[Kolab-devel] Other kolab scalability issues

[Thomas Arendsen Hein]

* Fabio Pietrosanti <lists at infosecurity.ch> [20071023 15:06]:
> Alain Spineux wrote:
> > First we need to know what we are speaking about !
> >
> > I tested kolab-2.2beta1.
> >
> > postfix support at least 100000 domains with the format
> > extralargedomainXXXXX.loc.
> > the main.cf was more than 5Mo large !
> > imap failed at 68 domains, with line of about 4096 chars.
> 
> Please let me underline that in my kolab installation removing the
> "loginrealm:" configuration parameter from imapd.conf all continued
> working perfectly.
> 
> I am wondering, do we really require this configuration line? Why just
> don't remove it away?

loginrealms: @@@postfix-mydomain@@@
was added on Tue Nov 23 21:26:47 2004 +0100 with the commit message
"Initial revision".

On Mon Jul 25 03:11:58 2005 +0200 it was changed by Steffen with the
comment "Fix login problem":
-loginrealms:           @@@postfix-mydomain@@@
+loginrealms:           @@@postfix-mydomain@@@ @@@postfix-mydestination|join @@@

Later commits just updated this line to changes in the templating
and removed the duplicate domain, so we ended up at:
loginrealms:           @@@postfix-mydestination|join( )@@@

The "Fix login problem" message indicates to me that there might be
some value in having this line, but unfortunately the commit
messages at that time are not very helpful.

... some minutes later ...

I just saw that kolabd/kolabd was at a different location in the
past: kolab/kolab ... here is "some" new insight:

Tassilo wrote on Mon Jun 09 14:53:42 2003 +0200 this:
kolab.spec: increased version no
imapd.conf.template: loginrealms setting added
kolab_sslcert.sh: certs had invalid permissions (work-around)

kolab/kolab/imapd.conf.template:
+loginrealms:           @@@postfix-mydomain@@@

This is part of Kolab 1.x and much has changed since then, but still
the "Fix login problem" commit message is a strong indication that
even in Kolab 2.1 this was used.

A bit more searching showed that there are various issues about this
topic, they are linked from this one:
https://intevation.de/roundup/kolab/issue1189
(IMAP login fails on some specific uids)

We should check if logging in with a uid without an @ sign still
works after removing the line.

Thomas

-- 
thomas at intevation.de - http://intevation.de/~thomas/ - OpenPGP key: 0x5816791A
Intevation GmbH, Osnabrueck - Register: Amtsgericht Osnabrueck, HR B 18998
Geschaeftsfuehrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner