[Dovecot] Why dovecot does not want to read my acl file?

[Timo Sirainen]

On Wed, 2009-12-16 at 00:24 +0900, Lukas Haase wrote:
> mail_drop_priv_before_exec = no  #just to make sure

"no" means it starts the process as root as root. I guess you meant to
use "yes".

> # cat /usr/local/sbin/dovecot-imap-fix.sh
> #!/bin/sh
> cat /var/mail/shared/.Office/dovecot-acl > /tmp/dovecot-$USER

It reads the file while running as root.

> ACL_GROUPS=`groups $USER | tr ' '  ','`
> export ACL_GROUPS

I don't think ACL_GROUPS is supported by Dovecot v1.0.

> By the way: As soon as I change the mail_executable to 
> /usr/local/sbin/dovecot-imap-fix.sh I get this message and have 
> absolutely no clue why:
> 
> # /etc/init.d/dovecot restart
> Restarting IMAP/POP3 mail server: dovecotid: dump-capability: No such user
> .
> #
> 
> Which dump-capability? Which user?

It's because at startup Dovecot executes imap mail_executable as
"dump-capability" user to find out what IMAP capabilities enabled
plugins add. In your script you should probably check that if
$USER=dump-capability, don't do anything special.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20091215/e1840334/attachment.bin