On 27/03/2026 13:28 EET Stefan G. Weichinger via dovecot <dovecot@dovecot.org> wrote:

Am 27.03.26 um 11:54 schrieb Stefan G. Weichinger via dovecot:

...

I am in the process of upgrading and rewriting my config.

I can access IMAP etc ... so my database access is working.

I have issues with LMTP: postfix can't deliver to dovecot.

The postfix-confiog wasn't touched at all.

the error:

Mar 27 11:46:37 co dovecot: auth(stefan@oops.co.at): Error: userdb: client doesn't have lookup permissions for this user: userdb reply doesn't contain uid (to bypass this check, set: service auth { unix_listener /run/dovecot/auth-userdb { mode=0777 } })

What I don't understand: I configure this:

service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service auth-worker { user = postfix } service lmtp { user = vmail unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } }

protocol lmtp { mail_plugins = sieve postmaster_address = logs@xunil.at }

And in postfix:

virtual_transport = lmtp:unix:private/dovecot-lmtp

virtual_uid_maps = static:5000 virtual_gid_maps = static:5000 local_transport = virtual local_recipient_maps = $virtual_mailbox_maps

smtpd_sasl_auth_enable = yes smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth

Where does "/run/dovecot/auth-userdb" come from?

I understand that according to my config /var/spool/postfix/private/auth should be used?

ls /var/spool/postfix/private/auth -l srw-rw-rw- 1 postfix postfix 0 Mar 27 11:45 /var/spool/postfix/private/auth

ls /var/spool/postfix/private/dovecot-lmtp  -l srw-rw---- 1 postfix postfix 0 Mar 27 11:45 /var/spool/postfix/private/ dovecot-lmtp

I think I have it, at least it works now.

I added this block from 2.3 ...

service auth { client_limit = 1200 unix_listener auth-client { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0777 } user = root }

I assume the 0777 etc aren't ideal.

Suggestions welcome.

But my basic setup seems to work now!

(thanks to all devs for their work, even when it's sometimes hard to keep up ...)

0666 would be safer if it works.

Aki

Am 27.03.26 um 13:18 schrieb Stefan G. Weichinger via dovecot:

Any hints? yes, I promise to google as well, sure

It seems related to

service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } user = vmail }

Found a note to remove that "user = vmail" although then lmtp breaks completely.