On Mon, 10 Oct 2011 23:43:37 Per Jessen wrote:
Rodney Baker wrote:
On Mon, 10 Oct 2011 19:37:02 Per Jessen wrote:
Rodney Baker wrote:
Hi all. I run a local mail server with a fairly standard setup:
Fetchmail -> sendmail ->procmail -> spamd -> Maildir -> dovecot IMAP.
Everything worked fine until around 1345 local time Sunday. Ever since then, fetchmail has been dumping all mail into /var/spool/mail/<username> and there it stays. The rest of the chain isn't firing. procmail is configured to write to a log file in my home directory (pm.log) and that is not being written.
Nothing has been written to /var/log/mail since August 28th (when I upgraded to oS 11.4) so that is no help.
Is your syslog daemon running?
Er, no. Damn!
/etc/init.d/syslog restart reports: Shutting down syslog services done Starting syslog servicessyslog-ng: Error in setgid(); group='wheel', gid='10', error='Operation not permitted' startproc: exit status of parent of /sbin/syslog-ng: 1
failed
Hmmm...now I've got to figure out why *that* is happening. Get syslog running and I might be closer to getting some answers from /var/log/mail. Good catch.
I've been bitten once or twice myself :-(
See if /var/log/audit/audit.log might have any hints about syslog-ng.
Yes, it did (but I saw your reply after I got it going). It said, type=AVC msg=audit(1318249299.372:37): apparmor="DENIED" operation="capable" parent=12038 profile="/sbin/syslog-ng" pid=12039 comm="syslog-ng" capability=6 capname="setgid" syslog-ng was trying to obey the "-g wheel" parameter set in /etc/sysconfig/syslog. I removed that parameter and then it started, but with a whole stack of warning messages about incompatible/obsolete parameters in /etc/syslog/syslog-ng.conf. Copying syslog-ng.conf.rpmnew to syslog-ng.conf fixed that and it started cleanly. Traps for young players - syslog is one of those things that you don't notice isn't running until you really need it, and for some reason I hadn't made the connection between syslog and /var/log/mail. I should have known better. I will next time. :-)
And the mail - where would it normally go instead of /var/spool/mail/<username>? It sounds as if fetchmail is defaulting to the latter, possibly due to an access problem (wild guessing).
Permissions problem actually - procmail was complaining about the permissions on .procmailrc and writing the error message to the non-running syslog daemon. :-| -- =================================================== Rodney Baker VK5ZTV rodney.baker@iinet.net.au =================================================== -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org