Hi Timo,
this is a Archlinux test system without SELinux and without AppArmor.
Greetings
Klaus.
On 4/2/26 14:23, Timo Sirainen wrote:
Maybe you have SELinux or something preventing the access? You could run
service auth { user=root } if nothing else works.
On 2. Apr 2026, at 15.14, Klaus Tachtler <[email protected]> wrote:
Hi Timo,
sorry my fault, found the file inside systemd:
/tmp/systemd-private-ab22c74fcf994418a96bd0422a864ab3-dovecot.service-
J0Z3EJ/tmp/auth.strace
---- %< ----
openat(AT_FDCWD, "/etc/dovecot/ssl/private/
wildcard.idmz.tachtler.net.key.pem", O_RDONLY) = -1 EACCES (Permission
denied)
close(22)
---- <% ----
Here is my directory structure with ownership and file permissions:
==================================================================
# ls -lad /etc/dovecot/ssl/
drwxr-xr-x 1 root root 24 Feb 27 09:55 /etc/dovecot/ssl/
# ls -l /etc/dovecot/ssl/
total 0
drwxr-xr-x 1 root root 204 Feb 27 09:55 certs
drwxr-xr-x 1 root root 116 Feb 27 09:55 private
# ls -l /etc/dovecot/ssl/certs/wildcard.idmz.tachtler.net.chain.pem
-r--r--r-- 1 dovecot dovecot 11627 Feb 27 09:55
/etc/dovecot/ssl/certs/wildcard.idmz.tachtler.net.chain.pem
# ls -l /etc/dovecot/ssl/private/wildcard.idmz.tachtler.net.key.pem
-r-------- 1 dovecot dovecot 1703 Feb 27 09:55
/etc/dovecot/ssl/private/wildcard.idmz.tachtler.net.key.pem
Thank you,
Klaus.
On 4/2/26 14:07, Timo Sirainen wrote:
On 2. Apr 2026, at 15.03, Klaus Tachtler <[email protected]> wrote:
Hi Timo,
now I have:
service auth {
executable = /usr/bin/strace -D -o /tmp/auth.strace -s 100
/usr/lib/dovecot/auth
group = vmail
user = vmail
inet_listener auth {
port = 12345
listen = 10.0.0.80 fd00::10:10:0:0:80
}
}
The problem is, no strace file will be written?
# ls -l /tmp/auth.strace
ls: cannot access '/tmp/auth.strace': No such file or directory
With systemd the /tmp directory is actually under /tmp/systemd-
something/. Try find /tmp -name auth.strace or use some other
directory than /tmp.
--
---------------------------------------
e-Mail :[email protected] <mailto:[email protected]>
Homepage:https://www.tachtler.net <https://www.tachtler.net/>
DokuWiki:https://dokuwiki.tachtler.net <https://dokuwiki.tachtler.net/>
---------------------------------------
--
---------------------------------------
e-Mail : [email protected]
Homepage: https://www.tachtler.net
DokuWiki: https://dokuwiki.tachtler.net
---------------------------------------
_______________________________________________
dovecot mailing list -- [email protected]
To unsubscribe send an email to [email protected]
