OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Postfix + cyrus a-la RPM
From: Amos Gouaux (amos+lists.postfixutdallas.edu)
Date: Mon May 01 2000 - 10:09:20 CDT

>>>>> On Mon, 01 May 2000 00:03:34 -0400,
>>>>> Darren Nickerson <darrendazza.org> (dn) writes:

dn> Now the choice to execute 'deliver' as UID=cyrus strikes me as odd since the
dn> cyrus RPM (from RedHat's powertools) installs the cyrus bins thusly:

This is correct.

dn> [roothewes postfix]# ls -al /usr/cyrus/bin/
dn> total 2996
dn> drwxr-xr-x 2 root root 4096 Apr 30 21:51 .
dn> drwxr-xr-x 4 root root 4096 Apr 30 21:51 ..
dn> -rwxr-xr-x 1 root root 63696 Feb 11 11:21 arbitron
dn> -rwxr-xr-x 1 root root 582416 Feb 11 11:21 collectnews
dn> -rwxr-x--- 1 root root 638888 Feb 11 11:21 deliver
dn> -rwxr-sr-x 1 root root 3608 Feb 11 11:21 deliver-wrapper
dn> -rwxr-xr-x 1 root root 63440 Feb 11 11:21 dump_deliverdb
dn> -rwxr-xr-x 1 root root 1778 Feb 11 11:21 feedcyrus
dn> -rwxr-xr-x 1 root root 64144 Feb 11 11:21 fud
dn> -rwxr-xr-x 1 root root 650384 Feb 11 11:21 imapd
dn> -rwxr-xr-x 1 root root 63248 Feb 11 11:21 mbpath
dn> -rwxr-xr-x 1 root root 79216 Feb 11 11:21 pop3d
dn> -rwxr-xr-x 1 root root 65648 Feb 11 11:21 quota
dn> -rwxr-xr-x 1 root root 582352 Feb 11 11:21 reconstruct
dn> -rwxr-xr-x 1 root root 64560 Feb 11 11:21 syncnews
dn> -rwxr-xr-x 1 root root 58928 Feb 11 11:21 timsieved

This isn't. I don't personally use RPMs since my stuff runs on
Solaris, but the Cyrus install docs indicate one should install the
software as a user other than root:

1. Create a user and group for the Cyrus subsystem. The examples in
    this document assume a user of "cyrus" and a group of "mail",
    though any user and group name can be used. If a user other than
    "cyrus" is to be used, it must have been previously specified in
    the "--with-cyrus-user=" option to "configure". If a group other
    than "mail" is to be used, it must have been previously
    specified in the "--with-cyrus-group=" option to "configure".

Note, Postfix won't be happy if you use group "mail", so I recommend
creating a group named "cyrus" as well. If you create a user/group
of cyrus and chown all the /usr/cyrus to this user/group, it should
be okay.

dn> Second question, not really postfix-relevant so apologies, the default cyrus
dn> install does not seem to let me get into cyradm to generate some lusers.

dn> [roothewes imap]# cyradm hewes
dn> Please enter your password:
dn> application-specific initialization failed: authentication failed

You should use the cyrus user for this, but this really should be
posted to info-cyrus list.

Amos