[EXT] Re: Reminder Re: Dovecot Gmail OAuth2.0 Setting Question

[Aki Tuomi]

That is because you are using systemd, where the unit file, by default, has PrivateTmp=yes.

You can look under /tmp for dovecot private tmp directory and create the directory there, or you can temporarily disable this security measure.

systemctl edit dovecot

[Service]
PrivateTmp=no

systemctl daemon-reload
systemctl restart dovecot

Aki

> On 26/01/2021 10:57 福田泰葵 <taiki.fukuda at justsystems.com> wrote:
> 
> 
> Dear Mr. Tuomi
> 
> I have added the setting rawlog_dir = /tmp/oauth2 to /etc/dovecot/dovecot-oauth2.conf.ext
> However, /tmp/oauth2 was not created.
> 
> Best regards,
> 
> 
> ---------------------------------------------------------------------------------------------------------------------------------
> 〒163-6017 東京都新宿区西新宿6-8-1 住友不動産新宿オークタワー
> 株式会社 ジャストシステム 技術企画室 情報システムグループ 福田泰葵
> e-mail: taiki.fukuda at justsystems.com
> 内線: 5158
> TEL: 03-5324-7900
> mobile: 080-6198-7328
> ---------------------------------------------------------------------------------------------------------------------------------
> 
> 
> 
> 2021年1月26日(火) 15:45 Aki Tuomi <aki.tuomi at open-xchange.com>:
> > Yes, however I still cannot see rawlogs.
> >  
> >  Aki
> >  
> >  > On 25/01/2021 10:25 福田泰葵 <taiki.fukuda at justsystems.com> wrote:
> >  > 
> >  > 
> >  > Yes. In my last email, I sent you the log of the result of running with oauth debug logging enabled.
> >  > /etc/dovecot/conf.d/10-logging.conf：
> >  > ##
> >  > ## Logging verbosity and debugging.
> >  > ##
> >  > 
> >  > # Log filter is a space-separated list conditions. If any of the conditions
> >  > # match, the log filter matches (i.e. they're ORed together). Parenthesis
> >  > # are supported if multiple conditions need to be matched together.
> >  > # Supported conditions are:
> >  > # event:<name wildcard> - Match event name. '*' and '?' wildcards supported.
> >  > # source:<filename>[:<line number>] - Match source code filename [and line]
> >  > # field:<key>=<value wildcard> - Match field key to a value. Can be specified
> >  > # multiple times to match multiple keys.
> >  > # cat[egory]:<value> - Match a category. Can be specified multiple times to
> >  > # match multiple categories.
> >  > # For example: event:http_request_* (cat:error cat:storage)
> >  > 
> >  > # Filter to specify what debug logging to enable. This will eventually replace
> >  > # mail_debug and auth_debug settings.
> >  > log_debug=category=oauth2
> >  > 
> >  > ------------------------------
> >  > 〒163-6017 東京都新宿区西新宿6-8-1 住友不動産新宿オークタワー
> >  > 株式会社 ジャストシステム 技術企画室 情報システムグループ 福田泰葵
> >  > e-mail: taiki.fukuda at justsystems.com
> >  > 内線: 5158
> >  > TEL: 03-5324-7900
> >  > mobile: 080-6198-7328
> >  > ------------------------------
> >  > 
> >  > 
> >  > 2021年1月25日(月) 17:24 福田泰葵 <taiki.fukuda at justsystems.com>:
> >  > > Yes. In my last email, I sent you the log of the result of running with oauth debug logging enabled.
> >  > > 
> >  > > /etc/dovecot/conf.d/10-logging.conf：
> >  > > 
> >  > > ```
> >  > > ```
> >  > > 
> >  > > 
> >  > > 
> >  > > ---------------------------------------------------------------------------------------------------------------------------------
> >  > > 〒163-6017 東京都新宿区西新宿6-8-1 住友不動産新宿オークタワー
> >  > > 株式会社 ジャストシステム 技術企画室 情報システムグループ 福田泰葵
> >  > > e-mail: taiki.fukuda at justsystems.com
> >  > > 内線: 5158
> >  > > TEL: 03-5324-7900
> >  > > mobile: 080-6198-7328
> >  > > ---------------------------------------------------------------------------------------------------------------------------------
> >  > > 
> >  > > 
> >  > > 
> >  > > 2021年1月25日(月) 17:16 Aki Tuomi <aki.tuomi at open-xchange.com>:
> >  > > > 
> >  > > > > On 25/01/2021 10:12 福田泰葵 <taiki.fukuda at justsystems.com> wrote:
> >  > > > > 
> >  > > > > 
> >  > > > > Dear Mr. Tuomi
> >  > > > > Google is responding to me as Unauthorized.
> >  > > > > So I need to send my credentials such as access token in the request parameter for authentication in google’s Get User API request.
> >  > > > > But I don’t know how to configure dovecot to achieve that.
> >  > > > > Could you please help me with this?
> >  > > > > Best regards,
> >  > > > > 
> >  > > > > ------------------------------
> >  > > > > 〒163-6017 東京都新宿区西新宿6-8-1 住友不動産新宿オークタワー
> >  > > > > 株式会社 ジャストシステム 技術企画室 情報システムグループ 福田泰葵
> >  > > > > e-mail: taiki.fukuda at justsystems.com
> >  > > > > 内線: 5158
> >  > > > > TEL: 03-5324-7900
> >  > > > > 
> >  > > > > mobile: 080-6198-7328
> >  > > > 
> >  > > > 
> >  > > > Did you try the debugging things I mentioned? Your logs do not indicate that you did.
> >  > > > 
> >  > > > So, 
> >  > > > 
> >  > > > - Try turning on rawlogs for the oauth2 requests and see what google is sending you?
> >  > > > - You can also try log_debug=category=oauth2 (2.3.13) to get more debug logs from oauth2.
> >  > > > 
> >  > > > Aki
> >  > > >
> >