dovecot - Jul 2020 - Dovecot permission denied errors on NFS after upgrade to 2.2.17

>>>>> "Mark" == Mark Moseley <moseleymark at
gmail.com> writes:

Mark> This is just me throwing things out to look at, but did the
Mark> client mount on the old server use NFS3 and the new upgraded
Mark> client uses NFS4? Sometimes that can cause weirdness with id
Mark> mapping.?


Another thing to check is selinux, is it enabled?  It's one of those
things I have to poke at on RHEL systems, but I can't remember if it's
on by default on Debian Buster.

   getenforce

would answer one way or another.
John

Strange behavior but after a reboot of the Dovecot server, the error 
disappeared from logs (like Windows style! :-)).

I'll monitor the situation and take you updated in case it should come back.

Thanks all!

On 13/07/20 20:27, John Stoffel wrote:
>>>>>> "Mark" == Mark Moseley <moseleymark at
gmail.com> writes:
>
> Mark> This is just me throwing things out to look at, but did the
> Mark> client mount on the old server use NFS3 and the new upgraded
> Mark> client uses NFS4? Sometimes that can cause weirdness with id
> Mark> mapping.
>
>
> Another thing to check is selinux, is it enabled?  It's one of those
> things I have to poke at on RHEL systems, but I can't remember if
it's
> on by default on Debian Buster.
>
>     getenforce
>
> would answer one way or another.
> John
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3812 bytes
Desc: S/MIME Cryptographic Signature
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20200714/5ea38736/attachment.p7s>

Hi everyone,

after some hours when I sent my last e-mail to the ML the problem 
reoccurred, again problem with some mailboxes reading some e-mails and 
many errors into dovecot.log like these:

/Jul 14 15:07:50 imap(XXX): Error: 
open(/mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m)
failed: Permission denied (euid=501(vmail) egid=501(vmail) missing +r 
perm: 
/mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m
stat(/mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m)
failed: Permission denied)/

SElinux is not installed and Dovecot NFS client uses "defaults" option
to mount NFS partition with mailboxes in it and version=3.

Don't know where to look further.

Any help appreciated!

Regards


On 14/07/20 11:13, Claudio Corvino wrote:
> Strange behavior but after a reboot of the Dovecot server, the error 
> disappeared from logs (like Windows style! :-)).
>
> I'll monitor the situation and take you updated in case it should come 
> back.
>
> Thanks all!
>
> On 13/07/20 20:27, John Stoffel wrote:
>>>>>>> "Mark" == Mark Moseley <moseleymark at
gmail.com> writes:
>>
>> Mark> This is just me throwing things out to look at, but did the
>> Mark> client mount on the old server use NFS3 and the new upgraded
>> Mark> client uses NFS4? Sometimes that can cause weirdness with id
>> Mark> mapping.
>>
>>
>> Another thing to check is selinux, is it enabled?? It's one of
those
>> things I have to poke at on RHEL systems, but I can't remember if
it's
>> on by default on Debian Buster.
>>
>> ??? getenforce
>>
>> would answer one way or another.
>> John
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20200720/3fde2e75/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3812 bytes
Desc: S/MIME Cryptographic Signature
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20200720/3fde2e75/attachment.p7s>