Re: [Dovecot] LDA and auth-userdb socket permissions

2011-08-23 Thread Lutz Preßler
On Di, 23 Aug 2011, a.smith at ukgrid.net wrote: > Quoting Timo Sirainen : > > > > > It doesn't have to be the primary group. This is more of an Exim side > > problem that it doesn't assign the supplementary groups (if it did, it > > would have worked with dovecot-lda). I don't think the way you Y

Re: [Dovecot] LDA and auth-userdb socket permissions

2011-08-23 Thread a . smith
Quoting Timo Sirainen : It doesn't have to be the primary group. This is more of an Exim side problem that it doesn't assign the supplementary groups (if it did, it would have worked with dovecot-lda). I don't think the way you configured Exim to call dovecot-lda is explained anywhere in Doveco

Re: [Dovecot] LDA and auth-userdb socket permissions

2011-08-23 Thread Timo Sirainen
On Tue, 2011-08-23 at 20:38 +0100, a.sm...@ukgrid.net wrote: > > It doesn't actually matter what groups you have assigned to vmail user. > > Dovecot only enables the primary group (and not even that if you've > > overridden it in config), and apparently Exim does the same too. > > > > The supplemen

Re: [Dovecot] LDA and auth-userdb socket permissions

2011-08-23 Thread a . smith
Quoting Timo Sirainen : On Tue, 2011-08-23 at 19:27 +0100, a.sm...@ukgrid.net wrote: In my test, actually what I have is a vmail user with primary group vmail and secondary group mailnull. Which as mentioned results in this error: It doesn't actually matter what groups you have assigned to

Re: [Dovecot] LDA and auth-userdb socket permissions

2011-08-23 Thread Timo Sirainen
On Tue, 2011-08-23 at 19:27 +0100, a.sm...@ukgrid.net wrote: > In my test, actually what I have is a vmail user with primary group > vmail and secondary group mailnull. Which as mentioned results in this > error: It doesn't actually matter what groups you have assigned to vmail user. Dovecot

Re: [Dovecot] LDA and auth-userdb socket permissions

2011-08-23 Thread a . smith
no, I did explain this later in my last email Quoting Timo Sirainen : On Tue, 2011-08-23 at 19:27 +0100, a.sm...@ukgrid.net wrote: srw-rw 1 root mailnull 0 Aug 23 19:13 /var/run/dovecot/auth-userdb That's not vmail group as you said..

Re: [Dovecot] LDA and auth-userdb socket permissions

2011-08-23 Thread Timo Sirainen
On Tue, 2011-08-23 at 19:27 +0100, a.sm...@ukgrid.net wrote: > srw-rw 1 root mailnull 0 Aug 23 19:13 /var/run/dovecot/auth-userdb That's not vmail group as you said..

Re: [Dovecot] LDA and auth-userdb socket permissions

2011-08-23 Thread a . smith
Quoting Timo Sirainen : Hmmm, well in my setup dovecot-lda is called from Exim with "user=" set to a MySQL query. Are you sure you even need Dovecot to do a userdb lookup then? If Exim can set up also the other needed things (home dir?) it shouldn't be necessary. Yeah, I think I could

Re: [Dovecot] LDA and auth-userdb socket permissions

2011-08-23 Thread Timo Sirainen
On 23.8.2011, at 19.37, a.sm...@ukgrid.net wrote: >> No, that's the least of its troubles. If you can't run dovecot-lda as root, >> it won't be able to change its UID to the user's UID (and so won't have >> enough permissions to be able to write mails to user's mailbox). So you need >> to run d

Re: [Dovecot] LDA and auth-userdb socket permissions

2011-08-23 Thread a . smith
Quoting Timo Sirainen : No, that's the least of its troubles. If you can't run dovecot-lda as root, it won't be able to change its UID to the user's UID (and so won't have enough permissions to be able to write mails to user's mailbox). So you need to run dovecot-lda as root in some way,

Re: [Dovecot] LDA and auth-userdb socket permissions

2011-08-23 Thread Timo Sirainen
On 23.8.2011, at 19.10, a.sm...@ukgrid.net wrote: >> Now you've gone outside the "Multiple UIDs" section in the wiki. There are >> the 3 different sections of how to run dovecot-lda a different way: >> >> * with a lookup >> * without a lookup >> * multiple UIDs >> >> None of their documentation

Re: [Dovecot] LDA and auth-userdb socket permissions

2011-08-23 Thread a . smith
Quoting Timo Sirainen : But in the example for the config file the text reads: [QUOTE] service auth { unix_listener auth-userdb { mode = 0600 user = vmail # User running dovecot-lda #group = vmail # Or alternatively mode 0660 + dovecot-lda user in this group } } [/QUOTE] Now you

Re: [Dovecot] LDA and auth-userdb socket permissions

2011-08-23 Thread Timo Sirainen
On 22.8.2011, at 14.22, a.sm...@ukgrid.net wrote: > just wanted to check this as the wiki seems to have contradictory > information. With respect to running the LDA as multiple UIDs the wiki says: > > [QUOTE]If you're using more than one UID for users, you're going to have > problems running d