Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread James Butler
Well bust my buttons! Thanks, Timo! FUNCTIONING! Let Postfix figure out the proper user. BTW, my 'deliver' is set to 755. Nothing special. > I'm not all that good with Postfix configuration, but: Clearly quite good enough. > On Tue, 2009-04-14 at 13:05 -0700, James Butler wrote: >> ## POSTFIX CO

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread Noel Butler
Caution: drifting OT :) On Wed, 2009-04-15 at 08:16, James Butler wrote: > MailScanner is slowly in the process of being attempted, even though it is > simply a wrapper that accepts the mail from Postfix then pipes it over to > Spamassassin and other programs like AV apps. When I received your >

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread Timo Sirainen
I'm not all that good with Postfix configuration, but: On Tue, 2009-04-14 at 13:05 -0700, James Butler wrote: > ## POSTFIX CONFIG ## > > /etc/postfix/main.cf: > > mailbox_transport = spamassassin Remove this. > /etc/postfix/master.cf: > > spamassassin unix - n n - - pipe > user=spam:dovecot

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread James Butler
> On Wed, 2009-04-15 at 07:52, Timo Sirainen wrote: > > >> Perhaps you shouldn't be using the pipe at all. Maybe you should just >> put the command to mailbox_command and have it do all the work? Then >> there's no need to worry about things like setuid-roots or whatever. > > > Given what his conf

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread Noel Butler
On Wed, 2009-04-15 at 07:52, Timo Sirainen wrote: > Perhaps you shouldn't be using the pipe at all. Maybe you should just > put the command to mailbox_command and have it do all the work? Then > there's no need to worry about things like setuid-roots or whatever. Given what his conf showed befo

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread James Butler
Please take a look at my post from 1:05PM today with all of my configuration information. Is the problem being caused by something there? I have been working on this for over two weeks, and I have no idea what's what, anymore. Now I DO understand that it's either setuid-root deliver and use -d fro

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread Timo Sirainen
On Tue, 2009-04-14 at 14:17 -0700, James Butler wrote: > Oh, that was fun. > > Making the change below resulted in mail getting deferred with "Fatal: > destination user parameter (-d user) not given" ... which apparently is > caused by running deliver as 'root'! I thought you wanted to use -d? Th

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread James Butler
Oh, that was fun. Making the change below resulted in mail getting deferred with "Fatal: destination user parameter (-d user) not given" ... which apparently is caused by running deliver as 'root'! (http://archive.netbsd.se/?ml=dovecot-general&a=2008-02&t=6558196) So I am back to: -rwxr-xr-x 1 r

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread Timo Sirainen
On Tue, 2009-04-14 at 13:15 -0700, James Butler wrote: > I have changed /usr/local/libexec/dovecot/deliver permissions as follows: > > -rwsr-s--- 1 root dovecot 4044835 2009-04-03 13:52 deliver > > Because of message returned to 'sen...@example-send.com': > > "local configuration error. Command

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread Timo Sirainen
On Tue, 2009-04-14 at 13:04 -0700, James Butler wrote: > Is this saying that Dovecot is designed for a mail system with only ONE > UID, and that systems with MANY UIDs are exceptions?? I don't think so ... deliver is kind of tricky with multiple UIDs. Then it needs to be started as root, either di

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread James Butler
I have changed /usr/local/libexec/dovecot/deliver permissions as follows: -rwsr-s--- 1 root dovecot 4044835 2009-04-03 13:52 deliver Because of message returned to 'sen...@example-send.com': "local configuration error. Command output: /usr/local/libexec/dovecot/deliver must not be both world-exe

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread James Butler
Here is everything I could think of that might pertain to this, as currently configured on my dedicated server. It's all fresh! :) ## SYSTEM ## Fedora 10 Postfix 2.55 Dovecot 1.2.rc2 Spamassassin 3.2.5 SELinux (no SELinux restrictions. Testing done with SELinux=permissive.) SASLAuthd (not requir

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread James Butler
Thank you for your continued attention, Timo. > On Tue, 2009-04-14 at 10:22 -0700, James Butler wrote: >> > On Mon, 2009-04-13 at 15:48 -0700, James Butler wrote: >> >> 1) User 'spam:dovecot' runs Smapassassin >> >> 2) Hands off to deliver (root:dovecot) >> > >> > Have you set up some kind of setu

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread Timo Sirainen
On Tue, 2009-04-14 at 10:22 -0700, James Butler wrote: > > On Mon, 2009-04-13 at 15:48 -0700, James Butler wrote: > >> 1) User 'spam:dovecot' runs Smapassassin > >> 2) Hands off to deliver (root:dovecot) > > > > Have you set up some kind of setuid-root deliver, or why is it running > > as root:dove

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-14 Thread James Butler
> On Mon, 2009-04-13 at 15:48 -0700, James Butler wrote: >> 1) User 'spam:dovecot' runs Smapassassin >> 2) Hands off to deliver (root:dovecot) > > Have you set up some kind of setuid-root deliver, or why is it running > as root:dovecot here instead of spam:dovecot? I have no idea how it is running

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-13 Thread Timo Sirainen
On Mon, 2009-04-13 at 15:48 -0700, James Butler wrote: > 1) User 'spam:dovecot' runs Smapassassin > 2) Hands off to deliver (root:dovecot) Have you set up some kind of setuid-root deliver, or why is it running as root:dovecot here instead of spam:dovecot? > 3) Deliver assumes 'user1:dovecot' iden

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-13 Thread Noel Butler
Unless they've changed something, doesn't the S.A method as you are using generate backscatter, I'd be using something more efficient like MailScanner or amavisd-new either will take you no more than 15 minutes to setup and avoid the past several days of your problems, pf and dovecot work well toge

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-13 Thread James Butler
My latest test: spam:dovecot => user: spam user1:dovecot => user: user1 root:dovecot => binary: /usr/local/libexec/deliver root:dovecot 777 => dir: /var/run/dovecot/ Still getting: deliver(user1): Can't connect to auth server at \ /var/run/dovecot/auth-master: Permission denied What's the key

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-12 Thread James Butler
Thank you! Even setting the /var/run/dovecot tree to all chmod 777s doesn't help. I'm probably mis-remembering the ownership of auth-master, in my original note. I haven't seen it since I left my notes at work. With regard to this maillog entry: > postfix/pipe[29452]: 60990FA01BA: to=, \ > relay

Re: [Dovecot] auth-master: Permission denied [sigh]

2009-04-12 Thread Rui Carneiro
Hi, I was having problems with permissions on auth-master too. I solve them creating manually the folder /var/run/dovecot with correct permissions but i see you already did that :\ On Sun, Apr 12, 2009 at 5:27 PM, James Butler wrote: > I've been messing with this for too long, now, and I'm blind

[Dovecot] auth-master: Permission denied [sigh]

2009-04-12 Thread James Butler
I've been messing with this for too long, now, and I'm blind to whatever's wrong. Or I'm simply being dense. Either way, I need help with a common issue. I'm trying to get Postfix+Spamassassin+Dovecot going on Fedora 10. (I'll get back to the global Sieve thingy soon, but I need to get this going,