Message: 8
Date: Tue, 15 Jan 2008 15:19:11 +0100
From: Andreas Ntaflos <[EMAIL PROTECTED]>
Subject: Re: [Dovecot] deliver can't connect to auth server at
        */usr/local*/var/run/dovecot/auth-master
To: [email protected]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="utf-8"

On Tuesday 15 January 2008 03:56:28 Jerry Yeager wrote:
while fiddling around with the configuration so Dovecot's LDA
"deliver" can be
used by multiple users by means of Getmail (you can read about that
in [1]) I
always end up running into the error message posted in the subject
line:


( stuff snipped out )


One last thing, as a security idea, try something like

     master {
       path = /usr/local/var/run/dovecot/auth-master
       mode = 0600
       user = dovecot_user
       group = dovecot_group
     }

and set your postfix line that calls deliver to match:

        dovecot unix - n n - - pipe flags=DRhu
user=dovecot_user:dovecot_group argv=/usr/local/libexec/dovecot/
deliver -f ${sender} -d ${recipient}

Thanks for this suggestion! But that would imply that I have a virtual user setup, wouldn't it? Because I don't, all my users are regular Unix users with
shell accounts. That's why my Postfix main.cf contains just

home_mailbox = Maildir/
mailbox_command = /usr/local/libexec/dovecot/deliver

which is also what the LDA/Postfix wiki page says on wiki.dovecot.org. No
Dovecot entry in master.cf at all.


Actually I was responding to what you had listed in your message i.e.

 socket:
   type: listen
   client:
     path: /var/spool/postfix/private/auth
     mode: 432
     user: postfix
     group: postfix
   master:
     path: /var/run/dovecot/auth-master
     mode: 432
     user: root
     group: dovecot
--

which is a setup type you would use in a virtual style of user (either a "super user" or a group of non-system listed users with different uids / gids) setup .
I had not encountered your other postings until later.


                                Jerry


And, as also mentioned elsewhere in this thread, until yesterday I didn't even have the master { ... } section uncommented, and no auth-master socket seems to have been configured. But then again I only delivered through Postfix and
didn't need to have deliver called by a regular user.

Andreas
--
Andreas "daff" Ntaflos
Vienna, Austria

GPG Fingerprint: 6234 2E8E 5C81 C6CB E5EC  7E65 397C E2A8 090C A9B4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url : 
http://dovecot.org/pipermail/dovecot/attachments/20080115/33439c1a/attachment.bin

------------------------------

_______________________________________________
dovecot mailing list
[email protected]
http://dovecot.org/cgi-bin/mailman/listinfo/dovecot

End of dovecot Digest, Vol 57, Issue 46
***************************************

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to