dovecot - Mar 2007 - LDA bouncing mails after upgrade

Hello, 

on my system, I have a copy of /usr/libexec/dovecot/deliver located
in /usr/libexec/dovecot/postfix-deliver/deliver (only accessible to
postfix and with SUID root permissions).  If I happen to forget to
update this copy after an upgrade of dovecot, the deliver LDA bounces
mails: 

| Mar 22 20:29:20 host.example.org deliver(user at example.org): Module is for
different version 1.0.rc27: /usr/lib/dovecot/lda/lib10_quota_plugin.so
| Mar 22 20:29:20 host.example.org postfix/pipe[17344]: <ID>: to=<user
at example.org>, relay=dovecot, delay=1.9, delays=1.5/0/0/0.35, dsn=5.3.0,
status=bounced (Command died with status 89:
"/usr/libexec/dovecot/postfix-deliver/deliver")

Should I just set version_ignore=yes and remember myself to upgrade it,
or could deliver return a code signaling "temporary failure", or
should
I rather make postfix interpret 89 as temporary failure? (don't know by
heart whether that's possible).

Regards,
Milan


-- 
Milan Holzaepfel <mail(a)mjh(d)name>            
<URL:http://mjh.name/>
pub  4096R/C790FC23  EB8E 5E81 81E3 53A9 9B74  B895 5179 54C0 C790 FC23

On March 24, 2007 7:39:23 PM +0100 Milan Holz?pfel <listen at mjh.name>
wrote:
> Hello,
>
> on my system, I have a copy of /usr/libexec/dovecot/deliver located
> in /usr/libexec/dovecot/postfix-deliver/deliver (only accessible to
> postfix and with SUID root permissions).  If I happen to forget to
> update this copy after an upgrade of dovecot, the deliver LDA bounces
> mails:
>
...
>
> Should I just set version_ignore=yes and remember myself to upgrade it,
> or could deliver return a code signaling "temporary failure", or
should
> I rather make postfix interpret 89 as temporary failure? (don't know by
> heart whether that's possible).
You should leave version_ignore=no and remember to upgrade it.

One way (there are many) to avoid this problem is to invoke sudo deliver
instead of deliver.

Another is to (within postfix) configure the local transport to run
with root privs, avoiding the need for a setuid root program altogether.

-frank