First, thanks for this great product. We migrated from Courier last week
with only small bumps along the way. We have a few hundred active users
with a mix of pop3 and imap clients. The server is running on sparc
Solaris 9.
We're seeing a problem now with the number of "imap-login"
processes
rising slowly to it's limit and then (understandably) not letting any more
logins happen. Legitimate users seem to have no problem logging in until
the limit is hit. Another odd thing is that this is not a problem for
pop3-login processes, just imap...
I've tried changing some obvious things including the passdb from pam to
passwd and back again, but here's the current dovecot -n output:
# 1.0.13: /opt/dovecot/etc/dovecot.conf
protocols: imap imaps pop3 pop3s
ssl_cert_file: /opt/dovecot/etc/ssl/certs/dovecot.pem
ssl_key_file: /opt/dovecot/etc/ssl/certs/key.pem
disable_plaintext_auth: no
login_dir: /opt/dovecot/var/run/dovecot/login
login_executable(default): /opt/dovecot/libexec/dovecot/imap-login
login_executable(imap): /opt/dovecot/libexec/dovecot/imap-login
login_executable(pop3): /opt/dovecot/libexec/dovecot/pop3-login
login_processes_count: 12
login_max_processes_count: 512
verbose_proctitle: yes
mail_location: maildir:~/Maildir
mmap_disable: yes
mail_executable(default): /opt/dovecot/libexec/dovecot/imap
mail_executable(imap): /opt/dovecot/libexec/dovecot/imap
mail_executable(pop3): /opt/dovecot/libexec/dovecot/pop3
mail_plugin_dir(default): /opt/dovecot/lib/dovecot/imap
mail_plugin_dir(imap): /opt/dovecot/lib/dovecot/imap
mail_plugin_dir(pop3): /opt/dovecot/lib/dovecot/pop3
pop3_uidl_format(default):
pop3_uidl_format(imap):
pop3_uidl_format(pop3): %08Xu%08Xv
namespace:
type: private
prefix: INBOX.
inbox: yes
auth default:
verbose: yes
passdb:
driver: pam
userdb:
driver: passwd
Any ideas or advice?
Thanks,
Bryan Polk
Unix Systems Administrator
Communication and Multimedia Services
FAMU-FSU College of Engineering
bpolk at eng.fsu.edu
On Fri, 2008-05-16 at 11:38 -0400, Bryan Polk wrote:> First, thanks for this great product. We migrated from Courier last week > with only small bumps along the way. We have a few hundred active users > with a mix of pop3 and imap clients. The server is running on sparc > Solaris 9. > > We're seeing a problem now with the number of "imap-login" processes > rising slowly to it's limit and then (understandably) not letting any more > logins happen. Legitimate users seem to have no problem logging in until > the limit is hit. Another odd thing is that this is not a problem for > pop3-login processes, just imap...How many imap processes do you have at that time? Each SSL connection uses up one imap-login process. One sure way to fix this would be to change to high-performance mode as described by http://wiki.dovecot.org/LoginProcess -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: <http://dovecot.org/pipermail/dovecot/attachments/20080516/3c1e4556/attachment-0002.bin>
On Fri, 16 May 2008, Timo Sirainen wrote:> How many imap processes do you have at that time? Each SSL connection > uses up one imap-login process. > > One sure way to fix this would be to change to high-performance mode as > described by http://wiki.dovecot.org/LoginProcess >Currently 74 imap processes, 336 imap-login processes. I tried switching to high-performance mode yesterday.. It seemed to end up with sort of the same results, though harder to diagnose. Each process I guess ended up hitting the login_process_size = 64 max and then stopped responding. So imap would work for some people and not others. I'd rather have it be broken for all or none, so I switched it back instead of tweaking the performance options. I think there's something in our environment causing this but I have no idea what.. -bryan
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I hope something like this could help you : # Authentication Cache auth_cache_size = 10240 auth_cache_ttl = 18000 Bryan Polk wrote:> On Fri, 16 May 2008, Frank Elsner wrote: > >> >> Do you have a Web-Interface like SquirrelMail or Horde on the same host? >> Our SquirrelMail shows up in this fashion. >> > > Oh, yeah that would be it. Thanks :)Evaggelos Balaskas - http://ebalaskas.gr Unix System Engineer Informatics Engineer Technological Education -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFILfJ0WIK+Pe9twhoRAtP4AJ9tH5h7M+kPPCDQFgt3wiF0lvGBPwCgz3gj WFU4bDg/Y0SPWlBQ1Md78aI=BcMN -----END PGP SIGNATURE-----