RHEL7/CentOS7 RPM of dovecot 2.3.11.3-3 seems to have dropped tcpwrap support
Using the Repo http://repo.dovecot.org/ce-2.3-latest after upgrading from 2.3.10.1-3 to 2.3.11.3-3 we get numerous error messages like:
dovecot: imap-login: Error: connect(tcpwrap) failed: No such file or directory
We use tcpwrap support in dovecot, which worked flawlessly in the older version. I can see that the socket /var/run/dovecot/login/tcpwrap is not created anymore. And comparing with RPMs, the new one seems to be missing the file:
/usr/libexec/dovecot/tcpwrap
which leads me to conclusion that the new version is just not compiled with tcpwrap support.
Thomas Scheunemann
On 20/08/20 11:02 pm, Thomas Scheunemann wrote:
Using the Repo http://repo.dovecot.org/ce-2.3-latest after upgrading from 2.3.10.1-3 to 2.3.11.3-3 we get numerous error messages like:
dovecot: imap-login: Error: connect(tcpwrap) failed: No such file or directory
We use tcpwrap support in dovecot, which worked flawlessly in the older version. I can see that the socket /var/run/dovecot/login/tcpwrap is not created anymore. And comparing with RPMs, the new one seems to be missing the file:
/usr/libexec/dovecot/tcpwrap
which leads me to conclusion that the new version is just not compiled with tcpwrap support.
At a guess it was removed from the spec for el8 (which does not support tcpwrap) and somehow got removed from el7 by accident. The ghettoforge dovecot23 packages have tcpwrap support for el7:
# rpm -qf /usr/libexec/dovecot/tcpwrap dovecot23-2.3.11.3-1.gf.el7.x86_64
Peter
On 21/08/2020 08:48 Peter peter@pajamian.dhs.org wrote:
On 20/08/20 11:02 pm, Thomas Scheunemann wrote:
Using the Repo http://repo.dovecot.org/ce-2.3-latest after upgrading from 2.3.10.1-3 to 2.3.11.3-3 we get numerous error messages like:
dovecot: imap-login: Error: connect(tcpwrap) failed: No such file or directory
We use tcpwrap support in dovecot, which worked flawlessly in the older version. I can see that the socket /var/run/dovecot/login/tcpwrap is not created anymore. And comparing with RPMs, the new one seems to be missing the file:
/usr/libexec/dovecot/tcpwrap
which leads me to conclusion that the new version is just not compiled with tcpwrap support.
At a guess it was removed from the spec for el8 (which does not support tcpwrap) and somehow got removed from el7 by accident. The ghettoforge dovecot23 packages have tcpwrap support for el7:
# rpm -qf /usr/libexec/dovecot/tcpwrap dovecot23-2.3.11.3-1.gf.el7.x86_64
Peter
Hi!
We are looking into this, it was indeed removed from el7 by accident. RPM macros can be quite tricky sometimes.
Aki
On 21/08/20 5:55 pm, Aki Tuomi wrote:
At a guess it was removed from the spec for el8 (which does not support tcpwrap) and somehow got removed from el7 by accident. The ghettoforge dovecot23 packages have tcpwrap support for el7:
We are looking into this, it was indeed removed from el7 by accident. RPM macros can be quite tricky sometimes.
I have:
%if 0%{?rhel} < 8 BuildRequires: tcp_wrappers-devel %endif
... then later ...
%if 0%{?rhel} < 8
--with-libwrap
%endif
Peter
On Fri, Aug 21, 2020 at 06:02:49PM +1200, Peter wrote:
On 21/08/20 5:55 pm, Aki Tuomi wrote:
At a guess it was removed from the spec for el8 (which does not support tcpwrap) and somehow got removed from el7 by accident. The ghettoforge dovecot23 packages have tcpwrap support for el7:
So is el8 truly incompatible with tcpwrap? Or is it just too much effort to continue suport for every feature that was ever in the system?
If the former, might it be reasonable for a user to change the 8's in the code below to 9's?
-- hendrik
We are looking into this, it was indeed removed from el7 by accident. RPM macros can be quite tricky sometimes.
I have:
%if 0%{?rhel} < 8 BuildRequires: tcp_wrappers-devel %endif
... then later ...
%if 0%{?rhel} < 8 --with-libwrap
%endifPeter
At a guess it was removed from the spec for el8 (which does not support tcpwrap) and somehow got removed from el7 by accident. The ghettoforge dovecot23 packages have tcpwrap support for el7:
So is el8 truly incompatible with tcpwrap? Or is it just too much effort to continue suport for every feature that was ever in the system?
https://access.redhat.com/solutions/3906701
"The TCP Wrappers package has been deprecated in RHEL 7 and therefore it will not be available in RHEL 8 or later RHEL releases".
If the former, might it be reasonable for a user to change the 8's in the code below to 9's?
No, because there is no tcp_wrappers/tcp_wrappers-devel package in RHEL8 anymore.
For reasons and alternatives, see: https://fedoraproject.org/wiki/Changes/Deprecate_TCP_wrappers
Best regards Gerald
We are looking into this, it was indeed removed from el7 by accident. RPM macros can be quite tricky sometimes.
I have:
%if 0%{?rhel} < 8 BuildRequires: tcp_wrappers-devel %endif
... then later ...
%if 0%{?rhel} < 8 --with-libwrap
%endifPeter
On 22/08/20 2:45 am, Gerald Galster wrote:
So is el8 truly incompatible with tcpwrap? Or is it just too much effort to continue suport for every feature that was ever in the system?
https://access.redhat.com/solutions/3906701
"The TCP Wrappers package has been deprecated in RHEL 7 and therefore it will not be available in RHEL 8 or later RHEL releases".
I should note that if there is enough demand for it I can look into building tcp_wrappers myself and supporting it for el8 in ghettoforge (as well as compiling dovecot against it).
If the former, might it be reasonable for a user to change the 8's in the code below to 9's?
I think you may be misunderstanding the boolean logic there, the code works as intended.
Peter
participants (5)
-
Aki Tuomi
-
Gerald Galster
-
Hendrik Boom
-
Peter
-
Thomas Scheunemann