Re: Security of Cyrus IMAPd vs UofW IMAPd ...

2001-03-15 Thread Amos Gouaux
> On Wed, 14 Mar 2001 08:43:44 -0800, > Rob Tanner <[EMAIL PROTECTED]> (rt) writes: rt> (I know a lot of people swear by postfix, but I stick with sendmail rt> because I know the product and in this world of nasty hackers, using rt> an unfamiliar MTA is a very scarry thought. But does an

Re: Security of Cyrus IMAPd vs UofW IMAPd ...

2001-03-15 Thread Ian G Batten
On Wed, 14 Mar 2001, Rob Tanner wrote: > privileges. Since all the mailboxes are owned by the Cyrus user, what > would be more secure of a system that just does mail delivery woulkd > be a hack to sendmail so that once it attaches to port 25 it drops root > and runs as the Cyrus user. Show m

Re: Replicated mail server ...

2001-03-15 Thread Alex Pilosov
On Wed, 14 Mar 2001, Andrew K Bressen wrote: > http://www.cis.upenn.edu/~bcpierce/unison/ > or some linux distributed filesystem > to replicate a mailstore back and forth between two machines > with similar cyrus or uwash imap configurations. > if one machine crashes, you st

TLS and client certificates

2001-03-15 Thread Norbert Klasen
Hi, if imtest is called with a client certificate (and the local ca cert has been specified with tls_ca_file in /etc/imapd.conf) the imapd_userid variable is set cmd_starttls() to external.auth_id, which is set in tls_start_servertls to the CN part of the subject in the client cert. >From the log

Re: Replicated mail server ...

2001-03-15 Thread Damian Gerow
On Wed, Mar 14, 2001 at 07:54:40PM -0500, Alain Turbide wrote: > The approach I've tested here is using a linux server with a ReiserFS > partition replicated between 2 nodes using DRBD. Heartbeat runs on both > systems and will switch the slave node to master in the event of a failure > in the Ma

Re: [2] Re: Disabling quota for user

2001-03-15 Thread eric
Cillian Sharkey wrote: > Lawrence Greenfield <[EMAIL PROTECTED]> wrote: > > It never occured to me before, but I don't think there is a way of > > disabling the quota once it's been set. Probably deleting the user and > > recreating it would work. > > Or another way is to just delete the quota f

RE: Security of Cyrus IMAPd vs UofW IMAPd ...

2001-03-15 Thread John Hughes
>> privileges. Since all the mailboxes are owned by the Cyrus user, what >> would be more secure of a system that just does mail delivery woulkd >> be a hack to sendmail so that once it attaches to port 25 it drops root >> and runs as the Cyrus user. Show me a hack like that, and Cyrus wins

Working virtual domain examples (IMAP and MTA)?

2001-03-15 Thread Kevin M. Myer
Hello, In the past, I have seen several mentions of patches to Cyrus to allow it to serve virtual domains. Does anyone have a collection of these patches available and further, what are the realistic chances of having something like this rolled into the main release? I have been struggling to g

Manually using deliver to test cyrus imapd

2001-03-15 Thread Gilion Goudsmit
Hi people, I'm a newbie to Cyrus, but I'm liking what I'm seeing sofar. I'm planning a migration of our company mail-server to cyrus, mainly because we want to use subfolders in imap and because we'd like some shared mailboxes without having the associated Linux-users. I've got the Cyrus imap da

New problem - LMTP

2001-03-15 Thread Damian Gerow
I figured out the problem, thanks largely to Jean-Michel Doublet. I enabled debugging on the LMTP daemon that had the socket open (in cyrus.conf, 'cmd="lmtpd -a"'), and saw that it was trying to create a directory called "/var/spool/imap/stage." which already existed. By removing that directory,

Cyradm problem...

2001-03-15 Thread Anil Jangity
Hi all. [TIA] I just compiled the latest version of Cyrus (tried CVS version too). The compile itself goes smoothly, no problems. But, when thats done I try to run cyradm and it fails to see the SASL libs. Which perl/makefile needs fixing? venus# ldconfig -r |grep sasl 71:-lsasl.8

1031055

2001-03-15 Thread info-cyrus

Re: Manually using deliver to test cyrus imapd

2001-03-15 Thread Bitt Faulk
On Thu, 15 Mar 2001, Gilion Goudsmit wrote: > > I used the following to send something > to my mailbox: > > cat /etc/printcap | /usr/cyrus/bin/deliver-wrapper giel > cat /etc/printcap | /usr/cyrus/bin/deliver-wrapper user.giel > cat /etc/printcap | /usr/cyrus/bin/deliver giel > cat /etc/printcap |

Re: Working virtual domain examples (IMAP and MTA)?

2001-03-15 Thread Atif Ghaffar
Almost all ISPs that are using Cyrus+LDAP etc are doing similar things. You may like to have a look at http://ispman.sourceforge.net The software was built to fullfill these requirements. cheers "Kevin M. Myer" wrote: > Hello, > > In the past, I have seen several mentions of patches to Cyrus

delivery failure

2001-03-15 Thread Bernhard R. Erdmann
Your email 1031055, Fri, 16 Mar 2001 04:03:41 +0800 containing HTML junk is not wanted here for security reasons. It has been bounced without human intervention. -- This is a copy of the message, including all the headers. -- Received: from james.berdmann.de ([192.168.1.1]) by e

Re: TLS and client certificates

2001-03-15 Thread Lawrence Greenfield
Excellent catch. This looks like a bug; as you might've guessed, we don't yet use client side authentication with STARTTLS, and this code was only tested a few times when it was first inserted. I'll apply the patch you suggest. The dn mapping is an open problem across multiple protocols and aut

1031055

2001-03-15 Thread amodeo
** The following is an automated reply from ADMIN ** I will be away from the office 3-10-2001 to 3-21-2001. Your e-mail will be stored and I will read it upon my return. In the interim, please direct all requests to the following individuals according to your needs: * All computer work order

sendmail -> procmail -> cyrus deliver -> lmtpd [was: Re: Manually using deliver to test cyrus imapd]

2001-03-15 Thread Andrew K Bressen
>cat /etc/printcap | /usr/cyrus/bin/deliver giel deliver expects that the file you hand it will be rfc-822 compliant; ie, it has to look like a mail message, not just any old file. Make sure it doesn't have a berkeley mailbox seperator in the header, either. This is the line that begins wit

Is sasl_pwcheck_method: PAM broken on Solaris

2001-03-15 Thread Rob Tanner
Hi, I've gone over and over my configuration, of which there's not much to configure, and I'm completely baffled. I'm running (or trying to) sasl 1.5.24, cyrus imap 2.0.12 on a Solaris 2.7 system. This is what I've configured: imap was buit with: --with-auth=unix SASL was built with: --

Re: sendmail -> procmail -> cyrus deliver -> lmtpd [was: Re: Manuallyusing deliver to test cyrus imapd]

2001-03-15 Thread Jason Fesler
> Make sure it doesn't have a berkeley mailbox seperator > in the header, either. This is the line that begins > with "From " (as opposed to the one that starts "From:", > which is ok). for people who *really* don't want to get rid of (or can't get rid of) leading "From " lines.. http://gigo.com

Accepting e-mail for unknown users...

2001-03-15 Thread Josh Miller
Do I have to accept e-mail for unknown users? or can I have sendmail check that the user actually exists when e-mail comes in? If so...is there documentation on doing this anywhere? I remember seeing something about this on this list quite awhile ago, but I can't find it by searching the archives

Re: Accepting e-mail for unknown users...

2001-03-15 Thread Rob Tanner
If sendmail doesn't know where to deliver the mail, it should bounce it. In fact, that's the normal behavior. When the mail gets bounced, Postmaster will get a notification, and that notification is typically in multi-part MIME and includes the original message as an attachment. You might co

RE: Accepting e-mail for unknown users...

2001-03-15 Thread Josh Miller
It does bounce it...but why can't I block it during the incoming SMTP transmission instead of replying "250 2.1.5 [EMAIL PROTECTED] Recipient ok"? - Josh -Original Message- From: Rob Tanner [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 15, 2001 19:50 To: Josh Miller; Cyrus-Info Subjec