Dovecot permission denied errors on NFS after upgrade to 2.2.17

[Claudio Corvino]

Hi everyone,

problem still occurring, I just noticed that if I do an "ls -l 
/mnt/mail-storage/<user>/Maildir/cur/" from the Dovecot server I can 
unblock the mailbox of the user and Thunderbird can receives all the 
e-mails.

The problem occurs even with the gmail client on the smartphone.

I just tried many things but can't find a solution.

I just reinstalled a new server with mail storage not on NFS and the 
problem seems to be fixed, but this is not a solution valid for us as we 
would like to use NFS.


Thanks

On 20/07/20 09:47, Claudio Corvino wrote:
>
> Hi everyone,
>
> after some hours when I sent my last e-mail to the ML the problem 
> reoccurred, again problem with some mailboxes reading some e-mails and 
> many errors into dovecot.log like these:
>
> /Jul 14 15:07:50 imap(XXX): Error: 
> open(/mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m) 
> failed: Permission denied (euid=501(vmail) egid=501(vmail) missing +r 
> perm: 
> /mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m 
> stat(/mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m) 
> failed: Permission denied)/
>
> SElinux is not installed and Dovecot NFS client uses "defaults" option 
> to mount NFS partition with mailboxes in it and version=3.
>
> Don't know where to look further.
>
> Any help appreciated!
>
> Regards
>
>
> On 14/07/20 11:13, Claudio Corvino wrote:
>> Strange behavior but after a reboot of the Dovecot server, the error 
>> disappeared from logs (like Windows style! :-)).
>>
>> I'll monitor the situation and take you updated in case it should 
>> come back.
>>
>> Thanks all!
>>
>> On 13/07/20 20:27, John Stoffel wrote:
>>>>>>>> "Mark" == Mark Moseley <moseleymark at gmail.com> writes:
>>>
>>> Mark> This is just me throwing things out to look at, but did the
>>> Mark> client mount on the old server use NFS3 and the new upgraded
>>> Mark> client uses NFS4? Sometimes that can cause weirdness with id
>>> Mark> mapping.
>>>
>>>
>>> Another thing to check is selinux, is it enabled?  It's one of those
>>> things I have to poke at on RHEL systems, but I can't remember if it's
>>> on by default on Debian Buster.
>>>
>>>     getenforce
>>>
>>> would answer one way or another.
>>> John
>>
>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3812 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://dovecot.org/pipermail/dovecot/attachments/20200921/d2d87994/attachment-0001.p7s>