OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: problem with postfix and maildrop

From: mouss (moussml.netoyen.net)
Date: Sat Oct 16 2010 - 12:54:11 CDT


  Le 16/10/2010 19:37, Christian Pinedo Zamalloa a écrit :
> Hi all,
>
> Initially i asked in debian-users and I was suggested to ask in this
> mailing list, so I explain my problem :D.
>
> I have a problem with postfix and maildrop. I
> would swear that all worked fine with Debian Etch and I have the
> problem since I upgraded to Debian Lenny. I have installed postfix as
> MTA and maildrop as MDA and it's configured as follows:
>
> /etc/postfix/main.cf:
> mailbox_command = /usr/bin/maildrop -d "$USER"
>
> Postfix deliver mail in Maildir format instead of mbox format, and all
> the mails are stored in the user's home directory (/home/*/Maildir or
> /root/Maildir).
>
since you use maildrop, postfix does not "deliver" mail to mailbox. it
passes it to maildrop.

> /etc/postfix/main.cf:
> home_mailbox = Maildir/
>
> Well, the problem is that email is delived correctly to normal unix
> users but it's queued when the mail is for root user with the
> following error:
>
> 2C13897470 8210 Fri Oct 15 21:23:52 rootxxxxxx
> (temporary failure. Command output: ERR: authdaemon: s_connect()
> failed: Permission denied /usr/bin/maildrop: Cannot set my user or
> group id.)
> rootxxxxxx
>

ideally, you should use a virtual alias so that mail to root is
delivered to a non-privileged user.

otherwise, /usr/bin/maildrop should be setuid.

you'll get more help on maildrop-users list.

> I have googled and I don't find anything. I give you more information:
>
> # ls -lhd /root
> drwxr-x--- 18 root root 1,0K oct 16 16:38 /root
> # ls -lhd /root/Maildir/
> drwx------ 6 root root 1,0K oct 15 23:08 /root/Maildir/
>
> At a beginning I though that it could be a problem with filesystem
> permissions but the other users (unix users with mail) have similar
> permissions and they
> receive the mail without problem.
>
> Can you suggest anything? Thanks in advance!
>