dovecot - Apr 2007 - 1.0rc29: LDA chroot problem

Hi,

I got strange problem with dovecot LDA;

in dovecont.conf: mail_chroot = /srv/vmail

--- 
deliver(test at fakedomain.net): Apr 03 07:28:21 Info: auth input: test at
fakedomain.net
deliver(test at fakedomain.net): Apr 03 07:28:21 Info: auth input: uid=400
deliver(test at fakedomain.net): Apr 03 07:28:21 Info: auth input: gid=400
deliver(test at fakedomain.net): Apr 03 07:28:21 Info: auth input:
home=/fakedomain.net/test
deliver(test at fakedomain.net): Apr 03 07:28:21 Info: auth input:
mail=maildir:/fakedomain.net/test
deliver(test at fakedomain.net): Apr 03 07:28:21 Fatal: chroot(/srv/vmail)
failed: Operation not permitted
---
error appears even after "chmod 777 /srv/vmail".
imap works without problems.


Uldis

On Tue, 2007-04-03 at 03:35 +0300, Uldis Pakuls wrote:
> Hi,
> 
> I got strange problem with dovecot LDA;
> 
> in dovecont.conf: mail_chroot = /srv/vmail
> 
> --- 
> deliver(test at fakedomain.net): Apr 03 07:28:21 Info: auth input: test at
fakedomain.net
> deliver(test at fakedomain.net): Apr 03 07:28:21 Info: auth input: uid=400
> deliver(test at fakedomain.net): Apr 03 07:28:21 Info: auth input: gid=400
> deliver(test at fakedomain.net): Apr 03 07:28:21 Info: auth input:
home=/fakedomain.net/test
> deliver(test at fakedomain.net): Apr 03 07:28:21 Info: auth input:
mail=maildir:/fakedomain.net/test
> deliver(test at fakedomain.net): Apr 03 07:28:21 Fatal: chroot(/srv/vmail)
failed: Operation not permitted
You don't start deliver as root (or setuid root), so it can't do the
chrooting.

Usually MTAs don't allow starting deliver as root, so your only
possibilities are setuid root (see the wiki page) or not using chrooting
with deliver.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20070403/a7085892/attachment.bin>

Timo Sirainen wrote:
> You don't start deliver as root (or setuid root), so it can't do
the
> chrooting.
>
> Usually MTAs don't allow starting deliver as root, so your only
> possibilities are setuid root (see the wiki page) or not using chrooting
> with deliver.
setuid works, but another problem arise: when chrooted, deliver can't
find plugins
e.g "Fatal: opendir (/usr/lib/dovedot/modules/lda) failed: no such file
or directory"

is there any way to fix it?

Uldis