Ahhh that makes sense. I was thinking that the
--enable-maildrop-uid=vmail and --enable-maildrop-gid=vmail would take
care of that and only run as vmail. These users are samba users as well
as virtual mail users so I'd like to find a way around adding an ldap
attribute just for the setuid stuff.
Justin
Devin Rubia wrote:
On Thu, May 20, 2004 at 09:18:01AM -0500, Justin Lambert wrote:
I am having some issues getting maildrop going. I have been running in
circles for the last week and google and the archives can't seem to hit
me up side the head with an answer.
I am trying to use maildrop to deliver mail to local users, but am
having trouble even getting it to work with maildrop -d
jlam...@mydomain.com. The ldap searches look right (in the ldap log)
and maildrop appears to get the right information. My configure for
maildrop is (cut out of a rpm spec file):
maildropldap.config
hostname localhost
basedn ou=Users,o=computility,o=computility
timeout 5
search_method mail
default_uidnumber 91
default_gidnumber 91
mail_attr mail
uid_attr uid
maildir_attr mailMessageStore
homedirectory_attr mailMessageStore
Running maildrop as root I get "Unable to change to home directory"
error. An strace on it shows:
7410 unlink("/var/spool/mail/jlambert//maildirsize") = -1 EACCES
(Permission denied)
7410 brk(0) = 0x8077000
7410 brk(0x8078000) = 0x8078000
7410 getuid32() = 1000
7410 setuid32(0x3e8) = 0
I'm not sure why it is trying to check maildirsize when I explecitly
told it not to use quotas. The mail spool directories are 0700 at the
root level with vmail:vmail (uid,gid 91) as the owner:group.
There's your problem. What do you have in the LDAP entry for uid for
jlambert? From what I see above, it looks like 1000. Maildrop does a
setuid to the user that mail is being delived to and since the mail
spool is owned by uid 91, with only user permissions, it is unable to
enter the maildir that you've specified.
If you're not trying to do virtual users for e-mail, then just chown the
maildir to jlambert (1000). Otherwise, change the uid attribute in LDAP
to 91 (vmail).