sieve-connect updated for Cyrus 2.3.11

2007-12-26 Thread Phil Pennock
This concerns sieve-connect (nee sieve_connect), my STARTTLS-capable replacement for sieveshell which supports scripting, tab-completion, client certificate authentication, etc. The sieve-connect command-line client has been updated to handle timsieved in Cyrus 2.3.11, which sends an unsolicited

Re: Plaintext only for loopback?

2008-01-13 Thread Phil Pennock
On 2008-01-13 at 01:59 -0500, Chris Pepper wrote: > So I'm left wondering: a) if there is a way to do this that I'm not > getting (perhaps "on the wire" is more subtle than my simplistic > reading), and b) if not, what's the best way to request/suggest this as > an enhancement. Should I ju

Re: Sieve problems..

2008-01-17 Thread Phil Pennock
On 2008-01-16 at 21:34 +0100, Anders Norrbring wrote: > First, is there some documentation to find anywhere on how to write > sieve scripts? I've only found small fragments here and there.. > (www.cyrusoft.com has expired..) The good news is that you have good timing -- the IETF has just publish

Re: Mapping users (either KerberosV or TLS certs)

2008-01-24 Thread Phil Pennock
On 2006-07-06 at 02:02 +0200, Phil Pennock wrote: > [My config's at the bottom; Cyrus IMAP 2.2.12; censored email addresses > and look-alikes purely against harvesters; timestamps and '[imapd]' > trimmed from loglines] Following up for the archives, to provide answers.

Re: Cyrus+SASL+PAM+pam_mysql Migration problem

2006-06-28 Thread Phil Pennock
On 2006-06-27 at 19:25 +0300, Alexandru E. Ungur wrote: > I'm having a bit of a hard time doing a migration of cyrus from this: > anyway, on the old server it is a cyrus+saslauthd+pam+pam_mysql+mysql > On the new server I got saslauthd working pretty much ok (I think). Using PAM, you lose those

Re: INTERNALDATE one hour in future for sent message

2006-06-28 Thread Phil Pennock
On 2006-06-28 at 10:21 -0400, Jim Brett wrote: > INTERNALDATE (hence received date?) one hour in future for sent > message. Unix systems should be run in GMT/UTC (almost the same thing; GMT is _not_ "British time"). You then use $TZ in the environment, or some OS-dependent way of setting 'localt

Re: INTERNALDATE one hour in future for sent message

2006-06-28 Thread Phil Pennock
On 2006-06-28 at 16:43 -0400, Jim Brett wrote: > Thanks, your response is greatly appreciated. Here's OS info: > > # uname -a > SunOS machine.company.com 5.8 Generic_117350-13 sun4u sparc > SUNW,Sun-Fire-V240 Edit /etc/TIMEZONE, zone information available in /usr/share/lib/zoneinfo/ $ man -s 4

Re: "negative rights" ACLs - working in cyrus-imapd 2.2.12 (FC4)?

2006-06-30 Thread Phil Pennock
On 2006-06-30 at 11:07 +0100, Will Partain wrote: > Folks, I tried to use "negative rights" to do "everybody-but-X" > permissions on a mailbox. It _looks like_ my "sam" didn't do > anything: >> sam list.foo charlie -rwsip > Is something burst, or did I do something wrong? Thanks, You want:

Re: Mailstore filesystem

2006-07-03 Thread Phil Pennock
On 2006-07-03 at 15:44 +0200, Daniel Eckl wrote: > At the moment I have a temporary machine running the same system with > reiserfs. While I still have the problem of occasional high load, the > system now never freezes or hangs, just slowes down. On my private machine at home, I used ReiserFS unt

Re: Mailstore filesystem

2006-07-05 Thread Phil Pennock
On 2006-07-05 at 15:43 -0600, Michael Loftis wrote: > It would be nice to have more details about version of ReiserFS, what hash > was being used, kernel version, hardware involved, and NFS or not > (especially kernel NFSd)... I've never tried NFS in a production environment at work, so this was

Mapping users (either KerberosV or TLS certs)

2006-07-05 Thread Phil Pennock
s where I need to be using ptloader and LDAP? If so, does anyone have sample configs and LDIF entries for how they manage this, please? Common: subject=/C=NL/.../CN=Phil Pennock/[EMAIL PROTECTED] starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) authenticated as Phil Pennock Supplying t

Re: Mapping users (either KerberosV or TLS certs)

2006-07-06 Thread Phil Pennock
On 2006-07-06 at 12:58 +0100, Dennis Davis wrote: > Can't answer any of your questions, which I've deleted. :^) > I can't find a "keytab" option in the imapd.conf manual page. > There's a srvtab option, but that applies to Kerberos4 which you > aren't using. Indeed. All my Kerberos _normal_ acc

Re: [POLL] Cyrus 2.3.x and CONDSTORE

2006-07-08 Thread Phil Pennock
On 2006-07-08 at 12:22 -0300, Marc G. Fournier wrote: > Stupid question, but what *is* CONDSTORE? :) New extension, part of the IETF's LEMONADE working group's work to make SMTP+IMAP more usable with small devices like mobile phones, with low or expensive bandwidth and which disconnect a lot. Eve

Re: Mapping users (either KerberosV or TLS certs)

2006-07-13 Thread Phil Pennock
On 2006-07-06 at 12:58 +0100, Dennis Davis wrote: > Is there a reason I'm probably missing for the "!SSLv2" ? I said "mostly whim" but something was nagging at my memory, a suggestion of more than silly fancy. It just clicked. SSL version rollback attacks last year. I fixed OpenSSL but went aro

Re: missing plain authentication explained?

2006-07-22 Thread Phil Pennock
On 2006-07-21 at 19:15 -0700, Ross Boylan wrote: > I'm not entirely clear about whether PLAIN can be used, even if not > advertised, if the session is not secure. Since I'm doing everything > on one box, it's not a big security risk (I think). How about modifying cyrus.conf so that the listen dir

Re: compile problem

2006-07-25 Thread Phil Pennock
On 2006-07-24 at 19:17 +0200, Pavel Stratil wrote: > I still have one problem when compiling cyrus with perl. For some reason > I don't quite get, the perl part of the compilation believes that I am > using sun's compiler but I'm using the GNU compiler. The problem seems > to be only in the perl

Re: cyrus-imap/pop certs problems

2006-07-26 Thread Phil Pennock
On 2006-07-26 at 12:42 +0200, Arnau Bria wrote: > Well, I'm having problems with cyrus-imap and tls certs in my gentoo > box. I have this working fine on Gentoo, for my personal mail. Except that I don't mandate that clients use certificates. > I've configured imap to use tls: (imapd.conf) > [..

Re: Underscore in Hostname

2006-07-27 Thread Phil Pennock
On 2006-07-26 at 21:15 +, [EMAIL PROTECTED] wrote: > I know that it's technically not allowed by various RFCs but can > cyrus handle underscores in a host name and, if so, how? source, imap/lmtpengine.c, parseaddr() There are two instances there of checking the syntax of a domain, once under "

Re: performance issue (imap spool on san)

2006-07-28 Thread Phil Pennock
On 2006-07-28 at 11:05 +0100, Andrew Findlay wrote: > Headers are not usually very large, so I would be more inclined to > the idea that the index should store every header (perhaps with a > blocklist to avoid things like Received:) Those fine folk at Cambridge who introduced replication have a nu

Re: Sieve: vacation does not work

2006-08-04 Thread Phil Pennock
On 2006-08-04 at 15:32 +0200, Andreas Ferrari wrote: > In our office we use Debian Sarge, Postfix and Cyrus. Everything works > great but only vacation with Sieve does not work. > I have searched a lot and only found posts from other people which have > the same problem but no solution. > I use l

Re: Performance and cheap storage

2006-08-07 Thread Phil Pennock
On 2006-08-07 at 12:15 -0300, Henrique de Moraes Holschuh wrote: > On Mon, 07 Aug 2006, Kjetil Torgrim Homme wrote: > > I think David is missing the issue: it's the proxied connection which is > > problematic, not the connection to the client. this locks the IP > > addresses to the frontend's and

Re: Performance and cheap storage

2006-08-07 Thread Phil Pennock
On 2006-08-07 at 19:23 +0200, Hack Kampbjorn wrote: > Phil Pennock wrote: > >The "easy" fix is theoretically to configure up extra private addresses > >as aliases on the backend, and distribute the load over all of them. > >This avoids having multiple ports a

Re: Shared folders

2006-08-15 Thread Phil Pennock
On 2006-08-15 at 12:42 +0200, Paul van der Vlis wrote: > Phil Pennock schreef: > > On 2006-08-15 at 10:33 +0200, Paul van der Vlis wrote: > > > >>I've a mailbox user.paul and a folder "user.paul.postbank". When I send > >>a message to "[EMAIL P

LDAP ptloader examples?

2006-08-21 Thread Phil Pennock
Hi, I'm moving my personal mail-service to a new machine and have the luxury of being able to completely redo where data is stored without having to worry about backwards compatibility. I'd like to be able to use LDAP for storing groups and to allow canonicalisation of a userid to a standard form

Re: Can't login websieve

2006-08-23 Thread Phil Pennock
On 2006-08-23 at 18:08 +1000, Sam wrote: > The websieve.pl was working fine in our old mail server, but after we > move the mail system to a new version of FreeBSD 6.1, I can't login to > it any more. > # sivtest -a cyrus localhost > getaddrinfo: servname not supported for ai_socktype > failure:

Re: sieve doesn't work

2006-08-24 Thread Phil Pennock
On 2006-08-24 at 15:09 +0700, Vladi Lemurov wrote: >I have debian sarge (stable) installed with cyrus (imapd, pop3, > sieve) 2.1.18 -installed. Everything works fine, except sieve. I have > already delt with cyrus on Freebsd before, I used sieve there so I would > like to put the scripts I alre

Re: Can't login websieve

2006-08-24 Thread Phil Pennock
On 2006-08-24 at 09:59 +1000, Sam wrote: > Hi, commandline test is also failed: > > # sivtest -a cyrus localhost > connect: Connection refused > failure: Network initialization - can not connect to localhost:sieve > > I m not sure if I have to reload the service file in FreeBSD? You need to have

Re: sieve doesn't work

2006-08-24 Thread Phil Pennock
On 2006-08-24 at 17:54 +0700, Vladi Lemurov wrote: > the daemon listens to the port, if I do `telnet localhost 2000` I got > the following: > > Trying 127.0.0.1... > Connected to localhost.localdomain. > Escape character is '^]'. > "IMPLEMENTATION" "Cyrus timsieved v2.1.18-IPv6-Debian-2.1.18-1+sa

Re: sieve doesn't work

2006-08-25 Thread Phil Pennock
On 2006-08-25 at 15:45 +0200, Martin G.H. Minkler wrote: > sasl_mech_list: PLAIN LOGIN > sasl_minimum_layer: 256 > :~# sieveshell --user=cyrus --auth=cyrus localhost > connecting to localhost > unable to connect to server at /usr/bin/sieveshell line 174. It would be good if you can make that chan

Re: sieve doesn't work [auf Viren überprüft]

2006-09-06 Thread Phil Pennock
On 2006-09-05 at 19:05 +0200, Martin G.H. Minkler wrote: > Nobody any ideas? Am I the only one on debian sarge who's sieve doesn't > offer SASL login w/o TLS and sieve_sasl_minimum_layer=0? I'm not using Debian so can only offer generic advice and help. That's why I shut up before. When reading

Re: Deferred email with remote protocol error in reply

2006-09-15 Thread Phil Pennock
On 2006-09-14 at 19:52 -0700, Hardi Gunawan wrote: > I've searched the net, but can't find a definite > answer to this. But seems that some people are > experiencing the same problem, and they've the same > cyrus version as mine. I'm using Cyrus-Imapd 2.1.12 > and BDB 4.3. You do not mention whi

Re: LMTP problem

2006-09-27 Thread Phil Pennock
On 2006-09-25 at 18:14 +0200, Daniel Stålhammar wrote: > Trying to send mail local on my machine i get this error. > [EMAIL PROTECTED] exim]# delivering 1GRsrR-j4-7C > LOG: MAIN > == xxx R=localuser T=local_delivery defer (-1): LMTP connection closed > after initial connection TCP Wrappers?

Re: Creating sieve script with image attachements

2006-10-24 Thread Phil Pennock
On 2006-10-24 at 01:54 -0700, Adam D wrote: > This is the basic script I have been trying to work: > > elsif anyof (header :contains "Content-Type" "gif") { > fileinto "system.2-mail.missed-spam"; > } Michael Menge has explained what to look at. I'll explain why your approach isn't working. Whe

Re: LMTP timeout?

2006-10-26 Thread Phil Pennock
On 2006-10-26 at 20:12 +0200, Marten Lehmann wrote: > 2006-10-26 20:08:09 1Gd9YO-0004v8-GM == [EMAIL PROTECTED] R=mailbox_cyrus > T=mailbox_lmtpunix defer (-1): LMTP timeout after end of data (20884 > bytes written) > > Why does LMTP time out? Is it after a certain load? Or after a certain time?

Re: recover from hard restart

2006-10-27 Thread Phil Pennock
On 2006-10-27 at 14:39 -0400, Benjamin Adams wrote: > cyrus.cache.NEW > cyrus.index.NEW > > And their mail clients are not working correctly. > How can I fix this without taking the server down? Reconstruct those folders. See reconstruct(8) -- the command cleans this up. -- "Everything has thre

GSSAPI: A token had an invalid MIC

2006-10-27 Thread Phil Pennock
I'm having a problem with GSSAPI on a new install of Cyrus IMAP, where no clients are able to successfully negotiate a connection; my own client code is reporting "A token had an invalid MIC", GSS_S_BAD_MIC, when trying to unwrap the data in the GSSAPI context, so it's not getting the server's toke

Re: GSSAPI: A token had an invalid MIC

2006-10-28 Thread Phil Pennock
On 2006-10-28 at 01:27 -0400, Wesley Craig wrote: > Given the versions of things, I'd suspect one or both of these two > problems: Thanks for the pointers, it's appreciated. Alas, no. > http://people.su.se/~lha/patches/heimdal/cfx-wrap-size.txt Read it over when more awake (being a litt

Re: GSSAPI: A token had an invalid MIC

2006-10-29 Thread Phil Pennock
On 2006-10-28 at 04:35 +0200, Phil Pennock wrote: > New server: > OS/Arch: FreeBSD 6.1 / amd64 > Cyrus IMAPd: 2.3.7 > Cyrus SASL 2.1.22 > OpenSSL: 0.9.7i > Heimdal: 0.7.2 (OS port rev _1) It turns out that, of the software installed to date, Cyrus IMAP is the only one not

Re: GSSAPI: A token had an invalid MIC

2006-10-29 Thread Phil Pennock
On 2006-10-29 at 22:23 +0100, Jukka Salmi wrote: > Which Kerberos version are you trying to use? Note that --with-krb > enables Kerberos IV while Kerberos V is done throug GSSAPI > (--enable-gssapi). Aaaargh! I looked all through the "Optional Packages:" output of "configure --help", but gssapi i

Re: Probe needed for Cyrus IMAP

2006-10-30 Thread Phil Pennock
On 2006-10-30 at 08:57 -0600, Gary Mills wrote: > `telnet' might work, but the script would need to analyze the output > and terminate the connection. A timeout would also be helpful. Is > `imtest' better for this? Do you have expect installed? Something like the below might help.

Re: Probe needed for Cyrus IMAP

2006-11-01 Thread Phil Pennock
On 2006-11-01 at 17:37 -0500, Scott Adkins wrote: > Of course, contacting SSL ports are a bit more difficult. If you need to > probe an IMAPS or POP3S port, telnet just doesn't work. True, and there are many good examples available. Wrapping imtest will even let you check authentication inside S

Re: Cyrus IMAP / Outlook Problem

2006-11-02 Thread Phil Pennock
On 2006-11-02 at 08:04 -0500, cbobb wrote: > I keep getting the following error from and outlook 2003 client when the > user is trying to view or look at emails either with or without file > attachments. It is not all messages just particular ones, usually with a > file attachment: > > The server

Re: SQUAT failed

2006-11-02 Thread Phil Pennock
On 2006-11-02 at 15:08 +0100, Marten Lehmann wrote: > what is "SQUAT"? I have several lines like this in my logfile: "man -k squat" or "apropos squat" should point you to: squatter(8) - create SQUAT indexes for mailboxes That man-page explains how squatter provides indexes of mail co

Re: Cyrus imapd 2.3.7 mupdate - getaddrinfo: service not supported for ai_socktype

2006-11-03 Thread Phil Pennock
On 2006-11-03 at 06:14 -0800, Mark wrote: > I'm in the process of setting up Cyrus imapd 2.3.7 on OpenBSD 4.0 > server. > This is a back end server, to be part of 2.2.12 murder setup already in > place. master starts fine, then when it executes ctl_mboxlist -m it > failes with this error in syslog:

Re: strange string in log file

2006-11-03 Thread Phil Pennock
On 2006-11-03 at 18:15 +0300, A Clockwork Orange wrote: > what does it mean in log > > : error sending to idled: 2 "2" is probably ENOENT, so there's nothing listening on the socket. So the imapd can't talk to the idled. Did you use idled in the past, but stop using it? In which case, you prob

Re: Cyrus imapd 2.3.7 mupdate - getaddrinfo: service not supported for ai_socktype

2006-11-03 Thread Phil Pennock
On 2006-11-03 at 17:04 +0100, Antoine Jacoutot wrote: > Could it be looking for another service? (I know things like sieve... are not > part of /etc/services) You're quite right, of course. "ctl_mboxlist -m" is talking to the mupdate server. Duh. I was back a couple of cups of coffee when I rep

Re: what Sieve extensions? [solved]

2006-11-04 Thread Phil Pennock
On 2006-11-04 at 18:02 -0800, Ross Boylan wrote: > I notice the IETF has multiple versions of many of these, and one of > them, regex, is listed as expired (http://tools.ietf.org/wg/sieve/). > Any way to tell more precisely what semantics I'm getting (that is, > any way faster than reading the code

Re: Purging spam mails

2006-11-06 Thread Phil Pennock
On 2006-11-06 at 15:01 +0400, Rajeev R Veedu wrote: > Could someone please tell me how I could delete all mails in every user's > inbox.Spam folder if they are a week older? Are you dealing with a lot of users, or just a few? If you're dealing with a relatively static list of users, then Cyrus p

Re: Sieve and reject: any way to not attach original mail ?

2006-11-06 Thread Phil Pennock
On 2006-11-06 at 15:29 +0100, Christophe Boyanique wrote: > Is there a way for sieve to not copy the original mail and just send the > text specified in the script ? Assuming that you're delivering via LMTP: not through configuration. You'll need to patch the source. imap/lmtp_sieve.c:send_reje

Re: performance on large inboxes

2006-11-08 Thread Phil Pennock
On 2006-11-08 at 17:02 +0100, Marten Lehmann wrote: > from time to time we have users with a very large inbox, which means it > contains 20.000 messages or even more. My quite general question is: > What is cyrus doing once a user logs in through imap or pop3? It seems, > that it is parsing the

Re: descriptive process titles

2006-11-08 Thread Phil Pennock
On 2006-11-08 at 19:32 +0100, Marten Lehmann wrote: > is it possible to let cyrus set descriptive process titles? Currently > I'm only seeing dozends of imapd or pop3d processes, but it is very > cumbersome to extract what a process is doing from the logs in the cyrus > proc-directory. > It woul

Re: performance on large inboxes

2006-11-08 Thread Phil Pennock
On 2006-11-08 at 21:58 +0100, Marten Lehmann wrote: > I think it would be a really great performance boost if cyrus would > cache all headers (I think that is what dovecot does and is very fast > with it) so it doesn't have to touch the files. Where have you seen such > patches? Under http://ww

Re: performance on large inboxes

2006-11-08 Thread Phil Pennock
On 2006-11-08 at 22:04 +, David Carter wrote: > On Wed, 8 Nov 2006, Phil Pennock wrote: > >The relevant stuff is HERMES_CACHE_MOST in mailbox.c; I've really no > >idea whether or not these changes are roughly independent and if they > >can be pulled out. > >

Re: command-line sieve client that supports TLS

2006-11-13 Thread Phil Pennock
On 2006-11-13 at 20:44 +0100, Wolfgang Hennerbichler wrote: [ sieve client ] > Is there a command-line TLS-enabled tool out there? I just wrote one. I'm going to bed without figuring out what I'm doing wrong with GSSAPI -- it looks like the same SASL handling as I have in my IMAP client code and

Re: flags on backuped mails

2006-11-14 Thread Phil Pennock
On 2006-11-14 at 13:18 +0100, Marten Lehmann wrote: > 2. Why aren't flags stored in the file name, too? I used to see that > with Maildirs and it is very clever: Flags are permanent and aren't lost > if the index is broken. Anyway, the index speeds up access to the flags > and the index can be r

Re: command-line sieve client that supports TLS

2006-11-14 Thread Phil Pennock
On 2006-11-14 at 06:23 +0100, Phil Pennock wrote: > I just wrote one. I'm going to bed without figuring out what I'm doing > wrong with GSSAPI Fixed. I made assumptions about the zero-data-to-send case. Managesieve draft was unhelpful, I'll find the appropriate forum for th

Re: flags on backuped mails

2006-11-14 Thread Phil Pennock
On 2006-11-14 at 17:57 +0100, Marten Lehmann wrote: > ok, good point. I haven't worked with Shared Folders yet, but how and > where are flags stored then? Isn't the global flag what you want? If I'm Depends upon the flag. Seen state is one that's kept per-user and that's in a separate file unde

Re: command-line sieve client that supports TLS

2006-11-14 Thread Phil Pennock
vive. New feature: TLS client certificate authentication. If you can auth with a client cert for IMAP, this will work for Sieve; myself, I grant the certificate CN ("Phil Pennock") "a" admin rights on my INBOX. This probably doesn't scale well but I've not yet

Re: command-line sieve client that supports TLS

2006-11-15 Thread Phil Pennock
On 2006-11-15 at 09:37 +0100, Wolfgang Hennerbichler wrote: > it is absolutely great. You should urge cyrus developers to include > it in their source code, once it's mature enough and well tested. I have no objection to that. Slap a BSD-ish license on the code. However, there might be some is

sieve_connect improved (extensively)

2006-11-16 Thread Phil Pennock
Hopefully the last post on this topic for a while. sieve_connect should now be an almost complete replacement for the existing sieveshell command. The only missing feature which I know of is SASL protection layer support. Note that Cyrus imapd with GSSAPI/Kerberos doesn't ask for a protection la

Re: Sieve : sievesrcipt

2006-11-22 Thread Phil Pennock
On 2006-11-22 at 16:50 +0100, Pieter Vanmeerbeek wrote: > Is it possible to activate a sieve script with one command without having to > specify the password before your command is executed? > > Or in other words is there a param to specify the password to use in the > sievescript or installsieve

Bug in managesieve quoting?

2006-11-22 Thread Phil Pennock
Below, shouldn't the "foo"bar" item be being returned as {7+}\r\nfoo"bar ? >>> LISTSCRIPTS <<< "2006-11-22.3" ACTIVE <<< "2006-11-22.2" <<< "fred foobar" <<< "foo"bar" <<< OK Thanks, -Phil Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki Li

Re: sieve_connect improved (extensively)

2006-11-23 Thread Phil Pennock
On 2006-11-16 at 23:55 +0100, Phil Pennock wrote: > Hopefully the last post on this topic for a while. List owners/moderators: please indicate if these posts are undesired, in which case I apologise for the intrusion. In that case, please indicate if a last post with details of a new mail

Re: unread mails

2006-11-24 Thread Phil Pennock
On 2006-11-24 at 17:10 +0100, Thomas Hagen wrote: > I have a cyrus mail server with some users and one big user. > It worked fine till i had to reboot the sever. > Now all mailboxes are still ok only the big one shows only unread mails > in the mailfolders. I'm not able to change it because when i

Re: unread mails

2006-11-27 Thread Phil Pennock
On 2006-11-27 at 09:47 +0100, Thomas Hagen wrote: > Now I tried to reconstruct, this killed everything. That's rather imprecise. You don't report what error was reported by reconstruct, what the logs show, or any really useful information which gives anyone a chance of being able to help you. Di

Re: some weirdness and broken error handling with sieve (in 2.2.12)

2006-11-30 Thread Phil Pennock
On 2006-11-29 at 16:49 -0500, Greg A. Woods wrote: > BTW, this whole idea of generating new mail from SIEVE is bogus. The > local mail service should NEVER EVER IN A MILLION YEARS ever generate > new messages in response to incoming mail (think backscatter, unless if > it had the kind of once-per-