>>> On Thu, May 28, 2009 at 12:25:10PM +0200, Simon Matter wrote: >>>> > Hi, >>>> > >>>> > I have a server which I upgraded recently from 2.3.13 to 2.3.14. >>>> > Now I realized that sending mail to shared folders doesn't work >>>> anymore. >>>> > I have verified the problem on a test box and it looks like this: >>>> > >>>> > May 28 11:01:49 install lmtpunix[15085]: accepted connection >>>> > May 28 11:01:49 install lmtpunix[15085]: lmtp connection preauth'd >>>> as >>>> > postman >>>> > May 28 11:01:49 install lmtpunix[15085]: verify_user(system) failed: >>>> > Permission denied >>>> > May 28 11:01:49 install postfix/lmtp[15077]: 87D6F34018: >>>> > to=<+system@xxxxxxxxxxxxxxxxxxxxxxxx>, orig_to=<+system@localhost>, >>>> > relay=install.corp.invoca.ch[/var/lib/imap/socket/lmtp], delay=0.12, >>>> > delays=0.09/0.01/0/0.03, dsn=5.7.1, status=bounced (host >>>> > install.corp.invoca.ch[/var/lib/imap/socket/lmtp] said: 550-You do >>>> not >>>> > have permission to post a message to this mailbox. 550-Please >>>> contact >>>> the >>>> > owner of this mailbox in order to submit 550-your message, or >>>> postmaster >>>> > if you believe you 550-received this message in error. 550 5.7.1 >>>> > Permission denied (in reply to RCPT TO command)) >>>> > >>>> > The mailbox has the following permissions: >>>> > >>>> > localhost.localdomain> lam system >>>> > anonymous p >>>> > anyone lrs >>>> > >>>> >>>> What fails with 2.3.14 is append_check() in verify_user(). >>> >>> MAIL FROM:<brong@xxxxxxxxxxx> >>> 250 2.1.0 ok >>> RCPT TO:<bb+shared.foo> >>> 250 2.1.5 ok >>> >>> With: >>> >>> postuser: bb >>> >>> In imapd.conf. That seems to be what the docs recommend. It looks >>> like >>> you're just using a naked "+mailbox@domain"? >>> >>> I'm a little confused. Can you show me the config and how it's >>> supposed >>> to work? >> >> OK, I think the postuser can be empty but how you did it is correct. >> I have tested with postuser now and it's still the same. I have: >> >> [root@client140 ~]# cat /etc/imapd.conf >> configdirectory: /var/lib/imap >> partition-default: /var/spool/imap >> admins: cyrus >> sievedir: /var/lib/imap/sieve >> sendmail: /usr/sbin/sendmail >> hashimapspool: true >> sasl_pwcheck_method: saslauthd >> sasl_mech_list: PLAIN >> tls_cert_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem >> tls_key_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem >> tls_ca_file: /etc/pki/tls/certs/ca-bundle.crt >> postuser: bb >> >> localhost.localdomain> lam * >> system: >> anonymous p >> anyone lrs >> >> And now I do: >> >> [simix@somehost simix]$ telnet client140 24 >> Trying 192.168.10.140... >> Connected to client140. >> Escape character is '^]'. >> 220 client140.bi.corp.invoca.ch Cyrus LMTP v2.3.14-Invoca-RPM-2.3.14-4 >> server ready >> MAIL FROM:<simon.matter@xxxxxxxxx> >> 250 2.1.0 ok >> RCPT TO:<bb+system> >> 550-You do not have permission to post a message to this mailbox. >> 550-Please contact the owner of this mailbox in order to submit >> 550-your message, or postmaster if you believe you >> 550-received this message in error. >> 550 5.7.1 Permission denied >> >> As soon as I give p right to anyone it starts to work. But that was not >> the case until 2.3.14 and I don't think that's how it should be. > > I have installed 2.3.14 on two new boxes running RHEL5. One is i386 and > one is x86_64. > > I can confirm that anonymous posting to a shared folder with 'anonymous p' > rights works on the 64bit version but not on the 32bit version. > So there must be a change between 2.3.13 and 2.3.14 which breaks something > on 32bit systems but not on 64bit. Is there anybody around who can confirm this? Simon ---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
