Re: sieve runtime error Fileinto: Permission denied

[Sunny via Info-cyrus]

On 24/05/16 12:59, Edda via Info-cyrus wrote:
Interesting ;-) Looks like fileinto wants to deliver to an existent 
(existent for the user) but different folder as you expect, not the 
ones you listed below.


What's your sieve script?
And what sees the user in the IMAP LIST command?

I can reproduce this issue with a test user (mailtest) and an 
additionally created shared folder:


localhost> cm user/mailtest
localhost> cm user/mailtest/Drafts
localholocalhost> cm Drafts
localhost> lam Drafts
anyone lrs

Test user logs in and sees:

[root@popc ~]# telnet localhost 143
[...]
. login mailtest xxx
[...]
. LIST "" "*"
* LIST (\HasChildren) "/" "INBOX"
* LIST (\HasNoChildren) "/" "INBOX/Drafts"
* LIST (\HasNoChildren) "/" "Drafts"
. OK Completed (0.000 secs 4 calls)

If the test user wants to deliver mails directly to the shared Drafts 
folder via sieve script:


if anyof (header :contains "to" "mailtest")
{
fileinto "Drafts";
stop;
}

I get the error:

May 24 13:23:24 popc lmtpunix[6959]: sieve runtime error for mailtest 
id <201605241123.u4OBMqJK006976@popc.localdomain>: Fileinto: 
Permission denied


For delivering to the folder either the owner or "anyone" needs the 
"p" right on it. Fortunately, nobody has, as the folder was created 
with ACL "anyone lrs".


I think you created something similar but I admit, it's a bit 
guessing... But iff this is the issue, you have unexpected folders and 
selected the wrong folder in the sieve script.


Edda


Hi,
Edda's email pointed me into the right direction and found the culprit, 
there was a custom script in the wrong place and was stripping the Inbox 
prefix from the sieve script hence the fileinto permission denied errors 
because it couldn't find the correct folder. Our email servers uses 
Inbox.folder_name format and not the UNIX separator character '/' for 
delimiting levels.


Thanks

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: sieve runtime error Fileinto: Permission denied

[Edda via Info-cyrus]

Interesting ;-) Looks like fileinto wants to deliver to an existent 
(existent for the user) but different folder as you expect, not the ones 
you listed below.


What's your sieve script?
And what sees the user in the IMAP LIST command?

I can reproduce this issue with a test user (mailtest) and an 
additionally created shared folder:


localhost> cm user/mailtest
localhost> cm user/mailtest/Drafts
localholocalhost> cm Drafts
localhost> lam Drafts
anyone lrs

Test user logs in and sees:

[root@popc ~]# telnet localhost 143
[...]
. login mailtest xxx
[...]
. LIST "" "*"
* LIST (\HasChildren) "/" "INBOX"
* LIST (\HasNoChildren) "/" "INBOX/Drafts"
* LIST (\HasNoChildren) "/" "Drafts"
. OK Completed (0.000 secs 4 calls)

If the test user wants to deliver mails directly to the shared Drafts 
folder via sieve script:


if anyof (header :contains "to" "mailtest")
{
fileinto "Drafts";
stop;
}

I get the error:

May 24 13:23:24 popc lmtpunix[6959]: sieve runtime error for mailtest id 
<201605241123.u4OBMqJK006976@popc.localdomain>: Fileinto: Permission denied


For delivering to the folder either the owner or "anyone" needs the "p" 
right on it. Fortunately, nobody has, as the folder was created with ACL 
"anyone lrs".


I think you created something similar but I admit, it's a bit 
guessing... But iff this is the issue, you have unexpected folders and 
selected the wrong folder in the sieve script.


Edda

Am 23.05.16 um 13:52 schrieb Sunny via Info-cyrus:

Hi,

I'm seeing the following error logs with some users sieve filtering
May 23 11:41:31 imap02 lmtpunix[26005]: sieve runtime error for test2 
id <5742de5a.3040...@org.ac.uk>: Fileinto: Permission denied


Essentially emails are not being put into the specific folders.

Their cyrus:mail permissions are in place

[root@imap02 test2]# ls -ls /var/spool/imap/t/user/test2/
 4 -rw--- 1 cyrus mail  1663 May 23 10:36 747.
 4 -rw--- 1 cyrus mail  1904 May 23 10:53 748.
 4 -rw--- 1 cyrus mail  1661 May 23 10:54 749.
 4 -rw--- 1 cyrus mail  1666 May 23 10:56 750.
 4 -rw--- 2 cyrus mail  1613 May 23 11:00 751.
 4 -rw--- 1 cyrus mail  1541 May 23 11:12 752.
 4 -rw--- 1 cyrus mail  1541 May 23 11:20 753.
 4 -rw--- 1 cyrus mail  1537 May 23 11:22 754.
 4 -rw--- 1 cyrus mail  1537 May 23 11:23 755.
 4 -rw--- 1 cyrus mail  1539 May 23 11:40 756.
 4 -rw--- 1 cyrus mail  1541 May 23 11:41 757.
20 -rw--- 1 cyrus mail 16424 May 23 11:41 cyrus.cache
 4 -rw--- 1 cyrus mail   184 May 23 11:41 cyrus.header
 4 -rw--- 1 cyrus mail  1768 May 23 11:41 cyrus.index
 4 drwx-- 2 cyrus mail  4096 May 23 11:41 Drafts
 4 drwx-- 2 cyrus mail  4096 May 23 11:41 for-sale
 4 drwx-- 2 cyrus mail  4096 May 23 11:41 hello
 4 drwx-- 2 cyrus mail  4096 May 23 12:11 Sent
12 drwx-- 2 cyrus mail 12288 May 23 11:41 Trash


cyrus permissions - (I changed user cyrus permission to full to see if 
it worked - but it didn't)


localhost.localdomain> lam user.test2*
user.test2:
  test2 lrswipkxtea
  cyrus lrswipkxtecda
user.test2.Drafts:
  test2 lrswipkxtea
  cyrus lrswipkxtecda
user.test2.Sent:
  test2 lrswipkxtea
  cyrus lrswipkxtecda
user.test2.Trash:
  test2 lrswipkxtea
  cyrus lrswipkxtecda
user.test2.for-sale:
  test2 lrswipkxtea
  cyrus lrswipkxtecda
user.test2.hello:
  test2 lrswipkxtea
  cyrus lrswipkxtecda
user.test2.ssn:
  test2 lrswipkxtea
  cyrus lrswipkxtecda

cyrus.conf
SERVICES {
  # add or remove based on preferences
  imapcmd="imapd" listen="imap" prefork=5
  imapscmd="imapd -s" listen="imaps" prefork=1
  pop3cmd="pop3d" listen="pop3" prefork=3
  pop3scmd="pop3d -s" listen="pop3s" prefork=1
  sievecmd="timsieved" listen="sieve" prefork=0
  oldsieve  cmd="timsieved" listen="2000" prefork=0


Other sieve functions work like "reject" "vacation" but not fileinto.

Are there any other suggestions?

Regards

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus




Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: sieve runtime error Fileinto: Permission denied

[Merlin Hartley via Info-cyrus]

I wonder if this is an 'altnamespace' issue - are you specifying INBOX/folder?

--
Merlin Hartley


> On 23 May 2016, at 12:52, Sunny via Info-cyrus 
>  wrote:
> 
> Hi,
> 
> I'm seeing the following error logs with some users sieve filtering
> May 23 11:41:31 imap02 lmtpunix[26005]: sieve runtime error for test2 id 
> <5742de5a.3040...@org.ac.uk>: Fileinto: Permission denied
> 
> Essentially emails are not being put into the specific folders.
> 
> Their cyrus:mail permissions are in place
> 
> [root@imap02 test2]# ls -ls /var/spool/imap/t/user/test2/
> 4 -rw--- 1 cyrus mail  1663 May 23 10:36 747.
> 4 -rw--- 1 cyrus mail  1904 May 23 10:53 748.
> 4 -rw--- 1 cyrus mail  1661 May 23 10:54 749.
> 4 -rw--- 1 cyrus mail  1666 May 23 10:56 750.
> 4 -rw--- 2 cyrus mail  1613 May 23 11:00 751.
> 4 -rw--- 1 cyrus mail  1541 May 23 11:12 752.
> 4 -rw--- 1 cyrus mail  1541 May 23 11:20 753.
> 4 -rw--- 1 cyrus mail  1537 May 23 11:22 754.
> 4 -rw--- 1 cyrus mail  1537 May 23 11:23 755.
> 4 -rw--- 1 cyrus mail  1539 May 23 11:40 756.
> 4 -rw--- 1 cyrus mail  1541 May 23 11:41 757.
> 20 -rw--- 1 cyrus mail 16424 May 23 11:41 cyrus.cache
> 4 -rw--- 1 cyrus mail   184 May 23 11:41 cyrus.header
> 4 -rw--- 1 cyrus mail  1768 May 23 11:41 cyrus.index
> 4 drwx-- 2 cyrus mail  4096 May 23 11:41 Drafts
> 4 drwx-- 2 cyrus mail  4096 May 23 11:41 for-sale
> 4 drwx-- 2 cyrus mail  4096 May 23 11:41 hello
> 4 drwx-- 2 cyrus mail  4096 May 23 12:11 Sent
> 12 drwx-- 2 cyrus mail 12288 May 23 11:41 Trash
> 
> 
> cyrus permissions - (I changed user cyrus permission to full to see if it 
> worked - but it didn't)
> 
> localhost.localdomain> lam user.test2*
> user.test2:
> test2 lrswipkxtea
> cyrus lrswipkxtecda
> user.test2.Drafts:
> test2 lrswipkxtea
> cyrus lrswipkxtecda
> user.test2.Sent:
> test2 lrswipkxtea
> cyrus lrswipkxtecda
> user.test2.Trash:
> test2 lrswipkxtea
> cyrus lrswipkxtecda
> user.test2.for-sale:
> test2 lrswipkxtea
> cyrus lrswipkxtecda
> user.test2.hello:
> test2 lrswipkxtea
> cyrus lrswipkxtecda
> user.test2.ssn:
> test2 lrswipkxtea
> cyrus lrswipkxtecda
> 
> cyrus.conf
> SERVICES {
> # add or remove based on preferences
> imapcmd="imapd" listen="imap" prefork=5
> imapscmd="imapd -s" listen="imaps" prefork=1
> pop3cmd="pop3d" listen="pop3" prefork=3
> pop3scmd="pop3d -s" listen="pop3s" prefork=1
> sievecmd="timsieved" listen="sieve" prefork=0
> oldsieve  cmd="timsieved" listen="2000" prefork=0
> 
> 
> Other sieve functions work like "reject" "vacation" but not fileinto.
> 
> Are there any other suggestions?
> 
> Regards
> 
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: sieve runtime error Fileinto: Permission denied

[Bron Gondwana via Info-cyrus]

On Tue, May 24, 2016, at 20:16, Patrick Boutilier via Info-cyrus wrote:
> On 05/24/2016 01:56 AM, OBATA Akio via Info-cyrus wrote:
> > On Tue, 24 May 2016 12:32:07 +0900, Bron Gondwana via Info-cyrus
> >  wrote:
> >
> >> On Tue, May 24, 2016, at 10:44, OBATA Akio via Info-cyrus wrote:
> >>> On Tue, 24 May 2016 07:25:42 +0900, Bron Gondwana via Info-cyrus
> >>>  wrote:
> >>>
> >>> > On Mon, May 23, 2016, at 22:47, Sundeep Singh Nanuwa via Info-cyrus
> >>> wrote:
> >>> >> On 23/05/16 13:35, Bron Gondwana via Info-cyrus wrote:
> >>> >> > You need to have "anyone p" acl to fileinto anything other than
> >>> inbox.
> >>> >> That didn't work unfortunately.
> >>> >
> >>> > Deliver into INBOX works, fileinto doesn't.  It's ACLs for sure.
> >>> You need the 'p'
> >>> > ACL set for the user that lmtpd runs as (or anyone).
> >>> >
> >>> > Unless there's a bug in your particular version of Cyrus, that
> >>> should work.  If you
> >>> > could give us that and a copy of your lam output again with the
> >>> anyone ACLs set,
> >>> > maybe that will help.
> >>>
> >>> In which version of Cyrus release, 'p' permission is required even
> >>> with "sieve fileinto"?
> >>> I know that only direct lmtp deliver with subaddress require it.
> >>
> >> Within lmtpd, subaddress delivery and fileinto are identical.  I've
> >> just checked back to the 2.3 branch and the logic is the same there
> >> too - if there's an error delivering to the named mailbox, we fall
> >> back to the INBOX with an authstate based on the username, which is
> >> why you don't need 'p' on the INBOX.
> >
> > I'm using "fileinto" without 'anyone p' permission on 2.4.18.
> > I believe that sieve scripts will run as the user, whereas subaddress is
> > lmtpd user.
> >
> 
> Same here. I don't have "anyone p" set and fileinto works on 2.4.18 .

Hrm, OK.  I guess I haven't spent as much time in that area of the code,
and my understanding was wrong.  Doesn't explain why default delivery
works but fileinto doesn't for this case then...

Bron.

-- 
  Bron Gondwana
  br...@fastmail.fm

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: sieve runtime error Fileinto: Permission denied

[Patrick Boutilier via Info-cyrus]

On 05/24/2016 01:56 AM, OBATA Akio via Info-cyrus wrote:

On Tue, 24 May 2016 12:32:07 +0900, Bron Gondwana via Info-cyrus
 wrote:


On Tue, May 24, 2016, at 10:44, OBATA Akio via Info-cyrus wrote:

On Tue, 24 May 2016 07:25:42 +0900, Bron Gondwana via Info-cyrus
 wrote:

> On Mon, May 23, 2016, at 22:47, Sundeep Singh Nanuwa via Info-cyrus
wrote:
>> On 23/05/16 13:35, Bron Gondwana via Info-cyrus wrote:
>> > You need to have "anyone p" acl to fileinto anything other than
inbox.
>> That didn't work unfortunately.
>
> Deliver into INBOX works, fileinto doesn't.  It's ACLs for sure.
You need the 'p'
> ACL set for the user that lmtpd runs as (or anyone).
>
> Unless there's a bug in your particular version of Cyrus, that
should work.  If you
> could give us that and a copy of your lam output again with the
anyone ACLs set,
> maybe that will help.

In which version of Cyrus release, 'p' permission is required even
with "sieve fileinto"?
I know that only direct lmtp deliver with subaddress require it.


Within lmtpd, subaddress delivery and fileinto are identical.  I've
just checked back to the 2.3 branch and the logic is the same there
too - if there's an error delivering to the named mailbox, we fall
back to the INBOX with an authstate based on the username, which is
why you don't need 'p' on the INBOX.


I'm using "fileinto" without 'anyone p' permission on 2.4.18.
I believe that sieve scripts will run as the user, whereas subaddress is
lmtpd user.



Same here. I don't have "anyone p" set and fileinto works on 2.4.18 .
<>
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: sieve runtime error Fileinto: Permission denied

[OBATA Akio via Info-cyrus]

On Tue, 24 May 2016 12:32:07 +0900, Bron Gondwana via Info-cyrus 
 wrote:


On Tue, May 24, 2016, at 10:44, OBATA Akio via Info-cyrus wrote:

On Tue, 24 May 2016 07:25:42 +0900, Bron Gondwana via Info-cyrus 
 wrote:

> On Mon, May 23, 2016, at 22:47, Sundeep Singh Nanuwa via Info-cyrus wrote:
>> On 23/05/16 13:35, Bron Gondwana via Info-cyrus wrote:
>> > You need to have "anyone p" acl to fileinto anything other than inbox.
>> That didn't work unfortunately.
>
> Deliver into INBOX works, fileinto doesn't.  It's ACLs for sure.  You need 
the 'p'
> ACL set for the user that lmtpd runs as (or anyone).
>
> Unless there's a bug in your particular version of Cyrus, that should work.  
If you
> could give us that and a copy of your lam output again with the anyone ACLs 
set,
> maybe that will help.

In which version of Cyrus release, 'p' permission is required even with "sieve 
fileinto"?
I know that only direct lmtp deliver with subaddress require it.


Within lmtpd, subaddress delivery and fileinto are identical.  I've just 
checked back to the 2.3 branch and the logic is the same there too - if there's 
an error delivering to the named mailbox, we fall back to the INBOX with an 
authstate based on the username, which is why you don't need 'p' on the INBOX.


I'm using "fileinto" without 'anyone p' permission on 2.4.18.
I believe that sieve scripts will run as the user, whereas subaddress is lmtpd 
user.

--
OBATA Akio / ob...@lins.jp

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: sieve runtime error Fileinto: Permission denied

[Bron Gondwana via Info-cyrus]

On Tue, May 24, 2016, at 10:44, OBATA Akio via Info-cyrus wrote:
> On Tue, 24 May 2016 07:25:42 +0900, Bron Gondwana via Info-cyrus 
>  wrote:
> 
> > On Mon, May 23, 2016, at 22:47, Sundeep Singh Nanuwa via Info-cyrus wrote:
> >> On 23/05/16 13:35, Bron Gondwana via Info-cyrus wrote:
> >> > You need to have "anyone p" acl to fileinto anything other than inbox.
> >> That didn't work unfortunately.
> >
> > Deliver into INBOX works, fileinto doesn't.  It's ACLs for sure.  You need 
> > the 'p'
> > ACL set for the user that lmtpd runs as (or anyone).
> >
> > Unless there's a bug in your particular version of Cyrus, that should work. 
> >  If you
> > could give us that and a copy of your lam output again with the anyone ACLs 
> > set,
> > maybe that will help.
> 
> In which version of Cyrus release, 'p' permission is required even with 
> "sieve fileinto"?
> I know that only direct lmtp deliver with subaddress require it.

Within lmtpd, subaddress delivery and fileinto are identical.  I've just 
checked back to the 2.3 branch and the logic is the same there too - if there's 
an error delivering to the named mailbox, we fall back to the INBOX with an 
authstate based on the username, which is why you don't need 'p' on the INBOX.

Bron.

-- 
  Bron Gondwana
  br...@fastmail.fm

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: sieve runtime error Fileinto: Permission denied

[OBATA Akio via Info-cyrus]

On Tue, 24 May 2016 07:25:42 +0900, Bron Gondwana via Info-cyrus 
 wrote:


On Mon, May 23, 2016, at 22:47, Sundeep Singh Nanuwa via Info-cyrus wrote:

On 23/05/16 13:35, Bron Gondwana via Info-cyrus wrote:
> You need to have "anyone p" acl to fileinto anything other than inbox.
That didn't work unfortunately.


Deliver into INBOX works, fileinto doesn't.  It's ACLs for sure.  You need the 
'p'
ACL set for the user that lmtpd runs as (or anyone).

Unless there's a bug in your particular version of Cyrus, that should work.  If 
you
could give us that and a copy of your lam output again with the anyone ACLs set,
maybe that will help.


In which version of Cyrus release, 'p' permission is required even with "sieve 
fileinto"?
I know that only direct lmtp deliver with subaddress require it.

--
OBATA Akio / ob...@lins.jp

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: sieve runtime error Fileinto: Permission denied

[Bron Gondwana via Info-cyrus]

On Mon, May 23, 2016, at 22:47, Sundeep Singh Nanuwa via Info-cyrus wrote:
> On 23/05/16 13:35, Bron Gondwana via Info-cyrus wrote:
> > You need to have "anyone p" acl to fileinto anything other than inbox.
> That didn't work unfortunately.

Deliver into INBOX works, fileinto doesn't.  It's ACLs for sure.  You need the 
'p'
ACL set for the user that lmtpd runs as (or anyone).

Unless there's a bug in your particular version of Cyrus, that should work.  If 
you
could give us that and a copy of your lam output again with the anyone ACLs set,
maybe that will help.

-- 
  Bron Gondwana
  br...@fastmail.fm

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: sieve runtime error Fileinto: Permission denied

[Sundeep Singh Nanuwa via Info-cyrus]

On 23/05/16 14:09, Jack Snodgrass via Info-cyrus wrote:
file permissions like right.. acl permissions look right... are you 
running with selinux set to something other than disabled? Just a 
guess... but everything else looks ok.


It's disabled
SELINUX=disabled

Thanks

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: sieve runtime error Fileinto: Permission denied

[Jack Snodgrass via Info-cyrus]

file permissions like right.. acl permissions look right... are you 
running with selinux set to something other than disabled? Just a 
guess... but everything else looks ok.


jack



On 05/23/2016 07:47 AM, Sundeep Singh Nanuwa via Info-cyrus wrote:



On 23/05/16 13:35, Bron Gondwana via Info-cyrus wrote:

You need to have "anyone p" acl to fileinto anything other than inbox.

That didn't work unfortunately.

Thanks



Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus



--
*jack* - Southlake Texas - http://mylinuxguy.net 
 - *817-601-7338*

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: sieve runtime error Fileinto: Permission denied

[Sundeep Singh Nanuwa via Info-cyrus]

On 23/05/16 13:35, Bron Gondwana via Info-cyrus wrote:

You need to have "anyone p" acl to fileinto anything other than inbox.

That didn't work unfortunately.

Thanks



Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: sieve runtime error Fileinto: Permission denied

[Bron Gondwana via Info-cyrus]

You need to have "anyone p" acl to fileinto anything other than inbox.

Bron.  

On Mon, May 23, 2016, at 21:52, Sunny via Info-cyrus wrote:
> Hi,
> 
> I'm seeing the following error logs with some users sieve filtering
> May 23 11:41:31 imap02 lmtpunix[26005]: sieve runtime error for test2 id 
> <5742de5a.3040...@org.ac.uk>: Fileinto: Permission denied
> 
> Essentially emails are not being put into the specific folders.
> 
> Their cyrus:mail permissions are in place
> 
> [root@imap02 test2]# ls -ls /var/spool/imap/t/user/test2/
>   4 -rw--- 1 cyrus mail  1663 May 23 10:36 747.
>   4 -rw--- 1 cyrus mail  1904 May 23 10:53 748.
>   4 -rw--- 1 cyrus mail  1661 May 23 10:54 749.
>   4 -rw--- 1 cyrus mail  1666 May 23 10:56 750.
>   4 -rw--- 2 cyrus mail  1613 May 23 11:00 751.
>   4 -rw--- 1 cyrus mail  1541 May 23 11:12 752.
>   4 -rw--- 1 cyrus mail  1541 May 23 11:20 753.
>   4 -rw--- 1 cyrus mail  1537 May 23 11:22 754.
>   4 -rw--- 1 cyrus mail  1537 May 23 11:23 755.
>   4 -rw--- 1 cyrus mail  1539 May 23 11:40 756.
>   4 -rw--- 1 cyrus mail  1541 May 23 11:41 757.
> 20 -rw--- 1 cyrus mail 16424 May 23 11:41 cyrus.cache
>   4 -rw--- 1 cyrus mail   184 May 23 11:41 cyrus.header
>   4 -rw--- 1 cyrus mail  1768 May 23 11:41 cyrus.index
>   4 drwx-- 2 cyrus mail  4096 May 23 11:41 Drafts
>   4 drwx-- 2 cyrus mail  4096 May 23 11:41 for-sale
>   4 drwx-- 2 cyrus mail  4096 May 23 11:41 hello
>   4 drwx-- 2 cyrus mail  4096 May 23 12:11 Sent
> 12 drwx-- 2 cyrus mail 12288 May 23 11:41 Trash
> 
> 
> cyrus permissions - (I changed user cyrus permission to full to see if 
> it worked - but it didn't)
> 
> localhost.localdomain> lam user.test2*
> user.test2:
>test2 lrswipkxtea
>cyrus lrswipkxtecda
> user.test2.Drafts:
>test2 lrswipkxtea
>cyrus lrswipkxtecda
> user.test2.Sent:
>test2 lrswipkxtea
>cyrus lrswipkxtecda
> user.test2.Trash:
>test2 lrswipkxtea
>cyrus lrswipkxtecda
> user.test2.for-sale:
>test2 lrswipkxtea
>cyrus lrswipkxtecda
> user.test2.hello:
>test2 lrswipkxtea
>cyrus lrswipkxtecda
> user.test2.ssn:
>test2 lrswipkxtea
>cyrus lrswipkxtecda
> 
> cyrus.conf
> SERVICES {
># add or remove based on preferences
>imapcmd="imapd" listen="imap" prefork=5
>imapscmd="imapd -s" listen="imaps" prefork=1
>pop3cmd="pop3d" listen="pop3" prefork=3
>pop3scmd="pop3d -s" listen="pop3s" prefork=1
>sievecmd="timsieved" listen="sieve" prefork=0
>oldsieve  cmd="timsieved" listen="2000" prefork=0
> 
> 
> Other sieve functions work like "reject" "vacation" but not fileinto.
> 
> Are there any other suggestions?
> 
> Regards
> 
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


-- 
  Bron Gondwana
  br...@fastmail.fm

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

sieve runtime error Fileinto: Permission denied

[Sunny via Info-cyrus]

Hi,

I'm seeing the following error logs with some users sieve filtering
May 23 11:41:31 imap02 lmtpunix[26005]: sieve runtime error for test2 id 
<5742de5a.3040...@org.ac.uk>: Fileinto: Permission denied


Essentially emails are not being put into the specific folders.

Their cyrus:mail permissions are in place

[root@imap02 test2]# ls -ls /var/spool/imap/t/user/test2/
 4 -rw--- 1 cyrus mail  1663 May 23 10:36 747.
 4 -rw--- 1 cyrus mail  1904 May 23 10:53 748.
 4 -rw--- 1 cyrus mail  1661 May 23 10:54 749.
 4 -rw--- 1 cyrus mail  1666 May 23 10:56 750.
 4 -rw--- 2 cyrus mail  1613 May 23 11:00 751.
 4 -rw--- 1 cyrus mail  1541 May 23 11:12 752.
 4 -rw--- 1 cyrus mail  1541 May 23 11:20 753.
 4 -rw--- 1 cyrus mail  1537 May 23 11:22 754.
 4 -rw--- 1 cyrus mail  1537 May 23 11:23 755.
 4 -rw--- 1 cyrus mail  1539 May 23 11:40 756.
 4 -rw--- 1 cyrus mail  1541 May 23 11:41 757.
20 -rw--- 1 cyrus mail 16424 May 23 11:41 cyrus.cache
 4 -rw--- 1 cyrus mail   184 May 23 11:41 cyrus.header
 4 -rw--- 1 cyrus mail  1768 May 23 11:41 cyrus.index
 4 drwx-- 2 cyrus mail  4096 May 23 11:41 Drafts
 4 drwx-- 2 cyrus mail  4096 May 23 11:41 for-sale
 4 drwx-- 2 cyrus mail  4096 May 23 11:41 hello
 4 drwx-- 2 cyrus mail  4096 May 23 12:11 Sent
12 drwx-- 2 cyrus mail 12288 May 23 11:41 Trash


cyrus permissions - (I changed user cyrus permission to full to see if 
it worked - but it didn't)


localhost.localdomain> lam user.test2*
user.test2:
  test2 lrswipkxtea
  cyrus lrswipkxtecda
user.test2.Drafts:
  test2 lrswipkxtea
  cyrus lrswipkxtecda
user.test2.Sent:
  test2 lrswipkxtea
  cyrus lrswipkxtecda
user.test2.Trash:
  test2 lrswipkxtea
  cyrus lrswipkxtecda
user.test2.for-sale:
  test2 lrswipkxtea
  cyrus lrswipkxtecda
user.test2.hello:
  test2 lrswipkxtea
  cyrus lrswipkxtecda
user.test2.ssn:
  test2 lrswipkxtea
  cyrus lrswipkxtecda

cyrus.conf
SERVICES {
  # add or remove based on preferences
  imapcmd="imapd" listen="imap" prefork=5
  imapscmd="imapd -s" listen="imaps" prefork=1
  pop3cmd="pop3d" listen="pop3" prefork=3
  pop3scmd="pop3d -s" listen="pop3s" prefork=1
  sievecmd="timsieved" listen="sieve" prefork=0
  oldsieve  cmd="timsieved" listen="2000" prefork=0


Other sieve functions work like "reject" "vacation" but not fileinto.

Are there any other suggestions?

Regards

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus