Dovecot permission denied errors on NFS after upgrade to 2.2.17
Claudio Corvino
ccorvino at trustitalia.it
Mon Sep 21 10:48:44 EEST 2020
Hi everyone,
problem still occurring, I just noticed that if I do an "ls -l
/mnt/mail-storage/<user>/Maildir/cur/" from the Dovecot server I can
unblock the mailbox of the user and Thunderbird can receives all the
e-mails.
The problem occurs even with the gmail client on the smartphone.
I just tried many things but can't find a solution.
I just reinstalled a new server with mail storage not on NFS and the
problem seems to be fixed, but this is not a solution valid for us as we
would like to use NFS.
Thanks
On 20/07/20 09:47, Claudio Corvino wrote:
>
> Hi everyone,
>
> after some hours when I sent my last e-mail to the ML the problem
> reoccurred, again problem with some mailboxes reading some e-mails and
> many errors into dovecot.log like these:
>
> /Jul 14 15:07:50 imap(XXX): Error:
> open(/mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m)
> failed: Permission denied (euid=501(vmail) egid=501(vmail) missing +r
> perm:
> /mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m
> stat(/mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m)
> failed: Permission denied)/
>
> SElinux is not installed and Dovecot NFS client uses "defaults" option
> to mount NFS partition with mailboxes in it and version=3.
>
> Don't know where to look further.
>
> Any help appreciated!
>
> Regards
>
>
> On 14/07/20 11:13, Claudio Corvino wrote:
>> Strange behavior but after a reboot of the Dovecot server, the error
>> disappeared from logs (like Windows style! :-)).
>>
>> I'll monitor the situation and take you updated in case it should
>> come back.
>>
>> Thanks all!
>>
>> On 13/07/20 20:27, John Stoffel wrote:
>>>>>>>> "Mark" == Mark Moseley <moseleymark at gmail.com> writes:
>>>
>>> Mark> This is just me throwing things out to look at, but did the
>>> Mark> client mount on the old server use NFS3 and the new upgraded
>>> Mark> client uses NFS4? Sometimes that can cause weirdness with id
>>> Mark> mapping.
>>>
>>>
>>> Another thing to check is selinux, is it enabled? It's one of those
>>> things I have to poke at on RHEL systems, but I can't remember if it's
>>> on by default on Debian Buster.
>>>
>>> getenforce
>>>
>>> would answer one way or another.
>>> John
>>
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3812 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://dovecot.org/pipermail/dovecot/attachments/20200921/d2d87994/attachment-0001.p7s>
More information about the dovecot
mailing list