Re: Permissions warning for symlinked script

2016-03-01 Thread Wietse Venema
Wietse Venema: > This means that not a lot of people have symlinks in Postfix > configuration directories. The code responsible for the warning > is: > > find $todo \( -perm -020 -o -perm -002 \) \ > -exec $WARN group or other writable: {} \; > > Although it's kind of lame fo

Re: Permissions

2016-03-01 Thread John Allen
Just back from NZ and did as suggested. Three problems showed up - missing dict_ldap library - as we don't use LDAP I don't think this matters. Localtime differed from the /etc/localtime - not sure why, but copying the file from /etc seemed to solved the problem. The version of libgcc_s in

Re: Permissions warning for symlinked script

2016-03-01 Thread Wietse Venema
pf-m...@duboulder.com: > On postfix startup this message is logged: > [postfix-out/postfix-script] warning: group or other writable: > /etc/postfix-out/./gen-dh-params.sh > > Is this expected behavior? This is a multi-instance setup with a common script > in the main config directory. > > # post

Re: Permissions

2016-02-24 Thread Wietse Venema
John A @ KLaM: > Recently there was a discussion about file permissions and ownership. > My postfix setup is as far as I know fairly conventional Debian stretch. Run "postfix set-permissions", then "postfix check", and fix any permission problems that it reports. If any of those commands abort,

Re: Permissions

2016-02-23 Thread Patrick Ben Koetter
John, you might want to play around with a script I started a while ago. I don't recall if I finished it. I think it did the job well enough to stop working on it at that time. p@rick * John A @ KLaM : > Recently there was a discussion about file permissions and ownership. > My postfix setup i

Re: Permissions on directories with virtual domains and virtual users?

2014-04-03 Thread Jeffrey Walton
On Thu, Apr 3, 2014 at 9:12 AM, /dev/rob0 wrote: > On Thu, Apr 03, 2014 at 07:26:09AM -0400, Jeffrey Walton wrote: >> I've been suffering a permission problem in Postfix/Dovecot for a >> couple of days now. The setup is using virtual domains and users, >> so the path to user's `home` is `/var/mail

Re: Permissions on directories with virtual domains and virtual users?

2014-04-03 Thread Wietse Venema
Jeffrey Walton: > On Thu, Apr 3, 2014 at 8:15 AM, Wietse Venema wrote: > > Jeffrey Walton: > >> I've been suffering a permission problem in Postfix/Dovecot for a > >> couple of days now. The setup is using virtual domains and users, so > >> the path to user's `home` is `/var/mail//`; and the path

Re: Permissions on directories with virtual domains and virtual users?

2014-04-03 Thread /dev/rob0
On Thu, Apr 03, 2014 at 07:26:09AM -0400, Jeffrey Walton wrote: > I've been suffering a permission problem in Postfix/Dovecot for a > couple of days now. The setup is using virtual domains and users, > so the path to user's `home` is `/var/mail//`; and > the path to `MailDir` is `/var/mail///Mai

Re: Permissions on directories with virtual domains and virtual users?

2014-04-03 Thread Jeffrey Walton
On Thu, Apr 3, 2014 at 8:02 AM, Eduardo Ramos wrote: > Hi Jeffrey, > > Are you using selinux? Is it possíble that selinux is blocking your write? > Look at /var/log/audit/audit.log. Thanks Eduardo. This is Debian 7.4, i686. No selinux, and no /var/log/audit/ directory. (There is one /var/log/auth

Re: Permissions on directories with virtual domains and virtual users?

2014-04-03 Thread Jeffrey Walton
On Thu, Apr 3, 2014 at 8:15 AM, Wietse Venema wrote: > Jeffrey Walton: >> I've been suffering a permission problem in Postfix/Dovecot for a >> couple of days now. The setup is using virtual domains and users, so >> the path to user's `home` is `/var/mail//`; and the path >> to `MailDir` is `/var/m

Re: Permissions on directories with virtual domains and virtual users?

2014-04-03 Thread Wietse Venema
Jeffrey Walton: > I've been suffering a permission problem in Postfix/Dovecot for a > couple of days now. The setup is using virtual domains and users, so > the path to user's `home` is `/var/mail//`; and the path > to `MailDir` is `/var/mail///MailDir` > > The mail logs continue to show a *Permis

Re: Permissions on directories with virtual domains and virtual users?

2014-04-03 Thread Eduardo Ramos
Hi Jeffrey, Are you using selinux? Is it possíble that selinux is blocking your write? Look at /var/log/audit/audit.log. On 04/03/2014 08:26 AM, Jeffrey Walton wrote: I've been suffering a permission problem in Postfix/Dovecot for a couple of days now. The setup is using virtual domains and

Re: Permissions on /etc/postfix files

2013-09-06 Thread Patrick Ben Koetter
* LuKreme : > On 05 Sep 2013, at 23:51 , Patrick Ben Koetter wrote: > > main.cf, master.cf, dynamicmaps.cf > >root:postfix 644 > >Must be world readable for sendmail users > > do you mean actual real sendmail (we don't have that) or postfix's sendmail > compatible interface? I m

Re: Permissions on /etc/postfix files

2013-09-06 Thread LuKreme
On 05 Sep 2013, at 23:51 , Patrick Ben Koetter wrote: > main.cf, master.cf, dynamicmaps.cf >root:postfix 644 >Must be world readable for sendmail users do you mean actual real sendmail (we don't have that) or postfix's sendmail compatible interface? > I use a Makefile to maintai

Re: Permissions on /etc/postfix files

2013-09-06 Thread DTNX Postmaster
On Sep 6, 2013, at 04:39, LuKreme wrote: > All the files in /etc/postfix are 1) owned by root and 2) marked with 644 > permissions. > > I'm not sure this is a good idea (though there are no other users who login > to the shell, there are other users who at least in theory could). > > I did ch

Re: Permissions on /etc/postfix files

2013-09-05 Thread Patrick Ben Koetter
* LuKreme : > All the files in /etc/postfix are 1) owned by root and 2) marked with 644 > permissions. > > I'm not sure this is a good idea (though there are no other users who login > to the shell, there are other users who at least in theory could). > > I did chmod 600 and chown postfix the m

Re: permissions 777, but still denied ???

2012-04-07 Thread /dev/rob0
On Sat, Apr 07, 2012 at 10:02:31AM -0400, sean darcy wrote: > On 04/07/2012 06:08 AM, /dev/rob0 wrote: > >On Fri, Apr 06, 2012 at 03:23:02PM -0400, sean darcy wrote: > >>Trying to route email to a script. snip > What's the advantage of forward over alias? No root intervention nor configuration is

Re: permissions 777, but still denied ???

2012-04-07 Thread Nikolaos Milas
On 7/4/2012 5:02 μμ, sean darcy wrote: But even with 777 I get permission errors. I have not followed this thread (so I might be missing things), yet it might be useful to read: http://tech.groups.yahoo.com/group/postfix-users/message/284418 from an earlier similar experience I had - solve

Re: permissions 777, but still denied ???

2012-04-07 Thread sean darcy
On 04/07/2012 06:08 AM, /dev/rob0 wrote: On Fri, Apr 06, 2012 at 03:23:02PM -0400, sean darcy wrote: Trying to route email to a script. /etc/aliases cat /etc/postfix/aliases Hmm? Which of these is your alias_maps? /etc/postfix/aliases != /etc/aliases . #fax sendfax: |/home/sendfax/fax/tes

Re: permissions 777, but still denied ???

2012-04-07 Thread /dev/rob0
On Fri, Apr 06, 2012 at 03:23:02PM -0400, sean darcy wrote: > Trying to route email to a script. > > /etc/aliases > cat /etc/postfix/aliases Hmm? Which of these is your alias_maps? /etc/postfix/aliases != /etc/aliases . > #fax > sendfax: |/home/sendfax/fax/test-fax.cmd This is not necessary,

Re: permissions 777, but still denied ???

2012-04-06 Thread Reindl Harald
Am 06.04.2012 22:57, schrieb Sean Darcy: > But moved test-fax.cmd to /usr/local/bin, and changed it to: > > #!/bin/sh > cat - > /home/sendfax/fax/output > > Now it seems it can execute the script, but can't write to output! > > 4EB89AE0DF7: to=, relay=local, delay=4761, > delays=4761/0.03/0/

Re: permissions 777, but still denied ???

2012-04-06 Thread Andrew Beverley
On Fri, 2012-04-06 at 21:35 +0200, Reindl Harald wrote: > > Trying to route email to a script. > > what are the permissions of the parent-folders? > i bet there lies the problem I've had problems in the past with scripts not owned by the user that postfix was executing them as (even though that us

Re: permissions 777, but still denied ???

2012-04-06 Thread Reindl Harald
Am 06.04.2012 21:23, schrieb sean darcy: > Trying to route email to a script. > > /etc/aliases > cat /etc/postfix/aliases > #fax > sendfax: |/home/sendfax/fax/test-fax.cmd > > cat /home/sendfax/fax/test-fax.cmd > #!/bin/sh > cat - > output > > I've opened up all the permissions: > > ls -l /

Fwd: Re: Permissions

2011-04-06 Thread Tolga
I forgot to cc it Original Message Subject:Re: Permissions Date: Wed, 06 Apr 2011 18:34:18 +0300 From: Tolga To: Nikolaos Milas On 4/6/11 6:30 PM, Nikolaos Milas wrote: On 6/4/2011 6:20 μμ, Tolga wrote: Creating the subdirectory manually and having it

Re: Permissions

2011-04-06 Thread Tolga
On 4/6/11 5:33 PM, Nikolaos Milas wrote: On 6/4/2011 1:55 μμ, Tolga wrote: I have just checked, uid/gid 8 is vmail and the directory is owned by vmail:vmail, and I just chmod'd to 700. It still doesn't work :( Hi, I don't know what OS you are using, but I see you are not using the natura

Re: Permissions

2011-04-06 Thread Nikolaos Milas
On 6/4/2011 1:55 μμ, Tolga wrote: I have just checked, uid/gid 8 is vmail and the directory is owned by vmail:vmail, and I just chmod'd to 700. It still doesn't work :( Hi, I don't know what OS you are using, but I see you are not using the natural home dir of the vmail user (should be mo

Re: Permissions

2011-04-06 Thread Tolga
On 4/6/11 1:46 PM, Nikolaos Milas wrote: On 6/4/2011 1:20 μμ, Tolga wrote: Hi, I have just tried with another user I added with postfixadmin, and I am still getting that permission error. So, I am wondering what /var/mail/vhosts permissions and owning user:group should be? chmod 777 works bu

Re: Permissions

2011-04-06 Thread Nikolaos Milas
On 6/4/2011 1:20 μμ, Tolga wrote: Hi, I have just tried with another user I added with postfixadmin, and I am still getting that permission error. So, I am wondering what /var/mail/vhosts permissions and owning user:group should be? chmod 777 works but I know 777 is evil, so I chmod'd 770 and

Re: Permissions in a multiple instance setup

2011-01-06 Thread Wietse Venema
Ralf Hildebrandt: > How can I check & correct the permissions (especially on > $queue_dir/maildrop and $queue_dir/public) using postmulti? postfix set-permissions postfix upgrade-configuration These work on all instances that have multi-instance management enabled (postmulti -e enable -i instance

Re: Permissions issue with virtual maildirs

2010-11-10 Thread Toomas Vendelin
Jeroen, On Wed, Nov 10, 2010 at 3:07 PM, Jeroen Geilman wrote: >> The problem was that I have put /sbin/nologin for a login shell >> instead of /bin/false. > > I seriously doubt that this would cause the reported error. You were right, I've changed it back to /sbin/nologin, and it still works. S

Re: Permissions issue with virtual maildirs

2010-11-10 Thread Jeroen Geilman
On 11/10/2010 08:37 AM, Toomas Vendelin wrote: Jeroen, thank you for taking time to answer. The problem was that I have put /sbin/nologin for a login shell instead of /bin/false. Don't ask, why on Earth did I do that (I'm asking that myself). Anyway, with this changed, mail goes through as expec

Re: Permissions issue with virtual maildirs

2010-11-09 Thread Toomas Vendelin
Jeroen, thank you for taking time to answer. The problem was that I have put /sbin/nologin for a login shell instead of /bin/false. Don't ask, why on Earth did I do that (I'm asking that myself). Anyway, with this changed, mail goes through as expected. The moral being, don't work too long hours.

Re: Permissions issue with virtual maildirs

2010-11-09 Thread mouss
Le 09/11/2010 18:15, Toomas Vendelin a écrit : Hi there! I run Postfix on CentOS 5.5 with virtual domains. Mail is supposed to be delivered to maildirs. Everything worked with a sendmail/mbox setup for the same domain, so MX issues can be eliminated immediately :) I'm trying to set up a virtual

Re: Permissions issue with virtual maildirs

2010-11-09 Thread Jeroen Geilman
On 11/09/2010 06:15 PM, Toomas Vendelin wrote: Hi there! I run Postfix on CentOS 5.5 with virtual domains. Mail is supposed to be delivered to maildirs. Don't you mean "I have configured postfix to deliver to maildirs". If that's not what you mean, it's an unwarranted - and quite dangerous -