On Mon, 16 Jan 2017 17:51:48 -0500 Bill Shirley <bill@KnoxvilleChristian.org> wrote:

I've gotten errors like this when it was actually a selinux denial. If you're running selinux, check those logs too.

OK, this is getting serious -- mail not getting delivered.

No, I am not running selinux. Here is the error I get in the maillog:

Jan 24 16:42:49 mail dovecot: imap(mark): Error: stat(/home/HPRS/mark/Maildir/tmp) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +x perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark))

Permission are:

$ ls -l /home/HPRS/mark/Maildir/ total 200 drwx------ 2 HPRS\mark domusers 45056 Dec 19 08:13 cur/ -rw------- 1 HPRS\mark domusers 131 Jul 1 2016 dovecot-keywords -rw------- 1 HPRS\mark domusers 5249 Dec 7 23:06 dovecot-uidlist -rw------- 1 HPRS\mark domusers 8 Jul 7 2016 dovecot-uidvalidity -r--r--r-- 1 HPRS\mark domusers 0 Jan 16 2015 dovecot-uidvalidity.54b9def3 -rw------- 1 HPRS\mark domusers 4080 Nov 27 23:28 dovecot.index -rw------- 1 HPRS\mark domusers 88612 Dec 7 23:07 dovecot.index.cache -rw------- 1 HPRS\mark domusers 8748 Dec 7 23:07 dovecot.index.log -rw------- 1 HPRS\mark domusers 2016 Jul 7 2016 dovecot.mailbox.log drwx------ 2 HPRS\mark domusers 12288 Jan 13 12:10 new/ -rw------- 1 HPRS\mark domusers 137 Jul 7 2016 subscriptions drwx------ 2 HPRS\mark domusers 12288 Jan 13 12:10 tmp/

Permission on the Maildir folder for another user who is NOT having this problem:

$ ls -l /home/HPRS/shay/Maildir/ total 88 drwx------ 2 HPRS\shay domusers 12288 Jan 24 15:50 cur/ -rw------- 1 HPRS\shay domusers 41 Sep 13 11:59 dovecot-keywords -rw------- 1 HPRS\shay users 1442 Jan 24 15:48 dovecot-uidlist -rw------- 1 HPRS\shay domusers 8 Jan 18 15:13 dovecot-uidvalidity -r--r--r-- 1 HPRS\shay domusers 0 Jul 15 2016 dovecot-uidvalidity.5789a8ca -rw------- 1 HPRS\shay users 1408 Jan 20 08:18 dovecot.index -rw------- 1 HPRS\shay users 12928 Jan 24 15:50 dovecot.index.cache -rw------- 1 HPRS\shay users 20844 Jan 24 15:51 dovecot.index.log -rw------- 1 HPRS\shay domusers 2856 Jan 18 15:13 dovecot.mailbox.log drwx------ 2 HPRS\shay domusers 4096 Jan 24 15:48 new/ -rw------- 1 HPRS\shay users 2906 Jan 18 15:13 subscriptions drwx------ 2 HPRS\shay domusers 4096 Jan 24 15:48 tmp/

You can see that the tmp/ folders for both users are set exactly the same, yet user 'mark' is getting the permission error. mark's mail is not getting delivered; shay's mail is.

Why?

On 1/16/2017 4:09 PM, Mark Foley wrote:

...

More info ...

This is the only user having this permission problem. All other Thunderbird/dovecot users are getting mail file. They all have the same permissions set on their Maildir folder.

--Mark

-----Original Message----- From: Mark Foley <mfoley@ohprs.org> Date: Mon, 16 Jan 2017 13:21:31 -0500 Organization: Ohio Highway Patrol Retirement System To: dovecot@dovecot.org Subject: Apparent Maildir permission issue

I've just upgraded from Slackware 14.1 to 14.2. I've not done anything with dovecot -- it's the same version that was running before the upgrade. However, now I'm getting a permission error:

/var/log/maillog:

Jan 16 13:09:44 mail dovecot: imap(mark): Error: opendir(/home/HPRS/mark/Maildir) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +r perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail last message repeated 4 times Jan 16 13:09:44 mail dovecot: imap(mark): Error: stat(/home/HPRS/mark/Maildir/.Trash) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +x perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail dovecot: imap(mark): Error: stat(/home/HPRS/mark/Maildir/tmp) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +x perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail dovecot: imap(mark): Error: opendir(/home/HPRS/mark/Maildir) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +r perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:45 mail last message repeated 11 times

Permission on that folder are:

$ ls -ld /home/HPRS/mark/Maildir drwx------ 17 HPRS\mark domusers 4096 Dec 7 23:07 /home/HPRS/mark/Maildir/

Permissions are unchanged since before the backup.

What do I do to fix this?

THX --Mark

Jan 16 13:09:44 mail dovecot: imap(mark): Error: opendir(/home/HPRS/mark/Maildir) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +r perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark))

Just wanted to point out that you have at different UID for the folder than your EUID (gotten from userdb/passdb).

Aki

On 16.01.2017 23:09, Mark Foley wrote:

More info ...

This is the only user having this permission problem. All other Thunderbird/dovecot users are getting mail file. They all have the same permissions set on their Maildir folder.

--Mark

-----Original Message----- From: Mark Foley <mfoley@ohprs.org> Date: Mon, 16 Jan 2017 13:21:31 -0500 Organization: Ohio Highway Patrol Retirement System To: dovecot@dovecot.org Subject: Apparent Maildir permission issue

I've just upgraded from Slackware 14.1 to 14.2. I've not done anything with dovecot -- it's the same version that was running before the upgrade. However, now I'm getting a permission error:

/var/log/maillog:

Jan 16 13:09:44 mail dovecot: imap(mark): Error: opendir(/home/HPRS/mark/Maildir) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +r perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail last message repeated 4 times Jan 16 13:09:44 mail dovecot: imap(mark): Error: stat(/home/HPRS/mark/Maildir/.Trash) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +x perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail dovecot: imap(mark): Error: stat(/home/HPRS/mark/Maildir/tmp) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +x perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail dovecot: imap(mark): Error: opendir(/home/HPRS/mark/Maildir) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +r perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:45 mail last message repeated 11 times

Permission on that folder are:

$ ls -ld /home/HPRS/mark/Maildir drwx------ 17 HPRS\mark domusers 4096 Dec 7 23:07 /home/HPRS/mark/Maildir/

Permissions are unchanged since before the backup.

What do I do to fix this?

THX --Mark

I'm guessing the permissions were different for the target directory.

Aki

On January 25, 2017 at 3:29 AM Mark Foley <mfoley@ohprs.org> wrote:

On Tue, 17 Jan 2017 12:25:27 +0200 Aki Tuomi <aki.tuomi@dovecot.fi> wrote:

...

Jan 16 13:09:44 mail dovecot: imap(mark): Error: opendir(/home/HPRS/mark/Maildir) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +r perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark))

Just wanted to point out that you have at different UID for the folder than your EUID (gotten from userdb/passdb).

Aki

Yes, very puzzling. I'm restoring some older dovecot logs now to see if that was true e.g. in 2016. Perhaps an upgrade of some other software caused a problem. On the other hand, the other user I mentioned in my Jan 24 17:15 message, shay, also shows this UID/EUID discrepancy, but that does not prevent her from getting mail and there is no permission denied error on her messages.

More when I know more

--Mark

...

On 16.01.2017 23:09, Mark Foley wrote:

...

More info ...

This is the only user having this permission problem. All other Thunderbird/dovecot users are getting mail file. They all have the same permissions set on their Maildir folder.

--Mark

-----Original Message----- From: Mark Foley <mfoley@ohprs.org> Date: Mon, 16 Jan 2017 13:21:31 -0500 Organization: Ohio Highway Patrol Retirement System To: dovecot@dovecot.org Subject: Apparent Maildir permission issue

I've just upgraded from Slackware 14.1 to 14.2. I've not done anything with dovecot -- it's the same version that was running before the upgrade. However, now I'm getting a permission error:

/var/log/maillog:

Jan 16 13:09:44 mail dovecot: imap(mark): Error: opendir(/home/HPRS/mark/Maildir) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +r perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail last message repeated 4 times Jan 16 13:09:44 mail dovecot: imap(mark): Error: stat(/home/HPRS/mark/Maildir/.Trash) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +x perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail dovecot: imap(mark): Error: stat(/home/HPRS/mark/Maildir/tmp) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +x perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:44 mail dovecot: imap(mark): Error: opendir(/home/HPRS/mark/Maildir) failed: Permission denied (euid=3000026(HPRS\mark) egid=100(users) missing +r perm: /home/HPRS/mark/Maildir, conflicting dir uid=10001(HPRS\mark)) Jan 16 13:09:45 mail last message repeated 11 times

Permission on that folder are:

$ ls -ld /home/HPRS/mark/Maildir drwx------ 17 HPRS\mark domusers 4096 Dec 7 23:07 /home/HPRS/mark/Maildir/

Permissions are unchanged since before the backup.

What do I do to fix this?

THX --Mark

On Wed, 25 Jan 2017 08:01:00 +0100 (CET) Steffen Kaiser <skdovecot@smail.inf.fh-brs.de> wrote:

1. Why does both UIDs 3000026 and 10001 translate back to HPRS\mark ? What HPRS\mark translates to?

...

Permission on that folder are:

$ ls -ld /home/HPRS/mark/Maildir drwx------ 17 HPRS\mark domusers 4096 Dec 7 23:07 /home/HPRS/mark/Maildir/

2. I guess this HPRS\mark is 10001 ? (And not 3000026)

...

Permissions are unchanged since before the backup.

"backup"? You've restored the Maildir's from somewhere else? What was the _numerical_ UID within the backup and what is it now?

"backup" meaning I looked at the permissions on an older routine, backup. No, I did not restore anything.

BUT ... I found the problem. I upgraded Samba4 10 days ago from version 4.2.12 to 4.4.8 and, in the course of researching this problem, I found that the A/D authentication was broken:

with 4.2.12 on AD/DC: $ getent passwd mark HPRS\mark:*:10001:10000:Mark Foley:/home/HPRS/mark:/bin/false

With 4.4.8 on AD/DC: $ getent passwd mark HPRS\mark:*:3000026:100:Mark Foley:/home/HPRS/mark:/bin/bash

The new version of Samba is giving me this bogus UID:GID. I've no idea why. I have posted messages on the Samba List asking for help on this.

Email clients authenticate with Dovecot via Kerberos/GSSAPI and Dovecot was therefore trying to use 3000026:100 to access Maildir files/directories created with owner 10001:10000.

I've done a workaround by added the correct UID, GID for this user to /etc/passwd, although one is not suppose to have AD users in /etc/passwd. However, that is working for the time being.

If anyone on this list has had this experience and knows what needs to be fixed, please let me know!

Thanks -- Mark