24.5.1 Rebuild the Alias Database

You tell sendmail to rebuild its database files by running it in -bi mode. This mode can be executed in two different ways:

% 

newaliases


% 

/usr/lib/sendmail -bi

The first form is shorthand for the second. Either causes sendmail to rebuild those files. If the database is successfully built, sendmail prints a single line:

895 aliases, longest 565 bytes, 30444 bytes total

This shows that 895 local entries appeared to the left of colons in the aliases file. The longest list of addresses to the right of a colon was 565 bytes (excluding the newline). And there were 30,444 total bytes of noncomment information in the file.

V8 sendmail supports multiple alias database files (see the AliasFile ( A ) option, Section 34.8.1 ). Consequently, each line of its output is prefixed with the name of the alias file being rebuilt. For example,

/etc/aliasdir/users: 895 aliases, longest 565 bytes, 30444 bytes total
/etc/aliasdir/lists: 34 aliases, longest 89 bytes, 1296 bytes total

24.5.2 Check the Right Side of Aliases

When V8 sendmail rebuilds the alias database files, it can optionally be told to check the legality of all addresses to the right of the colons. The CheckAliases ( n ) option (see Section 34.8.6, CheckAliases (n) ) turns on this check:

O CheckAliases=True    # validate RHS in newaliases

Each address is validated by running it through rule set 3, then rule set 0. Rule set 0 must select a delivery agent for the address. If it does, the address is silently validated and accepted. If not, the address is skipped, and the following warning is printed:

address

... bad address

Other errors may be printed before the above line that indicate more specific reasons for the failure. For example,

... Unbalanced '<'

The -d20.1 debugging switch (see Section 37.5.66, -d20.1 ) can be used to gain a better idea of why the address failed. But be forewarned: The -d20.1 switch can produce many screens of output.

In general, we do not recommend setting the CheckAliases ( n ) option to true in the configuration file, because it can cause each right-side address to be resolved through DNS and thus slow down the rebuild considerably. For better efficiency, leave the CheckAliases ( n ) option off in the configuration file and turn it on only when rebuilding by hand:

% 

newaliases -on

24.5.3 Prevent Simultaneous Rebuilds

The alias database files can be automatically rebuilt in three ways: by the daemon (if the AutoRebuildAliases ( D ) option, see Section 34.8.4, AutoRebuildAliases (D) , is true), by users sending mail (and thereby indirectly running sendmail ), and by users intentionally rebuilding the database with newaliases (or the -bi command-line switch). To prevent one rebuild from compromising and corrupting another, sendmail uses file locking.

The sendmail program uses flock (2) or fcntl (2) with F_SETLK to lock the aliases file (depending on how it was compiled). If the aliases file is already locked (because the database is currently being rebuilt), sendmail prints the following message:

Alias file 

name

 is already being rebuilt

If sendmail is attempting to rebuild because it was run as newaliases or with the -bi command-line switch, the above message is printed, and the program exits. Otherwise, the above message is printed, and sendmail waits for the aliases file to become unlocked.

Once the aliases file is locked, sendmail next looks to see whether the key @ appears in the database. If that key is missing, sendmail knows that the database is still being rebuilt. If the AliasWait ( a ) option (see Section 34.8.2, AliasWait (a) ) has a value, sendmail waits that amount of time for the other rebuild to finish. If the AliasWait ( a ) option is missing or has a zero value, sendmail plows ahead, trusting the previous lock to prevent simultaneous rebuilds.

The sendmail program waits the number of seconds specified by the AliasWait ( a ) option for an @ key to appear in the database. If that key doesn't appear within that wait, sendmail continues with the rebuild, assuming that some other process died while attempting to rebuild.

Before entering the key (the name to the left of the colon) and contents (everything to the right of the colon) pairs into the database, sendmail truncates the database (reduces it to size zero), thereby removing the @ key. After all the key and contents pairs have been written to the database, sendmail adds a new @ key to show that it is done.

Finally, sendmail closes the database and the aliases file. Closing the aliases file releases all locks it has on that file.

24.5.4 No DBM Aliasing

Some versions of UNIX do not provide the libraries that are needed to compile sendmail with database support. When neither the db (3) nor ndbm (3) library is available, and when no other method for getting aliases is declared (such as nis ), sendmail keeps aliases in its internal symbol table.

When the symbol table is used, sendmail builds its alias database only once. When sendmail is run as a daemon, the aliases file is read only once. If the file changes, the daemon needs to be killed and restarted. In general, it is not recommended to run sendmail in daemon mode without external database files.