Mailbox not found issue [Scanned]

[William Reynolds]

Ok I have been playing with some commands and it is showing that user has 2 mailboxes still active. I went in and copied the corrupt mailbox to a separate directory and deleted it. I tried to run the delete mailbox command and got a permission denied, tried doing sam user/justin at bryanhousing.org<mailto:user/justin at bryanhousing.org> cyrus-admin c and got a SYSTEM I/O ERROR

bha-mail> lm user/justin at bryanhousing.org
user/justin at bryanhousing.org (\HasChildren)
bha-mail> lam user/justin.rice at bryanhousing.org
justin.rice at bryanhousing.org lrswipkxtecda
bha-mail> dm user/justin.rice at bryanhousing.org
deletemailbox: Permission denied
bha-mail> sam user/justin.rice at bryanhousing.org cyrus-admin c
setaclmailbox: cyrus-admin: c: System I/O error
bha-mail> dm user/justin at bryanhousing.org
deletemailbox: Permission denied
bha-mail> sam user/justin at bryanhousing.org cyrus-admin c
setaclmailbox: cyrus-admin: c: System I/O error
bha-mail> lam user/justin at bryanhousing.org
justin at bryanhousing.org lrswipkxtecda

What is happening here? Is this mailbox that messed up in cyrus? I have got to get this fixed so I can get this user functioning again. It can't receive email for him so I'm sure all his email is being bounced.

Will


From: sandwormusmc at gmail.com [mailto:sandwormusmc at gmail.com] On Behalf Of Matt Moldvan
Sent: Thursday, June 20, 2013 1:54 PM
To: William Reynolds; kolab-users at kolab.org
Subject: Re: Mailbox not found issue [Scanned]

The "-" in there might be causing some weirdness; encasing it in single quotes might help there.  It does appear to be complaining about an invalid user, though, so maybe check the value of "admins:" in /etc/imapd.conf.

grep ^admins: /etc/imapd.conf
admins: kolab kolabmdr kolabrpl kolabmon kolabmig

For example, and the value of that would be one of the users to try to auth as...

On Thu, Jun 20, 2013 at 1:28 PM, William Reynolds <wreynolds at rrwds.net<mailto:wreynolds at rrwds.net>> wrote:
Oh I know and I am trying to learn them. I'm great at Microsoft OS but im still learning linux commands. Considering a lot of the systems I build either phone, mail, or firewalls are Linux or freebsd I have to start learning quicker.

I re-ran the command with bha-mail at the end and this is what I get now. Am I using the wrong user?

[root at bha-mail ~]# /usr/bin/cyradm -t -u cyrus -w password bha-mail
verify error:num=19:self signed certificate in certificate chain
Invalid user at /usr/lib/perl5/vendor_perl/Cyrus/IMAP/Admin.pm line 120
cyradm: cannot authenticate to server with  as cyrus
[root at bha-mail ~]#

In the Cyrus password when I setup Kolab I went with the auto generated ones for most so the Cyrus password has a -W in it. It cant read that since there is not a space in the password as a command can it?



From: sandwormusmc at gmail.com<mailto:sandwormusmc at gmail.com> [mailto:sandwormusmc at gmail.com<mailto:sandwormusmc at gmail.com>] On Behalf Of Matt Moldvan
Sent: Thursday, June 20, 2013 12:23 PM

To: William Reynolds; kolab-users at kolab.org<mailto:kolab-users at kolab.org>
Subject: Re: Mailbox not found issue [Scanned]

At the end of the command, make sure you specify which server to connect to.  From the logs I see it may be "bha-mail"?  That should allow you to connect via cyradm and view the access permissions and whatnot on various mailboxes, though maybe not for Justin, as you've removed the account through the Kolab Web Admin portal.  You could do a lam user/joe*, which would show all permissions for user accounts starting with joe, for example.

All of it may be a moot point, now, but in an academic interest it's never a bad thing to know some handy shell commands.

On Thu, Jun 20, 2013 at 12:18 PM, William Reynolds <wreynolds at rrwds.net<mailto:wreynolds at rrwds.net>> wrote:
Ok matt maybe I did something wrong. I ran the command /usr/bin/cyradm -t -u cyrus -w <password> and it let me in
Then when I ran lam user/justin at bryanhousing.org<mailto:user/justin at bryanhousing.org> is came back with listaclmailbox: no connection to server. So I tried to list mailboxes, even tried to show server version and it just keeps saying no connection to server. Did I run the login command wrong or use the wrong user? I used the password that I setup for the Cyrus Admin during kolab setup.

Also I did delete that user Justin from the Kolab Web Admin portal, but I should be able to get it to list other mailboxes and I guess I didn't login in correctly. If I couldn't get a new mailbox created for him that worked I figured there are some remnants or references left in cyrus from the corrupted mailbox that has been causing the issues.


From: sandwormusmc at gmail.com<mailto:sandwormusmc at gmail.com> [mailto:sandwormusmc at gmail.com<mailto:sandwormusmc at gmail.com>] On Behalf Of Matt Moldvan
Sent: Thursday, June 20, 2013 8:23 AM

To: William Reynolds; kolab-users at kolab.org<mailto:kolab-users at kolab.org>
Subject: Re: Mailbox not found issue [Scanned]

The permissions look okay, but you said they are mail:cyrus... they should be cyrus:mail, but that may have been a typo.  If you haven't changed them manually or no one else has it's probably fine.

One of our spool directories as an example:
drwxr-xr-x  5 cyrus mail 4096 Aug 14  2012 ..
drwx------  3 cyrus mail 4096 Aug 23  2012 l

If all the logons have primary e-mail and they're working fine, then that's probably okay, too, I just haven't seen that, personally.

How about the output of the cyradm command?  Can you run that command and in there type "lam user/justin at bryanhousing.org<mailto:justin at bryanhousing.org>*"?  You may have to apply permissions within Cyrus for the account to be able to access it's own mailbox.

To run cyradm, we use the following string: /usr/bin/cyradm -t "" -u <someadminuid> -w <someadminpassword> <somecyrushost>

>From there you'll get the "cyradm>" prompt where you can type the lam commands and potentially use "sam user/justin at bryanhousing.org<mailto:justin at bryanhousing.org>* justin at bryanhousing.org<mailto:justin at bryanhousing.org> all" to set the permissions.

If that doesn't work, go to the users spool directory, run "find . -name 'cyrus.*' -delete", then run "/usr/lib/cyrus-imapd reconstruct -rxf user/justin at bryanhousing.org<mailto:justin at bryanhousing.org>" to recreate the cyrus.* files.  I believe it's recommended to su to the cyrus user first before doing this...

On Wed, Jun 19, 2013 at 11:06 PM, William Reynolds <wreynolds at rrwds.net<mailto:wreynolds at rrwds.net>> wrote:
Sorry it took so long to respond back. I looked at the spool directory (/var/spool) and permissions on it are root:root rwxr-xr-x (0755). The permissions for the imap spool folder (/var/spool/imap) are mail:cyrus rwx------ (0700).

I didn't change any folder permissions that I remember so these are whatever they were set to when CentOS 6 and Kolab 3 were installed.

On the other part about the @ symbol in the maillog I checked and all the logons use the primary email like it shows in the section of the maillog I pasted earlier. Is it supposed to be doing that? I left settings as default on the system. The only thing I changed was I unlocked it so it changed the primary email to be the first name, unlocked the locked admin fields in the webadmin, and then set it to use SSL/TLS.

When I remove a user out of the Kolab Web Admin portal I know it does not remove the mailbox folder out of the imap folder, but does it remove references to the email addresses that were set to that user?

If it does not I wonder if going in wherever and removing the references completely and then recreate the user would help.

Will


From: sandwormusmc at gmail.com<mailto:sandwormusmc at gmail.com> [mailto:sandwormusmc at gmail.com<mailto:sandwormusmc at gmail.com>] On Behalf Of Matt Moldvan
Sent: Wednesday, June 19, 2013 10:10 AM
To: William Reynolds
Cc: Matt Moldvan; kolab-users at kolab.org<mailto:kolab-users at kolab.org>

Subject: Re: Mailbox not found issue [Scanned]

Jun 18 21:21:39 bha-mail imap[26347]: IOERROR: opening index bryanhousing.org<http://bryanhousing.org>!user.justin: System I/O error

That line is the most concerning of the log entries... are the permissions correct on your spool directory?  They should have the same user:group ownership that Cyrus runs as ("cyrus" in our case).

The "@" in the mailbox looks odd to me, too.  We go by uid only, so I'm not sure how common that is in other implementations.  Are the other user mailboxes specified the same way?

On Tue, Jun 18, 2013 at 10:30 PM, William Reynolds <wreynolds at rrwds.net<mailto:wreynolds at rrwds.net>> wrote:
Ok so I have been looking at several things and ran the command to remove seen (/usr/lib/cyrus-imapd/cyr_userseen) and it comes back saying it removed from only 4 actual mailboxes out of the 9 accounts actually setup on the system. Maybe I shouldn't have run that command, but I read somewhere that it would reset seen states. I recreated that user I was having problems with again and set the UID to something different than what was previously being used and I logged in as the new created account and instantly got the SYSTEM I/O error and it's a completely empty mailbox.

I logged in as one of the other active mailboxes and one that it didn't remove seen from and that mailbox has no issues. What is going on here? I looked in the logs and saw nothing that stood out to me except this...

This is from /var/log/maillog

Jun 18 21:21:36 bha-mail imap[26311]: accepted connection
Jun 18 21:21:36 bha-mail master[26373]: about to exec /usr/lib/cyrus-imapd/imapd
Jun 18 21:21:36 bha-mail imap[26373]: executed
Jun 18 21:21:36 bha-mail imap[26373]: IOERROR: opening /var/lib/imap/user_deny.db: No such file or directory
Jun 18 21:21:37 bha-mail imap[26311]: imapd:Loading hard-coded DH parameters
Jun 18 21:21:37 bha-mail imap[26311]: SSL_accept() incomplete -> wait
Jun 18 21:21:37 bha-mail imap[26311]: SSL_accept() succeeded -> done
Jun 18 21:21:37 bha-mail imap[26311]: starttls: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits new) no authentication
Jun 18 21:21:37 bha-mail imap[26311]: client id: "name" "Roundcube" "version" "0.9.1" "php" "5.3.10" "os" "Linux" "command" "/roundcubemail/"
Jun 18 21:21:37 bha-mail imap[26311]: ptload(): fetched cache record (justin at bryanhousing.org<mailto:justin at bryanhousing.org>)(mark 1371604091, current 1371608497, limit 1371597697)
Jun 18 21:21:37 bha-mail imap[26311]: ptload returning data
Jun 18 21:21:37 bha-mail imap[26311]: canonified justin at bryanhousing.org<mailto:justin at bryanhousing.org> -> justin at bryanhousing.org<mailto:justin at bryanhousing.org>
Jun 18 21:21:37 bha-mail imap[26311]: login: localhost [::1] justin at bryanhousing.org<mailto:justin at bryanhousing.org> PLAIN+TLS User logged in SESSIONID=<bha-mail.bryanhousing.org-26311-1371608496-1>
Jun 18 21:21:37 bha-mail imap[26311]: IOERROR: opening index bryanhousing.org<http://bryanhousing.org>!user.justin: System I/O error
Jun 18 21:21:37 bha-mail imap[26311]: USAGE justin at bryanhousing.org<mailto:justin at bryanhousing.org> user: 0.050992 sys: 0.010998
Jun 18 21:21:38 bha-mail imap[17165]: accepted connection
Jun 18 21:21:38 bha-mail imap[26347]: accepted connection
Jun 18 21:21:38 bha-mail master[26380]: about to exec /usr/lib/cyrus-imapd/imapd
Jun 18 21:21:38 bha-mail imap[26380]: executed
Jun 18 21:21:38 bha-mail imap[26380]: IOERROR: opening /var/lib/imap/user_deny.db: No such file or directory
Jun 18 21:21:38 bha-mail imap[17165]: imapd:Loading hard-coded DH parameters
Jun 18 21:21:38 bha-mail imap[17165]: SSL_accept() incomplete -> wait
Jun 18 21:21:39 bha-mail imap[17165]: SSL_accept() succeeded -> done
Jun 18 21:21:39 bha-mail imap[17165]: starttls: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits new) no authentication
Jun 18 21:21:39 bha-mail imap[17165]: client id: "name" "Roundcube" "version" "0.9.1" "php" "5.3.10" "os" "Linux" "command" "/roundcubemail/?_task=mail&_refresh=1&_mbox=INBOX&_action=list&_remote=1&_unlock=loading1371608516946&_=1371608516949"
Jun 18 21:21:39 bha-mail imap[17165]: ptload(): fetched cache record (justin at bryanhousing.org<mailto:justin at bryanhousing.org>)(mark 1371604091, current 1371608499, limit 1371597699)
Jun 18 21:21:39 bha-mail imap[17165]: ptload returning data
Jun 18 21:21:39 bha-mail imap[17165]: canonified justin at bryanhousing.org<mailto:justin at bryanhousing.org> -> justin at bryanhousing.org<mailto:justin at bryanhousing.org>
Jun 18 21:21:39 bha-mail imap[26347]: imapd:Loading hard-coded DH parameters
Jun 18 21:21:39 bha-mail imap[17165]: login: localhost [::1] justin at bryanhousing.org<mailto:justin at bryanhousing.org> PLAIN+TLS User logged in SESSIONID=<bha-mail.bryanhousing.org-17165-1371608498-1>
Jun 18 21:21:39 bha-mail imap[26347]: SSL_accept() incomplete -> wait
Jun 18 21:21:39 bha-mail imap[17165]: IOERROR: opening index bryanhousing.org<http://bryanhousing.org>!user.justin: System I/O error
Jun 18 21:21:39 bha-mail imap[17165]: USAGE justin at bryanhousing.org<mailto:justin at bryanhousing.org> user: 0.058991 sys: 0.013997
Jun 18 21:21:39 bha-mail imap[26347]: SSL_accept() succeeded -> done
Jun 18 21:21:39 bha-mail imap[26347]: starttls: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits new) no authentication
Jun 18 21:21:39 bha-mail imap[26347]: client id: "name" "Roundcube" "version" "0.9.1" "php" "5.3.10" "os" "Linux" "command" "/roundcubemail/?_task=mail&_action=getunread&_remote=1&_unlock=0&_=1371608516954"
Jun 18 21:21:39 bha-mail imap[26347]: ptload(): fetched cache record (justin at bryanhousing.org<mailto:justin at bryanhousing.org>)(mark 1371604091, current 1371608499, limit 1371597699)
Jun 18 21:21:39 bha-mail imap[26347]: ptload returning data
Jun 18 21:21:39 bha-mail imap[26347]: canonified justin at bryanhousing.org<mailto:justin at bryanhousing.org> -> justin at bryanhousing.org<mailto:justin at bryanhousing.org>
Jun 18 21:21:39 bha-mail imap[26347]: login: localhost [::1] justin at bryanhousing.org<mailto:justin at bryanhousing.org> PLAIN+TLS User logged in SESSIONID=<bha-mail.bryanhousing.org-26347-1371608498-1>
Jun 18 21:21:39 bha-mail imap[26347]: IOERROR: opening index bryanhousing.org<http://bryanhousing.org>!user.justin: System I/O error
Jun 18 21:21:39 bha-mail imap[26347]: USAGE justin at bryanhousing.org<mailto:justin at bryanhousing.org> user: 0.084987 sys: 0.008998


This is what shows when I logged in as the user that I started having problems with. Even the completely new blank empty mailbox I created just before logging in gets the SYSTEM I/O error.

Will


From: sandwormusmc at gmail.com<mailto:sandwormusmc at gmail.com> [mailto:sandwormusmc at gmail.com<mailto:sandwormusmc at gmail.com>] On Behalf Of Matt Moldvan

Sent: Tuesday, June 18, 2013 2:37 PM
To: William Reynolds; kolab-users at kolab.org<mailto:kolab-users at kolab.org>

Subject: Re: Mailbox not found issue [Scanned]

Do you see any useful information in /var/log/maillog on the server?  Or in the RoundCube logs?

By the way, a Google search turned up this: http://roundcube-webmail.10982.n7.nabble.com/STATUS-System-I-O-error-td5540.html

Corrupt seen db in the above case, and another Google search for "fix seen database Cyrus" brought up http://arstechnica.com/civis/viewtopic.php?f=16&t=215223, which seems to say to rename the seen file for that user.  I tried it in our environment and logged in as the user, didn't cause any issues...

On Tue, Jun 18, 2013 at 3:30 AM, William Reynolds <wreynolds at rrwds.net<mailto:wreynolds at rrwds.net>> wrote:
I am using Centos 6. I tried the command Matt gave and it seemed to have a bad reaction. After I ran the command it now says SYSTEM I/O ERROR when I login to roundcube as that user.


-----Original Message-----
From: kolab-users-bounces at kolab.org<mailto:kolab-users-bounces at kolab.org> [mailto:kolab-users-bounces at kolab.org<mailto:kolab-users-bounces at kolab.org>] On Behalf Of Paul Klos
Sent: Tuesday, June 18, 2013 1:46 AM
To: kolab-users at kolab.org<mailto:kolab-users at kolab.org>
Subject: Re: Mailbox not found issue [Scanned]
If you're on Debian, you'll need version 2.4.17-5 because the reconstruct utility wasn't shipped in earlier versions. You may need to enable the development repository to install that.

Cheers,

Paul

Matt Moldvan schreef op 2013-06-18 3:54:
> Depends on the back end you're using... if it's Cyrus, you can do a
> "/usr/lib/cyrus-imapd/reconstruct -rxf user/someuid".  You may want to
> remove old cyrus.* files in the users spool directory first in case
> those are corrupt for some reason.  The reconstruct may not be in
> /usr/lib/cyrus-imapd in your case, but it shouldn't be too difficult
> to find if it's not...
>
> Hope that helps,
> Matt.
>
> On Mon, Jun 17, 2013 at 7:23 PM, William Reynolds
> <wreynolds at rrwds.net<mailto:wreynolds at rrwds.net>> wrote:
>
>> I got a call today that a user's mailbox apparently was having
>> issues. I get there and have the particular user log in to roundcube
>> and it allows him to log in and the message pops up mailbox not found
>> or something to that effect. So I take a quick look and I see the
>> mailbox folder and messages in there but it seems this user hasn't
>> even been getting messages for a couple days to his mailbox.
>>
>> I create a new user account in webadmin to get him going so he can
>> keep working and now I need to I guess issue the reconstruct command
>> on his new mailbox so it will reindex the old mailbox now that I have
>> those files moved to the new one.
>>
>> How do I issue the reconstruct command on kolab 3? Ive been searching
>> around but the wiki site was no use, and the various cyrus commands I
>> tried do not work either.
>>
>>
>>
>> Thanks Will
>>
>>
>>
>> WM. REYNOLDS
>>
>> President
>>
>> RRWDS Co.
>>
>> TOLL FREE 855 GO RRWDS (855.467.7937)
>>
>> OFFICE 979.383.2953 x2501 | CELL 979.204.4658
>>
>> www.rrwds.com<http://www.rrwds.com> [1]
>>
>>
>>
>> Small & Medium Business
>> State & Local Government
>>

_______________________________________________
Kolab-users mailing list
Kolab-users at kolab.org<mailto:Kolab-users at kolab.org>
https://www.intevation.de/mailman/listinfo/kolab-users
_______________________________________________
Kolab-users mailing list
Kolab-users at kolab.org<mailto:Kolab-users at kolab.org>
https://www.intevation.de/mailman/listinfo/kolab-users





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kolab.org/pipermail/users/attachments/20130621/5584e4e8/attachment.html>