dovecot - Apr 2018 - issue with sieve forwarding after upgrade to 0.5.1

Thank you for your reply. I use FreeBSD so no changes on the OS before and after
the dovecot/pigeonhole updates.

> On 4 Apr 2018, at 08:54, B. Reino <reinob at bbmk.org> wrote:
> 
> Hello,
> 
> The new systemd service file has NoNewPrivileges set to true. You need to
override that to false and then it should work again.
> 
> (if you need help with that ask again.. I'm on the train now so I
can't write much comfortably..)
> 
> Cheers.
> 
> On April 3, 2018 10:25:22 PM GMT+02:00, Christos Chatzaras <chris at
cretaforce.gr> wrote:
> Hello,
> 
> After I upgrade dovecot 2.2.35 to 2.3.1 and pigeonhole 0.4.23  to 0.5.1
when I use sieve to forward a message to other address using "redirect
:copy" I get this:
> 
> (host server1.myserver.com
<http://server1.myserver.com/>[private/dovecot-lmtp] said: 451 4.2.0
<chris at mydomain.com <mailto:chris at mydomain.com>> Execution of
Sieve filters was aborted due to temporary failure (in reply to end of DATA
command))
> 
> And in sieve log I see: failed to redirect message to <chris at
mydomain.com <mailto:chris at mydomain.com>>: Sendmail program returned
error (temporary failure).
> 
> Any idea what is wrong?
> 
> Kind regards,
> Christos Chatzaras
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20180404/42250cc4/attachment.html>

On 2018-04-04 11:02, Christos Chatzaras wrote:
> Thank you for your reply. I use FreeBSD so no changes on the OS before and
after the dovecot/pigeonhole updates.
Oops. I guess I assume everyone uses Linux (and Debian at that.. :) 

I don't know how dovecot is set-up with FreeBSD. The error you showed
was similar (or the same, I don't know anymore) to the one I had when I
upgraded to 2.3.1 on Debian, the root cause of which was the new
restriction disallowing dovecot to get new privileges (which meant it
could not run postdrop as root, despite being setuid). 

.. but for FreeBSD, I'll have to pass.. :) 

Good luck!
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20180404/deaa2d90/attachment.html>

It's similar issue but not the same.

In my postfix main.cf I use:

authorized_submit_users = root, filter

to block users with shell access to send e-mails.

I want only users root and filter to be able to send directly without using SMTP
authentication.

If I remove "authorized_submit_users = root, filter" then it works.

The question is if something changed between postfix 2.2 and 2.3.1 which
requires to drop privileges from root to user.


> On 4 Apr 2018, at 12:25, B. Reino <reinob at bbmk.org> wrote:
> 
> On 2018-04-04 11:02, Christos Chatzaras wrote:
> 
>> Thank you for your reply. I use FreeBSD so no changes on the OS before
and after the dovecot/pigeonhole updates.
>>  
> Oops. I guess I assume everyone uses Linux (and Debian at that.. :)
> 
> I don't know how dovecot is set-up with FreeBSD. The error you showed
was similar (or the same, I don't know anymore) to the one I had when I
upgraded to 2.3.1 on Debian, the root cause of which was the new restriction
disallowing dovecot to get new privileges (which meant it could not run postdrop
as root, despite being setuid).
> 
> .. but for FreeBSD, I'll have to pass.. :)
> 
> Good luck!
> 
> 
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20180404/83d5130a/attachment.html>