Re: [Mailman-Users] Is this a mailman or postfix error?
On Thu, 2005-07-28 at 16:28 -0500, roy vinner wrote: Greetings! I have a problem that any address which is supposed to be resolved with the path-to-mailman/data/aliases produces a message undeliverable error. I've also discovered that if I run an alias expansion from the command line aliases: .. # STANZA START: try # CREATED: Mon Jul 25 17:19:03 2005 try: |/usr/local/mailman/mail/mailman post try try-admin: |/usr/local/mailman/mail/mailman admin try try-bounces: |/usr/local/mailman/mail/mailman bounces try try-confirm: |/usr/local/mailman/mail/mailman confirm try try-join:|/usr/local/mailman/mail/mailman join try try-leave: |/usr/local/mailman/mail/mailman leave try try-owner: |/usr/local/mailman/mail/mailman owner try try-request: |/usr/local/mailman/mail/mailman request try try-subscribe: |/usr/local/mailman/mail/mailman subscribe try try-unsubscribe: |/usr/local/mailman/mail/mailman unsubscribe try # STANZA END: try .. [EMAIL PROTECTED] mailman-2.1.6]$ /usr/local/mailman/mail/mailman request try Failure to find group name mailman. Try adding this group to your system, or re-run configure, providing an existing group name with the command line option --with-mail-gid. I have re-run mailman's configure as requested by the above message and group mailman does exist on my machine. I am clueless as to what is awry here with postfix aliases? Is this a postfix or mailman problem? Let me know if you need any more information for logs or config files. There are two immediate things to check: 1) I know you said it, but please verify the mailman uid and gid: # id mailman 2) Postfix has a feature which is it will run the commands found in an alias file under the identity of the alias file. What is the owner/group of the alias file: # ls -l path-to-mailman/data/aliases if its group does not match what the mailman wrapper is configured for you'll get group mismatch problems because postfix will attempt to run the mailman alias commands under the group belonging to the alias file, not to the mail_owner in postfix's main.cf file. I think I recall a config variable to turn the postfix behavior off, but you should not do that because mailman should be creating the alias file and hence it should match the uid/gid, but if you hand created it, then all bets are off. -- John Dennis [EMAIL PROTECTED] -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Is this a mailman or postfix error?
roy vinner schrieb: Greetings! Hello, [EMAIL PROTECTED] mailman-2.1.6]$ /usr/local/mailman/mail/mailman request try Failure to find group name mailman. Try adding this group to your system, or re-run configure, providing an existing group name with the command line option --with-mail-gid. This message says it all. Why not adding group mailman to your system? Be sure gid is set to the gid of your mailman installation. Thank you for your suggestions. HTH, Thankfully, Roy Best regards Jan -- OpenPGP Public-Key Fingerprint: 0E9B 4052 C661 5018 93C3 4E46 651A 7A28 4028 FF7A pgpVYD5J9DX24.pgp Description: PGP signature -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Is this a mailman or postfix error?
Hi John, I appreciate your quick response! John Dennis wrote: On Thu, 2005-07-28 at 16:28 -0500, roy vinner wrote: Greetings! I have a problem that any address which is supposed to be resolved with the path-to-mailman/data/aliases produces a message undeliverable error. I've also discovered that if I run an alias expansion from the command line aliases: .. # STANZA START: try # CREATED: Mon Jul 25 17:19:03 2005 try: |/usr/local/mailman/mail/mailman post try try-admin: |/usr/local/mailman/mail/mailman admin try try-bounces: |/usr/local/mailman/mail/mailman bounces try try-confirm: |/usr/local/mailman/mail/mailman confirm try try-join:|/usr/local/mailman/mail/mailman join try try-leave: |/usr/local/mailman/mail/mailman leave try try-owner: |/usr/local/mailman/mail/mailman owner try try-request: |/usr/local/mailman/mail/mailman request try try-subscribe: |/usr/local/mailman/mail/mailman subscribe try try-unsubscribe: |/usr/local/mailman/mail/mailman unsubscribe try # STANZA END: try .. [EMAIL PROTECTED] mailman-2.1.6]$ /usr/local/mailman/mail/mailman request try Failure to find group name mailman. Try adding this group to your system, or re-run configure, providing an existing group name with the command line option --with-mail-gid. I have re-run mailman's configure as requested by the above message and group mailman does exist on my machine. I am clueless as to what is awry here with postfix aliases? Is this a postfix or mailman problem? Let me know if you need any more information for logs or config files. There are two immediate things to check: 1) I know you said it, but please verify the mailman uid and gid: # id mailman [EMAIL PROTECTED] mailman]$ id mailman uid=505(mailman) gid=407(mailman) groups=407(mailman),73(apache),503(nrgweb),504(roy),422(www) 2) Postfix has a feature which is it will run the commands found in an alias file under the identity of the alias file. What is the owner/group of the alias file: # ls -l path-to-mailman/data/aliases [EMAIL PROTECTED] mailman]$ ls -l data/aliases -rw-rw-r-- 1 mailman mailman 2682 Jul 28 11:35 data/aliases if its group does not match what the mailman wrapper is configured for you'll get group mismatch problems because postfix will attempt to run the mailman alias commands under the group belonging to the alias file, not to the mail_owner in postfix's main.cf file. I think I recall a config variable to turn the postfix behavior off, but you should not do that because mailman should be creating the alias file and hence it should match the uid/gid, but if you hand created it, then all bets are off. I re-configured mailman with all defaults (I created a group www with [EMAIL PROTECTED] mailman]$ id www uid=506(www) gid=422(www) groups=422(www),503(nrgweb),504(roy),407(mailman) Does this information help you? I am still clueless... Roy -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Is this a mailman or postfix error?
Hi Jan, Jan Kohnert wrote: ... [EMAIL PROTECTED] mailman-2.1.6]$ /usr/local/mailman/mail/mailman request try Failure to find group name mailman. Try adding this group to your system, or re-run configure, providing an existing group name with the command line option --with-mail-gid. This message says it all. Why not adding group mailman to your system? Be sure gid is set to the gid of your mailman installation. Well, I had added the group mailman before configuring mailman, as per installation instructions. It is there, and I can see it with a gui interface (I run Mandrake 10.1). But, for some reason, mailman cannot find it. If you have any leads as to why, I'll provide with any necessary information. Thank you for your time and help! Roy Thank you for your suggestions. HTH, Thankfully, Roy Best regards Jan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/roypivn%40indiana.edu Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Is this a mailman or postfix error?
roy vinner wrote: I've also discovered that if I run an alias expansion from the command line aliases: .. # STANZA START: try # CREATED: Mon Jul 25 17:19:03 2005 try: |/usr/local/mailman/mail/mailman post try try-admin: |/usr/local/mailman/mail/mailman admin try try-bounces: |/usr/local/mailman/mail/mailman bounces try try-confirm: |/usr/local/mailman/mail/mailman confirm try try-join:|/usr/local/mailman/mail/mailman join try try-leave: |/usr/local/mailman/mail/mailman leave try try-owner: |/usr/local/mailman/mail/mailman owner try try-request: |/usr/local/mailman/mail/mailman request try try-subscribe: |/usr/local/mailman/mail/mailman subscribe try try-unsubscribe: |/usr/local/mailman/mail/mailman unsubscribe try # STANZA END: try .. [EMAIL PROTECTED] mailman-2.1.6]$ /usr/local/mailman/mail/mailman request try Failure to find group name mailman. Try adding this group to your system, or re-run configure, providing an existing group name with the command line option --with-mail-gid. Running this from the command line is not necessarily a valid test. The wrapper (/usr/local/mailman/mail/mailman) exects to be run by the MTA with the group that was configured by ./configure. This is almost always not the 'mailman' group. See http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq06.016.htp -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Is this a mailman or postfix error?
Mark Sapiro wrote: ... [EMAIL PROTECTED] mailman-2.1.6]$ /usr/local/mailman/mail/mailman request try Failure to find group name mailman. Try adding this group to your system, or re-run configure, providing an existing group name with the command line option --with-mail-gid. Running this from the command line is not necessarily a valid test. The wrapper (/usr/local/mailman/mail/mailman) exects to be run by the MTA with the group that was configured by ./configure. This is almost always not the 'mailman' group. See http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq06.016.htp I see. So, would setting -mail-gid=postfix instead of mailman be a reasonable solution to the problem? Does this setting change whether or not postfix runs chrooted or not? Roy -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Is this a mailman or postfix error?
roy vinner Mark Sapiro wrote: Running this from the command line is not necessarily a valid test. The wrapper (/usr/local/mailman/mail/mailman) exects to be run by the MTA with the group that was configured by ./configure. This is almost always not the 'mailman' group. See http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq06.016.htp I see. So, would setting -mail-gid=postfix instead of mailman be a reasonable solution to the problem? Does this setting change whether or not postfix runs chrooted or not? It would be a solution IF postfix executes the pipe to the wrapper as group 'postfix'. As far as I know, this group can be configured in postfix, but I don't know the exact method. I also don't know how this is affected by running postfix chrooted. The thing that must be true is that whatever group postfix uses to execute the pipe to the wrapper must be the same as the --with-mail-gid= setting given to configure. The same is true of the group that the web server uses to execute the cgi-bin wrappers and the --with-cgi-gid= given to configure. See http://www.list.org/mailman-install/node7.html -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Is this a mailman or postfix error?
On 7/28/05 4:13 PM, Mark Sapiro [EMAIL PROTECTED] wrote: Does this setting change whether or not postfix runs chrooted or not? Well, the option probably doesn't change, but the locations of lots of things do change. For starters, if chrooted, Postfix couldn't find the wrapped CGI unless it were at the proper path inside the jail. Same may/should be true for what the CGI tries to reference, and so on. I'll leave the rest for someone who knows what he or she is talking about. --John -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Is this a mailman or postfix error?
Mark Sapiro wrote: roy vinner Mark Sapiro wrote: Running this from the command line is not necessarily a valid test. The wrapper (/usr/local/mailman/mail/mailman) exects to be run by the MTA with the group that was configured by ./configure. This is almost always not the 'mailman' group. See http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq06.016.htp I see. So, would setting -mail-gid=postfix instead of mailman be a reasonable solution to the problem? Does this setting change whether or not postfix runs chrooted or not? It would be a solution IF postfix executes the pipe to the wrapper as group 'postfix'. As far as I know, this group can be configured in postfix, but I don't know the exact method. I also don't know how this is affected by running postfix chrooted. Okay, let's leave postfix alone :-) The thing that must be true is that whatever group postfix uses to execute the pipe to the wrapper must be the same as the --with-mail-gid= setting given to configure. I originally compiled it with -mail-gid=mailmal (the first value in the default list). The same is true of the group that the web server uses to execute the cgi-bin wrappers and the --with-cgi-gid= given to configure. I created a group www -- which included apache, mailman, and myself -- and set -cgi-gid=www. The apache would not run the mailman/create, as it was complaining that it could not run as www (even though apache was included in ). So I set -cgi-gid=mailman and set user and group in apache to mailman. I don't know what was wrong there, but it looks like I am having a similar issue here. See http://www.list.org/mailman-install/node7.html I remember that web page. I re-ran configure several times by now. Do I also need to run make and make install after that to make changes persist in /usr/local/mailman? I haven't done that, 'cause I am afraid that the changes that I made to various files would be overwritten. Please, let me know what the reality on this is. I am quite happy to have mail-gid=mailman and cgi-gid=apache, if I could make it work that way. Thank you for your support! Best regards, Roy -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Is this a mailman or postfix error?
roy vinner wrote: I created a group www -- which included apache, mailman, and myself -- and set -cgi-gid=www. The apache would not run the mailman/create, as it was complaining that it could not run as www (even though apache was included in ). So I set -cgi-gid=mailman and set user and group in apache to mailman. I don't know what was wrong there, but it looks like I am having a similar issue here. The 'mailman' user should be in the 'mailman' group (not in www) and all mailman files, including particularly the mail/mailman wrapper and the cgi-bin/* wrappers should be group mailman and setgid. Run bin/check_perms -f as root until it reports no errors. See http://www.list.org/mailman-install/node7.html I remember that web page. I re-ran configure several times by now. Do I also need to run make and make install after that to make changes persist in /usr/local/mailman? I haven't done that, 'cause I am afraid that the changes that I made to various files would be overwritten. Please, let me know what the reality on this is. I am quite happy to have mail-gid=mailman and cgi-gid=apache, if I could make it work that way. --with-mail-gid= needs to be set to the group that postfix uses to pipe mail to the mail/mailman wrapper. --with-cgi-gid= needs to be set to the group that apache uses to execute the cgi-bin wrappers. This group is set in the Apache config with the Group directive, so if the apache config contains Group apache then Mailman must be configured using --with-cgi-gid=apache OTOH, if Mailman is configured using --with-cgi-gid=somethingelse this can work too if the apache config contains Group somethingelse The analagous situation is true with postfix and --with-mail-gid except I can't offhand tell you how to set group in postfix. -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Is this a mailman or postfix error?
Mark Sapiro wrote: roy vinner wrote: I created a group www -- which included apache, mailman, and myself -- and set -cgi-gid=www. The apache would not run the mailman/create, as it was complaining that it could not run as www (even though apache was included in ). So I set -cgi-gid=mailman and set user and group in apache to mailman. I don't know what was wrong there, but it looks like I am having a similar issue here. The 'mailman' user should be in the 'mailman' group (not in www) and all mailman files, including particularly the mail/mailman wrapper and the cgi-bin/* wrappers should be group mailman and setgid. Run bin/check_perms -f as root until it reports no errors. I does run without any errors. Thanks! See http://www.list.org/mailman-install/node7.html I remember that web page. I re-ran configure several times by now. Do I also need to run make and make install after that to make changes persist in /usr/local/mailman? I haven't done that, 'cause I am afraid that the changes that I made to various files would be overwritten. Please, let me know what the reality on this is. I am quite happy to have mail-gid=mailman and cgi-gid=apache, if I could make it work that way. --with-mail-gid= needs to be set to the group that postfix uses to pipe mail to the mail/mailman wrapper. --with-cgi-gid= needs to be set to the group that apache uses to execute the cgi-bin wrappers. This group is set in the Apache config with the Group directive, so if the apache config contains Group apache then Mailman must be configured using --with-cgi-gid=apache OTOH, if Mailman is configured using --with-cgi-gid=somethingelse this can work too if the apache config contains Group somethingelse The analagous situation is true with postfix and --with-mail-gid except I can't offhand tell you how to set group in postfix. So, after I've set the -with-cgi-gid=apache and --with-mail-gid=mailman and rerun configure, will I need also to re-run make and make install? That will be a job for tomorrow... Thank you for your support! Best regards, Roy -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Is this a mailman or postfix error?
Roy Vinner So, after I've set the -with-cgi-gid=apache and --with-mail-gid=mailman and rerun configure, will I need also to re-run make and make install? That will be a job for tomorrow... Yes. -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp