Re: Potfix+Dovecot with dsync replication problem

Your problem is that you are running service doveadm as vmail, but you are using real uids. You need to start doveadm server as root to be able to switch into the correct target user.

Aki

On 13.5.2019 11.26, Zeljko Dokman via dovecot wrote:

Hi all,

Any suggestion?

BR

On Mon, 6 May 2019 at 14:22, Zeljko Dokman <zdokman@gmail.com <mailto:zdokman@gmail.com>> wrote:

Hi all,

I am in need of some help.

Straggling to make something work, trying to configure postfix and
dovecote imap server with dovecote replication.

Can’t figure out what is wrong with my configuration.

 

Replication is working only for vmail user account, I am getting
this error on my secondary server  for all other users…

 

dovecot: doveadm: Fatal: setgid(4015(zdokman) from userdb lookup)
failed with euid=5000(vmail), gid=5000(vmail), egid=5000(vmail):
Operation not permitted (This binary should probably be called
with process group set to 4015(zdokman) instead of 5000(vmail))

 

primary server reports this error:

 

dovecot: doveadm(zdokman): Error: doveadm server disconnected
before handshake: EOF

dovecot: doveadm(zdokman): Error: sync: Disconnected from remote: EOF

 

 

doveadm replicator status '*'

username                                          
                     priority fast sync full sync success sync failed

vmail                                                                 
        none     01:58:13  02:05:25  01:58:13     -

zdokman                                                            
     none     00:00:25  02:55:26  -            y

test                                                                  
          none     00:01:00  21:48:13  -            y

 

doveadm sync *

doveadm(root): Fatal: execvp(Maildir) failed: Permission denied

dsync-local(root): Error: read(remote) failed: EOF (version not
received)

 

I am attaching my dovecot.conf main.cf <http://main.cf> and
master.cf <http://master.cf>.

 

I think my problem is with permissions  but I can figure out how
to workaround it.

 

Best regards 

--