[Dovecot] permissions on auth-userdb Error: userdb lookup

[Dieter Knopf]

Hello,

first sorry for this question. I already found many threads about this
problem including a thread in this list from August 2010, but nothing
helped :(

Here is the error:
2010-09-20 06:28:04 lda: Debug: Loading modules from directory:
/usr/lib/dovecot/modules/
2010-09-20 06:28:04 lda: Debug: Module loaded:
/usr/lib/dovecot/modules//lib90_sieve_plugin.so
2010-09-20 06:28:04 lda: Error: userdb lookup:
connect(/var/run/dovecot/auth-userdb) failed: Permission denied
(euid=5000(vmail) egid=5000(vmail) missing +r perm:
/var/run/dovecot/auth-userdb, euid is not dir owner)
2010-09-20 06:28:04 lda: Fatal: Internal error occurred. Refer to
server log for more information.

srw-------  1 root    root       0 20. Sep 06:21 auth-userdb

It worked fine with Dovecot 1.x, i use a static userdb.

vmail(5000):vmail(5000) is my standard user/group for /home/vmail/

Here is the config:
=====
listen = 92.198.xx.xx
log_path = /var/log/dovecot.log
log_timestamp = "%Y-%m-%d %H:%M:%S "
mail_debug = yes
mail_gid = 5000
mail_location = maildir:/home/vmail/%d/%n:INDEX=/home/vmail-indexes/%d/%n
mail_privileged_group = vmail
mail_uid = 5000
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope
encoded-character vacation subaddress comparator-i;ascii-numeric
relational regex imap4flags copy include variables body enotify
environment mailbox date
namespace {
  inbox = yes
  location =
  prefix = INBOX.
  separator = .
  type = private
}
passdb {
  args = /etc/dovecot/dovecot-sql.conf
  driver = sql
}
plugin {
  sieve = /home/vmail-sieve/%u/main.sieve
  sieve_before = /home/vmail/global/before.sieve
  sieve_dir = /home/vmail-sieve/%u/
  sieve_global_dir = /home/vmail-sieve/global/
}
protocols = imap
service auth {
  unix_listener auth-master {
    mode = 0600
  }
}
service imap-login {
  inet_listener imap {
    port = 0
  }
  inet_listener imaps {
    address = 92.198.xx.xx
  }
}
service pop3-login {
  inet_listener pop3s {
    address = 92.198.xx.xx
  }
}
ssl_cert = </etc/ssl/certs/dovecot.pem
ssl_key = </etc/ssl/private/dovecot.pem
userdb {
  args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes
  driver = static
}
protocol lda {
  hostname = foo.net
  mail_plugin_dir = /usr/lib/dovecot/modules/
  mail_plugins = sieve
  postmaster_address = postmaster at foo.net
}
=====

Any idea what's wrong? I already removed the permissions from the
"service auth"-part (there was user/group=vmail)

Thanks