Re: [Mailman-Users] mailman and group mismatch error

2009-08-05 Thread Greg White


 Mark wrote:
 Greg White wrote:

Since the mailman account on a centos and redhat system is setup as nologin 
how else would you send a post?


 Via SMTP to the incoming MTA.


I tried to post a message to the list. I started mutt, pressed m, to: 
t...@xyz.com, subject test, wrote this is a test :wq, pressed y to send.


 And it worked. Your message was delivered to Mailman.


If the mailman user can't login can I post to the list?


 The Mailman user doesn't ever need to log in. The MTA pipes the post to
 the wrapper which invokes the proper script to queue it for Mailman.

It appears that part of my problem is that I didn't understand how to properly 
send a message.  I have postfix only listening on the loopback interface.  It 
appears like I will have to change the config so it listens on the eth0 
interface.  Then I have to setup user authentication on postfix.  Finally I 
have to open the smtp port on the firewall.  I was hoping that I could just use 
the local mutt to post a message.  Does this sound about right?

Thanks,

_
Express your personality in color! Preview and select themes for Hotmail®. 
http://www.windowslive-hotmail.com/LearnMore/personalize.aspx?ocid=PID23391::T:WLMTAGL:ON:WL:en-US:WM_HYGN_express:082009
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] mailman and group mismatch error

2009-08-05 Thread Mark Sapiro
Greg White wrote:

It appears that part of my problem is that I didn't understand how to properly 
send a message.  I have postfix only listening on the loopback interface.  It 
appears like I will have to change the config so it listens on the eth0 
interface.  Then I have to setup user authentication on postfix.  Finally I 
have to open the smtp port on the firewall.  I was hoping that I could just 
use the local mutt to post a message.  Does this sound about right?


No. This does not sound right. Your messages from Mutt are being
delivered to Mailman with your current setup. And Mailman's replies
are being accepted and delivered by Postfix.

As long as you don't care that non-local users will not be able to
subscribe or post or send commands to Mailman via email and you don't
care that external bounces can't be delivered back to Mailman, you
don't need an MTA listening on an external interface.

Even if you do want those things, you don't need user authentication.
User authentication is onnly needed if you want to relay mail from
non-local to non-local. It is not required to accept external mail on
port 25 and deliver it locally.

I am still concerned that you don't think you are successfully posting
to Mailman from your local Mutt. You are! Look in your maildir
directory and find the messages from Mailman.

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] mailman and group mismatch error

2009-08-03 Thread Greg White

 krem...@kreme.com wrote:
 On 1-Aug-2009, at 12:43, Greg White wrote:
 To send the test message I sshd into my box as user, su - to root,
 and did:
 # /usr/lib/mailman/mail/mailman post test
 Group mismatch error. Mailman expected the mail wrapper script to be
 executed as one of the following groups:
 [mail, postfix, mailman, nobody, daemon],
 but the system's mail server executed the mail script as group:
 root.
 Try tweaking the mail server to run the script as one of these groups:
 [mail, postfix, mailman, nobody, daemon],
 or re-run configure providing the command line option:
 '--with-mail-gid=root'.

 Right. The error message is quite clear. Why do you think running the
 command as root WOULD work?

 try su mailman ( or sudo -u mailman ) and then run the command.

Since the mailman account on a centos and redhat system is setup as nologin how 
else would you send a post?

 I then use mutt (still as root) to send an email and this is what I
 see in /var/log/maillog

 Sent an email to what, exactly? the list?

I tried to post a message to the list.  I started mutt, pressed m, to: 
t...@xyz.com, subject test, wrote this is a test :wq, pressed y to send.

 Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix
 mail system
 Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version
 2.3.3, configuration /etc/postfix
 Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error.
 Mailman expected the mail wrapper script to be executed as one of
 the following groups: [mail, postfix, mailman, nobody, daemon], but
 the system's mail server executed the mail script as group: root.
 Try tweaking the mail server to run the script as one of these
 groups: [mail, postfix, mailman, nobody, daemon], or re-run
 configure providing the command line option: '--with-mail-gid=root'.

 This looks like test attempt above.

 Aug 1 13:25:02 list postfix/local[2769]: C122C8604E0: to=,
 orig_to=, relay=local, delay=0.51, delays=0.25/0.05/0/0.21,
 dsn=2.0.0, status=sent (delivered to command: /usr/lib/mailman/mail/
 mailman post mailman)

 That worked. Mailman is configured correctly.

 Finally I exit root and go back to being a user and I do:
 /usr/lib/mailman/mail/mailman post test

 And why do you think that would work? Again, the error message is
 quite clear.

 What is the problem? It looks to me like everything is working properly.

If the mailman user can't login can I post to the list?

_
Get back to school stuff for them and cashback for you.
http://www.bing.com/cashback?form=MSHYCBpubl=WLHMTAGcrea=TEXT_MSHYCB_BackToSchool_Cashback_BTSCashback_1x1
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] mailman and group mismatch error

2009-08-03 Thread Greg White





 Mark wrote:

 Greg White wrote:



 Mark wrote:



 The above looks good. what is the exact group mismatch error
message

 you get in the DSN and/or maillog when you mail to
t...@list.xyz.com?



To send the test message I sshd into my box as user, su - to root, and
did:

# /usr/lib/mailman/mail/mailman post test

Group mismatch error. Mailman expected the mail wrapper script to be

executed as one of the following groups:

[mail, postfix, mailman, nobody, daemon],

but the system's mail server executed the mail script as group:
root.

Try tweaking the mail server to run the script as one of these groups:

[mail, postfix, mailman, nobody, daemon],

or re-run configure providing the command line option:

'--with-mail-gid=root'.





 As I said in an earlier post, this means nothing. It only says that

 root can't run the wrapper, but says nothing about Postfix running the

 wrapper.



If this means nothing then way is it displayed?  It is a worrysome message for 
the first time maillist admin.



I then use mutt (still as root) to send an email and this is what I
see in /var/log/maillog

Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix mail
system

Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version
2.3.3, configuration /etc/postfix

Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error.
Mailman expected the mail wrapper script to be executed as one of the following
groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server
executed the mail script as group: root. Try tweaking the mail
server to run the script as one of these groups: [mail, postfix, mailman,
nobody, daemon], or re-run configure providing the command line option:
'--with-mail-gid=root'.





 OK. This one is meaningful. It says Postfix is trying to run the

 wrapper as root (or does it?), and that is a problem. See below for

 more.





Finally I exit root and go back to being a user and I do:

/usr/lib/mailman/mail/mailman post test

Group mismatch error. Mailman expected the mail wrapper script to be

executed as one of the following groups:

[mail, postfix, mailman, nobody, daemon],

but the system's mail server executed the mail script as group:
user.

Try tweaking the mail server to run the script as one of these groups:

[mail, postfix, mailman, nobody, daemon],

or re-run configure providing the command line option:

'--with-mail-gid=user'.





 Again, this one is not relevant. If you do



 sudo -u mailman /usr/lib/mailman/mail/mailman post test



 it should work. That is also what Postfix should be doing.



 Earlier you said -



# ls -lhZ /etc/mailman/aliases*

-rw-rw root mailman user_u:object_r:mailman_data_t
/etc/mailman/aliases

-rw-rw-r-- mailman mailman user_u:object_r:mailman_data_t
/etc/mailman/aliases.db





 I.e. the aliases.db is owned by 'mailman'. Also, Postfix's 'man 8

 local' says in part



 DELIVERY RIGHTS

 Deliveries to external files and external commands are made

 with the

 rights of the receiving user on whose behalf the delivery is

 made. In

 the absence of a user context, the local(8) daemon uses the

 owner

 rights of the :include: file or alias database. When those

 files are

 owned by the superuser, delivery is made with the rights

 specified with

 the default_privs configuration parameter.





 This says that Postfix executes the wrapper as the user who owns the

 alias database in which the pipe to the wrapper is found which is

 mailman, not root.



 Do you have Mailman aliases in /etc/aliases too? Even that shouldn't

 cause this problem as (you said) /etc/aliases.db is owned by root and

 that should cause Postfix to execute any pipes found there as the

 default-privs user which is normally 'nobody'.



 This appears to be a Postfix issue of some kind, or perhaps not.



 How is mutt delivering mail? In your log excerpt I only see



Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix mail
system

Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version
2.3.3, configuration /etc/postfix

Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error.
Mailman expected the mail wrapper script to be executed as one of the following
groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server
executed the mail script as group: root. Try tweaking the mail
server to run the script as one of these groups: [mail, postfix, mailman,
nobody, daemon], or re-run configure providing the command line option:
'--with-mail-gid=root'.



 I see nothing preceding this that indicates Postfix received the mail

 and tried to pipe it to the wrapper. I only see over two minutes later



Aug 1 13:25:01 list postfix/pickup[2498]: C122C8604E0: uid=41 from=

Aug 1 13:25:01 list postfix/cleanup[2767]: C122C8604E0: message-id=

Aug 1 13:25:01 list postfix/qmgr[2499]: C122C8604E0: from=, size=625,
nrcpt=1 (queue active)

Aug 1 13:25:02 list postfix/local[2769]: C122C8604E0: to=, orig_to=,

Re: [Mailman-Users] mailman and group mismatch error

2009-08-03 Thread Greg White

 Mark wrote:
 Greg White wrote:

I then use mutt (still as root) to send an email and this is what I see in 
/var/log/maillog
Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix mail system
Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version 2.3.3, 
configuration /etc/postfix
Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error. Mailman 
expected the mail wrapper script to be executed as one of the following 
groups: [mail, postfix, mailman, nobody, daemon], but the system's mail 
server executed the mail script as group: root. Try tweaking the mail 
server to run the script as one of these groups: [mail, postfix, mailman, 
nobody, daemon], or re-run configure providing the command line option: 
'--with-mail-gid=root'.


 Now that I've thought about this a bit more, I think I see it more
 clearly. To summarize, the above message was written by the wrapper
 itself when you ran it from the command line as root.


Aug 1 13:25:01 list postfix/pickup[2498]: C122C8604E0: uid=41 from=
Aug 1 13:25:01 list postfix/cleanup[2767]: C122C8604E0: message-id=
Aug 1 13:25:01 list postfix/qmgr[2499]: C122C8604E0: from=, size=625, nrcpt=1 
(queue active)
Aug 1 13:25:02 list postfix/local[2769]: C122C8604E0: to=, orig_to=, 
relay=local, delay=0.51, delays=0.25/0.05/0/0.21, dsn=2.0.0, status=sent 
(delivered to command: /usr/lib/mailman/mail/mailman post mailman)
Aug 1 13:25:02 list postfix/qmgr[2499]: C122C8604E0: removed


 And these messages indicate a successful delivery to the wrapper by
 Postfix with no group mismatch error of the message you sent with mutt.

 So you don't have a group mismatch problem. The only group mismatch
 errors occur when you run the wrapper by hand as the 'wrong' user
 which is supposed to produce the group mismatch error so everything is
 working.

 If your posts are not reaching the 'mailman' list, there is some reason
 other than aliases or group mismatch for it. See the FAQ at

1)
# /usr/lib/mailman/bin/check_perms
Warning: Private archive directory is other-executable (o+x).
 This could allow other users on your system to read private archives.
 If you're on a shared multiuser system, you should consult the
 installation manual on how to fix this.
No problems found

2a)
# ps aux |grep cron |grep -v grep
root  2503  0.0  0.1   5288  1208 ?Ss   08:24   0:00 crond
root  2519  0.0  0.0   1668   624 ?SNs  08:24   0:00 anacron -s

2b)
# ps auxww| grep mailmanctl |grep -v grep
mailman   2615  0.0  0.5  13060  4880 ?Ss   08:24   0:00 
/usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start

3)
# grep wrapper /etc/aliases
no results
# grep mailman /etc/aliases
no results

Since my aliases aren't in /etc/aliases I ran the following too:
# grep wrapper /etc/mailman/aliases
no results

# grep mailman /etc/mailman/aliases
mailman-loop: /var/lib/mailman/data/owner-bounces.mbox
# STANZA START: mailman
mailman: |/usr/lib/mailman/mail/mailman post mailman
mailman-admin:   |/usr/lib/mailman/mail/mailman admin mailman
mailman-bounces: |/usr/lib/mailman/mail/mailman bounces mailman
mailman-confirm: |/usr/lib/mailman/mail/mailman confirm mailman
mailman-join:|/usr/lib/mailman/mail/mailman join mailman
mailman-leave:   |/usr/lib/mailman/mail/mailman leave mailman
mailman-owner:   |/usr/lib/mailman/mail/mailman owner mailman
mailman-request: |/usr/lib/mailman/mail/mailman request mailman
mailman-subscribe:   |/usr/lib/mailman/mail/mailman subscribe mailman
mailman-unsubscribe: |/usr/lib/mailman/mail/mailman unsubscribe mailman
# STANZA END: mailman
test: |/usr/lib/mailman/mail/mailman post test
test-admin:   |/usr/lib/mailman/mail/mailman admin test
test-bounces: |/usr/lib/mailman/mail/mailman bounces test
test-confirm: |/usr/lib/mailman/mail/mailman confirm test
test-join:|/usr/lib/mailman/mail/mailman join test
test-leave:   |/usr/lib/mailman/mail/mailman leave test
test-owner:   |/usr/lib/mailman/mail/mailman owner test
test-request: |/usr/lib/mailman/mail/mailman request test
test-subscribe:   |/usr/lib/mailman/mail/mailman subscribe test
test-unsubscribe: |/usr/lib/mailman/mail/mailman unsubscribe test

4) Not applicable as sendmail is not installed.
5) Not applicable as sendmail is not installed.

6a) not applicable as I am using 2.1.9-4.el5
6b) no command to run
7) I can't find the locks.
8)
#cat /var/log/mailman/smtp
Aug 03 08:25:03 2009 (2622)  smtp to mailman for 1 recips, completed in 0.101 
seconds
Aug 03 08:30:02 2009 (2622)  smtp to mailman for 1 recips, completed in 0.040 
seconds
Aug 03 08:35:02 2009 (2622)  smtp to mailman for 1 recips, completed in 0.040 
seconds
Aug 03 08:40:05 2009 (2622)  smtp to mailman for 1 recips, completed in 0.039 
seconds
Aug 03 08:45:04 2009 (2622)  smtp to mailman for 1 recips, completed in 0.042 
seconds
Aug 03 08:50:04 2009 (2622)  smtp to mailman for 1 recips, completed in 0.041 

Re: [Mailman-Users] mailman and group mismatch error

2009-08-03 Thread Mark Sapiro
Greg White wrote:

 Mark wrote:

 Greg White wrote:

To send the test message I sshd into my box as user, su - to root, and
did:

# /usr/lib/mailman/mail/mailman post test

Group mismatch error. Mailman expected the mail wrapper script to be
executed as one of the following groups:
[mail, postfix, mailman, nobody, daemon],
but the system's mail server executed the mail script as group:
root.
Try tweaking the mail server to run the script as one of these groups:
[mail, postfix, mailman, nobody, daemon],
or re-run configure providing the command line option:
'--with-mail-gid=root'.


 As I said in an earlier post, this means nothing. It only says that
 root can't run the wrapper, but says nothing about Postfix running the
 wrapper.



If this means nothing then way is it displayed?  It is a worrysome message for 
the first time maillist admin.


It is displayed because you ran the wrapper from the command line as
root and root's group is not allowed to run the wrapper.

It means nothing because that is not how mail is delivered to Mailman.
Mail is delivered by the MTA executing the wrapper, so the only
meaningful test is to run the wrapper as the same group that the MTA
runs it.



[...]
 How is mutt delivering mail? In your log excerpt I only see

Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix mail
system
Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version
2.3.3, configuration /etc/postfix
Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error.
Mailman expected the mail wrapper script to be executed as one of the following
groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server
executed the mail script as group: root. Try tweaking the mail
server to run the script as one of these groups: [mail, postfix, mailman,
nobody, daemon], or re-run configure providing the command line option:
'--with-mail-gid=root'.

 I see nothing preceding this that indicates Postfix received the mail
 and tried to pipe it to the wrapper. I only see over two minutes later


And as I said in a follow-up post and LuKreme said in a reply, the
above log message was logged by the wrapper when you ran it by hand as
root.


Aug 1 13:25:01 list postfix/pickup[2498]: C122C8604E0: uid=41 from=
Aug 1 13:25:01 list postfix/cleanup[2767]: C122C8604E0: message-id=
Aug 1 13:25:01 list postfix/qmgr[2499]: C122C8604E0: from=, size=625,
nrcpt=1 (queue active)
Aug 1 13:25:02 list postfix/local[2769]: C122C8604E0: to=, orig_to=,
relay=local, delay=0.51, delays=0.25/0.05/0/0.21, dsn=2.0.0, status=sent
(delivered to command: /usr/lib/mailman/mail/mailman post mailman)
Aug 1 13:25:02 list postfix/qmgr[2499]: C122C8604E0: removed

 Which looks like a successful delivery to me. Is Mailman running? Is
 this message in qfiles/in? What happened to it?

No there are no mailman aliases in the /etc/aliases file.  Mutt should be 
using the local postfix server to send the message.  I checked /etc/Muttrc and 
there is no setting for smtp.


And mutt is delivering to Postfix and Postfix is successfully
delivering to Mailman per the above.


Mailman is running.  Logging in as root and doing:

# su mailman /usr/lib/mailman/mail/mailman post test

This account is currently not available.



# sudo -u mailman /usr/lib/mailman/mail/mailman post test

The system just sits there and does nothing.


It's reading your message from stdin which is your terminal. So no
group mismatch.


There is only 1 account
signed up for the mail list so it should take 10 minutes to do something. 
It has been 10 minutes since I pressed enter and nothing has happened.  I 
waited 30 minutes and pressed Ctrl-C.  This is what I saw:Traceback (most 
recent call last):
  File /usr/lib/mailman/scripts/post, line 69, in ?
main()
  File /usr/lib/mailman/scripts/post, line 62, in main
inq.enqueue(sys.stdin.read(),
KeyboardInterrupt


How am I supposed to post to the maillist if I can't do it from root or a user
account.  I can't login into the system as mailman:


You are successfully posting to Mailman from mutt. You could also
successfully post from the command line via

sudo -u mailman /usr/lib/mailman/mail/mailman post test  file

where file contains your email message with headers and body, or by
doing what you did and then typing the headers and body of the message
followed by control-D.

I'm not saying you don't have a delivery problem somewhere, but it is
not a group mismatch and it is not a Postfix issue. it is somewhere
beyond that. The message you posted with mutt got to Mailman's 'in'
queue. You need to start looking for what happened after that. Read
the FAQ at http://wiki.list.org/x/A4E9.




The following is everything from the /var/log/maillog since I turn the PC on
this morning:

Aug  3 08:24:18 list postfix/postfix-script: starting the Postfix mail
system
Aug  3 08:24:18 list postfix/master[2468]: daemon started -- version
2.3.3, configuration /etc/postfix
Aug  3 08:25:02 list postfix/pickup[2472]: 

Re: [Mailman-Users] mailman and group mismatch error

2009-08-03 Thread Mark Sapiro
Greg White wrote:

#cat /var/log/mailman/smtp
Aug 03 08:25:03 2009 (2622)  smtp to mailman for 1 recips, completed in 0.101 
seconds
Aug 03 08:30:02 2009 (2622)  smtp to mailman for 1 recips, completed in 0.040 
seconds
Aug 03 08:35:02 2009 (2622)  smtp to mailman for 1 recips, completed in 0.040 
seconds
Aug 03 08:40:05 2009 (2622)  smtp to mailman for 1 recips, completed in 0.039 
seconds
Aug 03 08:45:04 2009 (2622)  smtp to mailman for 1 recips, completed in 0.042 
seconds
Aug 03 08:50:04 2009 (2622)  smtp to mailman for 1 recips, completed in 0.041 
seconds
Aug 03 08:55:04 2009 (2622)  smtp to mailman for 1 recips, completed in 0.040 
seconds
Aug 03 09:00:04 2009 (2622)  smtp to mailman for 1 recips, completed in 0.041 
seconds
Aug 03 09:00:04 2009 (2622)  smtp to mailman for 1 recips, completed in 0.052 
seconds
Aug 03 09:05:03 2009 (2622)  smtp to mailman for 1 recips, completed in 0.041 
seconds
Aug 03 09:10:03 2009 (2622)  smtp to mailman for 1 recips, completed in 0.041 
seconds
Aug 03 09:15:04 2009 (2622)  smtp to mailman for 1 recips, completed in 0.041 
seconds
Aug 03 09:20:04 2009 (2622)  smtp to mailman for 1 recips, completed in 0.041 
seconds
Aug 03 09:25:04 2009 (2622)  smtp to mailman for 1 recips, completed in 0.042 
seconds


Mailman is delivering mail to Postfix and from your previously posted
Postfix log, Postfix is delivering it to someone's maildir, e.g.
(corresponding to the second message above)

Aug  3 08:30:02 list postfix/smtpd[2727]: connect from
localhost.localdomain[127.0.0.1]
Aug  3 08:30:02 list postfix/smtpd[2727]: DCB7F8604DD:
client=localhost.localdomain[127.0.0.1]
Aug  3 08:30:02 list postfix/cleanup[2723]: DCB7F8604DD:
message-id=
Aug  3 08:30:02 list postfix/qmgr[2473]: DCB7F8604DD:
from=, size=1952, nrcpt=1 (queue active)
Aug  3 08:30:02 list postfix/smtpd[2727]: disconnect from
localhost.localdomain[127.0.0.1]
Aug  3 08:30:02 list postfix/local[2725]: DCB7F8604DD:
to=,
relay=local, delay=0.02, delays=0.01/0.01/0/0, dsn=2.0.0, status=sent
(delivered to maildir)
Aug  3 08:30:02 list postfix/qmgr[2473]: DCB7F8604DD: removed


Perhaps you should try to find this mail. Since you've elided all the
message-id's, I can't tell if this is a delivered post or a notice
about a held message. I'm confused about that because you say there's
no vette log which indicates the post wasn't held, but if it was
delivered, there should be a post log entry, and you say there's no
post log either.

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] mailman and group mismatch error

2009-08-03 Thread Mark Sapiro
Greg White wrote:

Since the mailman account on a centos and redhat system is setup as nologin 
how else would you send a post?


Via SMTP to the incoming MTA.


I tried to post a message to the list.  I started mutt, pressed m, to: 
t...@xyz.com, subject test, wrote this is a test :wq, pressed y to send.


And it worked. Your message was delivered to Mailman.


If the mailman user can't login can I post to the list?


The Mailman user doesn't ever need to log in. The MTA pipes the post to
the wrapper which invokes the proper script to queue it for Mailman.

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] mailman and group mismatch error

2009-08-03 Thread Adam McGreggor
On Mon, Aug 03, 2009 at 07:55:04AM -0700, Mark Sapiro wrote:
 Greg White wrote:
 
 #cat /var/log/mailman/smtp
 Aug 03 08:25:03 2009 (2622)  smtp to mailman for 1 recips, completed in 
 0.101 seconds

[...]

 Perhaps you should try to find this mail. Since you've elided all the
 message-id's, I can't tell if this is a delivered post or a notice
 about a held message. I'm confused about that because you say there's
 no vette log which indicates the post wasn't held, but if it was
 delivered, there should be a post log entry, and you say there's no
 post log either.

[ I don't think i've seen this in the mail-exchanges so far ]

It may be useful to check the list-members of the 'mailman' list, too.
(either via list_members, or the web-interface)

Is the recipient of the list what you expect it to be?

(I'm by no means a Postfix fan)

-- 
``Jim Hacker: What appalling cynicism.''
``Sir Humphrey: We call it diplomacy, Minister.''
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] mailman and group mismatch error

2009-08-03 Thread Mark Sapiro
Adam McGreggor wrote:

On Mon, Aug 03, 2009 at 07:55:04AM -0700, Mark Sapiro wrote:
 Greg White wrote:
 
 #cat /var/log/mailman/smtp
 Aug 03 08:25:03 2009 (2622)  smtp to mailman for 1 recips, completed in 
 0.101 seconds

[...]

 Perhaps you should try to find this mail. Since you've elided all the
 message-id's, I can't tell if this is a delivered post or a notice
 about a held message. I'm confused about that because you say there's
 no vette log which indicates the post wasn't held, but if it was
 delivered, there should be a post log entry, and you say there's no
 post log either.

[ I don't think i've seen this in the mail-exchanges so far ]


From the post I quote above archived at
http://mail.python.org/pipermail/mailman-users/2009-August/07.html

quote
8)
#cat /var/log/mailman/smtp
Aug 03 08:25:03 2009 (2622)  smtp to mailman for 1 recips, completed in
0.101 seconds
snip
 
#cat /var/log/mailman/qrunner
Aug 03 08:24:27 2009 (2617) ArchRunner qrunner started.
snip

The rest were empty or didn't exist.
/quote

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] mailman and group mismatch error

2009-08-02 Thread Greg White

 Mark wrote:
 Greg wrote:

# ls -lhZ /etc/aliases*
-rw-r--r-- root root system_u:object_r:etc_aliases_t /etc/aliases
-rw-r--r-- root root system_u:object_r:etc_aliases_t /etc/aliases.db

# ls -lhZ /etc/mailman/aliases*
-rw-rw root mailman user_u:object_r:mailman_data_t /etc/mailman/aliases
-rw-rw-r-- mailman mailman user_u:object_r:mailman_data_t 
/etc/mailman/aliases.db


 This looks good. The key thing is that Mailman's aliases.db is owned by
 mailman.

snip

So do I have everything configured right??
Do I have to recompile mailman? If so it looks like I have to recompile 
starting with ./configure --with-mail-gid=root


 The above looks good. what is the exact group mismatch error message
 you get in the DSN and/or maillog when you mail to t...@list.xyz.com?

To send the test message I sshd into my box as user, su - to root, and did:
# /usr/lib/mailman/mail/mailman post test
Group mismatch error. Mailman expected the mail wrapper script to be
executed as one of the following groups:
[mail, postfix, mailman, nobody, daemon],
but the system's mail server executed the mail script as group: root.
Try tweaking the mail server to run the script as one of these groups:
[mail, postfix, mailman, nobody, daemon],
or re-run configure providing the command line option:
'--with-mail-gid=root'.

I then use mutt (still as root) to send an email and this is what I see in 
/var/log/maillog
Aug  1 13:21:44 list postfix/postfix-script: starting the Postfix mail system
Aug  1 13:21:44 list postfix/master[2494]: daemon started -- version 2.3.3, 
configuration /etc/postfix
Aug  1 13:22:23 list Mailman mail-wrapper: Group mismatch error. Mailman 
expected the mail wrapper script to be executed as one of the following groups: 
[mail, postfix, mailman, nobody, daemon], but the system's mail server executed 
the mail script as group: root. Try tweaking the mail server to run the 
script as one of these groups: [mail, postfix, mailman, nobody, daemon], or 
re-run configure providing the command line option: '--with-mail-gid=root'.
Aug  1 13:25:01 list postfix/pickup[2498]: C122C8604E0: uid=41 from=
Aug  1 13:25:01 list postfix/cleanup[2767]: C122C8604E0: message-id=
Aug  1 13:25:01 list postfix/qmgr[2499]: C122C8604E0: from=, size=625, nrcpt=1 
(queue active)
Aug  1 13:25:02 list postfix/local[2769]: C122C8604E0: to=, orig_to=, 
relay=local, delay=0.51, delays=0.25/0.05/0/0.21, dsn=2.0.0, status=sent 
(delivered to command: /usr/lib/mailman/mail/mailman post mailman)
Aug  1 13:25:02 list postfix/qmgr[2499]: C122C8604E0: removed
Aug  1 13:25:04 list postfix/smtpd[2771]: connect from 
localhost.localdomain[127.0.0.1]
Aug  1 13:25:04 list postfix/smtpd[2771]: 792BE8604DD: 
client=localhost.localdomain[127.0.0.1]
Aug  1 13:25:04 list postfix/cleanup[2767]: 792BE8604DD: message-id=
Aug  1 13:25:04 list postfix/qmgr[2499]: 792BE8604DD: from=, size=1952, nrcpt=1 
(queue active)
Aug  1 13:25:04 list postfix/smtpd[2771]: disconnect from 
localhost.localdomain[127.0.0.1]
Aug  1 13:25:04 list postfix/local[2769]: 792BE8604DD: to=, relay=local, 
delay=0.07, delays=0.01/0/0/0.06, dsn=2.0.0, status=sent (delivered to maildir)
Aug  1 13:25:04 list postfix/qmgr[2499]: 792BE8604DD: removed
Aug  1 13:26:19 list postfix/pickup[2498]: C49B88604E0: uid=0 from=
Aug  1 13:26:19 list postfix/cleanup[2767]: C49B88604E0: message-id=
Aug  1 13:26:19 list postfix/qmgr[2499]: C49B88604E0: from=, size=418, nrcpt=1 
(queue active)
Aug  1 13:26:20 list postfix/local[2769]: C49B88604E0: to=, relay=local, 
delay=0.28, delays=0.1/0/0/0.18, dsn=2.0.0, status=sent (delivered to command: 
/usr/lib/mailman/mail/mailman post test)
Aug  1 13:26:20 list postfix/qmgr[2499]: C49B88604E0: removed

Finally I exit root and go back to being a user and I do:
/usr/lib/mailman/mail/mailman post test
Group mismatch error. Mailman expected the mail wrapper script to be
executed as one of the following groups:
[mail, postfix, mailman, nobody, daemon],
but the system's mail server executed the mail script as group: user.
Try tweaking the mail server to run the script as one of these groups:
[mail, postfix, mailman, nobody, daemon],
or re-run configure providing the command line option:
'--with-mail-gid=user'.

Thanks,
Greg

_
Get free photo software from Windows Live
http://www.windowslive.com/online/photos?ocid=PID23393::T:WLMTAGL:ON:WL:en-US:SI_PH_software:082009
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] mailman and group mismatch error

2009-08-02 Thread LuKreme

On 1-Aug-2009, at 12:43, Greg White wrote:
To send the test message I sshd into my box as user, su - to root,  
and did:

# /usr/lib/mailman/mail/mailman post test
Group mismatch error. Mailman expected the mail wrapper script to be
executed as one of the following groups:
[mail, postfix, mailman, nobody, daemon],
but the system's mail server executed the mail script as group:  
root.

Try tweaking the mail server to run the script as one of these groups:
[mail, postfix, mailman, nobody, daemon],
or re-run configure providing the command line option:
'--with-mail-gid=root'.


Right. The error message is quite clear. Why do you think running the  
command as root WOULD work?


try su mailman ( or sudo -u mailman ) and then run the command.

I then use mutt (still as root) to send an email and this is what I  
see in /var/log/maillog


Sent an email to what, exactly? the list?

Aug  1 13:21:44 list postfix/postfix-script: starting the Postfix  
mail system
Aug  1 13:21:44 list postfix/master[2494]: daemon started -- version  
2.3.3, configuration /etc/postfix
Aug  1 13:22:23 list Mailman mail-wrapper: Group mismatch error.  
Mailman expected the mail wrapper script to be executed as one of  
the following groups: [mail, postfix, mailman, nobody, daemon], but  
the system's mail server executed the mail script as group: root.  
Try tweaking the mail server to run the script as one of these  
groups: [mail, postfix, mailman, nobody, daemon], or re-run  
configure providing the command line option: '--with-mail-gid=root'.


This looks like test attempt above.

Aug  1 13:25:02 list postfix/local[2769]: C122C8604E0: to=,  
orig_to=, relay=local, delay=0.51, delays=0.25/0.05/0/0.21,  
dsn=2.0.0, status=sent (delivered to command: /usr/lib/mailman/mail/ 
mailman post mailman)


That worked. Mailman is configured correctly.


Finally I exit root and go back to being a user and I do:
/usr/lib/mailman/mail/mailman post test


And why do you think that would work? Again, the error message is  
quite clear.


What is the problem? It looks to me like everything is working properly.


--
Do not meddle in the affairs of Dragons for you are crunchy and
taste good with ketchup

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] mailman and group mismatch error

2009-08-01 Thread Greg White

 Mark wrote:

 Greg wrote:

I am running Centos 5.3 with all of the updates. I needed a mail list server 
so I installed mailman and postfix. I did yum install postfix and yum install 
mailman. postfix installed and can send email to my live account so it is 
working. mailman is installed and I can goto my server and subscribe to a 
list. I get the confirmation email from mailman. However when I try to post I 
get a group mismatch error.

I have done a google search and everyone says to recompile with the proper 
./configure. I installed from packages. I would rather not have to recompile. 
Everything seems to be ok except I can't post.

# /usr/lib/mailman/mail/mailman post mailman
Group mismatch error. Mailman expected the mail wrapper script to be executed
as one of the following groups:
[mail, postfix, mailman, nobody, daemon],
but the system's mail server executed the mail script as group: root.
Try tweaking the mail server to run the script as one of these groups:
[mail, postfix, mailman, nobody, daemon],
or re-run configure providing the command line option:
'--with-mail-gid=root'.


 This only tells us that you ran the wrapper as root. It doesn't say how
 Postfix ran it.

# /usr/lib/mailman/bin/check_perms -f
No problems found

So what did I do wrong? And why isn't check_perms detecting the problem. 
From what I read on the internet this is a very common problem.


 Group mismatch errors have little to do with permissions and
 check_perms can't really check them. See the FAQ at
 .

 The answer in your case is that Mailman's aliases need to be in an
 aliases.db file whose owner's primary group is one of your above list
 - normally 'mailman'. Note that this doesn't mean the file's group; it
 means the primary group of the file's owner. This is a Postfix thing.

 If you have Mailman/Postfix integration properly configured, this
 should be automatic because the aliases will be in Mailman's
 data/aliases* files and data/aliases.db will be owned by the Mailman
 user.

 Note that if this isn't all properly set up from the rpms, that is a
 RedHat/CentOS packaging issue over which we have no control.

 --
 Mark Sapiro  The highway is for gamblers,
 San Francisco Bay Area, California better use your sense - B. Dylan


# ls -lhZ /etc/aliases*
-rw-r--r--  root root system_u:object_r:etc_aliases_t  /etc/aliases
-rw-r--r--  root root system_u:object_r:etc_aliases_t  /etc/aliases.db

# ls -lhZ /etc/mailman/aliases*
-rw-rw  rootmailman user_u:object_r:mailman_data_t   
/etc/mailman/aliases
-rw-rw-r--  mailman mailman user_u:object_r:mailman_data_t   
/etc/mailman/aliases.db

# cat /etc/mailman/aliases
# This file is generated by Mailman, and is kept in sync with the
# binary hash file aliases.db.  YOU SHOULD NOT MANUALLY EDIT THIS FILE
# unless you know what you're doing, and can keep the two files properly
# in sync.  If you screw it up, you're on your own.

# The ultimate loop stopper address
mailman-loop: /var/lib/mailman/data/owner-bounces.mbox

# STANZA START: mailman
# CREATED: Thu Jul 23 14:23:19 2009
mailman: |/usr/lib/mailman/mail/mailman post mailman
mailman-admin:   |/usr/lib/mailman/mail/mailman admin mailman
mailman-bounces: |/usr/lib/mailman/mail/mailman bounces mailman
mailman-confirm: |/usr/lib/mailman/mail/mailman confirm mailman
mailman-join:|/usr/lib/mailman/mail/mailman join mailman
mailman-leave:   |/usr/lib/mailman/mail/mailman leave mailman
mailman-owner:   |/usr/lib/mailman/mail/mailman owner mailman
mailman-request: |/usr/lib/mailman/mail/mailman request mailman
mailman-subscribe:   |/usr/lib/mailman/mail/mailman subscribe mailman
mailman-unsubscribe: |/usr/lib/mailman/mail/mailman unsubscribe mailman
# STANZA END: mailman

# STANZA START: test
# CREATED: Thu Jul 23 16:21:13 2009
test: |/usr/lib/mailman/mail/mailman post test
test-admin:   |/usr/lib/mailman/mail/mailman admin test
test-bounces: |/usr/lib/mailman/mail/mailman bounces test
test-confirm: |/usr/lib/mailman/mail/mailman confirm test
test-join:|/usr/lib/mailman/mail/mailman join test
test-leave:   |/usr/lib/mailman/mail/mailman leave test
test-owner:   |/usr/lib/mailman/mail/mailman owner test
test-request: |/usr/lib/mailman/mail/mailman request test
test-subscribe:   |/usr/lib/mailman/mail/mailman subscribe test
test-unsubscribe: |/usr/lib/mailman/mail/mailman unsubscribe test
# STANZA END: test

# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/mailman/aliases, hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
home_mailbox = Maildir/
html_directory = no
inet_interfaces = localhost
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mydomain = xyz.com
myhostname = list.xyz.com
mynetworks = 10.100.159.0/24, 

Re: [Mailman-Users] mailman and group mismatch error

2009-08-01 Thread Mark Sapiro
Greg White wrote:

 Mark wrote:

 The above looks good. what is the exact group mismatch error message
 you get in the DSN and/or maillog when you mail to t...@list.xyz.com?

To send the test message I sshd into my box as user, su - to root, and did:
# /usr/lib/mailman/mail/mailman post test
Group mismatch error. Mailman expected the mail wrapper script to be
executed as one of the following groups:
[mail, postfix, mailman, nobody, daemon],
but the system's mail server executed the mail script as group: root.
Try tweaking the mail server to run the script as one of these groups:
[mail, postfix, mailman, nobody, daemon],
or re-run configure providing the command line option:
'--with-mail-gid=root'.


As I said in an earlier post, this means nothing. It only says that
root can't run the wrapper, but says nothing about Postfix running the
wrapper.


I then use mutt (still as root) to send an email and this is what I see in 
/var/log/maillog
Aug  1 13:21:44 list postfix/postfix-script: starting the Postfix mail system
Aug  1 13:21:44 list postfix/master[2494]: daemon started -- version 2.3.3, 
configuration /etc/postfix
Aug  1 13:22:23 list Mailman mail-wrapper: Group mismatch error. Mailman 
expected the mail wrapper script to be executed as one of the following 
groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server 
executed the mail script as group: root. Try tweaking the mail server to run 
the script as one of these groups: [mail, postfix, mailman, nobody, daemon], 
or re-run configure providing the command line option: '--with-mail-gid=root'.


OK. This one is meaningful. It says Postfix is trying to run the
wrapper as root (or does it?), and that is a problem. See below for
more.


Finally I exit root and go back to being a user and I do:
/usr/lib/mailman/mail/mailman post test
Group mismatch error. Mailman expected the mail wrapper script to be
executed as one of the following groups:
[mail, postfix, mailman, nobody, daemon],
but the system's mail server executed the mail script as group: user.
Try tweaking the mail server to run the script as one of these groups:
[mail, postfix, mailman, nobody, daemon],
or re-run configure providing the command line option:
'--with-mail-gid=user'.


Again, this one is not relevant. If you do

sudo -u mailman /usr/lib/mailman/mail/mailman post test

it should work. That is also what Postfix should be doing.

Earlier you said -

# ls -lhZ /etc/mailman/aliases*
-rw-rw  rootmailman user_u:object_r:mailman_data_t   
/etc/mailman/aliases
-rw-rw-r--  mailman mailman user_u:object_r:mailman_data_t   
/etc/mailman/aliases.db


I.e. the aliases.db is owned by 'mailman'. Also, Postfix's 'man 8
local' says in part

DELIVERY RIGHTS
   Deliveries to external files and external commands are  made 
with  the
   rights  of the receiving user on whose behalf the delivery is
made.  In
   the absence of a user context,  the  local(8)  daemon  uses  the
 owner
   rights  of  the :include: file or alias database.  When those
files are
   owned by the superuser, delivery is made with the rights
specified with
   the default_privs configuration parameter.


This says that Postfix executes the wrapper as the user who owns the
alias database in which the pipe to the wrapper is found which is
mailman, not root.

Do you have Mailman aliases in /etc/aliases too? Even that shouldn't
cause this problem as (you said) /etc/aliases.db is owned by root and
that should cause Postfix to execute any pipes found there as the
default-privs user which is normally 'nobody'.

This appears to be a Postfix issue of some kind, or perhaps not.

How is mutt delivering mail? In your log excerpt I only see

Aug  1 13:21:44 list postfix/postfix-script: starting the Postfix mail system
Aug  1 13:21:44 list postfix/master[2494]: daemon started -- version 2.3.3, 
configuration /etc/postfix
Aug  1 13:22:23 list Mailman mail-wrapper: Group mismatch error. Mailman 
expected the mail wrapper script to be executed as one of the following 
groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server 
executed the mail script as group: root. Try tweaking the mail server to run 
the script as one of these groups: [mail, postfix, mailman, nobody, daemon], 
or re-run configure providing the command line option: '--with-mail-gid=root'.

I see nothing preceding this that indicates Postfix received the mail
and tried to pipe it to the wrapper. I only see over two minutes later

Aug  1 13:25:01 list postfix/pickup[2498]: C122C8604E0: uid=41 from=
Aug  1 13:25:01 list postfix/cleanup[2767]: C122C8604E0: message-id=
Aug  1 13:25:01 list postfix/qmgr[2499]: C122C8604E0: from=, size=625, nrcpt=1 
(queue active)
Aug  1 13:25:02 list postfix/local[2769]: C122C8604E0: to=, orig_to=, 
relay=local, delay=0.51, delays=0.25/0.05/0/0.21, dsn=2.0.0, status=sent 
(delivered to command: /usr/lib/mailman/mail/mailman post mailman)
Aug  1 13:25:02 list postfix/qmgr[2499]: 

Re: [Mailman-Users] mailman and group mismatch error

2009-08-01 Thread Mark Sapiro
Greg White wrote:

I then use mutt (still as root) to send an email and this is what I see in 
/var/log/maillog
Aug  1 13:21:44 list postfix/postfix-script: starting the Postfix mail system
Aug  1 13:21:44 list postfix/master[2494]: daemon started -- version 2.3.3, 
configuration /etc/postfix
Aug  1 13:22:23 list Mailman mail-wrapper: Group mismatch error. Mailman 
expected the mail wrapper script to be executed as one of the following 
groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server 
executed the mail script as group: root. Try tweaking the mail server to run 
the script as one of these groups: [mail, postfix, mailman, nobody, daemon], 
or re-run configure providing the command line option: '--with-mail-gid=root'.


Now that I've thought about this a bit more, I think I see it more
clearly. To summarize, the above message was written by the wrapper
itself when you ran it from the command line as root.


Aug  1 13:25:01 list postfix/pickup[2498]: C122C8604E0: uid=41 from=
Aug  1 13:25:01 list postfix/cleanup[2767]: C122C8604E0: message-id=
Aug  1 13:25:01 list postfix/qmgr[2499]: C122C8604E0: from=, size=625, nrcpt=1 
(queue active)
Aug  1 13:25:02 list postfix/local[2769]: C122C8604E0: to=, orig_to=, 
relay=local, delay=0.51, delays=0.25/0.05/0/0.21, dsn=2.0.0, status=sent 
(delivered to command: /usr/lib/mailman/mail/mailman post mailman)
Aug  1 13:25:02 list postfix/qmgr[2499]: C122C8604E0: removed


And these messages indicate a successful delivery to the wrapper by
Postfix with no group mismatch error of the message you sent with mutt.

So you don't have a group mismatch problem. The only group mismatch
errors occur when you run the wrapper by hand as the 'wrong' user
which is supposed to produce the group mismatch error so everything is
working.

If your posts are not reaching the 'mailman' list, there is some reason
other than aliases or group mismatch for it. See the FAQ at
http://wiki.list.org/x/A4E9.

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] mailman and group mismatch error

2009-07-31 Thread Mark Sapiro
Greg White wrote:

# ls -lhZ /etc/aliases*
-rw-r--r--  root root system_u:object_r:etc_aliases_t  /etc/aliases
-rw-r--r--  root root system_u:object_r:etc_aliases_t  /etc/aliases.db

# ls -lhZ /etc/mailman/aliases*
-rw-rw  rootmailman user_u:object_r:mailman_data_t   
/etc/mailman/aliases
-rw-rw-r--  mailman mailman user_u:object_r:mailman_data_t   
/etc/mailman/aliases.db


This looks good. The key thing is that Mailman's aliases.db is owned by
mailman.


# cat /etc/mailman/aliases
# This file is generated by Mailman, and is kept in sync with the
# binary hash file aliases.db.  YOU SHOULD NOT MANUALLY EDIT THIS FILE
# unless you know what you're doing, and can keep the two files properly
# in sync.  If you screw it up, you're on your own.

# The ultimate loop stopper address
mailman-loop: /var/lib/mailman/data/owner-bounces.mbox

# STANZA START: mailman
# CREATED: Thu Jul 23 14:23:19 2009
mailman: |/usr/lib/mailman/mail/mailman post mailman
mailman-admin:   |/usr/lib/mailman/mail/mailman admin mailman
mailman-bounces: |/usr/lib/mailman/mail/mailman bounces mailman
mailman-confirm: |/usr/lib/mailman/mail/mailman confirm mailman
mailman-join:|/usr/lib/mailman/mail/mailman join mailman
mailman-leave:   |/usr/lib/mailman/mail/mailman leave mailman
mailman-owner:   |/usr/lib/mailman/mail/mailman owner mailman
mailman-request: |/usr/lib/mailman/mail/mailman request mailman
mailman-subscribe:   |/usr/lib/mailman/mail/mailman subscribe mailman
mailman-unsubscribe: |/usr/lib/mailman/mail/mailman unsubscribe mailman
# STANZA END: mailman

# STANZA START: test
# CREATED: Thu Jul 23 16:21:13 2009
test: |/usr/lib/mailman/mail/mailman post test
test-admin:   |/usr/lib/mailman/mail/mailman admin test
test-bounces: |/usr/lib/mailman/mail/mailman bounces test
test-confirm: |/usr/lib/mailman/mail/mailman confirm test
test-join:|/usr/lib/mailman/mail/mailman join test
test-leave:   |/usr/lib/mailman/mail/mailman leave test
test-owner:   |/usr/lib/mailman/mail/mailman owner test
test-request: |/usr/lib/mailman/mail/mailman request test
test-subscribe:   |/usr/lib/mailman/mail/mailman subscribe test
test-unsubscribe: |/usr/lib/mailman/mail/mailman unsubscribe test
# STANZA END: test

# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/mailman/aliases, hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
home_mailbox = Maildir/
html_directory = no
inet_interfaces = localhost
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mydomain = xyz.com
myhostname = list.xyz.com
mynetworks = 10.100.159.0/24, 127.0.0.0/8
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
recipient_delimiter = +
relay_domains =
relayhost =
sample_directory = /usr/share/doc/postfix-2.3.3/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP $mail_name
unknown_local_recipient_reject_code = 550

So do I have everything configured right??
Do I have to recompile mailman?  If so it looks like I have to recompile 
starting with ./configure --with-mail-gid=root


The above looks good. what is the exact group mismatch error message
you get in the DSN and/or maillog when you mail to t...@list.xyz.com?

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


[Mailman-Users] mailman and group mismatch error

2009-07-30 Thread Greg White

Hi,

I am running Centos 5.3 with all of the updates.  I needed a mail list server 
so I installed mailman and postfix.  I did yum install postfix and yum install 
mailman.  postfix installed and can send email to my live account so it is 
working.  mailman is installed and I can goto my server and subscribe to a 
list.  I get the confirmation email from mailman.  However when I try to post I 
get a group mismatch error.

I have done a google search and everyone says to recompile with the proper 
./configure.  I installed from packages.  I would rather not have to recompile. 
 Everything seems to be ok except I can't post.

# /usr/lib/mailman/mail/mailman post mailman
Group mismatch error. Mailman expected the mail wrapper script to be executed
as one of the following groups:
[mail, postfix, mailman, nobody, daemon],
but the system's mail server executed the mail script as group: root.
Try tweaking the mail server to run the script as one of these groups:
[mail, postfix, mailman, nobody, daemon],
or re-run configure providing the command line option:
'--with-mail-gid=root'.
# /usr/lib/mailman/bin/check_perms -f
No problems found

So what did I do wrong?  And why isn't check_perms detecting the problem.  
From what I read on the internet this is a very common problem.

Thanks,
Greg


_
Windows Live™ SkyDrive™: Store, access, and share your photos. See how.
http://windowslive.com/Online/SkyDrive?ocid=TXT_TAGLM_WL_CS_SD_photos_072009
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] mailman and group mismatch error

2009-07-30 Thread Mark Sapiro
Greg White wrote:

I am running Centos 5.3 with all of the updates.  I needed a mail list server 
so I installed mailman and postfix.  I did yum install postfix and yum install 
mailman.  postfix installed and can send email to my live account so it is 
working.  mailman is installed and I can goto my server and subscribe to a 
list.  I get the confirmation email from mailman.  However when I try to post 
I get a group mismatch error.

I have done a google search and everyone says to recompile with the proper 
./configure.  I installed from packages.  I would rather not have to 
recompile.  Everything seems to be ok except I can't post.

# /usr/lib/mailman/mail/mailman post mailman
Group mismatch error. Mailman expected the mail wrapper script to be executed
as one of the following groups:
[mail, postfix, mailman, nobody, daemon],
but the system's mail server executed the mail script as group: root.
Try tweaking the mail server to run the script as one of these groups:
[mail, postfix, mailman, nobody, daemon],
or re-run configure providing the command line option:
'--with-mail-gid=root'.


This only tells us that you ran the wrapper as root. It doesn't say how
Postfix ran it.

# /usr/lib/mailman/bin/check_perms -f
No problems found

So what did I do wrong?  And why isn't check_perms detecting the problem.  
From what I read on the internet this is a very common problem.


Group mismatch errors have little to do with permissions and
check_perms can't really check them. See the FAQ at
http://wiki.list.org/x/tYA9.

The answer in your case is that Mailman's aliases need to be in an
aliases.db file whose owner's primary group is one of your above list
- normally 'mailman'. Note that this doesn't mean the file's group; it
means the primary group of the file's owner. This is a Postfix thing.

If you have Mailman/Postfix integration properly configured, this
should be automatic because the aliases will be in Mailman's
data/aliases* files and data/aliases.db will be owned by the Mailman
user.

Note that if this isn't all properly set up from the rpms, that is a
RedHat/CentOS packaging issue over which we have no control.

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9