Hi *, today I migrated one of my servers from Leap 15.5 to 15.6. So far everything works ok, besides: map-login: Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied imap: Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied managesieve(<username>): Error: getpwnam(vmail) failed: Permission denied (from mail_uid setting) managesieve-login: Error: net_connect_unix(/var/run/dovecot/stats- writer) failed: Permission denied managesieve: Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied Any idea, what to configure to get rid of these errors? TIA. Bye. Michael.
On 11/5/24 1:30 PM, mh@mike.franken.de wrote:
today I migrated one of my servers from Leap 15.5 to 15.6. So far everything works ok, besides:
map-login: Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied imap: Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied managesieve(<username>): Error: getpwnam(vmail) failed: Permission denied (from mail_uid setting) managesieve-login: Error: net_connect_unix(/var/run/dovecot/stats- writer) failed: Permission denied managesieve: Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied
Any idea, what to configure to get rid of these errors?
The "failed: Permission denied" is telling. Also, how are you running the commands? As user or root? What does: $ ls -al /var/run/dovecot show? If nothing, what does # ls -al /var/run/dovecot Are there any errors listed in the journal? You have confirmed dovecot is up and running, e.g. # systemctl status dovecot It sounds like there is a file/directory permission problem on /var/run/dovecot or there is an /etc/group problem with a user not being part of a needed group, or dovecot failed to start or something of the like. We need to see more to narrow it down. -- David C. Rankin, J.D.,P.E.
On Dienstag, 5. November 2024 20:37:18 Mitteleuropäische Normalzeit David C. Rankin wrote:
On 11/5/24 1:30 PM, mh@mike.franken.de wrote:
today I migrated one of my servers from Leap 15.5 to 15.6. So far everything works ok, besides:
map-login: Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied imap: Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied managesieve(<username>): Error: getpwnam(vmail) failed: Permission denied (from mail_uid setting) managesieve-login: Error: net_connect_unix(/var/run/dovecot/stats- writer) failed: Permission denied managesieve: Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied
Any idea, what to configure to get rid of these errors?
The "failed: Permission denied" is telling.
Also, how are you running the commands? As user or root? What does:
$ ls -al /var/run/dovecot
show? If nothing, what does
# ls -al /var/run/dovecot
Are there any errors listed in the journal? You have confirmed dovecot is up and running, e.g.
# systemctl status dovecot
It sounds like there is a file/directory permission problem on /var/run/dovecot or there is an /etc/group problem with a user not being part of a needed group, or dovecot failed to start or something of the like. We need to see more to narrow it down.
It was an apparmor "problem". Running aa-logprof solved it. Thx. Bye. Michael.
On 2024-11-05 21:53, Dave Howorth wrote:
On Tue, 5 Nov 2024 13:37:18 -0600 "David C. Rankin" <drankinatty@gmail.com> wrote:
# systemctl status dovecot FWIW, you don't need to be root to run systemctl status. You do have to be root to run start, restart, stop et al.
You need to be a member of the journal group. See the difference: cer@Laicolasse:~> systemctl status dovecot ● dovecot.service - Dovecot IMAP/POP3 email server Loaded: loaded (/usr/lib/systemd/system/dovecot.service; enab> Active: active (running) since Thu 2024-10-31 22:47:50 CET; 4> Main PID: 1494 (dovecot) Tasks: 9 (limit: 4915) CGroup: /system.slice/dovecot.service ├─ 1494 /usr/sbin/dovecot -F ├─ 1526 dovecot/anvil ├─ 1527 dovecot/log ├─ 1528 dovecot/config ├─ 12945 dovecot/imap-login ├─ 12950 dovecot/imap ├─ 12994 dovecot/imap-login ├─ 12995 dovecot/imap └─ 23873 dovecot/stats Nov 05 16:01:26 Laicolasse.valinor dovecot[1527]: imap(cer)<6373><> Nov 05 17:06:44 Laicolasse.valinor dovecot[1527]: imap(cer)<15655>> Nov 05 20:25:37 Laicolasse.valinor auth[12947]: gkr-pam: unable to> Nov 05 20:25:37 Laicolasse.valinor auth[12947]: gkr-pam: stashed p> Nov 05 20:25:37 Laicolasse.valinor auth[12947]: pam_kwallet5(dovec> Nov 05 20:25:37 Laicolasse.valinor dovecot[1527]: imap-login: Logi> Nov 05 20:25:42 Laicolasse.valinor auth[12947]: gkr-pam: unable to> Nov 05 20:25:42 Laicolasse.valinor auth[12947]: gkr-pam: stashed p> Nov 05 20:25:42 Laicolasse.valinor auth[12947]: pam_kwallet5(dovec> Nov 05 20:25:42 Laicolasse.valinor dovecot[1527]: imap-login: Logi> You have mail in /var/spool/mail/cer cer@Laicolasse:~> su - cer-g Password: cer-g@Laicolasse:~> systemctl status dovecot ● dovecot.service - Dovecot IMAP/POP3 email server Loaded: loaded (/usr/lib/systemd/system/dovecot.service; enab> Active: active (running) since Thu 2024-10-31 22:47:50 CET; 4> Main PID: 1494 (dovecot) Tasks: 9 (limit: 4915) CGroup: /system.slice/dovecot.service ├─ 1494 /usr/sbin/dovecot -F ├─ 1526 dovecot/anvil ├─ 1527 dovecot/log ├─ 1528 dovecot/config ├─ 12945 dovecot/imap-login ├─ 12950 dovecot/imap ├─ 12994 dovecot/imap-login ├─ 12995 dovecot/imap └─ 23873 dovecot/stats ~ cer-g@Laicolasse:~> groups users cer-g@Laicolasse:~> logout cer@Laicolasse:~> groups users root systemd-journal cer@Laicolasse:~> -- Cheers / Saludos, Carlos E. R. (from openSUSE 15.5 (Laicolasse))
On 2024-11-05 20:30, mh@mike.franken.de wrote:
Hi *,
today I migrated one of my servers from Leap 15.5 to 15.6. So far everything works ok, besides:
map-login: Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied imap: Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied managesieve(<username>): Error: getpwnam(vmail) failed: Permission denied (from mail_uid setting) managesieve-login: Error: net_connect_unix(/var/run/dovecot/stats- writer) failed: Permission denied managesieve: Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied
Any idea, what to configure to get rid of these errors?
The procedure to change the aa profiles yourself is trivial and has not changed for a decade. Simply run "aa-logprof" (in a terminal as root) and follow your nose. -- Cheers / Saludos, Carlos E. R. (from openSUSE 15.5 (Laicolasse))
Am 05.11.24 um 20:30 schrieb mh@mike.franken.de:
Hi *,
today I migrated one of my servers from Leap 15.5 to 15.6. So far everything works ok, besides:
map-login: Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied
Since 15.6 is a quite modern variant ;), I suggest you change the path to the pidfile (and lockfiles, if any) in your configuration from /var/run to /run. As in variable base_dir in /etc/dovecot/dovecot.conf or in your local.conf. AppArmor is configured with "@{run}/dovecot/", and this might be /run instead of /var/run now. HTH, Werner
On Montag, 11. November 2024 01:59:17 Mitteleuropäische Normalzeit Werner Flamme via openSUSE Users wrote:
Am 05.11.24 um 20:30 schrieb mh@mike.franken.de:
Hi *,
today I migrated one of my servers from Leap 15.5 to 15.6. So far everything works ok, besides:
map-login: Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied
Since 15.6 is a quite modern variant ;), I suggest you change the path to the pidfile (and lockfiles, if any) in your configuration from /var/run to /run. As in variable base_dir in /etc/dovecot/dovecot.conf or in your local.conf.
AppArmor is configured with "@{run}/dovecot/", and this might be /run instead of /var/run now.
I don't have any active config options containing /var/run. All options regarding the run directory are on their defaults.
HTH, Werner
Bye. Michael.
participants (5)
-
Carlos E. R. -
Dave Howorth -
David C. Rankin -
mh＠mike.franken.de -
Werner Flamme