<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<div>
<br>
</div>
<blockquote type="cite">
<div>
On 11 October 2018 at 18:04 Laura Smith <
<a href="mailto:n5d9xq3ti233xiyif2vp@protonmail.ch">n5d9xq3ti233xiyif2vp@protonmail.ch</a>> wrote:
</div>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
On Thursday, October 11, 2018 1:29 PM, Aki Tuomi <
<a href="mailto:aki.tuomi@open-xchange.com">aki.tuomi@open-xchange.com</a>> wrote:
</div>
<div>
<br>
</div>
<blockquote type="cite">
<blockquote type="cite">
<div>
On 11 October 2018 at 15:02 Laura Smith
<a href="mailto:n5d9xq3ti233xiyif2vp@protonmail.ch">n5d9xq3ti233xiyif2vp@protonmail.ch</a> wrote:
</div>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<div>
That's a permission error. Somewhere in your directory hierarchy things
</div>
<div>
are off. See Postfix' set-permissions command.
</div>
</blockquote>
</blockquote>
<blockquote type="cite">
<div>
But surely if Dovecot is staring as root then directory permissions are relevant, especially if I'm then asking the config to chmod the file anway ?
</div>
<div>
To me, it seems dovecot is not behaving correctly, because if it is not using root to access the directory then it is not going to be able to chmod the socket later is it ?
</div>
</blockquote>
</blockquote>
<blockquote type="cite">
<div>
You should probably check few things:
</div>
</blockquote>
<blockquote type="cite">
<div>
1. check dmesg or /var/log/audit/audit.log for any possible security framework problems
</div>
<div>
2. check namei -vl /var/spool/postfix-authrelay/private/dovecot-auth for anything strange
</div>
<div>
3. there is some reason the socket is not bound into, dovecot creates these sockets as root.
</div>
</blockquote>
<blockquote type="cite">
<div>
Aki
</div>
</blockquote>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
Thanks. It ended up being an AppArmor issue. That's now fixed the socket gets created.
</div>
<div>
<br>
</div>
<div>
However, the first part of my problem described earlier still exists, namely:
</div>
<div>
<br>
</div>
<div>
2018-10-11T15:58:41.230340+01:00 X postfix-authrelay/smtpd[21297]: warning: X.example.com[X]: SASL PLAIN authentication failed:
</div>
<div>
<br>
</div>
<div>
I was hoping going via the socket instead of TCP might fix it, but apparently not. ;-(
</div>
</blockquote>
<div>
<br>
</div>
<div>
Did you follow
<a href="https://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL">https://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL</a>
</div>
<div>
<br>
</div>
<div>
Did you check postfix and dovecot logs?
</div>
<div>
<br>
</div>
<div>
Does
</div>
<div>
<br>
</div>
<div>
doveadm auth test -x service=smtp victim
</div>
<div>
<br>
</div>
<div>
work?
</div>
<div class="io-ox-signature">
---
<br>Aki Tuomi
</div>
</body>
</html>