Home Forums OS X Server and Client Discussion Mail cyrus rehash script: from basic to full hash

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • #367510
    emailman
    Participant

    I work at a college where we have about 4500 student mail accounts. Our Xserve (Tiger 10.4.7) is bound to Active Directory where we’re using the student id # as the username which always begins with a 0 or 1. This causes the basic hashing scheme to put the /var/imap/___ files in subfolder “q” of the respective directory (user, quota, …). We are not using virtual domains. I would like to rehash to the full hashing scheme using the rehash script (/usr/bin/cyrus/tools/rehash). I’m no perl pro (never had to decipher it until this week), but it appears the rehash script is not compatible with case INsensitive file systems (like our Mac OS Extended – Journaled). I’ve made some changes to the script’s move_users subprocedure to create new dirs beginning with “.” (so it wouldn’t remove valid dirs) and then after hashing rename all those “.” dirs back to their corresponding letters–just like the move_quotas and move_sieve subprocedures do. Since I’m new to perl, I’m hesitant to run my changes since there is no easy undo if it doesn’t work. (Yes, I know I need a test box.) If any are interested in seeing my modified rehash script, let me know. (I’ve also added a bunch of print statements for debugging.)
    Also, I haven’t found much documentation on the script. I know I’m supposed to
    1. stop mail services
    2. add the following to my imapd.conf [code]fulldirhash: yes
    hashimapspool: yes # optional[/code]3. run sudo -u cyrusimap /usr/bin/cyrus/tools/rehash full
    Am I supposed to run anything else (like reconstruct) afterwards before I start up mail services again?
    TIA for any help.

    #367596
    emailman
    Participant

    Update…
    I ran my inefficiently modified rehash script and it worked.
    Sadly, I discovered that disk I/O isn’t the main problem but rather communication with one of our Windows DCs. The Xserve occasionally fails authentication when receiving mail for Active Directory users or when AD users log in to webmail. The AD user groups are listed in the mail SACL.
    /var/log/mailaccess.log shows some of the following types of entries [code]lmtpunix[8927]: warning: unable to post message for user: (user), service ACL is not enabled for this user

    imap[19322]: badlogin from: localhost [::1]. plaintext user: (user). service ACL is not enabled for this user[/code]If I don’t come to any conclusion after some more research, I may post that issue in the Active Directory forum.

Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.

Comments are closed