Jérôme Blion writes:

Sam Varshavchik a écrit :
Jérôme Blion writes:

When doing filterctl start perlfilter, I've got this error for PHP scripts:

May 26 18:17:07 ns60332 courierfilter: Starting perlfilter
May 26 18:17:07 ns60332 courierd: Waiting. shutdown time=none, wakeup time=Tue May 26 18:20:33 2009, queuedelivering=398, inprogress=7
May 26 18:17:09 ns60332 submit: Permission denied
May 26 18:17:11 ns60332 submit: Permission denied
May 26 18:17:16 ns60332 submit: Permission denied
May 26 18:17:17 ns60332 courierfilter: Stopping perlfilter

Check for the correct ownership and permission of the perlfilter's configuration files. perlfilter uses a few config files -- see the courierperlfilter man page.

Also verify the ownership of the socket directory -- referenced in the same man page.

Hello,

After some more readings, I found this article:
http://www.mail-archive.com/[email protected]/msg07729.html

I tried to apply this script to my case. In straces logs, I found lot of errors about /var/lib/courier/tmp folder...
I started to look on what could write there

I finally found the problem: $mail_tmp_dir = '/var/lib/courier/tmp';
Apache does not run as Daemon. Courier does.

I have no idea why Apache matters here. Perlfilter is started by Courier, so it runs as a Courier user.

So /var/lib/courier/tmp is not opened enough. And, from my point of view, it has not to be.
I have two ways:
 - to setuid perlfilter-dkim.pl to runs as courier's user
 - to change the previous variable.
I chose the second way. It solved my problem.

Is it normal perlfilter forks as the original user? whereas sendmail is setuid-bit?

I don't know what any of that means. Perlfilter is started by Courier, and runs as the Courier user. Courier's sendmail command is installed with the setuid bit set. Those are standard permissions and configuration scripts, as install by the Courier package.

If you are using someone else's customized Courier package that uses some kind of a different permissioning scheme, you'll need to ask them for help. I wouldn't know anything about someone else's custom version of Courier.


Attachment: pgpda1aqVh5YD.pgp
Description: PGP signature

------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT 
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, & 
iPhoneDevCamp as they present alongside digital heavyweights like Barbarian 
Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com 
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to