508 lines
16 KiB
Plaintext
508 lines
16 KiB
Plaintext
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Network Working Group M. Gahrns
|
|||
|
Request for Comments: 2193 Microsoft
|
|||
|
Category: Standards Track September 1997
|
|||
|
|
|||
|
|
|||
|
IMAP4 Mailbox Referrals
|
|||
|
|
|||
|
Status of this Memo
|
|||
|
|
|||
|
This document specifies an Internet standards track protocol for the
|
|||
|
Internet community, and requests discussion and suggestions for
|
|||
|
improvements. Please refer to the current edition of the "Internet
|
|||
|
Official Protocol Standards" (STD 1) for the standardization state
|
|||
|
and status of this protocol. Distribution of this memo is unlimited.
|
|||
|
|
|||
|
1. Abstract
|
|||
|
|
|||
|
When dealing with large amounts of users, messages and geographically
|
|||
|
dispersed IMAP4 [RFC-2060] servers, it is often desirable to
|
|||
|
distribute messages amongst different servers within an organization.
|
|||
|
For example an administrator may choose to store user's personal
|
|||
|
mailboxes on a local IMAP4 server, while storing shared mailboxes
|
|||
|
remotely on another server. This type of configuration is common
|
|||
|
when it is uneconomical to store all data centrally due to limited
|
|||
|
bandwidth or disk resources.
|
|||
|
|
|||
|
Mailbox referrals allow clients to seamlessly access mailboxes that
|
|||
|
are distributed across several IMAP4 servers.
|
|||
|
|
|||
|
A referral mechanism can provide efficiencies over the alternative
|
|||
|
"proxy method", in which the local IMAP4 server contacts the remote
|
|||
|
server on behalf of the client, and then transfers the data from the
|
|||
|
remote server to itself, and then on to the client. The referral
|
|||
|
mechanism's direct client connection to the remote server is often a
|
|||
|
more efficient use of bandwidth, and does not require the local
|
|||
|
server to impersonate the client when authenticating to the remote
|
|||
|
server.
|
|||
|
|
|||
|
2. Conventions used in this document
|
|||
|
|
|||
|
In examples, "C:" and "S:" indicate lines sent by the client and
|
|||
|
server respectively.
|
|||
|
|
|||
|
A home server, is an IMAP4 server that contains the user's inbox.
|
|||
|
|
|||
|
A remote mailbox is a mailbox that is not hosted on the user's home
|
|||
|
server.
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Gahrns Standards Track [Page 1]
|
|||
|
|
|||
|
RFC 2193 IMAP4 Mailbox Referrals September 1997
|
|||
|
|
|||
|
|
|||
|
A remote server is a server that contains remote mailboxes.
|
|||
|
|
|||
|
A shared mailbox, is a mailbox that multiple users have access to.
|
|||
|
|
|||
|
An IMAP mailbox referral is when the server directs the client to
|
|||
|
another IMAP mailbox.
|
|||
|
|
|||
|
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
|
|||
|
"SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
|
|||
|
document are to be interpreted as described in [RFC-2119].
|
|||
|
|
|||
|
3. Introduction and Overview
|
|||
|
|
|||
|
IMAP4 servers that support this extension MUST list the keyword
|
|||
|
MAILBOX-REFERRALS in their CAPABILITY response. No client action is
|
|||
|
needed to invoke the MAILBOX-REFERRALS capability in a server.
|
|||
|
|
|||
|
A MAILBOX-REFERRALS capable IMAP4 server MUST NOT return referrals
|
|||
|
that result in a referrals loop.
|
|||
|
|
|||
|
A referral response consists of a tagged NO response and a REFERRAL
|
|||
|
response code. The REFERRAL response code MUST contain as an
|
|||
|
argument a one or more valid URLs separated by a space as defined in
|
|||
|
[RFC-1738]. If a server replies with multiple URLs for a particular
|
|||
|
object, they MUST all be of the same type. In this case, the URL MUST
|
|||
|
be an IMAP URL as defined in [RFC-2192]. A client that supports the
|
|||
|
REFERRALS extension MUST be prepared for a URL of any type, but it
|
|||
|
need only be able to process IMAP URLs.
|
|||
|
|
|||
|
A server MAY respond with multiple IMAP mailbox referrals if there is
|
|||
|
more than one replica of the mailbox. This allows the implementation
|
|||
|
of a load balancing or failover scheme. How a server keeps multiple
|
|||
|
replicas of a mailbox in sync is not addressed by this document.
|
|||
|
|
|||
|
If the server has a preferred order in which the client should
|
|||
|
attempt to access the URLs, the preferred URL SHOULD be listed in the
|
|||
|
first, with the remaining URLs presented in descending order of
|
|||
|
preference. If multiple referrals are given for a mailbox, a server
|
|||
|
should be aware that there are synchronization issues for a client if
|
|||
|
the UIDVALIDITY of the referred mailboxes are different.
|
|||
|
|
|||
|
An IMAP mailbox referral may be given in response to an IMAP command
|
|||
|
that specifies a mailbox as an argument.
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Gahrns Standards Track [Page 2]
|
|||
|
|
|||
|
RFC 2193 IMAP4 Mailbox Referrals September 1997
|
|||
|
|
|||
|
|
|||
|
Example:
|
|||
|
|
|||
|
A001 NO [REFERRAL IMAP://user;AUTH=*@SERVER2/REMOTE]Remote Mailbox
|
|||
|
|
|||
|
NOTE: user;AUTH=* is specified as required by [RFC-2192] to avoid a
|
|||
|
client falling back to anonymous login.
|
|||
|
|
|||
|
Remote mailboxes and their inferiors, that are accessible only via
|
|||
|
referrals SHOULD NOT appear in LIST and LSUB responses issued against
|
|||
|
the user's home server. They MUST appear in RLIST and RLSUB
|
|||
|
responses issued against the user's home server. Hierarchy referrals,
|
|||
|
in which a client would be required to connect to the remote server
|
|||
|
to issue a LIST to discover the inferiors of a mailbox are not
|
|||
|
addressed in this document.
|
|||
|
|
|||
|
For example, if shared mailboxes were only accessible via referrals
|
|||
|
on a remote server, a RLIST "" "#SHARED/%" command would return the
|
|||
|
same response if issued against the user's home server or the remote
|
|||
|
server.
|
|||
|
|
|||
|
Note: Mailboxes that are available on the user's home server do not
|
|||
|
need to be available on the remote server. In addition, there may be
|
|||
|
additional mailboxes available on the remote server, but they will
|
|||
|
not accessible to the client via referrals unless they appear in the
|
|||
|
LIST response to the RLIST command against the user's home server.
|
|||
|
|
|||
|
A MAILBOX-REFERRALS capable client will issue the RLIST and RLSUB
|
|||
|
commands in lieu of LIST and LSUB. The RLIST and RLSUB commands
|
|||
|
behave identically to their LIST and LSUB counterparts, except remote
|
|||
|
mailboxes are returned in addition to local mailboxes in the LIST and
|
|||
|
LSUB responses. This avoids displaying to a non MAILBOX-REFERRALS
|
|||
|
enabled client inaccessible remote mailboxes.
|
|||
|
|
|||
|
4.1. SELECT, EXAMINE, DELETE, SUBSCRIBE, UNSUBSCRIBE, STATUS and APPEND
|
|||
|
Referrals
|
|||
|
|
|||
|
An IMAP4 server MAY respond to the SELECT, EXAMINE, DELETE,
|
|||
|
SUBSCRIBE, UNSUBSCRIBE, STATUS or APPEND command with one or more
|
|||
|
IMAP mailbox referrals to indicate to the client that the mailbox is
|
|||
|
hosted on a remote server.
|
|||
|
|
|||
|
When a client processes an IMAP mailbox referral, it will open a new
|
|||
|
connection or use an existing connection to the remote server so that
|
|||
|
it is able to issue the commands necessary to process the remote
|
|||
|
mailbox.
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Gahrns Standards Track [Page 3]
|
|||
|
|
|||
|
RFC 2193 IMAP4 Mailbox Referrals September 1997
|
|||
|
|
|||
|
|
|||
|
Example: <IMAP4 connection to home server>
|
|||
|
|
|||
|
C: A001 DELETE "SHARED/FOO"
|
|||
|
S: A001 NO [REFERRAL IMAP://user;AUTH=*@SERVER2/SHARED/FOO]
|
|||
|
Remote mailbox. Try SERVER2.
|
|||
|
|
|||
|
<Client established a second connection to SERVER2 and
|
|||
|
issues the DELETE command on the referred mailbox>
|
|||
|
|
|||
|
S: * OK IMAP4rev1 server ready
|
|||
|
C: B001 AUTHENTICATE KERBEROS_V4
|
|||
|
<authentication exchange>
|
|||
|
S: B001 OK user is authenticated
|
|||
|
|
|||
|
C: B002 DELETE "SHARED/FOO"
|
|||
|
S: B002 OK DELETE completed
|
|||
|
|
|||
|
Example: <IMAP4 connection to home server>
|
|||
|
|
|||
|
C: A001 SELECT REMOTE
|
|||
|
S: A001 NO [REFERRAL IMAP://user;AUTH=*@SERVER2/REMOTE
|
|||
|
IMAP://user;AUTH=*@SERVER3/REMOTE] Remote mailbox.
|
|||
|
Try SERVER2 or SERVER3.
|
|||
|
|
|||
|
<Client opens second connection to remote server, and
|
|||
|
issues the commands needed to process the items in the
|
|||
|
remote mailbox>
|
|||
|
|
|||
|
S: * OK IMAP4rev1 server ready
|
|||
|
C: B001 AUTHENTICATE KERBEROS_V4
|
|||
|
<authentication exchange>
|
|||
|
S: B001 OK user is authenticated
|
|||
|
|
|||
|
C: B002 SELECT REMOTE
|
|||
|
S: * 12 EXISTS
|
|||
|
S: * 1 RECENT
|
|||
|
S: * OK [UNSEEN 10] Message 10 is first unseen
|
|||
|
S: * OK [UIDVALIDITY 123456789]
|
|||
|
S: * FLAGS (Answered Flagged Deleted Seen Draft)
|
|||
|
S: * OK [PERMANENTFLAGS (Answered Deleted Seen ]
|
|||
|
S: B002 OK [READ-WRITE] Selected completed
|
|||
|
|
|||
|
C: B003 FETCH 10:12 RFC822
|
|||
|
S: * 10 FETCH . . .
|
|||
|
S: * 11 FETCH . . .
|
|||
|
S: * 12 FETCH . . .
|
|||
|
S: B003 OK FETCH Completed
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Gahrns Standards Track [Page 4]
|
|||
|
|
|||
|
RFC 2193 IMAP4 Mailbox Referrals September 1997
|
|||
|
|
|||
|
|
|||
|
<Client is finished processing the REMOTE mailbox and
|
|||
|
wants to process a mailbox on its home server>
|
|||
|
|
|||
|
C: B004 LOGOUT
|
|||
|
S: * BYE IMAP4rev1 server logging out
|
|||
|
S: B004 OK LOGOUT Completed
|
|||
|
|
|||
|
<Client continues with first connection>
|
|||
|
|
|||
|
C: A002 SELECT INBOX
|
|||
|
S: * 16 EXISTS
|
|||
|
S: * 2 RECENT
|
|||
|
S: * OK [UNSEEN 10] Message 10 is first unseen
|
|||
|
S: * OK [UIDVALIDITY 123456789]
|
|||
|
S: * FLAGS (Answered Flagged Deleted Seen Draft)
|
|||
|
S: * OK [PERMANENTFLAGS (Answered Deleted Seen ]
|
|||
|
S: A002 OK [READ-WRITE] Selected completed
|
|||
|
|
|||
|
4.2. CREATE Referrals
|
|||
|
|
|||
|
An IMAP4 server MAY respond to the CREATE command with one or more
|
|||
|
IMAP mailbox referrals, if it wishes to direct the client to issue
|
|||
|
the CREATE against another server. The server can employ any means,
|
|||
|
such as examining the hierarchy of the specified mailbox name, in
|
|||
|
determining which server the mailbox should be created on.
|
|||
|
|
|||
|
Example:
|
|||
|
|
|||
|
C: A001 CREATE "SHARED/FOO"
|
|||
|
S: A001 NO [REFERRAL IMAP://user;AUTH=*@SERVER2/SHARED/FOO]
|
|||
|
Mailbox should be created on remote server
|
|||
|
|
|||
|
Alternatively, because a home server is required to maintain a
|
|||
|
listing of referred remote mailboxes, a server MAY allow the creation
|
|||
|
of a mailbox that will ultimately reside on a remote server against
|
|||
|
the home server, and provide referrals on subsequent commands that
|
|||
|
manipulate the mailbox.
|
|||
|
|
|||
|
Example:
|
|||
|
|
|||
|
C: A001 CREATE "SHARED/FOO"
|
|||
|
S: A001 OK CREATE succeeded
|
|||
|
|
|||
|
C: A002 SELECT "SHARED/FOO"
|
|||
|
S: A002 NO [REFERRAL IMAP://user;AUTH=*@SERVER2/SHARED/FOO]
|
|||
|
Remote mailbox. Try SERVER2
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Gahrns Standards Track [Page 5]
|
|||
|
|
|||
|
RFC 2193 IMAP4 Mailbox Referrals September 1997
|
|||
|
|
|||
|
|
|||
|
4.3. RENAME Referrals
|
|||
|
|
|||
|
An IMAP4 server MAY respond to the RENAME command with one or more
|
|||
|
pairs of IMAP mailbox referrals. In each pair of IMAP mailbox
|
|||
|
referrals, the first one is an URL to the existing mailbox name and
|
|||
|
the second is an URL to the requested new mailbox name.
|
|||
|
|
|||
|
If within an IMAP mailbox referral pair, the existing and new mailbox
|
|||
|
URLs are on different servers, the remote servers are unable to
|
|||
|
perform the RENAME operation. To achieve the same behavior of
|
|||
|
server RENAME, the client MAY issue the constituent CREATE, FETCH,
|
|||
|
APPEND, and DELETE commands against both servers.
|
|||
|
|
|||
|
If within an IMAP mailbox referral pair, the existing and new mailbox
|
|||
|
URLs are on the same server it is an indication that the currently
|
|||
|
connected server is unable to perform the operation. The client can
|
|||
|
simply re-issue the RENAME command on the remote server.
|
|||
|
|
|||
|
Example:
|
|||
|
|
|||
|
C: A001 RENAME FOO BAR
|
|||
|
S: A001 NO [REFERRAL IMAP://user;AUTH=*@SERVER1/FOO
|
|||
|
IMAP://user;AUTH=*@SERVER2/BAR] Unable to rename mailbox
|
|||
|
across servers
|
|||
|
|
|||
|
Since the existing and new mailbox names are on different servers,
|
|||
|
the client would be required to make a connection to both servers and
|
|||
|
issue the constituent commands require to achieve the RENAME.
|
|||
|
|
|||
|
Example:
|
|||
|
|
|||
|
C: A001 RENAME FOO BAR
|
|||
|
S: A001 NO [REFERRAL IMAP://user;AUTH=*@SERVER2/FOO
|
|||
|
IMAP://user;AUTH=*@SERVER2/BAR] Unable to rename mailbox
|
|||
|
located on SERVER2
|
|||
|
|
|||
|
Since both the existing and new mailbox are on the same remote
|
|||
|
server, the client can simply make a connection to the remote server
|
|||
|
and re-issue the RENAME command.
|
|||
|
|
|||
|
4.4. COPY Referrals
|
|||
|
|
|||
|
An IMAP4 server MAY respond to the COPY command with one or more IMAP
|
|||
|
mailbox referrals. This indicates that the destination mailbox is on
|
|||
|
a remote server. To achieve the same behavior of a server COPY, the
|
|||
|
client MAY issue the constituent FETCH and APPEND commands against
|
|||
|
both servers.
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Gahrns Standards Track [Page 6]
|
|||
|
|
|||
|
RFC 2193 IMAP4 Mailbox Referrals September 1997
|
|||
|
|
|||
|
|
|||
|
Example:
|
|||
|
|
|||
|
C: A001 COPY 1 "SHARED/STUFF"
|
|||
|
S: A001 NO [REFERRAL IMAP://user;AUTH=*@SERVER2/SHARED/STUFF]
|
|||
|
Unable to copy message(s) to SERVER2.
|
|||
|
|
|||
|
5.1 RLIST command
|
|||
|
|
|||
|
Arguments: reference name
|
|||
|
mailbox name with possible wildcards
|
|||
|
|
|||
|
Responses: untagged responses: LIST
|
|||
|
|
|||
|
Result: OK - RLIST Completed
|
|||
|
NO - RLIST Failure
|
|||
|
BAD - command unknown or arguments invalid
|
|||
|
|
|||
|
The RLIST command behaves identically to its LIST counterpart, except
|
|||
|
remote mailboxes are returned in addition to local mailboxes in the
|
|||
|
LIST responses.
|
|||
|
|
|||
|
5.2 RLSUB Command
|
|||
|
|
|||
|
Arguments: reference name
|
|||
|
mailbox name with possible wildcards
|
|||
|
|
|||
|
Responses: untagged responses: LSUB
|
|||
|
|
|||
|
Result: OK - RLSUB Completed
|
|||
|
NO - RLSUB Failure
|
|||
|
BAD - command unknown or arguments invalid
|
|||
|
|
|||
|
The RLSUB command behaves identically to its LSUB counterpart, except
|
|||
|
remote mailboxes are returned in addition to local mailboxes in the
|
|||
|
LSUB responses.
|
|||
|
|
|||
|
6. Formal Syntax
|
|||
|
|
|||
|
The following syntax specification uses the augmented Backus-Naur
|
|||
|
Form (BNF) as described in [ABNF].
|
|||
|
|
|||
|
list_mailbox = <list_mailbox> as defined in [RFC-2060]
|
|||
|
|
|||
|
mailbox = <mailbox> as defined in [RFC-2060]
|
|||
|
|
|||
|
mailbox_referral = <tag> SPACE "NO" SPACE
|
|||
|
<referral_response_code> (text / text_mime2)
|
|||
|
; See [RFC-2060] for <tag>, text and text_mime2 definition
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Gahrns Standards Track [Page 7]
|
|||
|
|
|||
|
RFC 2193 IMAP4 Mailbox Referrals September 1997
|
|||
|
|
|||
|
|
|||
|
referral_response_code = "[" "REFERRAL" 1*(SPACE <url>) "]"
|
|||
|
; See [RFC-1738] for <url> definition
|
|||
|
|
|||
|
rlist = "RLIST" SPACE mailbox SPACE list_mailbox
|
|||
|
|
|||
|
rlsub = "RLSUB" SPACE mailbox SPACE list_mailbox
|
|||
|
|
|||
|
6. Security Considerations
|
|||
|
|
|||
|
The IMAP4 referral mechanism makes use of IMAP URLs, and as such,
|
|||
|
have the same security considerations as general internet URLs [RFC-
|
|||
|
1738], and in particular IMAP URLs [RFC-2192].
|
|||
|
|
|||
|
With the MAILBOX-REFERRALS capability, it is potentially easier to
|
|||
|
write a rogue server that injects a bogus referral response that
|
|||
|
directs a user to an incorrect mailbox. Although referrals reduce
|
|||
|
the effort to write such a server, the referral response makes
|
|||
|
detection of the intrusion easier.
|
|||
|
|
|||
|
7. References
|
|||
|
|
|||
|
[RFC-2060], Crispin, M., "Internet Message Access Protocol - Version
|
|||
|
4rev1", RFC 2060, University of Washington, December 1996.
|
|||
|
|
|||
|
[RFC-2192], Newman, C., "IMAP URL Scheme", RFC 2192, Innosoft,
|
|||
|
September 1997.
|
|||
|
|
|||
|
[RFC-1738], Berners-Lee, T., Masinter, L., and M. McCahill, "Uniform
|
|||
|
Resource Locators (URL)", RFC 1738, CERN, Xerox Corporation,
|
|||
|
University of Minnesota, December 1994.
|
|||
|
|
|||
|
[RFC-2119], Bradner, S., "Key words for use in RFCs to Indicate
|
|||
|
Requirement Levels", RFC 2119, Harvard University, March 1997.
|
|||
|
|
|||
|
[ABNF], DRUMS working group, Dave Crocker Editor, "Augmented BNF for
|
|||
|
Syntax Specifications: ABNF", Work in Progress, Internet Mail
|
|||
|
Consortium, April 1997.
|
|||
|
|
|||
|
8. Acknowledgments
|
|||
|
|
|||
|
Many valuable suggestions were received from private discussions and
|
|||
|
the IMAP4 mailing list. In particular, Raymond Cheng, Mark Crispin,
|
|||
|
Mark Keasling, Chris Newman and Larry Osterman made significant
|
|||
|
contributions to this document.
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Gahrns Standards Track [Page 8]
|
|||
|
|
|||
|
RFC 2193 IMAP4 Mailbox Referrals September 1997
|
|||
|
|
|||
|
|
|||
|
9. Author's Address
|
|||
|
|
|||
|
Mike Gahrns
|
|||
|
Microsoft
|
|||
|
One Microsoft Way
|
|||
|
Redmond, WA, 98072
|
|||
|
|
|||
|
Phone: (206) 936-9833
|
|||
|
EMail: mikega@microsoft.com
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Gahrns Standards Track [Page 9]
|
|||
|
|