dovecot - Sep 2020 - Dovecot permission denied errors on NFS after upgrade to 2.2.17

Hi everyone,

after some hours when I sent my last e-mail to the ML the problem 
reoccurred, again problem with some mailboxes reading some e-mails and 
many errors into dovecot.log like these:

/Jul 14 15:07:50 imap(XXX): Error: 
open(/mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m)
failed: Permission denied (euid=501(vmail) egid=501(vmail) missing +r 
perm: 
/mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m
stat(/mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m)
failed: Permission denied)/

SElinux is not installed and Dovecot NFS client uses "defaults" option
to mount NFS partition with mailboxes in it and version=3.

Don't know where to look further.

Any help appreciated!

Regards


On 14/07/20 11:13, Claudio Corvino wrote:
> Strange behavior but after a reboot of the Dovecot server, the error 
> disappeared from logs (like Windows style! :-)).
>
> I'll monitor the situation and take you updated in case it should come 
> back.
>
> Thanks all!
>
> On 13/07/20 20:27, John Stoffel wrote:
>>>>>>> "Mark" == Mark Moseley <moseleymark at
gmail.com> writes:
>>
>> Mark> This is just me throwing things out to look at, but did the
>> Mark> client mount on the old server use NFS3 and the new upgraded
>> Mark> client uses NFS4? Sometimes that can cause weirdness with id
>> Mark> mapping.
>>
>>
>> Another thing to check is selinux, is it enabled?? It's one of
those
>> things I have to poke at on RHEL systems, but I can't remember if
it's
>> on by default on Debian Buster.
>>
>> ??? getenforce
>>
>> would answer one way or another.
>> John
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20200720/3fde2e75/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3812 bytes
Desc: S/MIME Cryptographic Signature
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20200720/3fde2e75/attachment.p7s>

Hi everyone,

problem still occurring, I just noticed that if I do an "ls -l 
/mnt/mail-storage/<user>/Maildir/cur/" from the Dovecot server I can 
unblock the mailbox of the user and Thunderbird can receives all the 
e-mails.

The problem occurs even with the gmail client on the smartphone.

I just tried many things but can't find a solution.

I just reinstalled a new server with mail storage not on NFS and the 
problem seems to be fixed, but this is not a solution valid for us as we 
would like to use NFS.


Thanks

On 20/07/20 09:47, Claudio Corvino wrote:
>
> Hi everyone,
>
> after some hours when I sent my last e-mail to the ML the problem 
> reoccurred, again problem with some mailboxes reading some e-mails and 
> many errors into dovecot.log like these:
>
> /Jul 14 15:07:50 imap(XXX): Error: 
>
open(/mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m)
> failed: Permission denied (euid=501(vmail) egid=501(vmail) missing +r 
> perm: 
>
/mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m
>
stat(/mnt/mail-storage/XXX/Maildir/cur/1594641298.M607225P10899.XXX,S=4465,W=4534:2,m)
> failed: Permission denied)/
>
> SElinux is not installed and Dovecot NFS client uses "defaults"
option
> to mount NFS partition with mailboxes in it and version=3.
>
> Don't know where to look further.
>
> Any help appreciated!
>
> Regards
>
>
> On 14/07/20 11:13, Claudio Corvino wrote:
>> Strange behavior but after a reboot of the Dovecot server, the error 
>> disappeared from logs (like Windows style! :-)).
>>
>> I'll monitor the situation and take you updated in case it should 
>> come back.
>>
>> Thanks all!
>>
>> On 13/07/20 20:27, John Stoffel wrote:
>>>>>>>> "Mark" == Mark Moseley
<moseleymark at gmail.com> writes:
>>>
>>> Mark> This is just me throwing things out to look at, but did
the
>>> Mark> client mount on the old server use NFS3 and the new
upgraded
>>> Mark> client uses NFS4? Sometimes that can cause weirdness with
id
>>> Mark> mapping.
>>>
>>>
>>> Another thing to check is selinux, is it enabled?? It's one of
those
>>> things I have to poke at on RHEL systems, but I can't remember
if it's
>>> on by default on Debian Buster.
>>>
>>> ??? getenforce
>>>
>>> would answer one way or another.
>>> John
>>
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3812 bytes
Desc: S/MIME Cryptographic Signature
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20200921/d2d87994/attachment-0001.p7s>

On 21 Sep 2020, at 01:48, Claudio Corvino <ccorvino at trustitalia.it>
wrote:
> problem still occurring, I just noticed that if I do an "ls -l
/mnt/mail-storage/<user>/Maildir/cur/" from the Dovecot server I can
unblock the mailbox of the user and Thunderbird can receives all the e-mails.
> 
> The problem occurs even with the gmail client on the smartphone.
> 
> I just tried many things but can't find a solution.
> 
> I just reinstalled a new server with mail storage not on NFS and the
problem seems to be fixed, but this is not a solution valid for us as we would
like to use NFS.
This spends like it may be your system not really mounting (or not fully
mounting) the NFS until it is actually accessed directly.



-- 
I DID NOT SEE ELVIS Bart chalkboard Ep. 7G07