Bug 39887 - Heisenbug: wrong permissions for /var/spool/dovecot/private/$DOMAIN/$USER
Heisenbug: wrong permissions for /var/spool/dovecot/private/$DOMAIN/$USER
Status: CLOSED MOVED
Product: UCS
Classification: Unclassified
Component: Mail - Dovecot
UCS 4.0
Other Linux
: P5 normal (vote)
: UCS 4.1
Assigned To: Sönke Schwardt-Krummrich
Daniel Tröder
: interim-3
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2015-11-11 22:25 CET by Sönke Schwardt-Krummrich
Modified: 2015-11-17 12:12 CET (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sönke Schwardt-Krummrich univentionstaff 2015-11-11 22:25:31 CET
This bug describes a possible heisenbug:
From time to time there are systems that have wrong permissions for the IMAP mail spool of some/all users (/var/spool/dovecot/private/$DOMAIN/$USER):

root@master70:/var/spool/dovecot/private/nstx.local# ls -lad . foobar/ dingdong/ user1 user2
drwxr-s--- 8 dovemail dovemail 4096 Nov 11 21:45 .
drwx--S--- 3 root     dovemail 4096 Nov 11 14:33 dingdong/
drwx--S--- 3 root     dovemail 4096 Nov 11 14:33 foobar/
drwx--S--- 3 dovemail dovemail 4096 Nov 11 20:53 user1
drwx--S--- 3 dovemail dovemail 4096 Nov 11 21:04 user2

root@master70:/var/spool/dovecot/private/nstx.local# ls -laR dingdong/ foobar/
dingdong/:
insgesamt 12
drwx--S--- 3 root     dovemail 4096 Nov 11 14:33 .
drwxr-s--- 8 dovemail dovemail 4096 Nov 11 21:45 ..
drwx--S--- 2 root     dovemail 4096 Nov 11 14:33 Maildir

dingdong/Maildir:
insgesamt 8
drwx--S--- 2 root dovemail 4096 Nov 11 14:33 .
drwx--S--- 3 root dovemail 4096 Nov 11 14:33 ..

foobar/:
insgesamt 12
drwx--S--- 3 root     dovemail 4096 Nov 11 14:33 .
drwxr-s--- 8 dovemail dovemail 4096 Nov 11 21:45 ..
drwx--S--- 2 root     dovemail 4096 Nov 11 14:33 Maildir

foobar/Maildir:
insgesamt 8
drwx--S--- 2 root dovemail 4096 Nov 11 14:33 .
drwx--S--- 3 root dovemail 4096 Nov 11 14:33 ..

User "dingdong" and "foobar" have been created right after OX installation. The mailbox is usually created at the first successful IMAP login (in this case at the OX App Suite interface). The login was successful but OX was unable to show the IMAP INBOX content since dovecot had no read access to the corresponding directories.

"user1" and "user2" have been created after a restart of the system. For "user1" the first login was via OX. For "user2" I tested with sieve-connect which also created the mail spool directory for "user2". In both cases the permissions were correct (dovemail:dovemail) and all services were able to create files and directories.

This behaviour seems not to be reproducible. Another OX system didn't show this problem.

I had this problem now on 3 test systems (UCS 4.0 and 4.1) and another case has been reported in our forum.
Comment 1 Sönke Schwardt-Krummrich univentionstaff 2015-11-11 22:26:58 CET
I'm not sure if this is a OX specific problem. IIRC I had this problem also on a plain UCS system.
Comment 2 Sönke Schwardt-Krummrich univentionstaff 2015-11-11 22:32:29 CET
http://forum.univention.de/viewtopic.php?f=28&t=4517
Comment 3 Sönke Schwardt-Krummrich univentionstaff 2015-11-12 07:59:38 CET
Happened again after updating OX system from 4.0-4 to 4.1-0. So the problem occurred during/after the update. There is already an existing user created/used under 4.0-4 without problems.
Comment 4 Sönke Schwardt-Krummrich univentionstaff 2015-11-12 13:55:25 CET
This was a OX specific problem:
https://bugs.open-xchange.com/show_bug.cgi?id=42340

→ RESOLVED WONTFIX
Comment 5 Daniel Tröder univentionstaff 2015-11-16 08:44:25 CET
Bug was fixed, QAed and closed at the OX-Bugtracker.
Comment 6 Stefan Gohmann univentionstaff 2015-11-17 12:12:30 CET
UCS 4.1 has been released:
 https://docs.software-univention.de/release-notes-4.1-0-en.html
 https://docs.software-univention.de/release-notes-4.1-0-de.html

If this error occurs again, please use "Clone This Bug".