Hey folks,
Long time lurker, infrequent poster, avid home Zimbra user.

Our zimbra box is running on a 2.2 ghz mac mini with 2gb of ram running ubuntu 10.04 LTS. Patches and zimbra are current. Approx 5 users.

Our OS X server is a similarly spec'ed mini running the latest Snow Leopard server.

At least 20x a day, every user has to re-enter their password in Apple's OSX Mail.app when sending and frequently when checking mail. Anecdotally, its safe to say that almost any send requires entering the password 2-3 times. After I successfully enter my password, I can check apple's Keychain.app and confirm that it is correct.

All clients are using IDLE, SSL and password auth (although kerberos would be cool, but I'll save that for another project).

I'll add that this has been going on for at least a year (been lazy about getting here to post it and pulling the logs to support the the post).

The only other observation is that CPU utilization on my box goes up more and more every week. It is frequently pegged at 100% with the following two processes being the leading culprits:

/opt/zimbra/java/bin/java -server -XX:NewRatio=2 -Djava.awt.headless=true
/bin/bash /opt/zimbra/bin/zmjava com.zimbra.cs.account.ProvUtil -l gamcs

I've also noticed an AMAZING amount of spam for box with only 5 users. I'm at the point where I'm considering an upstream 3rd party anti-spam solution...which is nuts for a home user. Frankly anyone in their right mind would be on gmail...but I'm geeky and love my zimbra box and would love to keep this working internally if we can.

I understand there have been posts and bug reports about ProvUtil with most reporting that it is now fixed.
That is not my observation on: Release 6.0.8_GA_2661.UBUNTU8 UBUNTU8 FOSS edition.

OS X Server Open Directory Password Log:
Code:
Dec  7 2010 08:47:04    USER: {0x4873e0167dc9d2000000000900000009, ndawson} is the current user.
Dec  7 2010 08:47:04    AUTH2: {0x4873e0167dc9d2000000000900000009, ndawson} CRAM-MD5 authentication succeeded.
Dec  7 2010 08:47:05    RSAVALIDATE: success.
Dec  7 2010 08:47:05    USER: {0x4873e08d2d2d663d0000000a0000000a, npdweb} is the current user.
Dec  7 2010 08:47:05    AUTH2: {0x4873e08d2d2d663d0000000a0000000a, npdweb} CRAM-MD5 authentication succeeded.
Dec  7 2010 08:47:07    RSAVALIDATE: success.
Dec  7 2010 08:47:07    USER: {0x4873e08d2d2d663d0000000a0000000a, npdweb} is the current user.
Dec  7 2010 08:47:07    AUTH2: {0x4873e08d2d2d663d0000000a0000000a, npdweb} CRAM-MD5 authentication succeeded.
Dec  7 2010 08:47:10    RSAVALIDATE: success.
Dec  7 2010 08:47:10    USER: {0x4873e0167dc9d2000000000900000009, ndawson} is the current user.
Dec  7 2010 08:47:10    AUTH2: {0x4873e0167dc9d2000000000900000009, ndawson} CRAM-MD5 authentication succeeded.
Dec  7 2010 08:47:10    RSAVALIDATE: success.
Dec  7 2010 08:47:10    USER: {0x4873e0167dc9d2000000000900000009, ndawson} is the current user.
Dec  7 2010 08:47:10    AUTH2: {0x4873e0167dc9d2000000000900000009, ndawson} CRAM-MD5 authentication succeeded.
Dec  7 2010 08:47:38    RSAVALIDATE: success.
Dec  7 2010 08:47:38    USER: {0x4873e0167dc9d2000000000900000009, ndawson} is the current user.
Dec  7 2010 08:47:38    AUTH2: {0x4873e0167dc9d2000000000900000009, ndawson} CRAM-MD5 authentication succeeded.
Dec  7 2010 08:47:47    RSAVALIDATE: success.
Dec  7 2010 08:47:47    USER: {0x4873e08d2d2d663d0000000a0000000a, npdweb} is the current user.
Dec  7 2010 08:47:47    AUTH2: {0x4873e08d2d2d663d0000000a0000000a, npdweb} CRAM-MD5 authentication succeeded.
Dec  7 2010 08:47:48    RSAVALIDATE: success.
Dec  7 2010 08:47:48    USER: {0x4873e0167dc9d2000000000900000009, ndawson} is the current user.
Dec  7 2010 08:47:48    AUTH2: {0x4873e0167dc9d2000000000900000009, ndawson} CRAM-MD5 authentication succeeded.
Dec  7 2010 08:47:51    RSAVALIDATE: success.
Dec  7 2010 08:47:51    USER: {0x4873e08d2d2d663d0000000a0000000a, npdweb} is the current user.
Dec  7 2010 08:47:51    AUTH2: {0x4873e08d2d2d663d0000000a0000000a, npdweb} CRAM-MD5 authentication succeeded.
Dec  7 2010 08:48:04    RSAVALIDATE: success.
Dec  7 2010 08:48:04    USER: {0x4873e08d2d2d663d0000000a0000000a, npdweb} is the current user.
Dec  7 2010 08:48:04    AUTH2: {0x4873e08d2d2d663d0000000a0000000a, npdweb} CRAM-MD5 authentication succeeded.
Dec  7 2010 08:48:06    RSAVALIDATE: success.
Dec  7 2010 08:48:06    USER: {0x4873e08d2d2d663d0000000a0000000a, npdweb} is the current user.
Dec  7 2010 08:48:06    AUTH2: {0x4873e08d2d2d663d0000000a0000000a, npdweb} CRAM-MD5 authentication succeeded.
Dec  7 2010 08:48:10    RSAVALIDATE: success.
Dec  7 2010 08:48:10    USER: {0x4873e08d2d2d663d0000000a0000000a, npdweb} is the current user.
Dec  7 2010 08:48:10    AUTH2: {0x4873e08d2d2d663d0000000a0000000a, npdweb} CRAM-MD5 authentication succeeded.

/var/log/zimbra.log (Ubuntu box)
Code:
Dec  7 08:47:03 aspen postfix/anvil[28264]: statistics: max connection count 1 for (smtp:92.81.89.112) at Dec  7 08:43:32
Dec  7 08:47:03 aspen postfix/anvil[28264]: statistics: max cache size 1 at Dec  7 08:43:32
Dec  7 08:47:36 aspen postfix/smtpd[30777]: connect from osx5.nsnet.us[10.1.1.100]
Dec  7 08:47:36 aspen postfix/smtpd[30777]: setting up TLS connection from osx5.nsnet.us[10.1.1.100]
Dec  7 08:47:58 aspen postfix/smtpd[30781]: connect from osx5.nsnet.us[10.1.1.100]
Dec  7 08:47:58 aspen postfix/smtpd[30781]: setting up TLS connection from osx5.nsnet.us[10.1.1.100]
Dec  7 08:47:58 aspen postfix/smtpd[30781]: Anonymous TLS connection established from osx5.nsnet.us[10.1.1.100]: TLSv1 with cipher AES128-SHA (128/128 bits)
Dec  7 08:47:58 aspen saslauthd[10406]: zmauth: authenticating against elected url 'https://mail.nickdawson.net:7071/service/admin/soap/' ...
Dec  7 08:47:58 aspen postfix/smtpd[30777]: Anonymous TLS connection established from osx5.nsnet.us[10.1.1.100]: TLSv1 with cipher AES128-SHA (128/128 bits)
Dec  7 08:47:59 aspen saslauthd[10403]: zmauth: authenticating against elected url 'https://mail.nickdawson.net:7071/service/admin/soap/' ...
Dec  7 08:48:04 aspen saslauthd[10406]: zmpost: url='https://mail.nickdawson.net:7071/service/admin/soap/' returned buffer->data='<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope"><soap:Header><context xmlns="urn:zimbra"><change token="982957"/></context></soap:Header><soap:Body><AuthResponse xmlns="urn:zimbraAccount"><authToken>0_860948f2f7416b887a4bf3c2c4e04c34842d519d_69643d33363a35666263376130612d636634632d343962342d623664642d3432653165623834623662333b6578703d31333a313239313930323438343633343b747970653d363a7a696d6272613b</authToken><lifetime>172800000</lifetime><skin>lemongrass</skin></AuthResponse></soap:Body></soap:Envelope>', hti->error=''
Dec  7 08:48:05 aspen saslauthd[10406]: auth_zimbra: npdweb auth OK
Dec  7 08:48:05 aspen postfix/smtpd[30781]: disconnect from osx5.nsnet.us[10.1.1.100]
Dec  7 08:48:15 aspen saslauthd[10403]: authentication against url 'https://mail.nickdawson.net:7071/service/admin/soap/' caused error 'curl_easy_perform: error(28): SSL connection timeout'
Dec  7 08:48:17 aspen saslauthd[10403]: url 'https://mail.nickdawson.net:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Dec  7 08:48:17 aspen saslauthd[10403]: Authentication cycle re-elected url https://mail.nickdawson.net:7071/service/admin/soap/, giving up ...
Dec  7 08:48:18 aspen saslauthd[10403]: auth_zimbra: ndawson auth failed: curl_easy_perform: error(28): SSL connection timeout
Dec  7 08:48:18 aspen saslauthd[10403]: do_auth         : auth failure: [user=ndawson] [service=smtp] [realm=] [mech=zimbra] [reason=Unknown]
Dec  7 08:48:18 aspen postfix/smtpd[30777]: warning: SASL authentication failure: Password verification failed
Dec  7 08:48:19 aspen postfix/smtpd[30777]: warning: osx5.nsnet.us[10.1.1.100]: SASL PLAIN authentication failed: authentication failure
Dec  7 08:48:19 aspen postfix/smtpd[30777]: disconnect from osx5.nsnet.us[10.1.1.100]
Dec  7 08:48:20 aspen zmmailboxdmgr[31531]: status requested
Dec  7 08:48:20 aspen zmmailboxdmgr[31531]: status OK
Dec  7 08:48:25 aspen zmmailboxdmgr[31932]: status requested
Dec  7 08:48:25 aspen zmmailboxdmgr[31932]: status OK
Dec  7 08:48:26 aspen zmmailboxdmgr[31991]: status requested
Dec  7 08:48:26 aspen zmmailboxdmgr[31991]: status OK