Re: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Jukka Kurkela
rather change the group of vpopmail.mysql to vchkpw and let it be in mode 640.. it contains the password for the database, and if anyone who don't need to know it has shell access, its a security risk. ++jukka Michael Mussulis wrote: Tom/Matt, I recompiled with spamassassin and maildrop, rei

[vchkpw] vdelivermail:_deferred,_database_down

2009-12-04 Thread Maloupi
Hi ! I'm not sure this is the good mailling list for my question, if not i apologize. My problem is i'm trying to use autorespond with qmail but it does not work properly. It worked (i get response message if i send a mail to an address with autorespond activated) but after some hours the r

RE: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Michael Mussulis
Jukka, Good point, but vpopmail.mysql is already group vchkpw and mode 640 doesn't work. I tried and it gives: @40004b19000104a3957c delivery 37: deferral: vmysql:_can't_read_settings_from_/usr/local/hcp/vpopmail/etc/vpopmail.mysql/vdelivermail:_deferred,_database_down/ Any other ideas? Than

Re[2]: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Pavel V. Yanchenko
Hello Michael, I'm not sure how it will affect security, but perhaps you could make mike4 and other users who need access to vpopmail.mysql members of vchkpw group? In linux it should be "usermod -a -G vchkpw mike4" And you can use "groups mike4" command to see in which groups mike4 is. Fr

Re: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Jukka Kurkela
Thats kind of odd.. did you make sure the user (mike4 i guess) is in that group? ++jukka Michael Mussulis wrote: Jukka, Good point, but vpopmail.mysql is already group vchkpw and mode 640 doesn't work. I tried and it gives: @40004b19000104a3957c delivery 37: deferral: vmysql:_can't_re

RE: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Michael Mussulis
Yup... see output of id: [r...@vmfc12 ~]# id mike4uid=516(mike4) gid=516(mike4) groups=516(mike4),502(vchkpw) Mike. > Date: Fri, 4 Dec 2009 15:45:30 +0200 > From: jukka.kurk...@tjc.fi > To: vchkpw@inter7.com > Subject: Re: [vchkpw] vdeliver perimission denied for vadddomain -u > > Thats kind of

RE: Re[2]: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Michael Mussulis
Hi Pavel, It already is, see output of id: [r...@vmfc12 ~]# id mike4uid=516(mike4) gid=516(mike4) groups=516(mike4),502(vchkpw) Mike. Date: Fri, 4 Dec 2009 16:36:46 +0300 From: bal...@msmu.ru To: vchkpw@inter7.com Subject: Re[2]: [vchkpw] vdeliver perimission denied for vadddomain -u H

RE: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Michael Mussulis
Jukka, To clarify, the user was part of 'vhckpw' group before I tried reverting to mode 640.So still having the issue. At the moment it's working with mode 644. Mike. > Date: Fri, 4 Dec 2009 15:45:30 +0200 > From: jukka.kurk...@tjc.fi > To: vchkpw@inter7.com > Subject: Re: [vchkpw] vdeliver peri

Re: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Rick Macdougall
Matt Brookings wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Mussulis wrote: Furthermore, having followed the instructions to the letter, I would expect it to simply work - unless there's something silly I've missed (or perhaps undocumented). If other people have -u to work perha

[vchkpw] Re: vdelivermail:_deferred,_database_down

2009-12-04 Thread Eric Shubert
Maloupi wrote: Hi ! I'm not sure this is the good mailling list for my question, if not i apologize. My problem is i'm trying to use autorespond with qmail but it does not work properly. It worked (i get response message if i send a mail to an address with autorespond activated) but after

Re[2]: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Pavel V. Yanchenko
Hmmm, I've created a test domain belonging to user balrog, and although vpopmail.mysql file is accesible, messages are not delivered until I change its permissions to 644: permissions: /home/vpopmail  40711 /home/vpopmail/etc 40755 /home/vpopmail/etc/vpopmail.mysql 100640 [bal...@mail ~]$ id

Re[2]: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Pavel V. Yanchenko
Update. If vdelivermail is made 102711 (set group id on exec) then mail is delivered. Try it, Michael. -- Best regards, Pavelmailto:bal...@msmu.ru !DSPAM:4b192b2832711661460450!

Re: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Matt Brookings
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pavel V. Yanchenko wrote: > Could it be that vdelivermail ignores groups? Is it possible at all? The groups file is not read by uid selection or execution system calls. - -- /* Matt BrookingsGnuPG Key FAE0672C Software developer

RE: Re[2]: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Michael Mussulis
Pavel, Didn't work, I got this: @40004b1996a62056cd0c status: local 0/10 remote 0/1...@40004b19970325ce2f3c starting delivery 92: msg 206456 to local test10.com-postmas...@test10.com@40004b19970325ce42c4 status: local 1/10 remote 0/1...@40004b1997071b92096c delivery 92: deferral

RE: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Michael Mussulis
Hmm... so basically so far from everything that's been said, it looks like the uid/gid values are being used for domain creation purposes, but not stored in the sql backend, which brings me to the issue of dovecot authentication via IMAP. As mentioned before, I did a bog standard vpopmail build

Re: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Jukka Kurkela
you could hard code vpopmail's uid and vchkpw gid in that user_query.. not quite sure if that will do what you're looking for though. ++jukka Michael Mussulis wrote: Hmm... so basically so far from everything that's been said, it looks like the uid/gid values are being used for domain creation

[vchkpw] vusage updates in 5.5.0-matt-vusage branch

2009-12-04 Thread Matt Brookings
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 In the Subversion repository, under the branches directory, you will find a branch called '5.5.0-matt-vusage'. This branch contains quite a few changes to the vusage daemon. Most notably it saves a complete copy of it's cache to disk at shutdown, an

RE: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Michael Mussulis
sorry modify exactly which user_query? vopmail or dovecot? mike > Date: Sat, 5 Dec 2009 02:18:13 +0200 > From: jukka.kurk...@tjc.fi > To: vchkpw@inter7.com > Subject: Re: [vchkpw] vdeliver perimission denied for vadddomain -u > > you could hard code vpopmail's uid and vchkpw gid in that user_que

RE: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Michael Mussulis
or did u mean the sql query used in dovecot-sql.conf? > Date: Sat, 5 Dec 2009 02:18:13 +0200 > From: jukka.kurk...@tjc.fi > To: vchkpw@inter7.com > Subject: Re: [vchkpw] vdeliver perimission denied for vadddomain -u > > you could hard code vpopmail's uid and vchkpw gid in that user_query.. > not

Re: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Jukka Kurkela
dovecot, to get around the uid 0 error. Michael Mussulis wrote: sorry modify exactly which user_query? vopmail or dovecot? that one: > > user_query = SELECT pw_dir as home, pw_uid AS uid, pw_gid AS gid FROM > > vpopmail WHERE pw_name = '%n' AND pw_domain = '%d' and a side note: > > A

RE: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Michael Mussulis
mmm, I think I tried that at one point but can't be certain, too many tests... :)I will give it a go, but I don't think it will work, I think it will want the domain owner uid/gid not vpopmail/vchkpw...I will let you know the results shortly... mike. > Date: Sat, 5 Dec 2009 02:37:13 +0200 > Fro