[Dovecot] Permission denied after dist-upgrade

[Stan Hoeppner]

Thomas Skowron put forth on 2/16/2011 2:49 PM:
> 
>> Another thing I thought of was chrooting, but I don't see any chrooting in your config.
>>
>> Maybe you could find out something interesting by starting Dovecot with "strace -f -o log dovecot".
> 
> 15311 setresgid(-1, 5000, -1)           = 0 
> 15311 setresuid(-1, 5000, -1)           = 0
> 15311 alarm(30)                         = 0
> 15311 chdir("/home/vmail/XXX/thomas") = -1 EACCES (Permission denied)
> 15311 alarm(0)                          = 30
> 15311 geteuid()                         = 5000
> 15311 geteuid()                         = 5000
> 15311 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = -1 EACCES (Permission denied)
> 15311 getegid()                         = 5000
> 15311 getegid()                         = 5000
> 15311 open("/etc/group", O_RDONLY|O_CLOEXEC) = -1 EACCES (Permission denied)
> 15311 stat("/home/vmail/XXX/thomas", 0x7fffd3a4c4a0) = -1 EACCES (Permission denied)
> 15311 stat("/home/vmail/XXX", 0x7fffd3a4c4a0) = -1 EACCES (Permission denied)
> 15311 stat("/home/vmail", 0x7fffd3a4c4a0) = -1 EACCES (Permission denied)
> 15311 stat("/home", 0x7fffd3a4c4a0)     = -1 EACCES (Permission denied)
> 15311 stat("", 0x7fffd3a4c4a0)          = -1 ENOENT (No such file or directory)
> 15311 time(NULL)                        = 1297888629
> 15311 stat("/etc/localtime", 0x7fffd3a4c100) = -1 EACCES (Permission denied)
> 15311 open("/etc/localtime", O_RDONLY)  = -1 EACCES (Permission denied)
> 
> 
> Is setresgid(-1,5000,-1) correct? I mean: -1!?


Have you done a full system reboot since the dist upgrade?  If not,
IIRC, glibc hasn't been replaced yet and the old version is still
running.  There are probably other libs that can't be replaced until a
full restart as well.  Do a full reboot if you haven't already.  Then,
if it's still not working...

What is the output of

~# aptitude -v show dovecot-imapd dovecot-common

and

~# la /usr/lib/dovecot/

Do you have any pam or mysql errors in syslog with a similar time stamp
to the dovecot errors?  Were you running 1.0.15 Lenny before the Squeeze
upgrade or one of the 1.2.x Lenny backport versions?

If you didn't change filesystem permissions or dovecot config parms,
then it seems logical that you have a component mismatch after the
upgrade, or something along those lines, that is causing permissions
problems.  Check to make sure all of your dovecot components are of the
same version.  If you're still running a backport version of dovecot,
try installing the Squeeze version.  There could be a mismatch between
apps and lib versions.

I've not upgraded my servers to Squeeze yet, and I'm running the Lenny
backport Dovecot 1.2.15.  I'm curious to discover the source of your
problem so I can avoid it.

-- 
Stan