RE: Funding Cyrus High Availability

2004-09-19 Thread David Lang
On Fri, 17 Sep 2004 [EMAIL PROTECTED] wrote: From: David Lang [mailto:[EMAIL PROTECTED] Mike, one of the problems with this is that different databases have different interfaces and capabilities. if you design it to work on Oracle then if you try to make it work on MySQL there are going to be quit

Re: Funding Cyrus High Availability

2004-09-19 Thread David Lang
There are many ways of doing High Availability. This is an attempt to outline the various methods with the advantages and disadvantages. Ken and David (and anyne else who has thoughts on this) please feel free to add to this. I'm attempting to outline them roughly in order of complexity. 1. Act

Re: Funding Cyrus High Availability

2004-09-19 Thread David Carter
On Sun, 19 Sep 2004, David Lang wrote: 5. Active/Active designate one of the boxes as primary and identify all items in the datastore that absolutly must not be subject to race conditions between the two boxes (message UUID for example). In addition to implementing the replication needed for #1

Re: Funding Cyrus High Availability

2004-09-19 Thread David Lang
On Sun, 19 Sep 2004, David Carter wrote: On Sun, 19 Sep 2004, David Lang wrote: 5. Active/Active designate one of the boxes as primary and identify all items in the datastore that absolutly must not be subject to race conditions between the two boxes (message UUID for example). In addition to imp

Re: Funding Cyrus High Availability

2004-09-19 Thread Jure Pe_ar
On Sun, 19 Sep 2004 00:52:08 -0700 (PDT) David Lang <[EMAIL PROTECTED]> wrote: Nice review of replication ABC :) Here are my thoughts: > 1. Active->Slave replication with manual failover This is really the simplest way to do it. Rsync (and friends) does 90% of the required job here; the only th

raw access to imap quotas, with mail user

2004-09-19 Thread Felix Cuello
Hello, I wrote a small C program to access to quota files without ask cyrus. This program run under mail group. I noticed when something change in the mailbox [deleting mails, receiving mails, etc] the /var/imap/quota permissions are resetted to: -rw--- cyrus.mail Then ma

Re: Funding Cyrus High Availability

2004-09-19 Thread David Lang
please don't misunderstand my posts. it's not that I don't think that active/active/active is possible, it's just that I think it's far more complicated. assiming that the simplest method would cost ~$3000 to code I would make a wild guess that the ballpark figures would be 1. active/passive w

Re: Funding Cyrus High Availability

2004-09-19 Thread Michael Loftis
--On Monday, September 20, 2004 00:43 +0200 Jure Pe ar <[EMAIL PROTECTED]> wrote: On Sun, 19 Sep 2004 00:52:08 -0700 (PDT) David Lang <[EMAIL PROTECTED]> wrote: Nice review of replication ABC :) Here are my thoughts: 1. Active->Slave replication with manual failover This is really the simplest w

Re: raw access to imap quotas, with mail user

2004-09-19 Thread Derrick J Brashear
On Sun, 19 Sep 2004, Felix Cuello wrote: Hello, I wrote a small C program to access to quota files without ask cyrus. This program run under mail group. I noticed when something change in the mailbox [deleting mails, receiving mails, etc] the /var/imap/quota permissions are resetted to: -

Re: raw access to imap quotas, with mail user

2004-09-19 Thread Derrick J Brashear
On Sun, 19 Sep 2004, Felix Cuello wrote: Inasmuch as this should be being done at all, your program should be setuid cyrus. I don't think doing this is a good idea in general, though. Then i wrote a simple C code and compile that as a PERL Package, then i have direct access to their quota. Apache

Re: raw access to imap quotas, with mail user

2004-09-19 Thread Felix Cuello
On Sun, Sep 19, 2004 at 10:15:20PM -0400, Derrick J Brashear wrote: > In general programs which access the mail store run as the cyrus user. > Inasmuch as this should be being done at all, your program should be > setuid cyrus. I don't think doing this is a good idea in general, though. Is a req

Re: raw access to imap quotas, with mail user

2004-09-19 Thread Edward Rudd
On Sun, 2004-09-19 at 18:32, Felix Cuello wrote: > Hello, > >I wrote a small C program to access to quota files without ask cyrus. This >program run under mail group. >I noticed when something change in the mailbox [deleting mails, receiving >mails, etc] the /var/imap/quota permiss

Re: raw access to imap quotas, with mail user

2004-09-19 Thread Felix Cuello
On Sun, Sep 19, 2004 at 09:55:45PM -0500, Edward Rudd wrote: > What's wrong with just making an imap connect to ask for the quota root? > (you don't have to run cyradm to check quatas..) Is to slow to do that in every page viewed by users [login with ldap access, then check imap quota]. Because the

Re: raw access to imap quotas, with mail user

2004-09-19 Thread Felix Cuello
On Sun, Sep 19, 2004 at 10:49:03PM -0400, Derrick J Brashear wrote: > So write simple C code and exec it (and collect the result) from perl? That's the problem... PERL is running as apache access. I wrote C code and compile it [using h2xs] as PERL Package [because i don't want to do an exec]. The p

Re: raw access to imap quotas, with mail user

2004-09-19 Thread Derrick J Brashear
On Sun, 19 Sep 2004, Felix Cuello wrote: So write simple C code and exec it (and collect the result) from perl? That's the problem... PERL is running as apache access. I wrote C code and Right, that's why I suggested writing a C program, making it setuid and executing, not linking in via xs. Setui

Re: raw access to imap quotas, with mail user

2004-09-19 Thread Michael Loftis
--On Sunday, September 19, 2004 21:10 -0300 Felix Cuello <[EMAIL PROTECTED]> wrote: On Sun, Sep 19, 2004 at 09:55:45PM -0500, Edward Rudd wrote: What's wrong with just making an imap connect to ask for the quota root? (you don't have to run cyradm to check quatas..) Is to slow to do that in ever

Re: raw access to imap quotas, with mail user

2004-09-19 Thread Carl P. Corliss
Michael Loftis wrote: [snip] > Read it once, and then cache the result in the session information (or > even in a cookie) along with a 'freshness' -- and when the timeout has > expired, re-check it (say 1 minute, or five). Same thing with the LDAP > auth. Re-authing every single page load is not n