Thomas Skowron put forth on 2/16/2011 2:49 PM:
Another thing I thought of was chrooting, but I don't see any chrooting in your config.
Maybe you could find out something interesting by starting Dovecot with "strace -f -o log dovecot".
15311 setresgid(-1, 5000, -1) = 0 15311 setresuid(-1, 5000, -1) = 0 15311 alarm(30) = 0 15311 chdir("/home/vmail/XXX/thomas") = -1 EACCES (Permission denied) 15311 alarm(0) = 30 15311 geteuid() = 5000 15311 geteuid() = 5000 15311 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = -1 EACCES (Permission denied) 15311 getegid() = 5000 15311 getegid() = 5000 15311 open("/etc/group", O_RDONLY|O_CLOEXEC) = -1 EACCES (Permission denied) 15311 stat("/home/vmail/XXX/thomas", 0x7fffd3a4c4a0) = -1 EACCES (Permission denied) 15311 stat("/home/vmail/XXX", 0x7fffd3a4c4a0) = -1 EACCES (Permission denied) 15311 stat("/home/vmail", 0x7fffd3a4c4a0) = -1 EACCES (Permission denied) 15311 stat("/home", 0x7fffd3a4c4a0) = -1 EACCES (Permission denied) 15311 stat("", 0x7fffd3a4c4a0) = -1 ENOENT (No such file or directory) 15311 time(NULL) = 1297888629 15311 stat("/etc/localtime", 0x7fffd3a4c100) = -1 EACCES (Permission denied) 15311 open("/etc/localtime", O_RDONLY) = -1 EACCES (Permission denied)
Is setresgid(-1,5000,-1) correct? I mean: -1!?
Have you done a full system reboot since the dist upgrade? If not, IIRC, glibc hasn't been replaced yet and the old version is still running. There are probably other libs that can't be replaced until a full restart as well. Do a full reboot if you haven't already. Then, if it's still not working...
What is the output of
~# aptitude -v show dovecot-imapd dovecot-common
and
~# la /usr/lib/dovecot/
Do you have any pam or mysql errors in syslog with a similar time stamp to the dovecot errors? Were you running 1.0.15 Lenny before the Squeeze upgrade or one of the 1.2.x Lenny backport versions?
If you didn't change filesystem permissions or dovecot config parms, then it seems logical that you have a component mismatch after the upgrade, or something along those lines, that is causing permissions problems. Check to make sure all of your dovecot components are of the same version. If you're still running a backport version of dovecot, try installing the Squeeze version. There could be a mismatch between apps and lib versions.
I've not upgraded my servers to Squeeze yet, and I'm running the Lenny backport Dovecot 1.2.15. I'm curious to discover the source of your problem so I can avoid it.
-- Stan