permission issue

Moderator: crythias

Locked
boosten
Znuny newbie
Posts: 10
Joined: 24 Mar 2014, 14:50
Znuny Version: 6.1
Real Name: Alexander

permission issue

Post by boosten »

Hi,
I've upgraded from 2.4.7 to 3.3.5 version. All works well except of incoming emails. I use Freebsd 9.1 with apache22, qmail+vpopmail. I have set the following permissions:
otrs user/group: otrs
web user/group: www
admin user/group: root/wheel
I use maildrop filtering with pipe to otrs.Postmaster.pl file. Upon incoming email I have the following error in qmail log file:
deferral: /usr/local/otrs/bin/otrs.PostMaster.pl:_Permission_denied//usr/local/bin/maildrop:_Unable_to_filter_message./
How do I can fix that problem? Thanks in advance.
crythias
Moderator
Posts: 10170
Joined: 04 May 2010, 18:38
Znuny Version: 5.0.x
Location: SouthWest Florida, USA
Contact:

Re: permission issue

Post by crythias »

This is not an OTRS problem.
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so.
Need help? Before you ask
boosten
Znuny newbie
Posts: 10
Joined: 24 Mar 2014, 14:50
Znuny Version: 6.1
Real Name: Alexander

Re: permission issue

Post by boosten »

crythias wrote:This is not an OTRS problem.
The fact is after upgrading to the latest version otrs it can't receive emails. There is no any info about how to fix the security problem. I'm looking for a way to fix the problem.
crythias
Moderator
Posts: 10170
Joined: 04 May 2010, 18:38
Znuny Version: 5.0.x
Location: SouthWest Florida, USA
Contact:

Re: permission issue

Post by crythias »

Permission denied is ... permission denied. search which, admittedly, doesn't say much, but basically, whatever is being called doesn't have appropriate permissions.
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so.
Need help? Before you ask
crythias
Moderator
Posts: 10170
Joined: 04 May 2010, 18:38
Znuny Version: 5.0.x
Location: SouthWest Florida, USA
Contact:

Re: permission issue

Post by crythias »

more to the point... what would be the command line to make it work in the first place?
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so.
Need help? Before you ask
boosten
Znuny newbie
Posts: 10
Joined: 24 Mar 2014, 14:50
Znuny Version: 6.1
Real Name: Alexander

Re: permission issue

Post by boosten »

I have removed maildrop filtering. However, still no success.
I put the following line only:
| /usr/local/otrs/bin/otrs.PostMaster.pl
Now the error line is:
/usr/local/otrs/bin/otrs.PostMaster.pl:_Permission_denied/
When I try to access that file as vpopmail user by
#su -m vpopmail -c "ls -l /usr/local/otrs/bin/otrs.PostMaster.pl"
-rwxrwx--- 1 otrs www 4080 Mar 25 07:45 /usr/local/otrs/bin/otrs.PostMaster.pl
there is no problem.
I found one solution. Instead of otrs user 'otrs' I set it to 'vpopmail'. Emails are accepted until I change some settings through SysConfig. After that both files ZZZAAuto.pm and ZZZAuto.pm are set to user www and group www, so, Postmaster is unable to access them.
crythias
Moderator
Posts: 10170
Joined: 04 May 2010, 18:38
Znuny Version: 5.0.x
Location: SouthWest Florida, USA
Contact:

Re: permission issue

Post by crythias »

add vpopmail to www group?
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so.
Need help? Before you ask
boosten
Znuny newbie
Posts: 10
Joined: 24 Mar 2014, 14:50
Znuny Version: 6.1
Real Name: Alexander

Re: permission issue

Post by boosten »

crythias wrote:add vpopmail to www group?
Sure, it's there
boosten
Znuny newbie
Posts: 10
Joined: 24 Mar 2014, 14:50
Znuny Version: 6.1
Real Name: Alexander

Re: permission issue

Post by boosten »

Another problem with cache files. Postmaster can't access some files because they have 660 permission and user is www or otrs.
Error message:
ERROR:_OTRS-otrs.PostMaster.pl-10_Perl:_5.14.2_OS:_freebsd_Time:_Tue_Mar_25_12:11:02_2014//_Message:_Can't_write_'/usr/local/otrs-3.3.5/var/tmp/CacheFileStorable/DynamicField/6/7/6732332f2164b22a374a2cd7c080aea3':_Permission_denied
Really big headache...
Last edited by boosten on 25 Mar 2014, 18:32, edited 1 time in total.
crythias
Moderator
Posts: 10170
Joined: 04 May 2010, 18:38
Znuny Version: 5.0.x
Location: SouthWest Florida, USA
Contact:

Re: permission issue

Post by crythias »

Postmaster would have access to the things it is group member of.
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so.
Need help? Before you ask
boosten
Znuny newbie
Posts: 10
Joined: 24 Mar 2014, 14:50
Znuny Version: 6.1
Real Name: Alexander

Re: permission issue

Post by boosten »

crythias wrote:Postmaster would have access to the things it is group member of.
Unfortunately, it's not. I found that qmail service sets privilege to vpomail user and its group only. So, any sub-program, like maildrop, runs under vpopmail uid/gid only, Because of that, it can't run PostMaster.pl script. Of course, it's not a problem with otrs. However, current permissions doesn't allow to use postmaster. ;(
Locked