dovecot - Sep 2011 - Dsync Permissions Issue

Greetings,

I recently upgraded Dovecot from 1.2 to 2.0.14, for purposes of using 
Dsync to migrate emails from one server to another.  I'm using MySQL for 
authentication.  However I get this error message when I try to run 
Dsync, and after looking around for an answer, I'm at a bit of a loss:

[root at triata ~]# dsync -v -u asai at globalchangemusic.org backup ssh 
-p22222 vmail at xx.xxx.xx.xxx dsync -u asai at globalchangemusic.org
vmail at xx.xxx.xx.xxx's password:
dsync(vmail): Error: userdb lookup: 
connect(/var/run/dovecot/auth-userdb) failed: Permission denied 
(euid=1001(vmail) egid=1001(vmail) missing +r perm: 
/var/run/dovecot/auth-userdb, euid is not dir owner)
dsync(vmail): Fatal: User lookup failed: Internal error occurred. Refer 
to server log for more information.
dsync-local(asai at globalchangemusic.org): Error: read() from worker 
server failed: EOF

Config as follows:

[root at triata ~]# doveconf -n
# 2.0.14: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.18-92.1.10.el5.xs5.0.0.39xen x86_64 CentOS release 5 
(Final) ext3
auth_mechanisms = plain login
mail_home = /vmail/%d/%n/home
mail_location = maildir:/vmail/%d/%n
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope 
encoded-character vacation subaddress comparator-i;ascii-numeric 
relational regex imap4flags copy include variables body enotify 
environment mailbox date
namespace {
   inbox = yes
   location    prefix    separator = /
   type = private
}
passdb {
   args = /etc/dovecot-mysql.conf
   driver = sql
}
plugin {
   sieve = /vmail/%d/%n/sievescript
}
service auth {
   unix_listener /var/spool/postfix/private/auth {
     group = postfix
     mode = 0660
     user = postfix
   }
   unix_listener auth-master {
     group = vmail
     mode = 0660
     user = vmail
   }
   unix_listener auth-userdb {
     group = vmail
     mode = 0666
     user = vmail
   }
   user = root
}
ssl_cert = </etc/ssl/triata.globalchangemultimedia.net/mailserver/smtpd.pem
ssl_key = </etc/ssl/triata.globalchangemultimedia.net/mailserver/smtpd.pem
userdb {
   driver = passwd
}
userdb {
   args = /etc/dovecot-mysql.conf
   driver = sql
}
protocol lda {
   hostname = triata.globalchangemultimedia.net
   mail_plugin_dir = /usr/lib64/dovecot/
   mail_plugins = sieve
   postmaster_address = postmaster at globalchangemultimedia.net
}




--

On Wed, 2011-09-14 at 09:04 -0700, Asai wrote:
> [root at triata ~]# dsync -v -u asai at globalchangemusic.org backup ssh 
> -p22222 vmail at xx.xxx.xx.xxx dsync -u asai at globalchangemusic.org
> vmail at xx.xxx.xx.xxx's password:
> dsync(vmail): Error: userdb lookup: 
> connect(/var/run/dovecot/auth-userdb) failed: Permission denied 
> (euid=1001(vmail) egid=1001(vmail) missing +r perm: 
> /var/run/dovecot/auth-userdb, euid is not dir owner)
..
> service auth {
>    unix_listener auth-userdb {
>      group = vmail
>      mode = 0666
>      user = vmail
>    }
>    user = root
> }
So clearly you've given more than necessary permissions in here. 0600
with user=vmail should be enough. But the permission problem isn't on
the server where you ran this "doveconf -n". The problem is on your
remote server's Dovecot config.

BTW:
>    unix_listener auth-master {
>      group = vmail
>      mode = 0660
>      user = vmail
>    }
There's no reason to change this from defaults.