Permission error on stats writer

[Matt Simpson]

I’m running Dovecot 2.3.4 on FreeBSD 11.2 with qmail.  In my mail log, I see messages like this on every delivery

Jan  8 10:30:02 v1 qmail: 1546961402.314222 delivery 533: success: lda(matt,)Error:_net_connect_unix(/var/run/dovecot/stats-writer)_failed:_Permission_denied/did_0+0+1/

Searching for this error, I found a message on a support forum for a different server that suggested adding this to dovecot.conf:

service stats {
    unix_listener stats-reader {
        user = vmail
        group = vmail
        mode = 0660
    }

    unix_listener stats-writer {
        user = vmail
        group = vmail
        mode = 0660
    }
}

The person reporting the error said that this corrected it.  But since I’m running qmail, I have no vmail user/group.  I’m guessing that I need to replace user/group with the values that  some mail delivery process is running with.  I’ve tried a couple of things with no success.  Any ideas?

$ doveconf -n
# 2.3.4 (0ecbaf23d): /usr/local/etc/dovecot/dovecot.conf
# Pigeonhole version 0.5.4 (60b0f48d)
# OS: FreeBSD 11.2-RELEASE-p7 amd64
# Hostname: v1.redhorse.me
auth_stats = yes
auth_verbose = yes
default_vsz_limit = 128 M
lock_method = flock
mail_location = maildir:~/Maildir
mail_privileged_group = mail
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vnd.dovecot.pipe vnd.dovecot.execute
namespace inbox {
  inbox = yes
  location =
  prefix =
}
passdb {
  args = imap
  driver = pam
}
plugin {
  recipient_delimiter = -
  sieve = file:~/sieve;active=~/.dovecot.sieve
  sieve_execute_bin_dir = /usr/local/lib/dovecot/sieve-pipe
  sieve_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute
  sieve_pipe_bin_dir = /usr/local/lib/dovecot/sieve-pipe
  sieve_pipe_exec_timeout = 10s
  sieve_plugins = sieve_extprograms
}
postmaster_address = postmaster at redhorse.me
protocols = imap
service auth {
  unix_listener auth-master {
    group = qnofiles
    mode = 0660
    user = alias
  }
  user = root
}
service imap-login {
  process_min_avail = 3
  vsz_limit = 94 M
}
ssl_cert = </usr/local/etc/letsencrypt/live/bitchpack.us-0001/fullchain.pem
ssl_cipher_list = EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
ssl_dh = # hidden, use -P to show it
ssl_key = # hidden, use -P to show it
ssl_prefer_server_ciphers = yes
syslog_facility = local0
userdb {
  driver = passwd
}
verbose_proctitle = yes
protocol lda {
  mail_plugins = " sieve"
}



ls -l /var/run/dovecot
total 20
srw-------  1 root     wheel       0 Jan  8 10:29 anvil
srw-------  1 root     wheel       0 Jan  8 10:29 anvil-auth-penalty
srw-------  1 dovecot  wheel       0 Jan  8 10:29 auth-client
srw-------  1 dovecot  wheel       0 Jan  8 10:29 auth-login
srw-rw----  1 alias    qnofiles    0 Jan  8 10:29 auth-master
-rw-------  1 root     wheel      32 Jan  8 10:29 auth-token-secret.dat
srw-rw-rw-  1 dovecot  wheel       0 Jan  8 10:29 auth-userdb
srw-------  1 dovecot  wheel       0 Jan  8 10:29 auth-worker
srw-------  1 root     wheel       0 Jan  8 10:29 config
srw-rw----  1 root     dovecot     0 Jan  8 10:29 dict
srw-rw----  1 root     dovecot     0 Jan  8 10:29 dict-async
srw-------  1 root     wheel       0 Jan  8 10:29 director-admin
srw-rw-rw-  1 root     wheel       0 Jan  8 10:29 dns-client
srw-------  1 root     wheel       0 Jan  8 10:29 doveadm-server
lrwx------  1 root     wheel      35 Jan  8 10:29 dovecot.conf -> /usr/local/etc/dovecot/dovecot.conf
drwxr-xr-x  2 root     wheel     512 Jan  8 10:29 empty
srw-rw----  1 root     dovecot     0 Jan  8 10:29 imap-hibernate
srw-------  1 root     wheel       0 Jan  8 10:29 imap-master
srw-rw-rw-  1 root     wheel       0 Jan  8 10:29 imap-urlauth
srw-------  1 dovecot  wheel       0 Jan  8 10:29 imap-urlauth-worker
srw-rw-rw-  1 root     wheel       0 Jan  8 10:29 indexer
srw-------  1 dovecot  wheel       0 Jan  8 10:29 indexer-worker
srw-------  1 dovecot  wheel       0 Jan  8 10:29 ipc
srw-------  1 root     wheel       0 Jan  8 10:29 log-errors
drwxr-x---  2 root     dovenull  512 Jan  8 10:29 login
srw-------  1 root     wheel       0 Jan  8 10:29 master
-rw-------  1 root     wheel       6 Jan  8 10:29 master.pid
srw-------  1 root     wheel       0 Jan  8 10:29 old-stats
prw-------  1 root     wheel       0 Jan  8 10:29 old-stats-mail
prw-------  1 root     wheel       0 Jan  8 10:29 old-stats-user
srw-------  1 root     wheel       0 Jan  8 10:29 replication-notify
prw-------  1 root     wheel       0 Jan  8 10:29 replication-notify-fifo
srw-------  1 dovecot  wheel       0 Jan  8 10:29 replicator
srw-------  1 root     wheel       0 Jan  8 10:29 stats-reader
srw-rw----  1 root     dovecot     0 Jan  8 10:29 stats-writer
drwxr-x---  2 root     dovenull  512 Jan  8 10:29 token-login