running Cyrus IMAP 2.3.13 on

Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-27 Thread Raymond T. Sundland
Whenever you open services to the internet, you're taking a chance. I've been running Cyrus IMAP open to the Internet for years and have never had any issues, but I may have just been lucky. There are plenty of sources available for looking for the history of vulnerabilities for various softw

Re: Separating master processes for different services to utilise multiple cores/cpus

2009-02-25 Thread Raymond T. Sundland
cyrus 1 440 66580K 5648K select 0 0:00 0.00% pop3d 12238 cyrus 1 40 66408K 5452K accept 0 0:00 0.00% lmtpd As you can see, it's using CPUs 0, 1 and 3 at this point. Raymond T. Sundland wrote: When master receives a connection, it spawns a child process to manage

Re: How to copy messages between mailboxes?

2009-02-25 Thread Raymond T. Sundland
I think it would be (better|easier|more effective) to: 1) Assign necessary permissions to mailbox A and mailbox B to user doing the moving. 2) Login to the imap server and move the mail 3) Unassign the permissions, if no longer needed. It may even be possible to do this with sieve, automatically

Re: Separating master processes for different services to utilise multiple cores/cpus

2009-02-25 Thread Raymond T. Sundland
When master receives a connection, it spawns a child process to manage that connection. That would essentially make it multi-threaded making use of the multiple CPUs when needed, I would think. Is that not the case? You can launch multiple master processes, but that wouldn't have any better

Re: initial slowness

2009-02-24 Thread Raymond T. Sundland
I have two possible fixes, not sure if either will work... The first possible is if your system is configured for IPv6, but Cyrus is not opening a port on any IPv6 addresses, if you just type 'localhost', it will likely try the IPv6 address first and the timeout is probably in the 20-25 second

Re: Trouble building 2.2.13 on FreeBSD 4.11

2006-04-29 Thread Raymond T. Sundland
This is due to the location of krb5.h which is not in your normal include path. I believe on a 4.x system, it's in /usr/include/kerberos/krb5.h but since the Cyrus configure/make scripts doesn't look here by default, you need to do something like ln -s /usr/include/kerberos/krb5.h /usr/in

Re: Can I use hashed password for ldap_bind_pw in saslauthd.conf?

2005-10-06 Thread Raymond T. Sundland
chmod 400 saslauthd.conf If someone has enough access to read the file at this point, they have enough access to modify your LDAP database files using the 'slapcat' and 'slapadd' commands, so any additional security of a hashed password would be useless. [EMAIL PROTECTED] wrote:  It's real

Question About LMTP-Auth

2001-09-07 Thread Raymond T Sundland
Excuse me if this has been asked before... I have configured sendmail to do unix domain socket lmtp calls. I then tested the email (mail -v account) and got the error message in syslog saying that I didn't auth and sendmail couldn't read /etc/mail/auth-info. So, I assumed it didn't work... howev

Master Segmentation Fault

2001-09-04 Thread Raymond T Sundland
Hi, I am currently attempting to run Cyrus-Imapd 2.0.16 w/ SASL 1.5.24 on a Debian 2.2r3 (current) box. I compiled BerkeleyDB 3.3.1 and installed it under /usr/local/db3. When attempting to run /usr/cyrus/bin/master, it segfaults (no core file). Here is the backtrace: #0 0x0 in ?? ()