and, are you SURE that dovecot-lda has mail in it's group list when it is executing?
On Tue, Nov 3, 2015 at 2:12 PM, Larry Rosenman <larry...@gmail.com> wrote: > Hrm. if you turn up the debug on lda, do you get any more of a clue? > > Those permissions look fine to me. > > > On Tue, Nov 3, 2015 at 2:10 PM, John Clements <johnbcleme...@gmail.com> > wrote: > >> clements@desmond:/var/log$ ls -lda /var/mail >> drwxrwsr-x 2 root mail 4096 Nov 2 22:07 /var/mail >> >> >> Best, >> >> John Clements >> >> On Tue, Nov 3, 2015 at 11:52 AM, Larry Rosenman <larry...@gmail.com> >> wrote: >> >>> what is the full permissions of /var/mail? >>> >>> >>> ls -lda /var/mail >>> >>> On Tue, Nov 3, 2015 at 1:49 PM, John Clements <johnbcleme...@gmail.com> >>> wrote: >>> >>>> I've been using dovecot+postfix happily for many years, and I'm now >>>> configuring it for a new machine. However, I'm running into an old >>>> problem >>>> again, and thinking that there must be a better solution. >>>> >>>> The problem is that dovecot-lda is unable to create dotlock files in the >>>> /var/mail directory. >>>> >>>> Dovecot version: 1:2.2.13-12~deb8u1 (I'm guessing this is upstream >>>> version >>>> 2.2.13) >>>> OS: Debian Jessie >>>> >>>> Currently, my mail directory has these permissions: >>>> >>>> clements@desmond:~$ ls -ld /var/mail >>>> drwxrwsr-x 2 root mail 4096 Nov 2 22:07 /var/mail >>>> clements@desmond:~$ ls -l /var/mail >>>> total 8 >>>> -rw------- 1 clements mail 1382 Nov 2 21:59 clements >>>> -rw------- 1 granitemon mail 530 Nov 2 22:07 granitemon >>>> >>>> I've added >>>> mail_privileged_group = mail >>>> to allow creation of the dotlock files. >>>> >>>> When I configure postfix to deliver using dovecot-lda, I get logs that >>>> look >>>> like this: >>>> >>>> Nov 3 11:12:20 desmond dovecot: lda(granitemon): Error: >>>> setegid(privileged) failed: Operation not permitted >>>> Nov 3 11:12:20 desmond dovecot: lda(granitemon): msgid=< >>>> 20151103181306.a4b5b5f...@desmond.xxxdomain.org>: save failed to INBOX: >>>> BUG: Unknown internal error >>>> >>>> In order to isolate the error, I took postfix out of the equation, and >>>> called dovecot-lda directly: >>>> >>>> clements@desmond:/tmp$ cat bogusmail >>>> From: cleme...@xxxdomain.org >>>> To: granitemon@localhost >>>> Date: November 3 2015 >>>> Subject: graaaah >>>> >>>> this is the body >>>> clements@desmond:/tmp$ /usr/lib/dovecot/dovecot-lda -e -d clements < >>>> bogusmail >>>> BUG: Unknown internal error >>>> clements@desmond:/tmp$ >>>> >>>> In response to this, mail.log now contains this similar error: >>>> >>>> Nov 3 11:34:57 desmond dovecot: lda(clements): msgid=unspecified: save >>>> failed to INBOX: BUG: Unknown internal error >>>> Nov 3 11:34:57 desmond dovecot: lda(clements): Error: >>>> setegid(privileged) >>>> failed: Operation not permitted >>>> >>>> >>>> I've tried a number of "random internet search" solutions, including >>>> - changing perms on mail files from 660 to 600 >>>> - enabling 'mail_access_groups=mail' in 10-mail.conf >>>> - adding individual users to the mail group. >>>> >>>> I guess I'm pretty confident that if dovecot is writing "BUG: Unknown >>>> internal error" in the logs, that this is is actually a bug in dovecot. >>>> >>>> OBresearch: I read through the release notes of 2.2.14 -- 2.2.19 to see >>>> if >>>> a relevant-looking bug had been fixed, but nothing jumped out at me. >>>> OBresearch: searching the dovecot mailing list, I found one *extremely* >>>> relevant thread called "Re: [Dovecot] started with dovecot sieve >>>> <http://dovecot.markmail.org/message/kgd34wberxuvmrsa?q=setegid>", but >>>> there didn't seem to be a solution contained in the thread. >>>> >>>> Final note: this doesn't appear to be confined to debian jessie: I took >>>> a >>>> look at my existing installation, and I see that in fact I just went >>>> ahead >>>> and made /var/mail world-writeable, which seems... sub-optimal. I'm >>>> sure I >>>> could do that here, too, but I'd certainly rather not. >>>> >>>> Thanks in advance, and let me know if I've left out relevant crucial >>>> information. >>>> >>>> Best, >>>> >>>> John Clements >>>> >>> >>> >>> >>> -- >>> Larry Rosenman http://www.lerctr.org/~ler >>> Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com >>> US Mail: 7011 W Parmer Ln, Apt 1115, Austin, TX 78729-6961 >>> >> >> > > > -- > Larry Rosenman http://www.lerctr.org/~ler > Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com > US Mail: 7011 W Parmer Ln, Apt 1115, Austin, TX 78729-6961 > -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com US Mail: 7011 W Parmer Ln, Apt 1115, Austin, TX 78729-6961
