Re: [Dovecot] Dsync error: Couldn't drop privileges: getgrnam
On 2013-12-13 01:10, Joseph Tam wrote: Alan McGinlay wrote: Can't believe I'm the only one with this error, googled it and there is nothing. Sorry to whine but I am getting desperate here! I googled "safe_mkstemp permission denied" and first hit is this thread dovecot.org/list/dovecot/2010-August/052319.html Hah! thank you so much, I have been pretty stressed the past week or so and of course I googled it, my brain must have been mushed however :) which mentions this error coming about from chrooting users. Looking back on your post, I see http://www.dovecot.org/list/dovecot/2013-December/093900.html mail_chroot = /var/vmail It makes immediate sense when you mention the chroot! Annoying that dsync and the chroot wont work together however As long as your desperate, maybe try leaving this setting empty? Yep, this worked once I changed the maildir location to include /var/vmail (This doesn't explain why it's not deterministic though.) Try process traces -- I do when I'm stumped. Joseph Tam Thanks! This is a really helpful mailing list!
Re: [Dovecot] Dsync error: Couldn't drop privileges: getgrnam
Alan McGinlay wrote: Can't believe I'm the only one with this error, googled it and there is nothing. Sorry to whine but I am getting desperate here! I googled "safe_mkstemp permission denied" and first hit is this thread dovecot.org/list/dovecot/2010-August/052319.html which mentions this error coming about from chrooting users. Looking back on your post, I see http://www.dovecot.org/list/dovecot/2013-December/093900.html mail_chroot = /var/vmail As long as your desperate, maybe try leaving this setting empty? (This doesn't explain why it's not deterministic though.) Try process traces -- I do when I'm stumped. Joseph Tam
Re: [Dovecot] Dsync error: Couldn't drop privileges: getgrnam
On 2013-12-10 14:25, Alan McGinlay - SICS wrote: On 2013-12-10 14:09, Alan McGinlay - SICS wrote: On 2013-12-10 11:52, Alan McGinlay - SICS wrote: On 2013-12-10 11:34, Robert Schetterer wrote: Am 10.12.2013 11:25, schrieb Alan McGinlay - SICS: On 2013-12-09 11:21, Alan McGinlay - SICS wrote: On 2013-12-08 22:08, Alan McGinlay - SICS wrote: Actually I do, /var/vmail (contains virtual domain mailboxes) is owned by vmail:vmail On 2013-12-08 21:49, Timo Sirainen wrote: On 5.12.2013, at 22.18, Alan McGinlay - SICS wrote: mail_privileged_group = vmail .. mail_location = maildir:~/Maildir .. dsync(alantestu...@whatever.com): Error: user alantestu...@whatever.com: Couldn't drop privileges: getgrnam(vmail) failed: No such file or directory (in mail_privileged_group setting) You don’t have vmail group in your system? Either create it or remove this setting. Most likely you want to remove it, since this setting was meant only for mbox format, while you’re using maildir. After much trial and error and following Timos advice, I managed to get a sync to at least start and it lists folders, then it starts spamming this: dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory ... /tmp/dovecot.doveadm. does indeed not exist but I can't find any reference to it online or in the docs, Any ideas? Still not able to get anywhere with this :( It really feels like a permissions problem, either with the master user, the unix user i start the dsync with (root) or the user that dsync runs as (vmail). I tried looking at the code for safe_mkstemp but still couldn't work out the source of this problem. If anyone has an idea it would be great to hear it! perhaps check the dsync target directory must be writable by vmail:vmail Best Regards MfG Robert Schetterer Thanks, vmail:vmail owns all mail and parent directories up to /var/vmail/. I tried changing mail_temp_dir in 10-mail.conf from /tmp/ to /var/vmail/tmp (and i created that directory) but it made no difference apart from changing the directory in the "safe_mkstemp" error message. If I comment out mail_temp_dir then the error changes to: dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: Permission denied dsync(alantestu...@whatever.com): Error: stat(/tmp/dovecot.doveadm.3c303c239d223495) failed: Permission denied Interestingly, the synchronization actually does seem to work! I hadn't noticed at first but in spite of the error, mails are synced across and seemingly are completely intact! It would be really good to find out the source of this error though! /A Another update, only about 1900 of 25000~ mails are actually copied :/ Can't believe I'm the only one with this error, googled it and there is nothing. Sorry to whine but I am getting desperate here! I have upgraded to dovecot 2.1.7 but am still getting this error when performing a dsync: Error: safe_mkstemp(/var/vmail/tmp/dovecot.doveadm.) failed: No such file or directory It seems to fire that error only on some mails being synced but it's apparently random. If there are a lot of new mails then it gives that error a lot, if only one or two mails have come in since the last sync then it might give that error for both, one or none of them. If i change the dsync command to mirror instead of backup then the output becomes: Error: safe_mkstemp(/var/vmail/tmp/dovecot.doveadm.) failed: No such file or directory Error: Couldn't create temp file Error: Can't save message to mailbox DNS: Internal error occurred. Refer to server log for more information. [2013-12-12 13:16:46] Error: msg-get failed: box=Junk uid=87595 guid= Error: msg-get failed: box=Junk uid=87596 guid= Error: msg-get failed: box=Junk uid=87597 guid= Error: msg-get failed: box=Junk uid=87598 guid= Error: msg-get failed: box=Junk uid=87599 guid= Error: msg-get failed: box=Drafts uid=1339 guid= Warning: Mailbox changes caused a desync. You may want to run dsync again. syslog, mail.log and mail.err contain nothing except the master user logging in / out and no errors or warnings. Debug is enabled in 10-logging.conf. Please help!
Re: [Dovecot] Dsync error: Couldn't drop privileges: getgrnam
On 2013-12-10 14:09, Alan McGinlay - SICS wrote: On 2013-12-10 11:52, Alan McGinlay - SICS wrote: On 2013-12-10 11:34, Robert Schetterer wrote: Am 10.12.2013 11:25, schrieb Alan McGinlay - SICS: On 2013-12-09 11:21, Alan McGinlay - SICS wrote: On 2013-12-08 22:08, Alan McGinlay - SICS wrote: Actually I do, /var/vmail (contains virtual domain mailboxes) is owned by vmail:vmail On 2013-12-08 21:49, Timo Sirainen wrote: On 5.12.2013, at 22.18, Alan McGinlay - SICS wrote: mail_privileged_group = vmail .. mail_location = maildir:~/Maildir .. dsync(alantestu...@whatever.com): Error: user alantestu...@whatever.com: Couldn't drop privileges: getgrnam(vmail) failed: No such file or directory (in mail_privileged_group setting) You don’t have vmail group in your system? Either create it or remove this setting. Most likely you want to remove it, since this setting was meant only for mbox format, while you’re using maildir. After much trial and error and following Timos advice, I managed to get a sync to at least start and it lists folders, then it starts spamming this: dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory ... /tmp/dovecot.doveadm. does indeed not exist but I can't find any reference to it online or in the docs, Any ideas? Still not able to get anywhere with this :( It really feels like a permissions problem, either with the master user, the unix user i start the dsync with (root) or the user that dsync runs as (vmail). I tried looking at the code for safe_mkstemp but still couldn't work out the source of this problem. If anyone has an idea it would be great to hear it! perhaps check the dsync target directory must be writable by vmail:vmail Best Regards MfG Robert Schetterer Thanks, vmail:vmail owns all mail and parent directories up to /var/vmail/. I tried changing mail_temp_dir in 10-mail.conf from /tmp/ to /var/vmail/tmp (and i created that directory) but it made no difference apart from changing the directory in the "safe_mkstemp" error message. If I comment out mail_temp_dir then the error changes to: dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: Permission denied dsync(alantestu...@whatever.com): Error: stat(/tmp/dovecot.doveadm.3c303c239d223495) failed: Permission denied Interestingly, the synchronization actually does seem to work! I hadn't noticed at first but in spite of the error, mails are synced across and seemingly are completely intact! It would be really good to find out the source of this error though! /A Another update, only about 1900 of 25000~ mails are actually copied :/
Re: [Dovecot] Dsync error: Couldn't drop privileges: getgrnam
On 2013-12-10 11:52, Alan McGinlay - SICS wrote: On 2013-12-10 11:34, Robert Schetterer wrote: Am 10.12.2013 11:25, schrieb Alan McGinlay - SICS: On 2013-12-09 11:21, Alan McGinlay - SICS wrote: On 2013-12-08 22:08, Alan McGinlay - SICS wrote: Actually I do, /var/vmail (contains virtual domain mailboxes) is owned by vmail:vmail On 2013-12-08 21:49, Timo Sirainen wrote: On 5.12.2013, at 22.18, Alan McGinlay - SICS wrote: mail_privileged_group = vmail .. mail_location = maildir:~/Maildir .. dsync(alantestu...@whatever.com): Error: user alantestu...@whatever.com: Couldn't drop privileges: getgrnam(vmail) failed: No such file or directory (in mail_privileged_group setting) You don’t have vmail group in your system? Either create it or remove this setting. Most likely you want to remove it, since this setting was meant only for mbox format, while you’re using maildir. After much trial and error and following Timos advice, I managed to get a sync to at least start and it lists folders, then it starts spamming this: dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory ... /tmp/dovecot.doveadm. does indeed not exist but I can't find any reference to it online or in the docs, Any ideas? Still not able to get anywhere with this :( It really feels like a permissions problem, either with the master user, the unix user i start the dsync with (root) or the user that dsync runs as (vmail). I tried looking at the code for safe_mkstemp but still couldn't work out the source of this problem. If anyone has an idea it would be great to hear it! perhaps check the dsync target directory must be writable by vmail:vmail Best Regards MfG Robert Schetterer Thanks, vmail:vmail owns all mail and parent directories up to /var/vmail/. I tried changing mail_temp_dir in 10-mail.conf from /tmp/ to /var/vmail/tmp (and i created that directory) but it made no difference apart from changing the directory in the "safe_mkstemp" error message. If I comment out mail_temp_dir then the error changes to: dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: Permission denied dsync(alantestu...@whatever.com): Error: stat(/tmp/dovecot.doveadm.3c303c239d223495) failed: Permission denied Interestingly, the synchronization actually does seem to work! I hadn't noticed at first but in spite of the error, mails are synced across and seemingly are completely intact! It would be really good to find out the source of this error though! /A
Re: [Dovecot] Dsync error: Couldn't drop privileges: getgrnam
On 2013-12-10 11:34, Robert Schetterer wrote: Am 10.12.2013 11:25, schrieb Alan McGinlay - SICS: On 2013-12-09 11:21, Alan McGinlay - SICS wrote: On 2013-12-08 22:08, Alan McGinlay - SICS wrote: Actually I do, /var/vmail (contains virtual domain mailboxes) is owned by vmail:vmail On 2013-12-08 21:49, Timo Sirainen wrote: On 5.12.2013, at 22.18, Alan McGinlay - SICS wrote: mail_privileged_group = vmail .. mail_location = maildir:~/Maildir .. dsync(alantestu...@whatever.com): Error: user alantestu...@whatever.com: Couldn't drop privileges: getgrnam(vmail) failed: No such file or directory (in mail_privileged_group setting) You don’t have vmail group in your system? Either create it or remove this setting. Most likely you want to remove it, since this setting was meant only for mbox format, while you’re using maildir. After much trial and error and following Timos advice, I managed to get a sync to at least start and it lists folders, then it starts spamming this: dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory ... /tmp/dovecot.doveadm. does indeed not exist but I can't find any reference to it online or in the docs, Any ideas? Still not able to get anywhere with this :( It really feels like a permissions problem, either with the master user, the unix user i start the dsync with (root) or the user that dsync runs as (vmail). I tried looking at the code for safe_mkstemp but still couldn't work out the source of this problem. If anyone has an idea it would be great to hear it! perhaps check the dsync target directory must be writable by vmail:vmail Best Regards MfG Robert Schetterer Thanks, vmail:vmail owns all mail and parent directories up to /var/vmail/. I tried changing mail_temp_dir in 10-mail.conf from /tmp/ to /var/vmail/tmp (and i created that directory) but it made no difference apart from changing the directory in the "safe_mkstemp" error message. If I comment out mail_temp_dir then the error changes to: dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: Permission denied dsync(alantestu...@whatever.com): Error: stat(/tmp/dovecot.doveadm.3c303c239d223495) failed: Permission denied
Re: [Dovecot] Dsync error: Couldn't drop privileges: getgrnam
Am 10.12.2013 11:25, schrieb Alan McGinlay - SICS: > On 2013-12-09 11:21, Alan McGinlay - SICS wrote: >> On 2013-12-08 22:08, Alan McGinlay - SICS wrote: >> Actually I do, /var/vmail (contains virtual domain mailboxes) is >> owned by vmail:vmail >> >> On 2013-12-08 21:49, Timo Sirainen wrote: >> On 5.12.2013, at 22.18, Alan McGinlay - SICS wrote: >> >> mail_privileged_group = vmail >> .. >> mail_location = maildir:~/Maildir >> .. >> dsync(alantestu...@whatever.com): Error: user >> alantestu...@whatever.com: Couldn't drop privileges: getgrnam(vmail) >> failed: No such file or directory (in mail_privileged_group setting) >> >> You don’t have vmail group in your system? Either create it or remove >> this setting. Most likely you want to remove it, since this setting >> was meant only for mbox format, while you’re using maildir. >> >> After much trial and error and following Timos advice, I managed to >> get a sync to at least start and it lists folders, then it starts >> spamming this: >> >> dsync(alantestu...@whatever.com): Error: >> safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory >> dsync(alantestu...@whatever.com): Error: >> safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory >> dsync(alantestu...@whatever.com): Error: >> safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory >> ... >> >> /tmp/dovecot.doveadm. does indeed not exist but I can't find any >> reference to it online or in the docs, >> >> Any ideas? >> > > Still not able to get anywhere with this :( It really feels like a > permissions problem, either with the master user, the unix user i start > the dsync with (root) or the user that dsync runs as (vmail). I tried > looking at the code for safe_mkstemp but still couldn't work out the > source of this problem. If anyone has an idea it would be great to hear it! perhaps check the dsync target directory must be writable by vmail:vmail Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
Re: [Dovecot] Dsync error: Couldn't drop privileges: getgrnam
On 2013-12-09 11:21, Alan McGinlay - SICS wrote: On 2013-12-08 22:08, Alan McGinlay - SICS wrote: Actually I do, /var/vmail (contains virtual domain mailboxes) is owned by vmail:vmail On 2013-12-08 21:49, Timo Sirainen wrote: On 5.12.2013, at 22.18, Alan McGinlay - SICS wrote: mail_privileged_group = vmail .. mail_location = maildir:~/Maildir .. dsync(alantestu...@whatever.com): Error: user alantestu...@whatever.com: Couldn't drop privileges: getgrnam(vmail) failed: No such file or directory (in mail_privileged_group setting) You don’t have vmail group in your system? Either create it or remove this setting. Most likely you want to remove it, since this setting was meant only for mbox format, while you’re using maildir. After much trial and error and following Timos advice, I managed to get a sync to at least start and it lists folders, then it starts spamming this: dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory ... /tmp/dovecot.doveadm. does indeed not exist but I can't find any reference to it online or in the docs, Any ideas? Still not able to get anywhere with this :( It really feels like a permissions problem, either with the master user, the unix user i start the dsync with (root) or the user that dsync runs as (vmail). I tried looking at the code for safe_mkstemp but still couldn't work out the source of this problem. If anyone has an idea it would be great to hear it!
Re: [Dovecot] Dsync error: Couldn't drop privileges: getgrnam
On 2013-12-08 22:08, Alan McGinlay - SICS wrote: Actually I do, /var/vmail (contains virtual domain mailboxes) is owned by vmail:vmail On 2013-12-08 21:49, Timo Sirainen wrote: On 5.12.2013, at 22.18, Alan McGinlay - SICS wrote: mail_privileged_group = vmail .. mail_location = maildir:~/Maildir .. dsync(alantestu...@whatever.com): Error: user alantestu...@whatever.com: Couldn't drop privileges: getgrnam(vmail) failed: No such file or directory (in mail_privileged_group setting) You don’t have vmail group in your system? Either create it or remove this setting. Most likely you want to remove it, since this setting was meant only for mbox format, while you’re using maildir. After much trial and error and following Timos advice, I managed to get a sync to at least start and it lists folders, then it starts spamming this: dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory dsync(alantestu...@whatever.com): Error: safe_mkstemp(/tmp/dovecot.doveadm.) failed: No such file or directory ... /tmp/dovecot.doveadm. does indeed not exist but I can't find any reference to it online or in the docs, Any ideas? PS: Sorry for previous top-post, I was using webmail on my phone!
Re: [Dovecot] Dsync error: Couldn't drop privileges: getgrnam
Actually I do, /var/vmail (contains virtual domain mailboxes) is owned by vmail:vmail On 2013-12-08 21:49, Timo Sirainen wrote: On 5.12.2013, at 22.18, Alan McGinlay - SICS wrote: mail_privileged_group = vmail .. mail_location = maildir:~/Maildir .. dsync(alantestu...@whatever.com): Error: user alantestu...@whatever.com: Couldn't drop privileges: getgrnam(vmail) failed: No such file or directory (in mail_privileged_group setting) You don’t have vmail group in your system? Either create it or remove this setting. Most likely you want to remove it, since this setting was meant only for mbox format, while you’re using maildir.
Re: [Dovecot] Dsync error: Couldn't drop privileges: getgrnam
On 5.12.2013, at 22.18, Alan McGinlay - SICS wrote: > mail_privileged_group = vmail .. > mail_location = maildir:~/Maildir .. > dsync(alantestu...@whatever.com): Error: user alantestu...@whatever.com: > Couldn't drop privileges: getgrnam(vmail) failed: No such file or directory > (in mail_privileged_group setting) You don’t have vmail group in your system? Either create it or remove this setting. Most likely you want to remove it, since this setting was meant only for mbox format, while you’re using maildir.
