On 02 Jul 2007, at 12:00, Janne Peltonen wrote:
> But then, I'd have to buy
> twenty-five certificates...
You could create your own "lite CA" and sign your own certificates.
This is a very common solution when you control the machines that
Pine runs on, or if the machines Pine runs on are "pr
On 03 Jul 2007, at 01:25, Janne Peltonen wrote:
> I wonder where the mupdate process gets its fd limit from if it isn't
> specified there. Does it inherit it from the shell that starts up
> cyrus-master? Or is it set explicitely to some default value in
> cyrus-master?
I think cyrus-master may att
I assume that the frontend is also the murder master? Other
pertinent questions are, "How many connection do you normally get?"
and "In what way is the backend 'down'?"
The client_timeout sets an alarm that interrupts the connect system
call. The frontend may try more than once, tho, if th
On 07 Jul 2007, at 09:26, ram wrote:
> I was looking at the replication doc here at
>
> http://cyrusimap.web.cmu.edu/imapd/install-replication.html
>
> ( seems incomplete )
>
> Is there a complete documentation somewhere.
The best documentation is in the wiki, and anyone getting a useful
answer
If I understand this patch correctly, it doesn't solve the larger
problem that I'm interested in: is the data on my replica the same as
the data on my primary, or more to the point, are the two data sets
converging? This patch *would* allow me to more or less validate
that the cyrus.* meta
This is just how UMich upgrade from 2.2.x to 2.3.x. We contributed a
number of changes to 2.3.x to facilitate the functionality. I would
expect it to "just work", but you should of course rigorously test
it. In particular, you might want to test ACLs, quotas, annotations,
POP, and other
On 09 Aug 2007, at 07:08, Janne Peltonen wrote:
> Now,
> is it safe to delete the log?
Not really.
> What about the transactions that are in
> the log, is there a way to replay them later?
Run sync_client in one-shot mode.
> What if the system has
> been up and running for a while after the cra
With such a small number of users, you might be all set. Keep in
mind that -u only gets users, not shared mailboxes not associated
with any user. In UMich's system, we just run tape backups on the
replica, no need for a second replica. I've done cost comparisons
between having two replic
Under some conditions, I've seen Cyrus deliver hang. This is
probably a bug in the various Cyrus delivery & LMTP programs, tho
I've not gone looking. Ideally, every step of delivery, from the MTA
through final delivery would have timeouts to detect this sorts of
hanging bugs. When both t
Just to be clear, that's cyr_expire dying, not being killed by
master. Signal 11 is SIGSEGV, which is to say a segmentation
violation, i.e., a bug in cyr_expire. Personally, I've seen this
error on a lot of systems. The mailbox after the last one you listed
probably has a corrupt meta fi
It's broken. See:
https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2971
There are a number of problems with the current arrangement, many of
which are compounded by the namespace collision of every other
package that uses com_err.
:wes
On 07 Sep 2007, at 16:55, David Newman wrote:
>
On 21 Sep 2007, at 01:51, Pascal Gienger wrote:
> (*) 100k mailboxes and a webmail application which often LOGINs and
> SELECTs, multiple times per webpage reload.
I might suggest running a connection caching daemon, up-imapproxy
springs to mind. LOGIN & SELECT are not exactly lightweight.
:we
On 21 Sep 2007, at 13:36, Pascal Gienger wrote:
> A proxy would mean another possibility of failure. How stable is
> that proxy daemon? Another two boxes for redundancy?
UMich runs the caching proxy on the host running httpd/webmail. up-
imapproxy is very stable.
:wes
Cyrus Home Page: ht
This is a very simple bug: ipurge is not logging a sync event. The
fix is to add sync_log_mailbox (or something similar) if ipurge makes
a change. I suspect that unexpunge is suffering from a similar
problem, but I haven't actually looked, so it may be more complex.
:wes
On 27 Sep 2007, a
On 04 Oct 2007, at 18:33, Vincent Fox wrote:
> Interesting, but this is approximately 15K users per backend.
> Which is
> where we are now after 30K users per backend were crushed. I am much
> more interested in exploring whether Cyrus hits some tipping point
> where
> a single backend cannot
Personally, I've seen Solaris bottlenecking on file opens in large
directories. This was a while ago, but it was one of the major
reason we switched to Linux -- the order of magnitude improvement in
directory scale was sure handy for 80-90K users with no quota. The
kind of blocking I'm ta
What's your authentication & authorization infrastructure look like?
Every mailbox has an associated ACL, which must be canonicalized to
determine whether the user in question gets to see it. ctl_mboxlist
just lists whatever it finds. I've seen Kerberos cause LIST * to
take a long time -
So what's NOT working? I don't suppose your network monitor is
connecting to the IMAPS port and then immediately dropping the
connection...
:wes
On 08 Jul 2010, at 19:19, Lucas Zinato Carraro wrote:
> Using Thunderbird i can use IMAPs with no apparent problem.
Cyrus Home Page: http:/
On 05 Jul 2010, at 10:56, Gavin Gray wrote:
> Two of them have had imapd processes crash and leave core dumps in
> the past couple of days. Looking at the core dumps with dbx we see
I'm not aware of bug fixes in those code paths. Given how little
those two code paths have in common, I'd suspec
On 02 Jul 2010, at 09:29, John Madden wrote:
> I'm concerned about the listener_lock timeouts.
The listener_lock timeout means that the thread waited around for 60
seconds to see if a connection was going to arrive. Since it didn't,
it timed out and that thread went away. The pthread routine
On 12 Jul 2010, at 13:42, Lucas Zinato Carraro wrote:
> Exist a way to filter this log direct in cyrus imap ?
No. Open a bug here:
https://bugzilla.andrew.cmu.edu/
and request a way. There ought to be one.
:wes
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http:/
On 12 Jul 2010, at 15:49, John Madden wrote:
> ...Meaning the error is nothing to worry about? This is on RHEL
> 5.5 if that helps.
The "error" is a debug statement. The CPU usage reflects poorly on
the pthreads implementation.
> Can any of this be tweaked to, for example, wait longer befor
On 15 Jul 2010, at 11:41, Eric Doutreleau wrote:
> i m using cyrus 2.3.16
> i have the following line in the cyrus.conf
>
> delprune cmd="cyr_expire -E 1 -D 30 -X 30" at=0400
>
> but on my deleted hierarchy there are some mailboxes with mails
> than are
> 2 years old
>
> how is this possible
On Sep 9, 2010, at 2:22, Shuvam Misra
wrote:
> Does this mean that all cyradm-type admin connections must connect
> to one
> or other of the back-end servers? Can I get admin tasks done by
> connecting to one of the front-end servers too?
Most admin tasks are proxied by the frontends. If d
On Sep 8, 2010, at 17:17, "Jeroen van Meeuwen (Kolab Systems)"
wrote:
> - In a tradition Murder setup the master update server cannot be
> combined with
> a backend or frontend server.
The murder master can also be a frontend server, but not a backend
server. The mailboxes.db in a traditi
On Sep 9, 2010, at 2:20, Shuvam Misra
wrote:
> What internal
> details prevent a front-end server, mupdate server, and back-end
> server
> from coexisting on the same physical system? Is it that there's no
> facility in the back-end server feature to make it listen only on
> localhost:imap
On 08 Sep 2010, at 16:41, Andrew Morgan wrote:
> Unfortunately, I've never setup a "unified" Murder, so I don't fully
> understand what the advantages and disadvantages of it compared to a
> "traditional" Murder. Maybe someone else can jump in here with their
> experiences.
The main advantage
Could you:
1) put this in bugzilla
2) note in the documentation that some SASL methods require hostnames
Thanks,
:wes
On 09 Sep 2010, at 06:47, Guilherme Manika wrote:
> This patch adds a "disablereverselookups" option to imapd.conf that disables
> reverse DNS lookups in imapd
On 22 Sep 2010, at 10:46, Dave McMurtrie wrote:
> Considering the state of Cyrus' interoperability with BDB and all the
> recent fixes to skiplist, would it make sense to at least not make BDB a
> default backend from now on?
Yes, and "sane defaults" was to be one of the themes of the 2.4 releas
On 28 Sep 2010, at 18:04, Simon Matter wrote:
> While we are at it, I know about this prefixing but is it documented
> somewhere? I just checked the imapd.conf man page but couldn't find it
> there.
There's a bugzilla or two related to the lack of documentation of the prefixing.
:wes
Cyrus H
On 01 Oct 2010, at 10:24, Simon Amor wrote:
> Whenever we migrate mailboxes all the mailboxes for the domain are
> moved at the same time, and there's a high chance that the quota usage
> will get messed up and mailboxes will have more than 100% of their
> quota used. Running the quota -f com
On 04 Oct 2010, at 01:09, Patrick Goetz wrote:
> I was having problems making Cyrus 2.2.x work with only encrypted
> passwords. Setting
>
> allowplaintext: no
>
> in imapd.conf prevents plain text logins, but then cyradm stops working:
>
> ibis:~etc$ cyradm localhost
> Login disabled.
>
On 04 Oct 2010, at 10:26, Patrick Goetz wrote:
> Sorry,I didn't specifically say that I'm using the latest release, 2.3.16.
I understood that, tho I did notice you pasted the 2.2.x error, not the 2.3.x
error.
> I find cyradm to be very convenient to use for smaller sites, but is
> this essentia
On 04 Oct 2010, at 13:37, Patrick Goetz wrote:
> On 10/04/2010 12:29 PM, Andrew Morgan wrote:
>> cyrus-be4:~# cyradm --user cyrus --tlskey '' localhost
>
> That did it! The trick is to use --tlskey with an empty field as
> demonstrated above. Who knew?
That's a bug, please report it. It ought
On 09 Oct 2010, at 00:04, Michael D. Sofka wrote:
> Is the old format updated on xfer?
It is updated on xfer -- when the mtimes of the message files are set to the
INTERNALDATE.
:wes
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cy
On 09 Oct 2010, at 20:31, Bron Gondwana wrote:
> Yes, file mtimes get set to INTERNALDATE as much as possible (and vice
> versa when reconstructing with a missing index - hence the reason for
> doing it)
Perhaps you're misunderstanding me... In 2.3.recent, the second to last step of
undump (xfer)
On 09 Oct 2010, at 23:12, Bron Gondwana wrote:
> Oh yeah - you're right. That's missing in 2.4 and I think it's because I
> planned to replace it with replication stuff which uses the append logic
> which does that on the fly. But I haven't done it yet. Would make sense
> to add that back, at le
On Oct 12, 2010, at 16:26, Patrick Goetz wrote:
> In particular, though, if the \Noselect IMAP flag somehow got set on
> this mailbox, does this actually show up in the settings in such a way
> that I can change it? Is there anything else it could possibly be?
\Noselect is the result of LIST et
On 19 Oct 2010, at 05:54, Lucas Zinato Carraro wrote:
> I have 3 Frontends in DMZ, 4 Backends in Intranet
> and a Administrative Station in other network.
>
> The administrative station, and clients stations can not connect
> direct to backend servers.
>
> In imapd.conf i enable the parameter:
On 29 Oct 2010, at 15:29, Michael D. Sofka wrote:
> When moving files from a 2.2.12 back-end server to a 2.3.16 back-end
> server using xfer, the 2.3.16 server logs:
>
> Oct 29 15:23:23 imap-be4 imap[5933]: kick_mupdate: can't connect to
> target: No such file or directory
>
> The xfer was init
Didn't Dave write up.imapproxy? It makes a huge difference for, e.g., IMP &
roundcube. Also, configuring client to not retrieve the LIST of mailboxes
during every transaction is a big win.
:wes
On 16 Nov 2010, at 10:11, Shuvam Misra wrote:
> Most programming environments in which such
> Webm
On 16 Nov 2010, at 10:32, Joseph Brennan wrote:
> I wish we'd somehow financed a native Cyrus webmail interface, that is
> not using IMAP but built into Cyrus. I don't think users know how good
> Cyrus is because they look at it through a weak intermediary.
I don't think a Cyrus-specific web inte
On 03 Feb 2011, at 13:45, Patrick Goetz wrote:
> On further thought, it seems like this would be a solution:
>
> -- --
> | Server 1 | ---DRBD--> | Server 2 |
> -- --
>
> Step 1: Stop cyrus on Server 1.
> Step 2: Turn off repli
On 03 Feb 2011, at 14:02, Patrick Goetz wrote:
> On 02/03/2011 12:56 PM, Wesley Craig wrote:
>> I wonder, tho, why use DRBD rather than cyrus replication.
>
> Perhaps because I don't know anything about cyrus replication? <:)
>
> RTFM the cyrus wiki?
Oh, I th
On 16 Mar 2011, at 09:12, Michael Menge wrote:
> --- imapd_be.conf --
> proxy_authname: x-xxx
> proxy_password:
Do you have proxyservers defined? From lmtpd.c:
if (config_mupdate_server &&
(config_mupdate_config == IMAP_ENUM_MU
On 17 Mar 2011, at 05:18, Michael Menge wrote:
> Thanks, configuring proxyservers solved the problem.
> The murder documentation does indicate that you "want"
> configure proxyservers but it does not indicate that you
> "must" configure proxyservers to prevent lmtp loops.
>
> It would be nice if t
It's usually possible in a murder configuration to do a zero downtime upgrade
by xfer-ing users to a backend running the new version. The admin is then in
control of how much index upgrade load to inflict on the new machine.
:wes
On 10 May 2011, at 11:41, Henrique de Moraes Holschuh wrote:
> O
On 31 Aug 2011, at 14:36, Maria McKinley wrote:
> Anyway, here is an example of some processes that are getting big:
>
> PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND
>
> 24328 cyrus 20 0 147m 6236 5004 R 27.4 0.2 22:07.21 imapd
>
> 27549 cyrus 20 0 147m
On 13 Dec 2011, at 19:15, Andrew Morgan wrote:
> Nothing changes the value of disable_referrals that I can see. It is
> initialized to 0.
disable_referrals devolves to domain_from_ip in canonify_userid() in global.c.
I gather it's set when virtdomains is set "on". Presumably this is necessary
The short answer is that "kick_mupdate()" makes no sense on a backend in the
configuration you're talking about. The long answer is that calls to
kick_mupdate() are liberally sprinkled through the code, primarily involving
calls that manipulate mailboxes or acls (xfer does both, naturally). So
On 17 Apr 2012, at 02:43, Frank Elsner wrote:
> The RHEL frontend connects to the (Solaris) mupdate server, authentication
> work.
>
> But after
>
> Apr 17 07:27:21 eg-mailfrontend cyrus/mupdate[7395]: successful mupdate
> connection to mupdate-febe.intern.tu-berlin.de
> Apr 17 07:27:21 eg-mai
On 18 Oct 2013, at 12:13, Fabio S. Schmidt wrote:
> I'm having inconsistent with a backend server and Mupdate master, the
> mailboxes are listed in the mupdate server but they were erased on the
> Backedn. When I try to re-create the mailbox on the backend the Mupdate
> server prevents the oper
On 08 Nov 2013, at 11:10, Simon Beale wrote:
> For anyone following afterwards, one gotcha I feel worth pointing out is
> that if you have a line in your cyrus.conf START section of:
> mupdatepush cmd="ctl_mboxlist -m"
> ... make sure you change that temporarily on the replica to:
> mupdatepush
301 - 353 of 353 matches
Mail list logo
