Re: [Mailman-Users] Is this a mailman or postfix error?

2005-07-28 Thread John Dennis
On Thu, 2005-07-28 at 16:28 -0500, roy vinner wrote:
 Greetings!
 
 I have a problem that any address which is supposed to be resolved with
 the path-to-mailman/data/aliases produces a message undeliverable error.
 
 I've also discovered that if I run an alias expansion from the command line
 
 aliases:
 ..
 # STANZA START: try
 # CREATED: Mon Jul 25 17:19:03 2005
 try: |/usr/local/mailman/mail/mailman post try
 try-admin:   |/usr/local/mailman/mail/mailman admin try
 try-bounces: |/usr/local/mailman/mail/mailman bounces try
 try-confirm: |/usr/local/mailman/mail/mailman confirm try
 try-join:|/usr/local/mailman/mail/mailman join try
 try-leave:   |/usr/local/mailman/mail/mailman leave try
 try-owner:   |/usr/local/mailman/mail/mailman owner try
 try-request: |/usr/local/mailman/mail/mailman request try
 try-subscribe:   |/usr/local/mailman/mail/mailman subscribe try
 try-unsubscribe: |/usr/local/mailman/mail/mailman unsubscribe try
 # STANZA END: try
 ..
 
 [EMAIL PROTECTED] mailman-2.1.6]$ /usr/local/mailman/mail/mailman request try
 Failure to find group name mailman.  Try adding this group
 to your system, or re-run configure, providing an
 existing group name with the command line option --with-mail-gid.
 
 I have re-run mailman's configure as requested by the above message and
 group mailman does exist on my machine. I am clueless as to what is awry
 here with postfix aliases? Is this a postfix or mailman problem?
 
 Let me know if you need any more information for logs or config files.

There are two immediate things to check:

1) I know you said it, but please verify the mailman uid and gid:

# id mailman

2) Postfix has a feature which is it will run the commands found in an
alias file under the identity of the alias file. What is the owner/group
of the alias file:

# ls -l path-to-mailman/data/aliases

if its group does not match what the mailman wrapper is configured for
you'll get group mismatch problems because postfix will attempt to run
the mailman alias commands under the group belonging to the alias file,
not to the mail_owner in postfix's main.cf file. I think I recall a
config variable to turn the postfix behavior off, but you should not do
that because mailman should be creating the alias file and hence it
should match the uid/gid, but if you hand created it, then all bets are
off.
-- 
John Dennis [EMAIL PROTECTED]

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] Is this a mailman or postfix error?

2005-07-28 Thread Jan Kohnert
roy vinner schrieb:
 Greetings!

Hello,

 [EMAIL PROTECTED] mailman-2.1.6]$ /usr/local/mailman/mail/mailman request try
 Failure to find group name mailman.  Try adding this group
 to your system, or re-run configure, providing an
 existing group name with the command line option --with-mail-gid.

This message says it all. Why not adding group mailman to your system? Be sure 
gid is set to the gid of your mailman installation.

 Thank you for your suggestions.

HTH,

 Thankfully,
 Roy

Best regards Jan

-- 
OpenPGP Public-Key Fingerprint:
0E9B 4052 C661 5018 93C3 4E46 651A 7A28 4028 FF7A


pgpVYD5J9DX24.pgp
Description: PGP signature
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp

Re: [Mailman-Users] Is this a mailman or postfix error?

2005-07-28 Thread roy vinner
Hi John,

I appreciate your quick response!

John Dennis wrote:

 On Thu, 2005-07-28 at 16:28 -0500, roy vinner wrote:
 
Greetings!

I have a problem that any address which is supposed to be resolved with
the path-to-mailman/data/aliases produces a message undeliverable error.

I've also discovered that if I run an alias expansion from the command line

aliases:
..
# STANZA START: try
# CREATED: Mon Jul 25 17:19:03 2005
try: |/usr/local/mailman/mail/mailman post try
try-admin:   |/usr/local/mailman/mail/mailman admin try
try-bounces: |/usr/local/mailman/mail/mailman bounces try
try-confirm: |/usr/local/mailman/mail/mailman confirm try
try-join:|/usr/local/mailman/mail/mailman join try
try-leave:   |/usr/local/mailman/mail/mailman leave try
try-owner:   |/usr/local/mailman/mail/mailman owner try
try-request: |/usr/local/mailman/mail/mailman request try
try-subscribe:   |/usr/local/mailman/mail/mailman subscribe try
try-unsubscribe: |/usr/local/mailman/mail/mailman unsubscribe try
# STANZA END: try
..

[EMAIL PROTECTED] mailman-2.1.6]$ /usr/local/mailman/mail/mailman request try
Failure to find group name mailman.  Try adding this group
to your system, or re-run configure, providing an
existing group name with the command line option --with-mail-gid.

I have re-run mailman's configure as requested by the above message and
group mailman does exist on my machine. I am clueless as to what is awry
here with postfix aliases? Is this a postfix or mailman problem?

Let me know if you need any more information for logs or config files.
 
 
 There are two immediate things to check:
 
 1) I know you said it, but please verify the mailman uid and gid:
 
 # id mailman

[EMAIL PROTECTED] mailman]$ id mailman
uid=505(mailman) gid=407(mailman)
groups=407(mailman),73(apache),503(nrgweb),504(roy),422(www)

 2) Postfix has a feature which is it will run the commands found in an
 alias file under the identity of the alias file. What is the owner/group
 of the alias file:
 
 # ls -l path-to-mailman/data/aliases

[EMAIL PROTECTED] mailman]$ ls -l data/aliases
-rw-rw-r--  1 mailman mailman 2682 Jul 28 11:35 data/aliases


 if its group does not match what the mailman wrapper is configured for
 you'll get group mismatch problems because postfix will attempt to run
 the mailman alias commands under the group belonging to the alias file,
 not to the mail_owner in postfix's main.cf file. I think I recall a
 config variable to turn the postfix behavior off, but you should not do
 that because mailman should be creating the alias file and hence it
 should match the uid/gid, but if you hand created it, then all bets are
 off.

I re-configured mailman with all defaults (I created a group www with
[EMAIL PROTECTED] mailman]$ id www
uid=506(www) gid=422(www) groups=422(www),503(nrgweb),504(roy),407(mailman)

Does this information help you? I am still clueless...

Roy



--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] Is this a mailman or postfix error?

2005-07-28 Thread roy vinner
Hi Jan,

Jan Kohnert wrote:

...
[EMAIL PROTECTED] mailman-2.1.6]$ /usr/local/mailman/mail/mailman request try
Failure to find group name mailman.  Try adding this group
to your system, or re-run configure, providing an
existing group name with the command line option --with-mail-gid.
 
 
 This message says it all. Why not adding group mailman to your system? Be 
 sure 
 gid is set to the gid of your mailman installation.

Well, I had added the group mailman before configuring mailman, as per 
installation instructions.
It is there, and I can see it with a gui interface (I run Mandrake 
10.1). But, for some reason, mailman cannot find it.

If you have any leads as to why, I'll provide with any necessary 
information.

Thank you for your time and help!

Roy
 
Thank you for your suggestions.
 
 
 HTH,
 
 
Thankfully,
Roy
 
 
 Best regards Jan
 
 
 
 
 
 --
 Mailman-Users mailing list
 Mailman-Users@python.org
 http://mail.python.org/mailman/listinfo/mailman-users
 Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
 Unsubscribe: 
 http://mail.python.org/mailman/options/mailman-users/roypivn%40indiana.edu
 
 Security Policy: 
 http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] Is this a mailman or postfix error?

2005-07-28 Thread Mark Sapiro
roy vinner wrote:

I've also discovered that if I run an alias expansion from the command line

aliases:
..
# STANZA START: try
# CREATED: Mon Jul 25 17:19:03 2005
try: |/usr/local/mailman/mail/mailman post try
try-admin:   |/usr/local/mailman/mail/mailman admin try
try-bounces: |/usr/local/mailman/mail/mailman bounces try
try-confirm: |/usr/local/mailman/mail/mailman confirm try
try-join:|/usr/local/mailman/mail/mailman join try
try-leave:   |/usr/local/mailman/mail/mailman leave try
try-owner:   |/usr/local/mailman/mail/mailman owner try
try-request: |/usr/local/mailman/mail/mailman request try
try-subscribe:   |/usr/local/mailman/mail/mailman subscribe try
try-unsubscribe: |/usr/local/mailman/mail/mailman unsubscribe try
# STANZA END: try
..

[EMAIL PROTECTED] mailman-2.1.6]$ /usr/local/mailman/mail/mailman request try
Failure to find group name mailman.  Try adding this group
to your system, or re-run configure, providing an
existing group name with the command line option --with-mail-gid.


Running this from the command line is not necessarily a valid test. The
wrapper (/usr/local/mailman/mail/mailman) exects to be run by the MTA
with the group that was configured by ./configure. This is almost
always not the 'mailman' group. See
http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq06.016.htp



--
Mark Sapiro [EMAIL PROTECTED]   The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] Is this a mailman or postfix error?

2005-07-28 Thread roy vinner
Mark Sapiro wrote:

...
[EMAIL PROTECTED] mailman-2.1.6]$ /usr/local/mailman/mail/mailman request try
Failure to find group name mailman.  Try adding this group
to your system, or re-run configure, providing an
existing group name with the command line option --with-mail-gid.
 
 
 
 Running this from the command line is not necessarily a valid test. The
 wrapper (/usr/local/mailman/mail/mailman) exects to be run by the MTA
 with the group that was configured by ./configure. This is almost
 always not the 'mailman' group. See
 http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq06.016.htp

I see. So, would setting -mail-gid=postfix instead of mailman be a 
reasonable solution to the problem? Does this setting change whether or 
not postfix runs chrooted or not?

Roy
 
 
 --
 Mark Sapiro [EMAIL PROTECTED]   The highway is for gamblers,
 San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] Is this a mailman or postfix error?

2005-07-28 Thread Mark Sapiro
roy vinner 

Mark Sapiro wrote:

 Running this from the command line is not necessarily a valid test. The
 wrapper (/usr/local/mailman/mail/mailman) exects to be run by the MTA
 with the group that was configured by ./configure. This is almost
 always not the 'mailman' group. See
 http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq06.016.htp

I see. So, would setting -mail-gid=postfix instead of mailman be a 
reasonable solution to the problem? Does this setting change whether or 
not postfix runs chrooted or not?

It would be a solution IF postfix executes the pipe to the wrapper as
group 'postfix'. As far as I know, this group can be configured in
postfix, but I don't know the exact method. I also don't know how this
is affected by running postfix chrooted.

The thing that must be true is that whatever group postfix uses to
execute the pipe to the wrapper must be the same as the
--with-mail-gid= setting given to configure.

The same is true of the group that the web server uses to execute the
cgi-bin wrappers and the --with-cgi-gid= given to configure.

See http://www.list.org/mailman-install/node7.html

--
Mark Sapiro [EMAIL PROTECTED]   The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] Is this a mailman or postfix error?

2005-07-28 Thread John W. Baxter
On 7/28/05 4:13 PM, Mark Sapiro [EMAIL PROTECTED] wrote:

 Does this setting change whether or
 not postfix runs chrooted or not?

Well, the option probably doesn't change, but the locations of lots of
things do change.  For starters, if chrooted, Postfix couldn't find the
wrapped CGI unless it were at the proper path inside the jail.  Same
may/should be true for what the CGI tries to reference, and so on.

I'll leave the rest for someone who knows what he or she is talking about.

  --John


--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] Is this a mailman or postfix error?

2005-07-28 Thread roy vinner
Mark Sapiro wrote:

 roy vinner 
 
 
Mark Sapiro wrote:


Running this from the command line is not necessarily a valid test. The
wrapper (/usr/local/mailman/mail/mailman) exects to be run by the MTA
with the group that was configured by ./configure. This is almost
always not the 'mailman' group. See
http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq06.016.htp

I see. So, would setting -mail-gid=postfix instead of mailman be a 
reasonable solution to the problem? Does this setting change whether or 
not postfix runs chrooted or not?
 
 
 It would be a solution IF postfix executes the pipe to the wrapper as
 group 'postfix'. As far as I know, this group can be configured in
 postfix, but I don't know the exact method. I also don't know how this
 is affected by running postfix chrooted.

Okay, let's leave postfix alone :-)


 The thing that must be true is that whatever group postfix uses to
 execute the pipe to the wrapper must be the same as the
 --with-mail-gid= setting given to configure.

I originally compiled it with -mail-gid=mailmal (the first value in the 
default list).


 The same is true of the group that the web server uses to execute the
 cgi-bin wrappers and the --with-cgi-gid= given to configure.

I created a group www -- which included apache, mailman, and myself -- 
and set -cgi-gid=www.
The apache would not run the mailman/create, as it was complaining that 
it could not run as www (even though apache was included in ). So I 
set -cgi-gid=mailman and set user and group in apache to mailman. I 
don't know what was wrong there, but it looks like I am having a similar 
issue here.

 See http://www.list.org/mailman-install/node7.html

I remember that web page. I re-ran configure several times by now. Do I 
also need to run make and make install after that to make changes 
persist in /usr/local/mailman? I haven't done that, 'cause I am afraid 
that the changes that I made to various files would be overwritten.

Please, let me know what the reality on this is. I am quite happy to 
have mail-gid=mailman and cgi-gid=apache, if I could make it work that way.

Thank you for your support!

Best regards,
Roy
 --
 Mark Sapiro [EMAIL PROTECTED]   The highway is for gamblers,
 San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] Is this a mailman or postfix error?

2005-07-28 Thread Mark Sapiro
roy vinner wrote:

I created a group www -- which included apache, mailman, and myself -- 
and set -cgi-gid=www.
The apache would not run the mailman/create, as it was complaining that 
it could not run as www (even though apache was included in ). So I 
set -cgi-gid=mailman and set user and group in apache to mailman. I 
don't know what was wrong there, but it looks like I am having a similar 
issue here.


The 'mailman' user should be in the 'mailman' group (not in www) and
all mailman files, including particularly the mail/mailman wrapper and
the cgi-bin/* wrappers should be group mailman and setgid.

Run

bin/check_perms -f

as root until it reports no errors.


 See http://www.list.org/mailman-install/node7.html

I remember that web page. I re-ran configure several times by now. Do I 
also need to run make and make install after that to make changes 
persist in /usr/local/mailman? I haven't done that, 'cause I am afraid 
that the changes that I made to various files would be overwritten.

Please, let me know what the reality on this is. I am quite happy to 
have mail-gid=mailman and cgi-gid=apache, if I could make it work that way.


--with-mail-gid= needs to be set to the group that postfix uses to pipe
mail to the mail/mailman wrapper.

--with-cgi-gid= needs to be set to the group that apache uses to
execute the cgi-bin wrappers. This group is set in the Apache config
with the Group directive, so if the apache config contains

Group apache

then Mailman must be configured using --with-cgi-gid=apache

OTOH, if Mailman is configured using --with-cgi-gid=somethingelse this
can work too if the apache config contains

Group somethingelse

The analagous situation is true with postfix and --with-mail-gid except
I can't offhand tell you how to set group in postfix.

--
Mark Sapiro [EMAIL PROTECTED]   The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] Is this a mailman or postfix error?

2005-07-28 Thread Roy Vinner
Mark Sapiro wrote:
 roy vinner wrote:
 
I created a group www -- which included apache, mailman, and myself -- 
and set -cgi-gid=www.
The apache would not run the mailman/create, as it was complaining that 
it could not run as www (even though apache was included in ). So I 
set -cgi-gid=mailman and set user and group in apache to mailman. I 
don't know what was wrong there, but it looks like I am having a similar 
issue here.
 
 
 
 The 'mailman' user should be in the 'mailman' group (not in www) and
 all mailman files, including particularly the mail/mailman wrapper and
 the cgi-bin/* wrappers should be group mailman and setgid.
 
 Run
 
 bin/check_perms -f
 
 as root until it reports no errors.

I does run without any errors. Thanks!


See http://www.list.org/mailman-install/node7.html

I remember that web page. I re-ran configure several times by now. Do I 
also need to run make and make install after that to make changes 
persist in /usr/local/mailman? I haven't done that, 'cause I am afraid 
that the changes that I made to various files would be overwritten.

Please, let me know what the reality on this is. I am quite happy to 
have mail-gid=mailman and cgi-gid=apache, if I could make it work that way.
 
 
 
 --with-mail-gid= needs to be set to the group that postfix uses to pipe
 mail to the mail/mailman wrapper.
 
 --with-cgi-gid= needs to be set to the group that apache uses to
 execute the cgi-bin wrappers. This group is set in the Apache config
 with the Group directive, so if the apache config contains
 
 Group apache
 
 then Mailman must be configured using --with-cgi-gid=apache
 
 OTOH, if Mailman is configured using --with-cgi-gid=somethingelse this
 can work too if the apache config contains
 
 Group somethingelse
 
 The analagous situation is true with postfix and --with-mail-gid except
 I can't offhand tell you how to set group in postfix.

So, after I've set the -with-cgi-gid=apache and 
--with-mail-gid=mailman and rerun configure, will I need also to 
re-run make and make install? That will be a job for tomorrow...

Thank you for your support!

Best regards,
Roy

 --
 Mark Sapiro [EMAIL PROTECTED]   The highway is for gamblers,
 San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] Is this a mailman or postfix error?

2005-07-28 Thread Mark Sapiro
Roy Vinner 

So, after I've set the -with-cgi-gid=apache and 
--with-mail-gid=mailman and rerun configure, will I need also to 
re-run make and make install? That will be a job for tomorrow...

Yes.

--
Mark Sapiro [EMAIL PROTECTED]   The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp