Displaying 20 results from an estimated 7000 matches similar to: "Security issue #5: mail_extra_groups setting is often used insecurely"
2008 Mar 10
2
1.0.13: mail_extra_groups alternative syntax?
"Warning: mail_extra_groups setting was often used insecurely so it is
now deprecated, use mail_access_groups or mail_privileged_group instead"
I use the following:
mail_extra_groups = mail nogroup
Because I have the real and virtual accounts.
What's the correct way to replace the above line? It seems that
mail_privileged_group only accepts one group, but I need two.
Any
2008 Mar 04
2
v1.0.11 released
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz.sig
* mail_extra_groups setting was commonly used insecurely. This setting
is now deprecated. Most users should switch to using
mail_privileged_group setting, but if you really need the old
functionality use mail_access_groups instead.
- mbox: Dropped some of the physical size
2008 Mar 04
2
v1.0.11 released
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz.sig
* mail_extra_groups setting was commonly used insecurely. This setting
is now deprecated. Most users should switch to using
mail_privileged_group setting, but if you really need the old
functionality use mail_access_groups instead.
- mbox: Dropped some of the physical size
2008 May 06
0
1.07 to 1.0.13 mail_extra_groups
I have just upgraded from 1.0.7 to 1.0.13. I read the comments in the
example .conf file and it seemed what I needed to enable dotlock
access to mailboxes in /var/spool/mail (writable by 'mail' group) was
"mail_privileged_group = mail" so I removed the "mail_extra_groups =
mail" that I had in 1.0.7 and added "mail_privileged_group = mail",
but I got errors
2008 Mar 08
4
v1.1.rc2 released
http://dovecot.org/releases/1.1/rc/dovecot-1.1.rc2.tar.gz
http://dovecot.org/releases/1.1/rc/dovecot-1.1.rc2.tar.gz.sig
Changes since rc1:
* mail_extra_groups setting was commonly used insecurely. This setting
is now deprecated. Most users should switch to using
mail_privileged_group setting, but if you really need the old
functionality use mail_access_groups instead.
+ Expire plugin
2008 Mar 08
4
v1.1.rc2 released
http://dovecot.org/releases/1.1/rc/dovecot-1.1.rc2.tar.gz
http://dovecot.org/releases/1.1/rc/dovecot-1.1.rc2.tar.gz.sig
Changes since rc1:
* mail_extra_groups setting was commonly used insecurely. This setting
is now deprecated. Most users should switch to using
mail_privileged_group setting, but if you really need the old
functionality use mail_access_groups instead.
+ Expire plugin
2015 Nov 03
2
dovecot-lda can't create /var/mail dotlocks on debian
clements at desmond:/var/log$ ls -lda /var/mail
drwxrwsr-x 2 root mail 4096 Nov 2 22:07 /var/mail
Best,
John Clements
On Tue, Nov 3, 2015 at 11:52 AM, Larry Rosenman <larryrtx at gmail.com> wrote:
> what is the full permissions of /var/mail?
>
>
> ls -lda /var/mail
>
> On Tue, Nov 3, 2015 at 1:49 PM, John Clements <johnbclements at gmail.com>
> wrote:
>
2015 Nov 03
2
dovecot-lda can't create /var/mail dotlocks on debian
I've been using dovecot+postfix happily for many years, and I'm now
configuring it for a new machine. However, I'm running into an old problem
again, and thinking that there must be a better solution.
The problem is that dovecot-lda is unable to create dotlock files in the
/var/mail directory.
Dovecot version: 1:2.2.13-12~deb8u1 (I'm guessing this is upstream version
2.2.13)
OS:
2006 Oct 25
2
mail_extra_groups and home directory permissions
Hi all,
I've got a virtual hosting environment, where each user lives in
/home/domain/homes/user, and the mailbox is Maildir within that
directory. I've been running into a permissions problem, because it
seems Dovecot doesn't get the users group membership (which seems odd,
but I'm not confident enough of my comprehension of Dovecot to call say
it looks like a bug).
In
2015 Nov 03
2
dovecot-lda can't create /var/mail dotlocks on debian
and, are you SURE that dovecot-lda has mail in it's group list when it is
executing?
On Tue, Nov 3, 2015 at 2:12 PM, Larry Rosenman <larryrtx at gmail.com> wrote:
> Hrm. if you turn up the debug on lda, do you get any more of a clue?
>
> Those permissions look fine to me.
>
>
> On Tue, Nov 3, 2015 at 2:10 PM, John Clements <johnbclements at gmail.com>
>
2015 Nov 03
1
dovecot-lda can't create /var/mail dotlocks on debian
Nov 3 12:23:05 desmond dovecot: lda(granitemon): Debug: Effective
uid=1003, gid=1003, home=/home/granitemon
Nov 3 12:23:05 desmond dovecot: lda(granitemon): Error:
setegid(privileged) failed: Operation not permitted
so it's running as the normal user, and NOT with the mail group.
I'm using exim with LMTP. LMTP is NOT a bad thing, and might make your
life easier. It does allow you
2007 Apr 25
2
newbie with dovecot acls needs a little help :-)
hy all,
i'm trying to make an acl so a local unix user 'sie' can access exalead mboxes.
my exalead mboxes are stored in :
/opt/exalead/mail/sie/
mailboxes are automatically created every week like sie.2007.W17 for the 17th week of the year.
how can i do this ?
i've tried several things but none succedded.
dovecot version 1.0.rc15
# /etc/dovecot.conf
ddIEffective uid=65534,
2006 Jun 22
2
2nd Question on v1.0 setup and maildir
_____
From: Patrick Carney [mailto:patrick at castandcrew.com]
Sent: Thursday, June 22, 2006 8:55 AM
To: 'dovecot at dovecot.org'
Subject: Question on v1.0 setup and maildir
Hello all.
I appreciate the responses to my problem on v0.99.14. Thank you all.
We have built a new server running version 1.0-0_15.beta9.el4. The mail
delivery agent is sendmail. We seem to have
2009 Feb 26
2
problems with dotlock
I have to make dotlock work because this openwebmail thing
only supports one of dotlock or flock, but procmail delivery
does dotlock and fcntl. procmail correctly creates a
dotlock file in /var/spool/mail/username.lock when
delivering, I can watch this with `while :; do ls -la | grep
lock; done`.
It works fine when lock_method=fcntl, but no dotlock file
shows up in /var/spool/mail.
2005 Sep 20
1
LDA with postfix lock problem
Hello,
I'm trying to set up dovecot as the delivery agent for postfix. I
configured postfix with:
mailbox_command = = /usr/local/libexec/dovecot/deliver
In the logs I see the following error:
Sep 20 17:19:26 zalm deliver:
open(/var/mail/.temp.zalm.8045.65c09c28953ea20c) failed: Permission denied
Sep 20 17:19:26 zalm deliver: file_lock_dotlock() failed with mbox file
2017 Mar 01
3
Dovecot + SpamAssassin through dovecot-antispam
Hello,
I am new to the list. /Waving at everyone/
I got a basic SpamAssassin working on a Debian setup (w/ debian-spamd
user), running as a Postfix transport.
I am currently trying to switch it to a dovecot plugin in order to make
it interactively work with the email storage (react to mail
classification, being able to train it from already received emails, aso.)
My problem is now making it
2005 Oct 17
1
Dovecot v1.0a3 on OpenBSD 3.7
I've been trying to get Dovecot 1.0a3 running on OpenBSD 3.7, with little
luck. I'm getting the following:
Oct 16 17:00:50 mailtest dovecot:
pop3(testuser):open(/var/mail/.temp.mail.mailtest.com.7078.43c0f93e9fecb54a)
failed: Permission denied
Oct 16 17:00:50 mailtest dovecot: pop3(testuser): file_lock_dotlock() failed
with mbox file /var/mail/testuser: Permission denied
Oct 16
2007 Oct 22
2
Problem in mbox-sync.c
We've just cut over to a new mail server running Dovecot 1.0.5.
The underlying OS is RHEL 5. User mailboxes are stored in Unix mbox
format on a local ext3 file system. The MTA on the system is the
default RedHat version of Sendmail 8.13.8 with procmail for local
delivery. We're using a combination of dotlock and fcntl style locking.
The output of "dovecot -n" for this system
2008 Feb 16
2
1.0.10 - Cached message offset lost
After upgrading from dovecot-1.0.7 to dovecot-1.0.10 any time when I delete message in logs appeared messages
like:
Feb 16 23:54:05 mail-chaos dovecot: IMAP(citrin): Cached message offset lost for seq 2 in mbox file
/spool/mail/citrin.ru/citrin/Trash
Feb 16 23:54:05 mail-chaos dovecot: IMAP(citrin): copy -> Trash: uid=3589,
msgid=<E1JHT55-0009fX-3E at spray.anyhost.ru>
Removing the
2008 Oct 06
3
Help - I keep getting LSUB permission denied
Hi,
I am using dovecot: 1.0.rc15
I was upgrading Debian and installed new versions of lots of things.
My mail came fine and I though there was not problem until a user called
and said it was not working through webmail. I tried, it it worked fine
and I realized the problem was with dovecot. I have created new users,
tried different UIDs. Removed any protections but when I telnet to the