All Apps and Add-ons

Can't get imap app to work

rmarshall
Explorer

I downloaded the imap app and configured the imap.conf file, but I have two issues. First, the genpass.sh script returns this error:

Enter the password you want to encrypt:
Enter it one more time to make sure you typed it in correctly:openssl: error while loading shared libraries: libssl.so.0.9.8: cannot open shared object file: No such file or directory

Copy the big ugly string on the line above and paste it into
imap.ini as the value for xpassword.
You can test that it works by running ./imaplaunch.sh

Strange thing is, I did get it to work once. Just once. So, I have put together an imap.conf file using the one encypted password I managed to get.

Second, after configuring the imap.conf file, I get the following error when I run the getimap.py script to test.

[root@splunk bin]# python getimap.py
Traceback (most recent call last):
  File "getimap.py", line 698, in 
    parseArgs()
  File "getimap.py", line 684, in parseArgs
    imapProc.initFromOptlist(optlist)
  File "getimap.py", line 149, in initFromOptlist
    raise ConfigError
__main__.ConfigError

I also see this error in the splunkd.log file.

What am I doing wrong?

rmarshall
Explorer

Erik Swan had me do the following:

cd spunk_home

bin/splunk cmd python etc/apps/imap/bin/getimap.py --debug

It should spit out something more useful.

Erik asked me to look at the file etc/apps/imap/local/imap.conf at which point I determined that the imap.conf file I had edited manually was in the wrong location. I copied my edited imap.conf from [splunkroot]/etc/apps/imap/default to [splunkroot]/etc/apps/imap/local and now it works.

Thanks Erik.

rmarshall
Explorer

Erik Swan had me do the following:

cd
bin/splunk cmd python etc/apps/imap/bin/getimap.py --debug

It should spit out something more useful.

I then determined that the imap.conf file I edited manually was in the wrong location. I copied my imap.conf from [splunkroot]/etc/apps/imap/default to [splunkroot]/etc/apps/imap/local and now it works.

rmarshall
Explorer

According to the Splunkbase entry for imap it was make by Erik. Would Erik happen to be available to comment on this?

(http://www.splunkbase.com/apps/All/4.x/App/app:Splunk+for+IMAP)

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...