Hello
I am using Maildrop as the virtual delivery agent with Postfix. I am
moving my users to an OpenLDAP server. All the mailboxes are owned by
vmail:vmail, so Maildrop should work without root privileges. The
problem is that it won't.
Postfix will run maildrop as user vmail. I have compiled maildrop
with --enable-maildrop-uid=vmail and --enable-maildrop-gid=vmail. My
maildropldap.config is readable by vmail and the path to it is in the
binary.
Why can't I run Maildrop as vmail?
The symptoms are that Maildrop will not contact LDAP server at all
(from the LDAP logs). Instead I get "(user unknown. Command output:
Invalid user specified. )" in the Postfix log. The cure is to make
Maildrop suid root.
The only clue I have left is RESET_GID. If Maildrop is running as
normal user it can't change it's group. Shouldn't maildrop complain
if changing group fails? I have tried setting RESET_GID to 0 and
exporting it to the configure script. It won't make a difference to
the binary (by their behavior or md5 checksums) so I guess it was
zero to begin with. What is the proper way of setting these variables?
Versions: FreeBSD 4.8-p7, Maildrop 1.6.2, Postfix 2.0.16, OpenLDAP 2.1.22
Thanks for any pointers!