Hi

On Mon, Aug 18, 2014, at 07:38 PM, Viktor Dukhovni wrote:
> Note, the "maildrop" in question is the group specified with
> "setgid_group" and is unrelated to the "maildrop" LDA.

Well that helps some!

> > The only mention of maildrop I can find in any of the postfix configs is 
> 
> Check the compiled-in default value of "setgid_group".

I though that'd get an override from

        egrep virtual "main.cf|postdrop"
                setgid_group = postdrop

> >     chgrp -R postdrop /var/spool/postfix/maildrop
> 
> That won't help, since the expected group is "maildrop".
> 
> >     postfix set-permissions
> 
> This (executed as root) should normally set the correct permissions,

I executed is as root.

> > Is something actually broken in my setup?  Or is this just a noisy warning 
> > I can ignore?  Can I fix it, or make it go away?
> 
> Post the output of:
> 
>       $ ls -ld /var/spool/maildrop
>       $ ls -ld /usr/sbin/postdrop
>       $ postconf config_directory setgid_group
> 

ls -ld /var/spool/maildrop
        ls: cannot access /var/spool/maildrop: No such file or directory
ls -ld /usr/sbin/postdrop
        -rwxr-sr-x 1 root maildrop 15K Oct 18  2013 /usr/sbin/postdrop*
postconf config_directory setgid_group
        config_directory = /usr/local/etc/postfix
        setgid_group = postdrop

> On some BSD systems there is a Postfix in the base system as well as
> a separate Postfix installed by the package manager.  In that case you
> need to make sure you're listing the right binaries, and looking at
> the right configs.

This is Linux/64.  My own build of postfix is in 

        ls -al `which postfix`
                -rwxr-xr-x+ 1 root root 149K Jul 10 17:09 
/usr/local/sbin/postfix*

        postconf -d | grep ^mail_version
                mail_version = 2.11.1

and is running

        ps ax | grep postfix
                11303 ?        Ss     0:00 /usr/lib/postfix/master

The distro does have a local build installed

        rpm -qa | grep -i postfix
                postfix-2.9.6-7.4.1.x86_64

that I try pretty hard to ignore.

Terry

Reply via email to