On 2026-03-13, [email protected] <[email protected]> wrote:
>> Hello
>>
>> i can not find the solution! Could somebody help please?
>> passwd[98846]: warn: "/etc/mail/passwd": Permission denied
>> passwd[98846]: fatal: error parsing config file
>> if smtpd.conf is neede, i can send it later thanks.
>>
>> # ls -la /etc/mail/dkim
>> total 16
>> drwxrwx---  2 _dkimsign  _dkimsign  512 Mar 11 20:02 .
>> drwxr-x---  3 root       wheel      512 Mar 12 20:17 ..
>> -r--------  1 _dkimsign  _dkimsign  887 May  7  2025 private.key
>> -rw-r-----  1 _dkimsign  _dkimsign  272 May  7  2025 public.key
>>
>> # ls -la /etc/mail
>> total 52
>> drwxr-x---   3 root       wheel       512 Mar 12 20:17 .
>> drwxr-xr-x  29 root       wheel      1536 Mar 12 21:11 ..
>> -rw-r-----   1 root       wheel      2084 Oct 22 12:21 aliases
>> drwxrwx---   2 _dkimsign  _dkimsign   512 Mar 11 20:02 dkim
>>
>>
>> -rw-r-----   1 root       wheel        29 Oct 31 07:50 domains
>> -rw-r-----   1 root       wheel        76 Nov 28 21:50 hosts
>> -rw-r-----   1 root       wheel        12 Oct 31 07:50 mailname
>> -r--r-----   1 _smtpd     _dovecot    463 Nov 28 21:53 passwd
>> -rw-r-----   1 root       wheel      1603 Nov 28 21:59 smtpd.conf
>> -rw-r-----   1 root       wheel      1223 Sep 30  2021 spamd.conf
>> -rw-r-----   1 root       wheel       224 Nov 28 21:52 users
>> -rw-r-----   1 root       wheel       222 Dec  2 19:46 virtuals
>>
>> # smtpd -dv
>> debug: init ssl-tree
>> info: loading pki information for agroena.org
>> debug: init ca-tree
>> debug: init ssl-tree
>> info: loading pki keys for agroena.org
>> debug: using "fs" queue backend
>> debug: using "ramqueue" scheduler backend
>> debug: using "ram" stat backend
>> info: OpenSMTPD 7.7.0 starting
>> debug: init ssl-tree
>> info: loading pki information for agroena.org
>> debug: init ca-tree
>> debug: init ssl-tree
>> info: loading pki keys for agroena.org
>> debug: using "fs" queue backend
>> debug: using "ramqueue" scheduler backend
>> debug: using "ram" stat backend
>> setup_peer: crypto -> control[91410] fd=4
>> setup_peer: crypto -> dispatcher[9941] fd=5
>> setup_done: ca[69310] done
>> debug: init ssl-tree
>> info: loading pki information for agroena.org
>> debug: init ca-tree
>> debug: init ssl-tree
>> info: loading pki keys for agroena.org
>> debug: using "fs" queue backend
>> debug: using "ramqueue" scheduler backend
>> debug: using "ram" stat backend
>> setup_peer: control -> crypto[69310] fd=4
>> setup_peer: control -> lookup[28081] fd=5
>> setup_peer: control -> dispatcher[9941] fd=6
>> setup_peer: control -> queue[91317] fd=7
>> setup_peer: control -> scheduler[13046] fd=8
>> setup_done: control[91410] done
>> debug: init ssl-tree
>> info: loading pki information for agroena.org
>> debug: init ca-tree
>> debug: init ssl-tree
>> info: loading pki keys for agroena.org
>> debug: using "fs" queue backend
>> debug: using "ramqueue" scheduler backend
>> debug: using "ram" stat backend
>> setup_peer: lookup -> control[91410] fd=4
>> setup_peer: lookup -> dispatcher[9941] fd=5
>> setup_peer: lookup -> queue[91317] fd=6
>> setup_done: lka[28081] done
>> debug: init ssl-tree
>> info: loading pki information for agroena.org
>> debug: init ca-tree
>> debug: init ssl-tree
>> info: loading pki keys for agroena.org
>> debug: using "fs" queue backend
>> debug: using "ramqueue" scheduler backend
>> debug: using "ram" stat backend
>> setup_peer: dispatcher -> control[91410] fd=4
>> setup_peer: dispatcher -> crypto[69310] fd=5
>> setup_peer: dispatcher -> lookup[28081] fd=6
>> setup_peer: dispatcher -> queue[91317] fd=7
>> setup_done: dispatcher[9941] done
>> debug: init ssl-tree
>> info: loading pki information for agroena.org
>> debug: init ca-tree
>> debug: init ssl-tree
>> info: loading pki keys for agroena.org
>> debug: using "fs" queue backend
>> debug: using "ramqueue" scheduler backend
>> debug: using "ram" stat backend
>> setup_peer: scheduler -> control[91410] fd=4
>> setup_peer: scheduler -> queue[91317] fd=5
>> setup_proc: crypto done
>> setup_proc: control done
>> setup_proc: lookup done
>> setup_proc: dispatcher done
>> mta_postfork: lmtp
>> mta_postfork: relay
>> debug: init ssl-tree
>> info: loading pki information for agroena.org
>> debug: init ca-tree
>> debug: init ssl-tree
>> info: loading pki keys for agroena.org
>> debug: using "fs" queue backend
>> debug: using "ramqueue" scheduler backend
>> debug: using "ram" stat backend
>> setup_peer: queue -> control[91410] fd=4
>> setup_peer: queue -> dispatcher[9941] fd=5
>> setup_peer: queue -> lookup[28081] fd=6
>> setup_peer: queue -> scheduler[13046] fd=7
>> setup_done: queue[91317] done
>> setup_proc: scheduler done
>> debug: bounce warning after 4h
>> setup_proc: queue done
>> setup_done: scheduler[13046] done
>> smtpd: setup done
>> debug: parent_send_config_ruleset: reloading
>> debug: parent_send_config: configuring dispatcher process
>> debug: parent_send_config: configuring ca process
>> debug: init private ssl-tree
>> debug: smtp: listen on [::1] port 25 flags 0x2400
>> debug: smtp: listen on [fe80::1%lo0] port 25 flags 0x2400
>> debug: smtp: listen on 127.0.0.1 port 25 flags 0x2400
>> debug: smtp: listen on 45.76.5.212 port 25 flags 0x2501
>> debug: smtp: listen on [2001:19f0:1000:e3a2:5400:5ff:fec8:5f25] port 25 flags
>> 0x2501
>> debug: smtp: listen on 45.76.5.212 port 465 flags 0x254a
>> debug: smtp: listen on [2001:19f0:1000:e3a2:5400:5ff:fec8:5f25] port 465 
>> flags
>> 0x254a
>> debug: smtp: listen on 45.76.5.212 port 587 flags 0x2569
>> debug: smtp: listen on [2001:19f0:1000:e3a2:5400:5ff:fec8:5f25] port 587 
>> flags
>> 0x2569
>> debug: smtp: will accept at most 498 clients
>> passwd[98846]: warn: "/etc/mail/passwd": Permission denied
>> passwd[98846]: fatal: error parsing config file
>> lookup: table-proc: unexpected EOF during handshake
>> debug: parent -> lka: pipe closed
>> smtpd: process lka socket closed
>> debug: control -> lookup: pipe closed
>> debug: control agent exiting
>> debug: dispatcher -> lookup: pipe closed
>> debug: dispatcher agent exiting
>> debug: scheduler -> control: pipe closed
>> debug: scheduler agent exiting
>> debug: ca -> control: pipe closed
>> debug: ca agent exiting
>> gisselle# debug: queue: done loading queue into scheduler
>> debug: queue -> lookup: pipe closed
>> debug: queue agent exiting
>>
>>
>
> I have not seen clear answers:

To fix a bug it was necessary to change pledge behaviour.

Very unusually this also required changes in some programs that use
pledge. This is delicate and for the programs in base was done across
a number of syspatches.

One of the affected programs in ports was opensmtpd-filter-dkimsign
which I think is where you're running into problems.

For 7.8, -stable packages are available.

We don't maintain -stable ports for previous releases. As I think you're
running software from ports on 7.7 I recommend doing whatever you need in
order to get updated to 7.8 for security fixes etc.

If not you could backport the pledge change that was made to
ports/mail/opensmtpd-filters/dkimsign if you wanted.

Reverting syspatches may work but with this set of patches it's a bit
hairy if you're running a newer kernel, if you're going to try that
you probably want to reboot after reverting each one. Needless to say
that is not the recommended approach..


> I keep a snapchot when my systems are working correctly, then, i can go back
> and test all that i can; obviosly i am not an expert! i have had an OBSD
> server for 26 years, with the apparently disadvantage that i am not an expert
> in the computers land. I did not resolved the problem, but i have my server
> working ok again. i do not need to be a technician, just smart!
> Thanks for your information.
>
> The culprit is among this:
> # syspatch -c
> 021_tmppath
> 022_pledge_sysctl
> 023_tmppath
> 024_pledgepaths
> 025_unveil_mount
> 026_freetype
> 027_calendar
> 028_recvfd
>
>


-- 
Please keep replies on the mailing list.

Reply via email to