Permissions with mailman
Hi,
I'm running a Mailserver, and recently also a Mailinglist.
I'm sporting # dovecot --version 2.1.7 on a debian stable machine with postfix & mailman. Everything works fine, except that no archive is being created (here an excerpt from my log):
Jul 2 15:29:39 blade01 postfix/qmgr[5217]: B30BCE1F52: from=<list@mail.myserver.com>, size=802, nrcpt=1 (queue active)
Jul 2 15:29:39 blade01 dovecot: lda(list): Error: user list: Initialization failed: Initializing mail storage from mail_location setting failed: mkdir(/var/mail/vmail//list/mail) failed: Permission denied (euid=38(list) egid=38(list) missing +w perm: /var/mail/vmail/, we're not in group 5000(vmail), dir owned by 5000:5000 mode=0775)
Jul 2 15:29:39 blade01 dovecot: lda(list): Fatal: Invalid user settings. Refer to server log for more information.
Jul 2 15:29:39 blade01 postfix/local[2778]: B30BCE1F52: to=<list@mail.myserver.com>, orig_to=<list>, relay=local, delay=12578, delays=12578/0.16/0/0.17, dsn=4.3.0, status=deferred (temporary failure)
Now since dovecot is running as user vmail (the other mail folders are all well managed and accessed by it, and all owned by vmail:vmail) I thought it might be saying that the user list is not in group vmail. Now: $ groups list list : list vmail and the permissions are 775, but it's still complaining about "missing +w perm". What is it referring to with "we're not in group 5000"?
Thanks for any help!
-- Niklas - 林樂寬
On 7/3/14, 11:03 AM, Niklas Lemcke - 林樂寬 wrote:
Now since dovecot is running as user vmail
According to the error, it's not running as user vmail for this delivery. It's running as uid/gid 38, "list".
Look at how "lda" gets executed for this delivery to see why it's using uid 38.
-- Robert L Mathews, Tiger Technologies, http://www.tigertech.net/
On Thu, 03 Jul 2014 12:49:14 -0700 Robert L Mathews <lists@tigertech.com> wrote:
Thanks
I'm not sure why it's using uid 38, but even so, the user list is in the group vmail and thus should be able to write to /var/mail/vmail. However it reports it's not in the group.
=> confused
-- Niklas - 林樂寬
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Fri, 4 Jul 2014, Niklas Lemcke - 林樂寬 wrote:
is it possible that Dovecot cannot read /etc/group ? Maybe you can strace the Dovecot LDA and see something in the trace.
Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux)
iQEVAwUBU8T2+3z1H7kL/d9rAQLMTAf/ZFovEOpyXMPqlOJxWR4Sgrm+grv0hhZV +pFnerDeDxKJxWGJ5LcfQaNWGQTMR1L3Hu7wiZ4Pk79tmaL0J3QRmBDCcXIh63Uu mLFnzJcDx9wtZ5lVzOELabrHEedmLScAEaqXmuz30hVdHM/uL/h5+RU1FmOQSvjB HKLs1HiGTkUaqazVY4lMM7Ig1MurqzWzOnko0VwnP5yVYSmQyO+V02T1TV7gulsB lOXR+cKHxcRm6IXnGTEKhm2Q4JFi+45Ny/RvnHb3nUsls3n2YZ6TPHFA2P9WrCEn +kOoKGCzXIqW3tz8GY4zemxWsF+iasoaux2OuQzAsHsTEHcOYcdasw== =fogh -----END PGP SIGNATURE-----
participants (3)
-
Niklas Lemcke - 林樂寬
-
Robert L Mathews
-
Steffen Kaiser