Re: [CentOS] Sendmail with TLS, permission problem - SOLVED

2008-08-12 Thread Jussi Hirvi
Now I stumble on another problem (not fatal). I think it's only relevant to dual-MTA setups (separate Sendmail daemons for receiving and transmitting mail). I don't find a way to enable STARTTLS (for the receiving sm-daemon) while at the same time running the receiving daemon with the unprivileged

Re: [CentOS] Sendmail with TLS, permission problem

2008-08-12 Thread Kai Schaetzl
Ralph Angenendt wrote on Tue, 12 Aug 2008 11:21:33 +0200: > IIRC sendmail checks from /etc/mail downwards, so /etc/mail is open too > wide still. Don't think so, these are the default permissions in CentOS 4, can't check on 5 as I moved to postfix on 5. The certs directory needs to be owned by

Re: [CentOS] Sendmail with TLS, permission problem - SOLVED

2008-08-12 Thread Jussi Hirvi
Ian Forde ([EMAIL PROTECTED]) kirjoitteli (12.8.2008 12:44): > and change the ownership on the certs dir to root:root while you're > there... you're okay with 755 perms on /etc/mail, as long as it's > root:root. Basically, stick with the stock permissions and you should > be fine... Damn it, Ian

Re: [CentOS] Sendmail with TLS, permission problem

2008-08-12 Thread Jussi Hirvi
Here's more info about my Sendmail. It's the current version from the CentOS 5 repositories. [EMAIL PROTECTED] mail]# sendmail -d0.1 Version 8.13.8 Compiled with: DNSMAP HESIOD HES_GETMAILHOST LDAPMAP LOG MAP_REGEX MATCHGECOS MILTER MIME7TO8 MIME8TO7 NAMED_BIND NETINET NETINET6

Re: [CentOS] Sendmail with TLS, permission problem

2008-08-12 Thread Ian Forde
On Tue, 2008-08-12 at 02:42 -0700, Ian Forde wrote: > On Tue, 2008-08-12 at 12:38 +0300, Jussi Hirvi wrote: > > Ralph Angenendt ([EMAIL PROTECTED]) kirjoitteli (12.8.2008 12:21): > > >> Thanks for quick reply. That didn't help yet. The error message in > > >> maillog > > >> is still the same: "sen

Re: [CentOS] Sendmail with TLS, permission problem

2008-08-12 Thread Ian Forde
On Tue, 2008-08-12 at 12:38 +0300, Jussi Hirvi wrote: > Ralph Angenendt ([EMAIL PROTECTED]) kirjoitteli (12.8.2008 12:21): > >> Thanks for quick reply. That didn't help yet. The error message in maillog > >> is still the same: "sendmail.pem unsafe: Permission denied". The directory > >> perms are n

Re: [CentOS] Sendmail with TLS, permission problem

2008-08-12 Thread Ian Forde
On Tue, 2008-08-12 at 11:21 +0200, Ralph Angenendt wrote: > Jussi Hirvi wrote: > > Ralph Angenendt ([EMAIL PROTECTED]) kirjoitteli (12.8.2008 11:24): > > >> dr-xr-xr-x 2 mail mail 4096 Aug 11 14:42 /etc/mail/certs > > > ^^^ > > > > > > Even allowing group to read there and enter there might be t

Re: [CentOS] Sendmail with TLS, permission problem

2008-08-12 Thread Jussi Hirvi
Ralph Angenendt ([EMAIL PROTECTED]) kirjoitteli (12.8.2008 12:21): >> Thanks for quick reply. That didn't help yet. The error message in maillog >> is still the same: "sendmail.pem unsafe: Permission denied". The directory >> perms are now: >> [EMAIL PROTECTED] mail]# ls -ld / /etc /etc/mail /etc/

Re: [CentOS] Sendmail with TLS, permission problem

2008-08-12 Thread Ralph Angenendt
Jussi Hirvi wrote: > Ralph Angenendt ([EMAIL PROTECTED]) kirjoitteli (12.8.2008 11:24): > >> dr-xr-xr-x 2 mail mail 4096 Aug 11 14:42 /etc/mail/certs > > ^^^ > > > > Even allowing group to read there and enter there might be too much. > > Thanks for quick reply. That didn't help yet. The error

Re: [CentOS] Sendmail with TLS, permission problem

2008-08-12 Thread Jussi Hirvi
Ralph Angenendt ([EMAIL PROTECTED]) kirjoitteli (12.8.2008 11:24): > Jussi Hirvi wrote: >> Aug 11 15:25:24 mail sm-mta-rx[12785]: STARTTLS=server: file >> /etc/mail/certs/sendmail.pem unsafe: Permission denied > >> dr-xr-xr-x 2 mail mail 4096 Aug 11 14:42 /etc/mail/certs > ^^^ > > Even allowing

Re: [CentOS] Sendmail with TLS, permission problem

2008-08-12 Thread Ralph Angenendt
Jussi Hirvi wrote: > Aug 11 15:25:24 mail sm-mta-rx[12785]: STARTTLS=server: file > /etc/mail/certs/sendmail.pem unsafe: Permission denied > dr-xr-xr-x 2 mail mail 4096 Aug 11 14:42 /etc/mail/certs ^^^ Even allowing group to read there and enter there might be too much. Ralph pgp6Ds

[CentOS] Sendmail with TLS, permission problem

2008-08-12 Thread Jussi Hirvi
Hello, list, I have a problem with Sendmail configuration. I'm building (on CentOS 5) a "dual-MTA" setup with amavisd-new (as specified in amavisd-new documentation, file README.sendmail-dual). So far so good. But when I tried to add server SMTP-AUTH and TLS, I get a strange, permission-related