dovecot - May 2017 - Problem with Userid

I have a problem with a physical user that was removed and recreated
whith same name and different uid. The home dir, the mailbox file and
the index directory where removed and recreated with the new uid/gid.

I can feed the mailbox via procmail, though dovecot-lda complains that
userids do not match:

May 02 15:27:33 lda(alessandro_cmr): Error:
stat(/var/spool/mailboxes/alessandro_cmr/INBOX) failed: Permission denied
(euid=3525(alessandro_cmr) egid=111(poppers) missing +x
perm: /var/spool/mailboxes/alessandro_cmr, dir owned by 1000:111 mode=0700)

doveadm auth cache flush says 28 entries flushed but the situation
does'nt change.

here's my doveconf -n:

# 2.2.29.1 (e0b76e3): /usr/local/etc/dovecot/dovecot.conf
# Pigeonhole version 0.4.17 (e179378)
# OS: Linux 3.0.101-105-pae i686 openSUSE 11.4 (i586) ext3
auth_cache_size = 3 k
auth_debug = yes
auth_debug_passwords = yes
auth_mechanisms = plain login
auth_verbose = yes
default_client_limit = 1249
default_vsz_limit = 712 M
disable_plaintext_auth = no
first_valid_gid = 0
first_valid_uid = 100
info_log_path = /var/log/dovecot/logfile.info
listen = *
log_path = /var/log/dovecot/logfile
login_greeting = Dovecot at Baobab ready.
login_trusted_networks = 127.0.0.0/8 212.45.144.0/24 192.168.134.0/24
mail_location =
mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u
maildir_copy_with_hardlinks = no
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy
include variables body enotify environment mailbox date index ihave duplicate
mime foreverypart extracttext
mbox_lock_timeout = 443 secs
namespace {
  inbox = yes
  location = 
  prefix = 
  separator = .
  type = private
}
passdb {
  driver = pam
}
plugin {
  mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename
  mail_log_fields = uid box msgid size
}
protocols = pop3 imap
service auth {
  unix_listener /var/spool/postfix/private/auth {
    group = postfix
    mode = 0660
    user = postfix
  }
  user = root
}
service imap-login {
  inet_listener imaps {
    address = *
  }
  process_limit = 512
}
service pop3-login {
  chroot = 
  executable = pop3-login -D
  inet_listener pop3s {
    address = *
  }
  process_limit = 512
}
ssl_ca = </etc/ssl/ca.crt
ssl_cert = </etc/ssl/certs/dovecot.pem
ssl_key =  # hidden, use -P to show it
userdb {
  driver = passwd
}
version_ignore = yes
protocol imap {
  imap_client_workarounds = delay-newmail
  mail_plugins = mail_log notify
}
protocol pop3 {
  pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
  pop3_enable_last = yes
}
protocol lda {
  info_log_path = /var/log/dovecot/lda.log
  log_path = /var/log/dovecot/lda-errors.log
  postmaster_address = mostmaster at mcs.it
}

Any idea?

Thanks in advance 2 any helper,

Luciano.
-- 
 /"\                         /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL    /  E-MAIL: posthamster at sublink.sublink.ORG
 / \  AND POSTINGS        /   WWW: http://www.lesassaie.IT/

On 2017-05-02 17:15, Luciano Mannucci wrote:
> I have a problem with a physical user that was removed and recreated
> whith same name and different uid. The home dir, the mailbox file and
> the index directory where removed and recreated with the new uid/gid.
>
> I can feed the mailbox via procmail, though dovecot-lda complains that
> userids do not match:
>
> May 02 15:27:33 lda(alessandro_cmr): Error:
> stat(/var/spool/mailboxes/alessandro_cmr/INBOX) failed: Permission denied
> (euid=3525(alessandro_cmr) egid=111(poppers) missing +x
> perm: /var/spool/mailboxes/alessandro_cmr, dir owned by 1000:111 mode=0700)
>
>
You need to either drop or chown the mailbox file.

Aki

On Tue, 2 May 2017 20:30:42 +0300
Aki Tuomi <aki.tuomi at dovecot.fi> wrote:
> You need to either drop or chown the mailbox file.
Dropped.
It gets recerated (I sent a test mail):
drwx------    2 alessandro_cmr               poppers   4096 May  3 12:13
alessandro_cmr/

and the previous error in lda-error.log goes away. Now I have:

May 03 12:13:08 lda(alessandro_cmr): Info:
msgid=<CAJxYVAWfD2WaS+9L=1ZUvVygLKTsSQ=JOivCwS8r829mC4WkSQ at mail.g
mail.com>: save failed to open mailbox INBOX: Opening INBOX failed:
Permission denied

in lda.error. I think this is due to permissions of the indexes, that
are in another location: (from my doveconf -n)

mail_location =
mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u

removing the directory /var/dovecot_indexes/alessandro_cmr fixes the
issue.

Should'nt dovecot-lda log the directory name in the lda-error.log file?
That would make debugging much easier...

Thanks a lot,

Luciano.
-- 
 /"\                         /Via A. Salaino, 7 - 20144 Milano (Italy)
 \ /  ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250
  X   AGAINST HTML MAIL    /  E-MAIL: posthamster at sublink.sublink.ORG
 / \  AND POSTINGS        /   WWW: http://www.lesassaie.IT/