IMAP, POP, HTTP connection limits

Messaging 5.x and 6.x:
Are there default limits when these three configutil parameters are not set?
service.imap.connlimits
service.pop.connlimits
service.http.connlimits
Or, is the default to allow the maximum number of any kind of connection based on OS configuration?
Thanks,
Don Holtzer

The settings you show do not exist.
they actually are:
service.http.maxsessions
service.imap.maxsessions
service.pop.maxsessions
per documentation:
http://docs.sun.com/source/819-0106/cfgutil.html
and are per process.
The defaults are:
1 process, 6000 http connections
1 process, 4000 imap connections
1 process, 600 pop connections.
Please note, these are simultaneous connections, not total users. It's rare to get more than 10% of your users connected to imap or http at any one time, and POP is a short time connections.
The defaults are likely good for up to 30 to 50,000 users.
You can configure more than one process, up to something like 10, as needed.

Similar Messages

Finding Bandwidth for IMAP,POP,WebMail, LDAP

Hi I have a setup with iplanet messaging 5.2 and directory server 5.1 on one machine and calendar server on the other.
Can anybody tell me how to find the bandwidht for LDAP,POP3,IMAP,WebMail, Calendar per domain wise or per user wise.
I have 20 doamins hosted on my messaging server.
Thanks

Actually am suppose to generate a report of the bandwidth being used by various domain hosted on my messaging server for Imap, POP, HTTP, LDAP and Calendar.
I have total of 21 domains hosted on my messaging server and each domain has atleast 300-400 users.
So how can i calculate this statistics.?
Thanks

Safari not responding when HTTPS connections are unavailable

I'm using a 13" MBP with 10.7.2 installed, which is setup to sync calendar, address and bookmarks with iCloud. Since last week I've constantly encounter a problem that my Safari 5.1.1 would keep crashing, and I had to delete the ~/Library/Safari/extensions folder to get it back to work.
This situation happened whenever I've switch to wireless connection. In my office we've setup a limited wireless environment that all HTTP/HTTPS connections will be redirected through a proxy. Since last week the proxy server was malfunctioned. All HTTP connections are proceeded normally, but all HTTPS connections will be suspended. I'm not sure but I suspect it's the main reason for the crashing problem.
The syndromes are:
1. When I left Safari open, unplug the ethernet, and turn-on WiFi, everythings goes on normally, until I open an HTTPS web page, for example, https://www.icloud.com. Of course that HTTPS URL will not load, since our proxy is broken; but the connection itself will NOT timeout. I've tried to leave it connecting for 10 minuntes, and it's still there.
2. The statement above may due to a glitch in our proxy server and I can understand that. But the problem is: after I tried to open an HTTPS connection, the Safari will refuse to open any other URLs, including normal HTTP connections. It will just keep "connecting". Meanwhile the FireFox and Chrome can load these HTTP pages normally.
3. If I quit Safari in this situation, Safari will not be able to re-launce: the icon will keep bumping on the dock. I have to force quit Safari and delete extensions folder, so that it can be launched again. But even after Safari re-launced, it still refused to load HTTP pages.
4. Neither reconnecting WiFi, relogin, or switching back to ethernet can fix the problem. I have to restart the whole system to get it back to normal.
It seemed to me that some Safari-related process will keep in the system after Safari is quited. And that process may keep the inactivated HTTPS connections alive in its TCP pool, and blocked all sequence connections, including the iCloud synchronization. And while I force-quit Safari, the extensions.plist file is damaged. That's the only plausible explanation to this situation.
I'm sure this situation is introduced after 10.7.2: it's not the first time our proxy server breakdown, but I've never have this problem before.

I've done some detailed test and now I can give a conclusion:
1. It's confirmed that sequence HTTPS connection will be blocked in Safari and Google Chrome after a failure HTTPS connection (due to proxy). And rebooting is the only way to recover connections.
2. My previous observation is wrong: this is NOT a system wide problem. FireFox is not affected. FireFox will return to normal and all sequence HTTPS connection can be proceeded without any problem when I reconnect to a valid network connection (i.e. ethernet), while the Safari and Google Chrome remained being blocked. And DropBox is NOT affected as well.
3. None of the solutions mentioned in other threads can solve this problem. Checking the "Auto proxy discovery" does not help. Delete ~/Library/Preferences/com.apple.security.revocation.plistfile does not help. Clean Keychain does not help either. I've created another account for testing.
4. It's apparently something related to some system built-in network services. Since the FireFox and DropBox both gets its' own Proxy implementation, while Safari and Google Chrome will take the system settings. It's also worth noting that the POP3-SSL connection in Mail.app is also blocked after a failure HTTPS connection.
Currently the ONLY valid solution is using FireFox instead.

No redirection to different url upon http connections limit exceeded

Hi,
As of Standalone OC4j 10.1.2, if you want messages to be redirected to a different URL when the maximum connections limit is reached, you would include the HTTP redirect URL to max-http-connections tag inside server.xml.
<max-http-connections max-connections-queue-timeout="120" socket-backlog="50"
value="100">http://optional.redirect.url/page.jsp</max-http-connections>
I have a standalone OC4j 10.1.3, and would like to be able to redirect to different URL when maximum connections limit is reached but the above max-http-connections does not work and I am not redirected to different URL when maximum connectionns limit is reached. I read user guide of OC4j 10.1.3 and there is no mentioning of max-http-connections at all. In there, they talk about limiting concurrency via http thread pool but there is no discussion as to the mechanism of redirecting users to a different URL where I can display a user friendly message to say "Server is busy, please try again later..." instead of browser display a message "Page cannot be displayed"..
Please advice,
Thanks

Any thoughts on above issue ? please help.
thanks
Sam

Wildcard Certificate use in Sun Java System Messaging Server (IMAPs/POPs)

I'm trying to use a wildcard certificate acquired from GlobalSign and am having problems getting
it (properly) into the cert database.
I tried using certutil, and that didn't seem to work at all, it would list without user cert status:
rmorneau+root@mmp1:/var/opt/SUNWmsgsr/config# /opt/SUNWmsgsr/sbin/certutil -L -d .
GlobalSign-Ext-CA CT,c,
*.xxxxxxxxxxx.edu ,,
I had some success using msgcert and pk12util, but after importing it in, then seeing that it did
have user cert status, after a quick restart of Messaging (IMAP/POP), SSL quit for IMAP and kicked all
my IMAPs users out temporarily (until I put the original cert8.db and key3.db back).
-------- ImapProxy_20101115.log----
20101115 135531 ImapProxyAService.cfg (id 2590) SSL negotiation failed for IP XXX.XXX.X.XXX: Cannot connect: SSL is disabled. (-12268)
pop.xxxxxxxxx.edu u,u,u
GlobalSign-Ext-CA CT,c,
*.xxxxxxxxxxx.edu u,u,u
I truly appreciate any help on this matter.
-Bob

2. Does the certificate nickname in NSS match the configured certificate nickname in the product?I'm not sure, but I'll try that the next time I try this... will probably be late at night were I won't be interrupting IMAPs and POPs
Makes sense. Prior to release 7 update 4, the servers have to be shut down before modifying certificate databases. As of 7 update 4 you can do a one-time migration to the cert9.db/key4.db format that >should allow certificates to be updated without taking the servers offline.
This was in the log just before the other log entry that I showed before.
20101115 135440 ImapProxyAService.cfg ASockSSL_Init: couldn't find cert imap.xxxxxxxxx.edu (-8174)
This is the key line from the log. The server is looking for a certificate with the NSS certificate nickname of 'imap.xxxxxxxxx.edu' and is not finding that certificate so issue 2 is likely the problem.Yes, this was it. Oversite on my part, forgot they had to match and could not be a form of just domainname.edu or *domainname.edu.
You either need to modify the default:SSLCertNicknames setting to match the nickname of the new certificate, or install the new certificate using the existing certificate nickname of 'imap.xxxxxxxxx.edu'I modified the default:SSLCertNicknames setting.
Thank you CNewman very much for all your help.
And, for those trolling for an answer with more detail via an Internet search (that is, if Oracle doesn't screw up these forums for anon searches)::::
With the private key in hand (not password protected), I used 'openssl' to get it into a pkcs12 type file:
(It is best to do this as root and not as sudo root as you might run into problems if your host
does not have root power to write to your home dir on the/a NFS share.... you will get "unable to write 'random state'".)
root@mmp1:/var/opt/SUNWmsgsr/config/GlobalSign-certs-new# /usr/sfw/bin/openssl pkcs12 -export \
-in ket-wildcard-cert.pem -inkey private.key -out cert.pkcs12 -name xxxxxxxxx.edu
Enter Export Password:
Verifying - Enter Export Password:
Where "private.key" is the key file, and "ket-wildcard-cert.pem" is the (pem format) cert from our cert provider,
and cert.pkcs12 is our cert file that will be imported into the database, and xxxxxxxxx.edu is whatever you (nick)name your cert
in the database
(I think you could use a password protected private key if you have that password.. I don't.)
Next, I used 'msgcert' to import the pkcs12 cert file into the database (I'm sure there is a way
to use certutil or even pk12util to do the same, but I'm on Sun Messenger 6.3 at this time, so that's what I used.
If someone would like to elaborate for those....?):
(It is best, when using 'msgcert', to do it where your mailsrv user has some privs.. I took my pkcs12 cert and moved into /tmp.)
root@mmp1:/tmp# /opt/SUNWmsgsr/sbin/msgcert import-cert cert.pkcs12
Enter the PKCS#12 file password: (blank)
Enter the certificate database password: (token password in sslpassword.conf)
Make sure your (wildcard) cert nickname matches what you have in
ImapProxyAService.cfg and PopProxyAService.cfg at the "default:SSLCertNicknames" field.
Edit if need be.
root@mmp1:/var/opt/SUNWmsgsr/config# /opt/SUNWmsgsr/sbin/certutil -L -d .
GlobalSign-Ext-CA CT,c,
xxxxxxxxx.edu u,u,u
root@mmp1:/var/opt/SUNWmsgsr/config# grep default:SSLCertNicknames *AService.cfg
ImapProxyAService.cfg:default:SSLCertNicknames xxxxxxxxx.edu
PopProxyAService.cfg:default:SSLCertNicknames xxxxxxxxx.edu
Then, of course, restart the msg service(s).
/opt/SUNWmsgsr/sbin/stop-msg
/opt/SUNWmsgsr/sbin/start-msg
Edited by: 810750 on Nov 18, 2010 8:08 AM
Edited by: 810750 on Nov 18, 2010 8:11 AM

Where's the secure HTTP connection symbol? It used to be at the bottom right corner whenever there was a secure website connection

Whenever I made connection with a secure website, the HTTPS secure symbol would show up at the bottom right corner, indicating how strong the https connection was. Sometimes it would be a solid symbol; other times when the website wasn't as secure, it would show up with a line through it. Simple question, but I don't see it anymore and it is helpful to know how strong the security is on certain websites.
Thank you.

In Firefox 4 you no longer have the Status bar that showed the padlock in previous Firefox versions.
You can click the "Site Identity Button" on the left end of the location bar to see the padlock. 
See: [[Site Identity Button]]
A click on the "More Information" button will show details about the connection. 
The background color of the "Site Identity Button" on the left end of the location bar will change color (blue or green) and show the domain in case of a secure https connection.
* Hover the Site Identity Button then to see "Verified by xxxx"
* Click the [[Site Identity Button]] on the left end of the location bar to see the padlock
* Click the "More Information" button in that pop-up to see additional information about the connection.

Setting connection limits

Sorry, but can't seem to locate how to do the following on FMS 3.5.
I have multiple applications, and need to set different connection limits for each of them - e.g., 10, 35, etc.
I'm only concerned with limiting RTMP connections, and not using Apache or http streaming.
Could somebody please shed some light?

Assuming you're using FMIS.... In your main.asc:
application.maxConnections = 35;
application.onConnect = function(client){
if(application.clients.length >= application.maxConnections){
application.rejectConnection(client);
I have no idea how to limit connections on FMSS... I don't know if you can do it at the application level.

Http connection timeout for business services from proxy service?

I've only done limited experiments in ALSB (2.1) at this point, but a question occurred to me, and I can't find this mentioned in the docs anywhere.
When a proxy service configures a connection to a downstream business service through HTTP, is it possible to configure an http connection timeout value? This will cause the connection attempt to fail if it takes too long to determine whether the connection attempt succeeded or failed.
I've heard that this is one advantage that Axis has over JAXRPC/SAAJ, as a connection timeout value can be specified.

Hello Billy
Thanks for the reply. I thought there may be some implementation of begin_request in another environment that had the option to specify a connect timeout. But as you have explained, it doesn't work like that. As always, I learn something every day!
So realistically if I want to stop the calling process hanging in the event of the server not being available, I need use the message based approach...send a message containing the request to another process via a message queue and attach to the reply queue and wait for a message comming back with a timeout. Does that sound like a reasonable approach?
Thanks
David

Adobe AIR HTTP Connection Limit

Hello,
I'm working on an Adobe AIR 2.7 application which can upload files to a web server, which is running Apache and PHP. Several files can be uploaded at the same time and the application also calls the web server for various API requests.
The problem I'm having is that if I start two file uploads, while they are in progress any other HTTP requests will time out, which is causing a problem for the application and from a user point of view.
Are Adobe AIR applications limited to 2 HTTP connections, or is something else probably the issue? From searching about this issue I've not found much.
The file uploads are performed by calling the File classes upload method, and the API calls are done using the HTTPService class. The development web server I am using is a WAMP server, however when the application is released it will be talking to a LAMP server.
Thanks,
Grant
Here is the code I'm using to upload the file:
protected function btnAddFile_clickHandler(event:MouseEvent):void
    // Create a new File object and display the browse file dialog
    var uploadFile:File = new File();
    uploadFile.browseForOpen("Select File to Upload");
    uploadFile.addEventListener(Event.SELECT, uploadFile_SelectedHandler);
private function uploadFile_SelectedHandler(event:Event):void
    // Get the File object which was used to select the file
    var uploadFile:File = event.target as File;
    uploadFile.addEventListener(ProgressEvent.PROGRESS, file_progressHandler);
    uploadFile.addEventListener(IOErrorEvent.IO_ERROR, file_ioErrorHandler);
    uploadFile.addEventListener(Event.COMPLETE, file_completeHandler);
    // Create the request URL based on the download URL
    var requestURL:URLRequest = new URLRequest(AppEnvironment.instance.serverHostname + "upload.php");
    requestURL.method = URLRequestMethod.POST;
    // Set the post parameters
    var params:URLVariables = new URLVariables();
    params.name = "filename.ext";
    requestURL.data = params;
    // Start uploading the file to the server
    uploadFile.upload(requestURL, "file");
Here is the code for the API calls:
private function sendHTTPPost(apiFile:String, postParams:Object, resultCallback:Function, initialCallerResultCallback:Function):void
    var httpService:mx.rpc.http.HTTPService = new mx.rpc.http.HTTPService();
    httpService.url = AppEnvironment.instance.serverHostname + apiFile;
    httpService.method = "POST";
    httpService.requestTimeout = 10;
    httpService.resultFormat = HTTPService.RESULT_FORMAT_TEXT;
    httpService.addEventListener("result", resultCallback);
    httpService.addEventListener("fault", httpFault);
    var token:AsyncToken = httpService.send(postParams);
    // Add the initial caller's result callback function to the token
    token.initialCallerResultCallback = initialCallerResultCallback;

Could you please open a new bug report on this over at bugbase.adobe.com? Please include sample media, code, project or app to help us reproduce the problem. Did this occur on the desktop or mobile device? Finally, once the bug has been added would you mind posting back with the URL so that others affected can add their votes and comments? Thanks!

IMAP/SSL: problem connecting from a web application

Hi,
I try to connect to a IMAP/SSL server (with a self-signed certificate) from a web application. I followed http://www.javaworld.com/javatips/jw-javatip115.html.
When I try to connect from a java application it works fine. But when I try it from a servlet, it fails:
javax.mail.MessagingException: gaeron.gcrm.test.mail.DummySSLSocketFactory;
nested exception is:
 java.net.SocketException: gaeron.gcrm.test.mail.DummySSLSocketFactory
 at com.sun.mail.imap.IMAPStore.protocolConnect(IMAPStore.java:461)
 at javax.mail.Service.connect(Service.java:236)I use Tomcat 5.5, jdk1.5.0_06 and javamail-1_3_3_01. Here is my code:
 Security.setProperty( "ssl.SocketFactory.provider", "gaeron.gcrm.test.mail.DummySSLSocketFactory");
Properties props = new Properties();
Session session = Session.getDefaultInstance(props);
Store store = session.getStore("imaps");
store.connect(server, 993, username, password);
store.close();Can anybody help me?
Thanks,
Előd.

I am not sure there is a class called MBoxSSLFactory. Is that a typo? We are in the same boat. We have a web application running on Tomcat that needs to connect to the IMAP store on the MS Exchange 2003 Server. It was working fine until we enabled Basic Authentication - SSL/TLS required setting on it.
In order to eliminate any complications due to Tomcat and all we are trying to get a simple standalone program that talks to IMAP server (using the DummySSLSocketFactory, DummyTrustManager etc) working.
I am stuck on the same error: (shown below is the stack trace and the code we are running). I have tried all the suggestions that have been posted on this "Unconnected Sockets not implemented" issue. I have tried it with both Jdk 1.4.2_08 and JDK 1.5.0.
The JavaMail version is 1.4. If I use JavaMail version 1.3.1 it complains that there is no store type "imaps". If I use "imap" and not "imaps" as the store type I end up getting "Authentication Failed" exception.
Instead of a DummyTrustManager I even tried importing a certificate. We have deployed a Verisign trial certificate on the EXchange server side. So when we run the InstallCert program (http://blogs.sun.com/andreas/entry/no_more_unable_to_find) it allows us to add the valid certificates to our keystore. Once that is done we have tried to create TrustManager based on that keystore. But NOPE..No success. same problem.
We have been stuck on this one for the last 4 days and we have a very critical client deployment that is hampered by this one. I know it is turkey time now..but would really appreciate it if some one can help us out.
javax.mail.MessagingException: Unconnected sockets not implemented;
nested exception is:
 java.net.SocketException: Unconnected sockets not implemented
 at com.sun.mail.imap.IMAPStore.protocolConnect(IMAPStore.java:479)
 at javax.mail.Service.connect(Service.java:297)
 at javax.mail.Service.connect(Service.java:156)
 at javax.mail.Service.connect(Service.java:105)
 at GetSSLMail.getmail.main(getmail.java:37)
Caused by: java.net.SocketException: Unconnected sockets not implemented
 at javax.net.SocketFactory.createSocket(SocketFactory.java:97)
 at com.sun.mail.util.SocketFetcher.createSocket(SocketFetcher.java:224)
 at com.sun.mail.util.SocketFetcher.getSocket(SocketFetcher.java:189)
 at com.sun.mail.iap.Protocol.<init>(Protocol.java:84)
 at com.sun.mail.imap.protocol.IMAPProtocol.<init>(IMAPProtocol.java:87)
 at com.sun.mail.imap.IMAPStore.protocolConnect(IMAPStore.java:446)
 ... 4 more
package GetSSLMail;
/* getmail.java */
import java.util.Properties;
import javax.mail.*;
//import javax.mail.internet.*;
import java.io.*;
public class getmail {
 //myauth auth;
 public static void main(String args[]) throws Exception {
 String host, name, passwd;
 BufferedReader br = new BufferedReader(new InputStreamReader(System.in));
 System.out.println("Enter IMAP Host Name: ");
 host = br.readLine();
 System.out.println("Enter User name: ");
 name = br.readLine();
 System.out.println("Enter Password: ");
 passwd = br.readLine();
 java.security.Security.setProperty("ssl.SocketFactory.provider","DummySSLSocketFactory");
 // Get a Properties object
 Properties props = System.getProperties();
 props.put("mail.imaps.host", host);
 props.put("mail.imaps.port", "993");
 Authenticator auth = new myauth(name, passwd);
 Session session = Session.getDefaultInstance(props, auth);
 Store store = session.getStore("imaps");
 try {
 store.connect(); // exception here
 System.out.println("store connected");
 } catch (Exception e) {
 //System.out.println("Error :" + e.toString());
 e.printStackTrace();
 Folder folder = null;
 try {
 folder = store.getFolder("INBOX"); // because of earlier exception,
 // also
 // exception here
 } catch (Exception e) {
 System.out.println("Error :" + e.toString());
 folder.open(Folder.READ_ONLY);
 BufferedReader reader = new BufferedReader(new InputStreamReader(
 System.in));
 Message message[] = folder.getMessages();
 for (int i = 0, n = message.length; i < n; i++) {
 System.out.println(i + ": " + message.getFrom() + "\t"
 + message[i].getSubject());
 System.out
 .println("Do you want to read message? [yes to read/quit to end]");
 String line = reader.readLine();
 if ("yes".equals(line)) {
 System.out.println(message[i].getContent());
 } else if ("QUIT".equals(line)) {
 break;
 class myauth extends Authenticator {
 String username, password;
 public myauth(String name, String passwd) {
 username = name;
 password = passwd;
 public PasswordAuthentication getPasswordAuthentication() {
 return new PasswordAuthentication(username, password);
package GetSSLMail;
import java.io.BufferedInputStream;
import java.io.FileInputStream;
import java.io.IOException;
import java.io.InputStream;
import java.net.InetAddress;
import java.net.Socket;
import java.security.KeyStore;
import javax.net.SocketFactory;
import javax.net.ssl.*;
* DummySSLSocketFactory
public class DummySSLSocketFactory extends SSLSocketFactory {
private SSLSocketFactory factory;
SSLContext sslcontext;
 TrustManagerFactory tmf;
 KeyStore ks;
public DummySSLSocketFactory() {
 try {
// try
 ks = KeyStore.getInstance("jks");
 InputStream in = new FileInputStream("C:\\Documents and Settings\\kk12\\jssecacerts");
 in = new BufferedInputStream(in);
 ks.load(in,null);
 tmf = TrustManagerFactory.getInstance("PKIX");
 tmf.init(ks);
 sslcontext = SSLContext.getInstance("SSL");
 sslcontext.init(null, tmf.getTrustManagers(), null);
 HttpsURLConnection.setDefaultSSLSocketFactory(sslcontext.getSocketFactory());
 //SSLContext sslcontext = SSLContext.getInstance("TLS");
 //sslcontext.init(null,new TrustManager[] { new DummyTrustManager()},null);
 factory = (SSLSocketFactory)sslcontext.getSocketFactory();
 } catch(Exception ex) {
 // ignore
public static SocketFactory getDefault() {
 return new DummySSLSocketFactory();
public Socket createSocket(Socket socket, String s, int i, boolean flag)
 throws IOException {
 return factory.createSocket(socket, s, i, flag);
public Socket createSocket() throws IOException {
 System.out.println( "createSocket 0");
 return factory.createSocket();
public Socket createSocket(InetAddress inaddr, int i,
 InetAddress inaddr1, int j) throws IOException {
 return factory.createSocket(inaddr, i, inaddr1, j);
public Socket createSocket(InetAddress inaddr, int i)
 throws IOException {
 return factory.createSocket(inaddr, i);
public Socket createSocket(String s, int i, InetAddress inaddr, int j)
 throws IOException {
 return factory.createSocket(s, i, inaddr, j);
public Socket createSocket(String s, int i) throws IOException {
 return factory.createSocket(s, i);
public String[] getDefaultCipherSuites() {
 return factory.getDefaultCipherSuites();
public String[] getSupportedCipherSuites() {
 return factory.getSupportedCipherSuites();
package GetSSLMail;
//import com.sun.net.ssl.X509TrustManager;
import java.security.cert.X509Certificate;
import javax.net.ssl.TrustManager;
public class DummyTrustManager implements TrustManager {
 public boolean isClientTrusted( X509Certificate[] cert) {
 return true;
 public boolean isServerTrusted( X509Certificate[] cert) {
 return true;
 public X509Certificate[] getAcceptedIssuers() {
 return new X509Certificate[ 0];

/var/imap/socket/lmtp: Connection refused

Hi,
I have problem with lmtp daemon. How can I a execute it manually?
I've executed:
serveradmin stop mail; serveradmin start mail;
killlall lmtpd lmtp; postqueue -f
But ... nothing works ...
Mails arrived but don't delivered to the mailbox because of the following error:
6FB133AA6609 1181 Tue May 5 20:45:05 email_account
(delivery temporarily suspended: connect to hansolo.galenics.net[/var/imap/socket/lmtp]: Connection refused)
I've try sudo -u _cyrus /usr/bin/cyrus/bin/lmtpd but nothing ...
Any Suggestion?
Thanks for all.

Hi
Apart from the fact it could be any one of at least a dozen things the usual thing would be to do a search of the Mail Forum fist. This has been discussed before. Also its a good idea to post the umodified output of postconf -n.
A quick search for this year alone reveals:
http://discussions.apple.com/thread.jspa?messageID=8801406&#8801406
http://discussions.apple.com/thread.jspa?messageID=9065994&#9065994
http://discussions.apple.com/thread.jspa?messageID=9302503&#9302503
http://discussions.apple.com/thread.jspa?messageID=8802455&#8802455
That's not all. Search parameters I used:
http://discussions.apple.com/search.jspa?threadID=&q=%2Fvar%2Fimap%2Fsocket%2Flm tp%3AConnectionrefused&objID=f1236&dateRange=thisyear&userID=&numResults=15&rankBy=10001
Start from here and if these don't help keep posting and hopefully some of the more abler contributors might be able to help?
Tony

Configuring IMAP - POP - SMTP over SSL

Hi,
I have configured SSL for webserver. I have copied same cert database (cert8.db and key3.db) in the config directory of messaging server. Changed the ownership of database to messaging server user. Password file is updated. I am able to see the certficate (./msgcert list-certs and ./msgcert show-cert cert1).
SSL is enabled for IMAP and POP.
# ./getconf | grep ssl
service.imap.enablesslport = 1
service.imap.sslcachesize = 0
service.imap.sslport = 993
service.imap.sslusessl = yes
service.pop.enablesslport = 1
service.pop.sslcachesize = 0
service.pop.sslport = 995
service.pop.sslusessl = yes
I am not able to connect to 993 and 995 port.
bash-3.00# telnet mail1 995
Trying 10.77.33.135...
telnet: Unable to connect to remote host: Connection refused
bash-3.00# telnet mail1 993
Trying 10.77.33.135...
telnet: Unable to connect to remote host: Connection refused
Am I missing any step? How do I use IMAP / POP over ssl?
Thanks and Regards,
Shashank

for a simple ssl client, use openssl:
openssl s_client -connect imap.gmail.com:993provides the following output:
CONNECTED(00000003)
depth=0 /C=US/ST=California/L=Mountain View/O=Google Inc/CN=imap.gmail.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 /C=US/ST=California/L=Mountain View/O=Google Inc/CN=imap.gmail.com
verify error:num=27:certificate not trusted
verify return:1
depth=0 /C=US/ST=California/L=Mountain View/O=Google Inc/CN=imap.gmail.com
verify error:num=21:unable to verify the first certificate
verify return:1
Certificate chain
0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=imap.gmail.com
   i:/C=ZA/ST=Western Cape/L=Cape Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte Premium Server CA/[email protected]
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=California/L=Mountain View/O=Google Inc/CN=imap.gmail.com
issuer=/C=ZA/ST=Western Cape/L=Cape Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte Premium Server CA/[email protected]
No client certificate CA names sent
SSL handshake has read 1017 bytes and written 324 bytes
New, TLSv1/SSLv3, Cipher is RC4-MD5
Server public key is 1024 bit
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol : TLSv1
    Cipher    : RC4-MD5
    Session-ID: 86F8C5265F6EE4524797F2139851376D20D702BB9EFFB78C5CD35999DE3B4C7A
    Session-ID-ctx:
    Master-Key: EA5857BBF58622793961B6CFEE448D079E249AF36171532F40C46C2E3887E08ACFBAC823D2186231D228ECB726140718
    Key-Arg   : None
    Start Time: 1213099885
    Timeout   : 300 (sec)
    Verify return code: 21 (unable to verify the first certificate)
---It helps you figure out if you configured your servers correctly. It shows the cert chain sent by server, negotiated cipher suite, and whether any client-auth DNs were sent.

IMAP, POP, Server, iPhone, Oh My!

My head is now swimming as I try to understand how the iPhone integrates into the rest of my eMail synchronization scheme.
Searching the forums and support articles has been a frustrating endeavor, so hopefully this thread will serve as a directional beacon to an otherwise highly confusing topic. I'm looking for definitive answers to the following questions.
Starting with the .Mac IMAP settings:
Now that I have an iPhone, my e-mail is synchronized between it, the .Mac server and my MacBook. Which means anything I create on my MacBook is mirrored on my iPhone? So anything I do on the iPhone is also mirrored on my MacBook?
How do the Advanced Mailbox Behaviors settings on the iPhone affect this relationship?
For Drafts Mailbox, Sent Mailbox & Deleted Mailbox, I have the choice to keep them On My iPhone or On The Server. If I keep them on my iPhone, does that mean they never go to the Server and consequently my MacBook?
Then I have the choice of Deleted Messages to Remove: Never or various intervals. If I choose to keep my Deleted Mailbox on the iPhone, does that mean the server never knows I have deleted an e-mail on the iPhone?
So the Deleted Messages applies only to the settings assigned the Deleted Mailbox on the iPhone?
Then if I adjust the Deleted Messages settings to remove messages after one day that are stored on my iPhone, then only the messages downloaded to my iPhone will be deleted, but the original message on the server will not be touched until I delete it on my MacBook?
Moving on to Yahoo IMAP & POP:
If I am using Yahoo IMAP Push server on the iPhone, then all of my Yahoo mailboxes are duplicated on the iPhone. The same questions as .Mac IMAP above apply.
HOWEVER, on the MacBook, the Yahoo account is POP only. So nothing I do on the iPhone will affect my MacBook Mail, correct?
Only the mail kept on the server will be affected by what I do on my iPhone?
So, if I have the iPhone set to store Deleted Mailbox on the Yahoo server and Deleted Messages to delete them every day, then a message deleted from my iPhone could wipe it off the server before my MacBook has a chance to download it?
So the only way to avoid that is to keep Deleted Mailbox on the iPhone?
As for Drafts, Sent and Deleted Mailboxes managed between POP and IMAP Mail clients, I'm guessing that even if the iPhone keeps them on the Yahoo server, that there is no way to download them to MacBook's Mail using POP?
The only way to get messages sent from the iPhone Mail into the MacBook Mail using a POP account is to use the cc: function?
If this information is clearly stated somewhere else, I would greatly appreciate a pointer to it.
A clear step-by-step discussion of the consequences of setting each of the iPhone's Advanced Mail features would be be most welcome.

Here's one clarification with Yahoo Push IMAP & POP
FIRST: IN CASE YOU DIDN'T KNOW All ATT.YAHOO ACCOUNTS WILL WORK WITH YAHOO PUSH SERVER. Both Apple & ATT have been setting their customers up with the standard home use POP accounts. This works with all legacy accounts too: Pacbell.net, SBCGlobal.net, etc.
Whatever you do on the iPhone, no matter what settings you have, will change the Yahoo IMAP server. When you delete an e-mail it goes to the Trash and is removed from the Inbox on the server as well as the iPhone. Therefore, it is not available for download via your desktop mail POP account. In order to ensure an e-mail is available for download on your desktop mail client, DO NOT DELETE an e-mail. Since your desktop POP client settings will change the information on the IMAP server as well, basically all you need to do is nothing. Leave your trash on the server and set it for NEVER delete. Your desktop will do everything else. Obviously if you delete junk mail or something else you don't want to keep on your iPhone, it saves your desktop some trouble. As for where to keep Drafts and Sent mail, THEY DO NOT synchronize with a POP client. Therefore, it is probably best to keep them on your iPhone so you have access to them on an airplane or other location where you can't access the server.
.MAC IMAP is similar except whatever you do on either side of the server will be copied to the other instantaneously. Changing the stored location of SENT, DRAFTS & TRASH will also move them on the server. So there is no way to manage IMAP messages on your phone or computer independently and ensure the messages will still be available for the other. UNLIKE POP, which can be configured to remove an e-mail from the server after a period of time once it's been downloaded, the e-mail will have to be manually managed on the iPhone. Which seems best to be done by the number of messages retrievable into the iPhone. So it just now occurs to me that every e-mail in my Inbox on my Mac is also still on the server. Which would be great I suppose, BUT, UNLIKE OS X Mail and other applications, there is no way on the iPhone to search the messages on the server to find what you are looking for. So they are just taking up space on the server they don't need to be.
Keeping SENT and DRAFTS on the iPhone is also problematic as they do not synchronize with the desktop as backup transactions from the iPhone. The BIGGEST flaw with all of this is there is only one MASTER setting the CC rules. You either CC yourself on every e-mail sent from the iPhone, or none of them. So when you have a POP account and a .Mac account, the CC is great for sending yourself a backup from the POP account. But it's redundant on the .Mac account. And I suppose on the Yahoo IMAP account since you could use the iPhone to move sent messages into the Inbox to be downloaded on the desktop (but that seems like a whole lot of trouble so why not just CC yourself). It would be nice if you could choose whether to CC yourself for each Mailbox, rather than all of them.
So, while far easier than anything else I have ever used, the iPhone is far from simple. It seems that after some frustrating testing I now understand the iPhone's settings and how they work with my MacBook, but the main thing anyone should note is that considerable caution must be used to avoid losing any data between home and mobile as well understand the limitations.
IF I HAVE ANY PART OF THIS WRONG, Please don't hesitate to correct me.

Disable Imap ,pop , sync ,owa for all new users

Hi
Based on the below
https://social.technet.microsoft.com/Forums/en-US/879f1efd-c9ca-40ef-a698-4d7fa106f1be/disable-imap-pop-sync-owa-for-new-users?forum=exchangesvrgeneral
I apply all the steps but some times it working and sometime not
shall I apply all steps on all Mailbox servers and CAS server ?
I applied only on CAS servers .
Please need help on this matter .
MCP MCSA MCSE MCT MCTS CCNA

Hi,
We don’t need to run this script on all the server. Just once is enough. For the problematic users, you can use Set-CASMailbox –id user |FL to check if the restrictions are applied
successfully:
https://technet.microsoft.com/en-us/library/bb124754(v=exchg.150).aspx
Thanks,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Simon Wu
TechNet Community Support

HTTP Connection failure

Hi, I got the same error but not with a JSP, I am using a Servlet, but it
 happened not allways at the same point, I mean, sometimes happen,
 sommetimes, not....do you know why ???
 Mick Coughlan <[email protected]> wrote in message
 news:[email protected]...
 > Hi
 > After compiling a jsp page and displaying it on the browser, a socket
 > exception as shown below appears on the
 > server console window.
 >
 > Wed Jun 07 08:52:29 GMT+00:00 2000: <ZAC> ZAC packages stored in local
 > directory exports
 > Wed Jun 07 08:52:29 GMT+00:00 2000: <ListenThread> Listening on port:
 > 7001
 > Wed Jun 07 08:52:30 GMT+00:00 2000: <WebLogicServer> WebLogic Server
 > started
 > Wed Jun 07 08:52:45 GMT+00:00 2000: <ServletContext-General> *.jsp:
 init
 > Wed Jun 07 08:52:45 GMT+00:00 2000: <ServletContext-General> *.jsp:
 param
 > verbose initialized to: true
 > Wed Jun 07 08:52:45 GMT+00:00 2000: <ServletContext-General> *.jsp:
 param
 > packagePrefix initialized to: jsp_servlet
 > Wed Jun 07 08:52:45 GMT+00:00 2000: <ServletContext-General> *.jsp:
 param
 > compileCommand initialized to: javac
 > Wed Jun 07 08:52:45 GMT+00:00 2000: <ServletContext-General> *.jsp:
 param
 > srcCompiler initialized to weblogic.jspc
 > Wed Jun 07 08:52:45 GMT+00:00 2000: <ServletContext-General> *.jsp:
 param
 > superclass initialized to null
 > Wed Jun 07 08:52:45 GMT+00:00 2000: <ServletContext-General> *.jsp:
 param
 > workingDir initialized to: /usr/local/weblogic/myserver/classfiles
 > Wed Jun 07 08:52:45 GMT+00:00 2000: <ServletContext-General> *.jsp:
 param
 > pageCheckSeconds initialized to: 1
 > Wed Jun 07 08:52:45 GMT+00:00 2000: <ServletContext-General> *.jsp:
 > initialization complete
 > Wed Jun 07 08:54:08 GMT+00:00 2000: <ServletContext-General> Generated
 > java file:
 > /usr/local/weblogic/myserver/classfiles/jsp_servlet/_TestJSP/_listing.java
 > Wed Jun 07 08:55:13 GMT+00:00 2000:<E> <HTTP> Connection failure
 > java.net.SocketException: No such file or directory: No such file or
 > directory
 > at java.net.SocketInputStream.socketRead(Native Method)
 > at java.net.SocketInputStream.read(SocketInputStream.java:90)
 > at
 > weblogic.socket.JavaSocketMuxer.processSockets(JavaSocketMuxer.java:209)
 > at
 > weblogic.socket.SocketReaderRequest.execute(SocketReaderRequest.java:23)
 > at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)
 >
 > Any ideas as to what causes this
 >
 > Regards
 > Mick
 >
 >

IMAP, POP, HTTP connection limits

Similar Messages

Maybe you are looking for