Re: [Mailman-Users] Error on attempt to create a List in Mailman 2.1.7-15.12.1 from Mailman Web admin UI
Christian,
Your suggestion fixed the problem ! Thank You.
You have to set it to wwwrun:mailman, in order for the apache server to
have write access to it too.
It needs write access for creating lists via webinterface.
This was changed by the last update of mailman via SLES 10 updates,
therefore is a distro bug.
Bob Perez
>>>
From: Mailman Admin
To:Mark Sapiro
CC:Bob Perez ,
Date: 6/25/2012 1:24 AM
Subject: Re: [Mailman-Users] Error on attempt to create a List in Mailman
2.1.7-15.12.1 from Mailman Web admin UI
Hello Bob Perez, Hello Mark Sapiro
On 2012-06-24 15:36, Mark Sapiro wrote:
> On 6/23/2012 12:33 PM, Bob Perez wrote:
>>
>> I see the error in the log with the list name I try to create ("list1", etc)
>> admin(10317): OSError: [Errno 13] Permission denied:
>> '/var/lib/mailman/archives/private/list1.mbox'
>>
>> So looks like a permission problem. I ran ./check_perms and then check_db -
>> Did not help.
>
> What does "ls -ld /var/lib/mailman/archives/private" show?
>
> What does "ls -l /usr/lib/mailman/cgi-bin/create" (assuming that's the
> correct path to the create wrapper) show?
>
>> I think if I do a chmod 755 -R /usr/lib/mailman/ , I may break something in
>> mailman. Did not do this.
>
> Good.
>
>> I see that the user "mailman" in the "mailman group is the owner of the
>> mailman files and directories, but after running the ./check_perms now
>> "root" is the owner of the "mailman" group, however he is not a part of the
>> group, so I made him a member - Same problem, even after restaring mailman
>> with ./mailmanctl restart
>
> In general, the 'owner' of mailman's files doesn't matter. Everything is
> controlled by group permissions. All the qrunners run as group
> "mailman". The web CGI wrappers are supposed to be SETGID and group
> "mailman" so they run with effective group "mailman".
>
I fell into that too.
The problem is, that even after bin/fixurl is run, the archive directory
/var/lib/mailman/archives/private/ has owner:group = mailman:mailman .
You have to set it to wwwrun:mailman, in order for the apache server to
have write access to it too.
It needs write access for creating lists via webinterface.
This was changed by the last update of mailman via SLES 10 updates,
therefore is a distro bug.
Kind regards,
Christian Mack
--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe:
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Error on attempt to create a List in Mailman 2.1.7-15.12.1 from Mailman Web admin UI
Mark,
What does "ls -ld /var/lib/mailman/archives/private" show?
Answer: "drwxr-x--- 6 root mailman 160 June 22 13:50
/var/lib/mailman/archives/private"
What does "ls -l /usr/lib/mailman/cgi-bin/create" (assuming that's the
correct path to the create wrapper) show?
Answer: I have no directory called "create" in the /var/lib/mailman/
directory structure
Thanks,
Bob Perez
>>>
From: Mark Sapiro
To:Bob Perez
CC:
Date: 6/24/2012 7:37 AM
Subject: Re: [Mailman-Users] Error on attempt to create a List in Mailman
2.1.7-15.12.1 from Mailman Web admin UI
On 6/23/2012 12:33 PM, Bob Perez wrote:
>
> I see the error in the log with the list name I try to create ("list1", etc)
> admin(10317): OSError: [Errno 13] Permission denied:
> '/var/lib/mailman/archives/private/list1.mbox'
>
> So looks like a permission problem. I ran ./check_perms and then check_db -
> Did not help.
What does "ls -ld /var/lib/mailman/archives/private" show?
What does "ls -l /usr/lib/mailman/cgi-bin/create" (assuming that's the
correct path to the create wrapper) show?
> I think if I do a chmod 755 -R /usr/lib/mailman/ , I may break something in
> mailman. Did not do this.
Good.
> I see that the user "mailman" in the "mailman group is the owner of the
> mailman files and directories, but after running the ./check_perms now "root"
> is the owner of the "mailman" group, however he is not a part of the group,
> so I made him a member - Same problem, even after restaring mailman with
> ./mailmanctl restart
In general, the 'owner' of mailman's files doesn't matter. Everything is
controlled by group permissions. All the qrunners run as group
"mailman". The web CGI wrappers are supposed to be SETGID and group
"mailman" so they run with effective group "mailman".
--
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe:
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Error on attempt to create a List in Mailman 2.1.7-15.12.1 from Mailman Web admin UI
Stephen J. Turnbull writes: > > > The httpd doesn't need access to the archives; the mailman CGI does. > > > So the CGI wrapper should be setgid mailman. Is it? > > > > > > > Yes it is. > > Is /var/lib/mailman/archives/private/ group-writable? If not, I'm > stumped; it should be possible for the CGIs to write to it then. That should say "if *it is*, then I'm stumped. If not, we need to figure out why not, IME check_perms -f fixes that. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Error on attempt to create a List in Mailman 2.1.7-15.12.1 from Mailman Web admin UI
Mailman Admin writes: > On 2012-06-25 09:37, Stephen J. Turnbull wrote: > > Mailman Admin writes: > > > > > The problem is, that even after bin/fixurl is run, the archive directory > > > /var/lib/mailman/archives/private/ has owner:group = mailman:mailman . > > > You have to set it to wwwrun:mailman, in order for the apache server to > > > have write access to it too. > > > > The httpd doesn't need access to the archives; the mailman CGI does. > > So the CGI wrapper should be setgid mailman. Is it? > > > > Yes it is. Is /var/lib/mailman/archives/private/ group-writable? If not, I'm stumped; it should be possible for the CGIs to write to it then. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Error on attempt to create a List in Mailman 2.1.7-15.12.1 from Mailman Web admin UI
Hello Stephen J. Turnbull On 2012-06-25 09:37, Stephen J. Turnbull wrote: > Mailman Admin writes: > > > The problem is, that even after bin/fixurl is run, the archive directory > > /var/lib/mailman/archives/private/ has owner:group = mailman:mailman . > > You have to set it to wwwrun:mailman, in order for the apache server to > > have write access to it too. > > The httpd doesn't need access to the archives; the mailman CGI does. > So the CGI wrapper should be setgid mailman. Is it? > Yes it is. ls -ld /usr/lib/mailman/cgi-bin/ drwxr-sr-x 2 root mailman 4096 Jun 14 08:37 /usr/lib/mailman/cgi-bin/ ls -l /usr/lib/mailman/cgi-bin/ total 144 -rwxr-sr-x 1 root mailman 10832 May 18 19:18 admin -rwxr-sr-x 1 root mailman 10840 May 18 19:18 admindb -rwxr-sr-x 1 root mailman 10840 May 18 19:18 confirm -rwxr-sr-x 1 root mailman 10840 May 18 19:18 create -rwxr-sr-x 1 root mailman 10840 May 18 19:18 editarch -rwxr-sr-x 1 root mailman 10840 May 18 19:18 edithtml -rwxr-sr-x 1 root mailman 10840 May 18 19:18 listinfo -rwxr-sr-x 1 root mailman 10840 May 18 19:18 options -rwxr-sr-x 1 root mailman 10840 May 18 19:18 private -rwxr-sr-x 1 root mailman 10840 May 18 19:18 rmlist -rwxr-sr-x 1 root mailman 10840 May 18 19:18 roster -rwxr-sr-x 1 root mailman 10840 May 18 19:18 subscribe > > This was changed by the last update of mailman via SLES 10 updates, > > therefore is a distro bug. > > +1 to that, though. > Kind regards, Christian Mack -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Error on attempt to create a List in Mailman 2.1.7-15.12.1 from Mailman Web admin UI
Mailman Admin writes: > The problem is, that even after bin/fixurl is run, the archive directory > /var/lib/mailman/archives/private/ has owner:group = mailman:mailman . > You have to set it to wwwrun:mailman, in order for the apache server to > have write access to it too. The httpd doesn't need access to the archives; the mailman CGI does. So the CGI wrapper should be setgid mailman. Is it? > This was changed by the last update of mailman via SLES 10 updates, > therefore is a distro bug. +1 to that, though. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Error on attempt to create a List in Mailman 2.1.7-15.12.1 from Mailman Web admin UI
Hello Bob Perez, Hello Mark Sapiro
On 2012-06-24 15:36, Mark Sapiro wrote:
> On 6/23/2012 12:33 PM, Bob Perez wrote:
>>
>> I see the error in the log with the list name I try to create ("list1", etc)
>> admin(10317): OSError: [Errno 13] Permission denied:
>> '/var/lib/mailman/archives/private/list1.mbox'
>>
>> So looks like a permission problem. I ran ./check_perms and then check_db -
>> Did not help.
>
> What does "ls -ld /var/lib/mailman/archives/private" show?
>
> What does "ls -l /usr/lib/mailman/cgi-bin/create" (assuming that's the
> correct path to the create wrapper) show?
>
>> I think if I do a chmod 755 -R /usr/lib/mailman/ , I may break something in
>> mailman. Did not do this.
>
> Good.
>
>> I see that the user "mailman" in the "mailman group is the owner of the
>> mailman files and directories, but after running the ./check_perms now
>> "root" is the owner of the "mailman" group, however he is not a part of the
>> group, so I made him a member - Same problem, even after restaring mailman
>> with ./mailmanctl restart
>
> In general, the 'owner' of mailman's files doesn't matter. Everything is
> controlled by group permissions. All the qrunners run as group
> "mailman". The web CGI wrappers are supposed to be SETGID and group
> "mailman" so they run with effective group "mailman".
>
I fell into that too.
The problem is, that even after bin/fixurl is run, the archive directory
/var/lib/mailman/archives/private/ has owner:group = mailman:mailman .
You have to set it to wwwrun:mailman, in order for the apache server to
have write access to it too.
It needs write access for creating lists via webinterface.
This was changed by the last update of mailman via SLES 10 updates,
therefore is a distro bug.
Kind regards,
Christian Mack
--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe:
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Error on attempt to create a List in Mailman 2.1.7-15.12.1 from Mailman Web admin UI
On 6/23/2012 12:33 PM, Bob Perez wrote:
>
> I see the error in the log with the list name I try to create ("list1", etc)
> admin(10317): OSError: [Errno 13] Permission denied:
> '/var/lib/mailman/archives/private/list1.mbox'
>
> So looks like a permission problem. I ran ./check_perms and then check_db -
> Did not help.
What does "ls -ld /var/lib/mailman/archives/private" show?
What does "ls -l /usr/lib/mailman/cgi-bin/create" (assuming that's the
correct path to the create wrapper) show?
> I think if I do a chmod 755 -R /usr/lib/mailman/ , I may break something in
> mailman. Did not do this.
Good.
> I see that the user "mailman" in the "mailman group is the owner of the
> mailman files and directories, but after running the ./check_perms now "root"
> is the owner of the "mailman" group, however he is not a part of the group,
> so I made him a member - Same problem, even after restaring mailman with
> ./mailmanctl restart
In general, the 'owner' of mailman's files doesn't matter. Everything is
controlled by group permissions. All the qrunners run as group
"mailman". The web CGI wrappers are supposed to be SETGID and group
"mailman" so they run with effective group "mailman".
--
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe:
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
