Re: lmtpproxy not responding after dot on DATA command

[Lanfeust troy <lanfeust99@xxxxxxxxx>]

thanks for reply

my certificate key file was protected by password.

2011/9/20 Dan White <dwhite@xxxxxxx>

On 20/09/11 11:58 +0200, Lanfeust troy wrote:

I have installed a murder cyrus as following:

first server contain mupdate and all proxy
second server as backend.

on backend the lmtptest delivery mail correctly

Now on frontend lmtp

MAIL FROM:<root@localhost>
250 2.1.0 ok
RCPT TO:<user2@xxxxxxxxxxxxxx>
250 2.1.5 ok
DATA
354 go ahead

test from frontend
.

Server never reply to "."

Configuration Frontend

cyrus.conf
*START {*
* # do not delete this entry!*
* recover cmd="/usr/sbin/ctl_cyrusdb -r"*
* delprune cmd="/usr/sbin/cyr_expire -E 3"*
* tlsprune cmd="/usr/sbin/tls_prune"*
*}*
*SERVICES {*
* imap cmd="proxyd" listen="imap" prefork=0 maxchild=100*
* imaps cmd="proxyd -s" listen="imaps" prefork=0 maxchild=100*
* pop3 cmd="pop3proxyd" listen="pop3" prefork=0 maxchild=50*
* pop3s cmd="pop3proxyd -s" listen="pop3s" prefork=0 maxchild=50*
* lmtp cmd="lmtpproxyd" listen="lmtp" prefork=1 maxchild=20*
*}*
*EVENTS {*
* checkpoint cmd="/usr/sbin/ctl_cyrusdb -c" period=30*
* delprune cmd="/usr/sbin/cyr_expire -E 3" at=0401*

* tlsprune cmd="/usr/sbin/tls_prune" at=0401*
*}*

If the frontend is the mupdate master, it is missing 'mupdate -m' in
your SERVICES section. See:

http://cyrusimap.org/docs/cyrus-imapd/2.4.9/install-murder.php

and imapd.conf

*configdirectory: /var/lib/cyrus*
*defaultpartition: default*
*partition-default: /var/spool/cyrus/mail*
*altnamespace: 1*
*unixhierarchysep: yes*
*lmtp_downcase_rcpt: yes*
*allowanonymouslogin: no*
*autocreatequota: -1*
*sieveusehomedir: false*
*hashimapspool: true*
*allowplaintext: yes*
*sasl_pwcheck_method: saslauthd*
*sasl_mech_list: PLAIN LOGIN*
*virtdomains: userid*
*tls_cipher_list: TLSv1+HIGH:!aNULL:@STRENGTH*
*syslog_prefix: cyrus*
*admins: admin murder*
*tls_cert_file: /etc/ssl/certs/CS_memolinux.crt*
*tls_key_file: /etc/ssl/private/memolinux.key*
*tls_ca_file: /etc/ssl/certs/CA_memolinux.crt*
*allowusermoves: 1*
*mupdate_server: 172.16.68.18*
*mupdate_authname: murder*
*mupdate_username: murder*

*mupdate_password: murdercyrus*

You shouldn't need these mupdate_ lines on the mupdate master server.

*proxy_authname: murder*

*murderFrontend_password: murdercyrus*
*murderBack1_password: murdercyrus*
*murderBack2_password: murdercyrus*


Configuration Backend:

cyrus.conf
*START {*
* recover cmd="/usr/sbin/ctl_cyrusdb -r"*
* mupdatepush   cmd="/usr/sbin/ctl_mboxlist -m"*
* delprune cmd="/usr/sbin/cyr_expire -E 3"*
* tlsprune cmd="/usr/sbin/tls_prune"*
*}*
*SERVICES {*
* imap cmd="imapd -U 30" listen="imap" prefork=0 maxchild=100*
* imaps cmd="imapd -s -U 30" listen="imaps" prefork=0 maxchild=100*
* pop3 cmd="pop3d -U 30" listen="pop3" prefork=0 maxchild=50*
* pop3s cmd="pop3d -s -U 30" listen="pop3s" prefork=0 maxchild=50*
* lmtp cmd="lmtpd" listen=":24" prefork=1 maxchild=20*
*  sieve cmd="timsieved" listen="localhost:sieve" prefork=0 maxchild=100*
* notify cmd="notifyd" listen="/var/run/cyrus/socket/notify" proto="udp"
prefork=1*
*}*
*EVENTS {*
* checkpoint cmd="/usr/sbin/ctl_cyrusdb -c" period=30*
* delprune cmd="/usr/sbin/cyr_expire -E 3" at=0401*
* tlsprune cmd="/usr/sbin/tls_prune" at=0401*
*}*
*
*
Imapd.conf:

*configdirectory: /var/lib/cyrus*
*admins: admin murder*
*partition-default: /var/spool/cyrus*
*sasl_pwcheck_method: saslauthd*

*sasl_mech_list: PLAIN LOGIN*

Consider removing LOGIN from your mech list on the backend, unless you
really need it. LOGIN does not support proxy auth, but PLAIN does.

*allowplaintext: 1*

*mupdate_server: 172.16.68.18*
*mupdate_authname: murder*
*mupdate_username: murder*
*mupdate_password: murdercyrus*
*proxy_authname: murder*
*murderBack1_password: murdercyrus*
*murderBack2_password: murdercyrus*
*murderFrontend_password: murdercyrus*
*allowanonymouslogin: 0*
*allowusermoves: yes*
*altnamespace: yes*
*unixhierarchysep: yes*
*lmtp_downcase_rcpt: yes*
*anysievefolder: 1*
*sieveusehomedir: 0*
*hashimapspool: true*
*virtdomains: userid*
*fulldirhash: 0*
*tls_cert_file: /etc/ssl/certs/CS_memolinux.crt*
*tls_key_file: /etc/ssl/private/memolinux.key*

*tls_ca_file: /etc/ssl/certs/CA_memolinux.crt*

You're missing the proxyservers entry on the backend.

--
Dan White

----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/