[Mailman-Users] Qmail & BSD further problems

Jon Carnes jonc at nc.rr.com
Sun Sep 15 05:42:58 CEST 2002 

Sorry to be late in getting back.  What you have found out is that BSD
is much more secure than Linux with its filesystem.  I believe there is
a BSD readme that talks about how to set the rights properly.  It may be
that your Set GID does not work for the directories that Mailman needs
to access as Mailman (or it may not work at all in your version of
BSD).  In particular is the problem with your locking directory.  If you
can set that to rights you are golden.

Yes you could run the cron jobs as root for now, but that is a poor
policy and could open you up to some vulnerabilities or exploits.  None
that I know of mind you, but I sure wouldn't advertise what server your
lists were running on...

Rather than run as root, I think I would modify the directories that
Mailman needs to access and simply set them so that anyone had full
rights over them.  This is still bad, but a degree better than running
Mailman as root...

Good Luck - Jon Carnes

On Fri, 2002-09-13 at 11:37, John Wards wrote:
> Hmmm right I run and re run check_perms and it cam up with some problems to
> begin with but i fixed them and its not coming up with any more. I am still
> getting the error message when i run the qrunner as mail man.
> 
> A stab in the dark made me run it as root and it work fine.
> 
> Now is there any big problem running the cron jobs as root?
> 
> Cheers
> John
> ----- Original Message -----
> From: "Ron Jarrell" <jarrell at vt.edu>
> To: "John Wards" <j.wards at sportnetwork.net>
> Cc: <mailman-users at python.org>
> Sent: Friday, September 13, 2002 4:16 PM
> Subject: Re: [Mailman-Users] Qmail & BSD further problems
> 
> 
> > You've screwed your permissions up (or ran some portion of mailman as the
> > wrong user - accidentally running stuff as root can do it, because most of
> > mailman runs as mailman.)
> >
> > qrunner can't write it's lock file, so you're queue isn't running.
> >
> > run /home/mailman/bin/check_perms and see what it bitches about.  You'll
> > probably end up running it as root with the "-f" option to fix things.
> You
> > might need to run it more than once in a row, until it stops complaining
> > about things.
> >
> > At 04:09 PM 9/13/02 +0100, John Wards wrote:
> > >ooooooops.......sorry about that
> > >
> > >Re did it and got this this time:
> > >
> > >Traceback (most recent call last):
> > >   File "/home/mailman/cron/qrunner", line 276, in ?
> > >     lock.lock(timeout=0.5)
> > >   File "/home/mailman/Mailman/LockFile.py", line 219, in lock
> > >     self.__write()
> > >   File "/home/mailman/Mailman/LockFile.py", line 350, in __write
> > >     fp = open(self.__tmpfname, 'w')
> > >IOError: [Errno 13] Permission denied:
> > >'/home/mailman/locks/qrunner.lock.www.sportnetwork.net.19751'
> > >
> > >elp!
> > >----- Original Message -----
> > >From: "Ron Jarrell" <jarrell at vt.edu>
> > >To: "John Wards" <j.wards at sportnetwork.net>
> > >Cc: <mailman-users at python.org>
> > >Sent: Friday, September 13, 2002 3:59 PM
> > >Subject: Re: [Mailman-Users] Qmail & BSD further problems
> > >
> > >
> > > > At 03:58 PM 9/13/02 +0100, John Wards wrote:
> > > > >I do this:
> > > > >  /usr/local/bin/python -S /home/mailman/cron qrunner
> > > > >
> > > > >I get this out!
> > > > >
> > > > >Dzcrontab.in
> > > > >     ^
> > > > >SyntaxError: invalid syntax
> > > > >
> > > > >Any clues?
> > > >
> > > >
> > > > Yea... Re-read the example below and fix your typo :-).  There's no
> space
> > > > between cron and qrunner, it's a slash...  You told it to run a
> directory,
> > > > and python is finding the internal binary format of the directory
> entries
> > > > to be not very understandable as source code.
> > > >
> > > > >----- Original Message -----
> > > > >From: "Jon Carnes" <jonc at nc.rr.com>
> > > > >To: "John Wards" <j.wards at sportnetwork.net>
> > > > >Cc: <mailman-users at python.org>
> > > > >Sent: Friday, September 13, 2002 3:36 PM
> > > > >Subject: Re: [Mailman-Users] Qmail & BSD further problems
> > > > >
> > > > >
> > > > > > So is the problem that the mail is simply sitting in the Mailman
> queue
> > > > > > directory without being delivered?
> > > > > >
> > > > > > Try running qrunner by hand:
> > > > > >   su - mailman
> > > > > >   /usr/local/bin/python -S /home/mailman/cron/qrunner
> > > > > >
> > > > > > Check your qmail log files before and after running the above.  Do
> the
> > > > > > same with your mailman log files.
> > > > > >
> > > > > > Good Luck
> > > > > >
> > > > > > Jon Carnes
> > > > > > ===
> > > > > > On Fri, 2002-09-13 at 04:22, John Wards wrote:
> > > > > > > Can anyone help me on this? I really need a mailing list. If it
> is
> > > > > > > impossible to get mailman working on my system could someone
> please
> > > > >recomend
> > > > > > > another mailing list system that would run on freeBSD. I have
> hunted
> > >and
> > > > > > > hunted for one but I can't find one where users can reply to
> emails
> > >like
> > > > > > > this!
> > > > > > >
> > > > > > > Cheers
> > > > > > > John Wards
> > > > > > > SportNetwork.net
> > > > > > >
> > > > > > >
> > > > > > > > I cannot seem to be able to send messages to my lists or reply
> to
> > > > > > > subscribe
> > > > > > > > to lists. I have included all the logs that I can think of. If
> I
> > >have
> > > > > > > missed
> > > > > > > > any that would be helpful please say.
> > > > > > > >
> > > > > > > > I have checked my qmail logs and everything seems fine:
> > > > > > > > @400000003d80510d0c7a2914 new msg 898
> > > > > > > > @400000003d80510d0c88d2fc info msg 898: bytes 1028 from
> > > > > > > > <j.wards at sportnetwork.net> qp 73230 uid 1005
> > > > > > > > @400000003d80510d0d208304 starting delivery 6510: msg 898 to
> local
> > > > > > > > mailman-test at lists.sportnetwork.net
> > > > > > > > @400000003d80510d0ec9936c status: local 1/10 remote 0/20
> > > > > > > > @400000003d80510e092316a4 delivery 6510: success: did_0+0+1/
> > > > > > > > @400000003d80510e092b5bd4 status: local 0/10 remote 0/20
> > > > > > > > @400000003d80510e092f4ba4 end msg 898
> > > > > > > >
> > > > > > > > I look in my /home/mailman/qfiles/ dir and i see the file:
> > > > > > > >
> > > > > > > > 8b41040d30571a9389822ef8c26bbd728d5bb11c.msg AND
> > > > > > > > 8b41040d30571a9389822ef8c26bbd728d5bb11c.db
> > > > > > > >
> > > > > > > > Which contain:
> > > > > > > >
> > > > > > > > >From j.wards at sportnetwork.net Thu Sep 12 08:32:03 2002
> > > > > > > > Return-Path: <j.wards at sportnetwork.net>
> > > > > > > > Delivered-To: mailman-test at lists.sportnetwork.net
> > > > > > > > Received: (qmail 73230 invoked from network); 12 Sep 2002
> > > > >08:32:03 -0000
> > > > > > > > Received: from smtp-relay01.tc.dsvr.net (212.69.192.4)
> > > > > > > >   by ns1.sportnetwork.net with SMTP; 12 Sep 2002
> 08:32:03 -0000
> > > > > > > > Received: from [212.69.194.109] (helo=durham.serve.co.uk)
> > > > > > > >  by smtp-relay01.tc.dsvr.net with esmtp (Exim 3.33 #3)
> > > > > > > >  id 17pPLd-00055v-00
> > > > > > > >  for test at lists.sportnetwork.net; Thu, 12 Sep 2002 09:29:13
> +0100
> > > > > > > > Received: from JOHNCOMP (dagroup.demon.co.uk
> [194.222.172.210])
> > > > > > > >  by durham.serve.co.uk (8.11.6/8.11.6) with SMTP id
> g8C8T8512838
> > > > > > > >  for <test at lists.sportnetwork.net>; Thu, 12 Sep 2002 09:29:10
> > >+0100
> > > > > > > > Message-ID: <00a701c25a37$0190e790$3100a8c0 at JOHNCOMP>
> > > > > > > > From: "John Wards" <j.wards at sportnetwork.net>
> > > > > > > > To: <test at lists.sportnetwork.net>
> > > > > > > > Subject: test
> > > > > > > > Date: Thu, 12 Sep 2002 09:32:54 +0100
> > > > > > > > MIME-Version: 1.0
> > > > > > > > Content-Type: text/plain;
> > > > > > > >  charset="iso-8859-1"
> > > > > > > > Content-Transfer-Encoding: 7bit
> > > > > > > > X-Priority: 3
> > > > > > > > X-MSMail-Priority: Normal
> > > > > > > > X-Mailer: Microsoft Outlook Express 6.00.2600.0000
> > > > > > > > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
> > > > > > > >
> > > > > > > > test
> > > > > > > > -------------------------------//E-oF
> > > > > > > >
> > > > > > > > AND
> > > > > > > >
> > > > > > > > {s
> > > > > > > > -----------------------------//E-of
> > > > > > > >
> > > > > > > > I do crontab -l as mailman user (I double checked by typing
> > >whoami) I
> > > > >get
> > > > > > > > this
> > > > > > > >
> > > > > > > > # At 5PM every day, mail reminders to admins as to pending
> > >requests
> > > > > > > > 0 17 * * * /usr/local/bin/python -S
> /home/mailman/cron/checkdbs
> > > > > > > > #
> > > > > > > > # Noon, mail digests for lists that do periodic as well as
> > >threshhold
> > > > > > > > delivery.
> > > > > > > > 0 12 * * * /usr/local/bin/python -S
> /home/mailman/cron/senddigests
> > > > > > > > #
> > > > > > > > # 5 AM on the first of each month, mail out password
> reminders.
> > > > > > > > 0 5 1 * * /usr/local/bin/python -S
> /home/mailman/cron/mailpasswds
> > > > > > > > #
> > > > > > > > # Every 5 mins, try to gate news to mail.  You can comment
> this
> > >one
> > > > >out
> > > > > > > > # if you don't want to allow gating, or don't have any going
> on
> > >right
> > > > >now,
> > > > > > > > # or want to exclusively use a callback strategy instead of
> > >polling.
> > > > > > > > 0,5,10,15,20,25,30,35,40,45,50,55 * * * *
> /usr/local/bin/python -S
> > > > > > > > /home/mailman/cron/gate_news
> > > > > > > > #
> > > > > > > > # At 3:27am every night, regenerate the gzip'd archive file.
> Only
> > > > > > > > # turn this on if the internal archiver is used and
> > > > > > > > # GZIP_ARCHIVE_TXT_FILES is false in mm_cfg.py
> > > > > > > > 27 3 * * * /usr/local/bin/python -S
> > >/home/mailman/cron/nightly_gzip
> > > > > > > > #
> > > > > > > > # Retry failed deliveries once per minute.
> > > > > > > > * * * * * /usr/local/bin/python -S /home/mailman/cron/qrunner
> > > > > > > >
> > > > > > > > I look in the cron logs:
> > > > > > > >
> > > > > > > > Sep 12 09:45:00 www /usr/sbin/cron[73800]: (root) CMD
> > > > > > > > (/usr/local/controlpanel/cronjobs/restart_all.sh > /dev/null)
> > > > > > > > Sep 12 09:45:00 www /usr/sbin/cron[73801]: (root) CMD
> > > > >(/usr/libexec/atrun)
> > > > > > > > Sep 12 09:45:00 www /usr/sbin/cron[73802]: (root) CMD
> > > > > > > > (/usr/local/bin/mrtg --logging /usr/local/mrtg/mrtg.log
> > > > > > > > /usr/local/mrtg/mrtg.cfg)
> > > > > > > > Sep 12 09:45:00 www /usr/sbin/cron[73803]: (nobody) CMD
> > > > > > > > (/home/oasis/public_html/mgmt/minutely_maint.php)
> > > > > > > > Sep 12 09:45:00 www /usr/sbin/cron[73804]: (mailman) CMD
> > > > > > > > (/usr/local/bin/python -S /home/mailman/cron/qrunner)
> > > > > > > > Sep 12 09:45:00 www /usr/sbin/cron[73805]: (mailman) CMD
> > > > > > > > (/usr/local/bin/python -S /home/mailman/cron/gate_news)
> > > > > > > > Sep 12 09:45:00 www /usr/sbin/cron[73806]: (root) CMD (
> > > > > > > > /usr/local/controlpanel/cronjobs/mail_log.pl > /dev/null)
> > > > > > > > Sep 12 09:46:00 www /usr/sbin/cron[73920]: (mailman) CMD
> > > > > > > > (/usr/local/bin/python -S /home/mailman/cron/qrunner)
> > > > > > > > Sep 12 09:47:00 www /usr/sbin/cron[73950]: (mailman) CMD
> > > > > > > > (/usr/local/bin/python -S /home/mailman/cron/qrunner)
> > > > > > > > Sep 12 09:48:00 www /usr/sbin/cron[73988]: (mailman) CMD
> > > > > > > > (/usr/local/bin/python -S /home/mailman/cron/qrunner)
> > > > > > > > Sep 12 09:49:00 www /usr/sbin/cron[74045]: (mailman) CMD
> > > > > > > > (/usr/local/bin/python -S /home/mailman/cron/qrunner)
> > > > > > > > Sep 12 09:50:00 www /usr/sbin/cron[74106]: (root) CMD (
> > > > > > > > /usr/local/controlpanel/cronjobs/mail_log.pl > /dev/null)
> > > > > > > > Sep 12 09:50:00 www /usr/sbin/cron[74107]: (root) CMD
> > > > >(/usr/libexec/atrun)
> > > > > > > > Sep 12 09:50:00 www /usr/sbin/cron[74108]: (root) CMD
> > > > > > > > (/usr/local/bin/mrtg --logging /usr/local/mrtg/mrtg.log
> > > > > > > > /usr/local/mrtg/mrtg.cfg)
> > > > > > > > Sep 12 09:50:00 www /usr/sbin/cron[74109]: (mailman) CMD
> > > > > > > > (/usr/local/bin/python -S /home/mailman/cron/qrunner)
> > > > > > > > Sep 12 09:50:00 www /usr/sbin/cron[74110]: (mailman) CMD
> > > > > > > > (/usr/local/bin/python -S /home/mailman/cron/gate_news)
> > > > > > > > Sep 12 09:50:00 www /usr/sbin/cron[74111]: (nobody) CMD
> > > > > > > > (/home/oasis/public_html/mgmt/minutely_maint.php)
> > > > > > > > Sep 12 09:51:00 www /usr/sbin/cron[74172]: (mailman) CMD
> > > > > > > > (/usr/local/bin/python -S /home/mailman/cron/qrunner)
> > > > > > > > Sep 12 09:52:00 www /usr/sbin/cron[74205]: (mailman) CMD
> > > > > > > > (/usr/local/bin/python -S /home/mailman/cron/qrunner)
> > > > > > > > Sep 12 09:53:00 www /usr/sbin/cron[74235]: (mailman) CMD
> > > > > > > > (/usr/local/bin/python -S /home/mailman/cron/qrunner)
> > > > > > > > Sep 12 09:54:00 www /usr/sbin/cron[74280]: (mailman) CMD
> > > > > > > > (/usr/local/bin/python -S /home/mailman/cron/qrunner)
> > > > > > > >
> > > > > > > > oh and ~mailman/.qmail-default is set up like:
> > > > > > > >
> > > > > > > > |preline /usr/local/bin/python
> /home/mailman/qmail-to-mailman.py
> > > > > > > >
> > > > > > > > Think thats it.........
> > > > > > > >
> > > > > > > > I am most confuzed.....everything seems to be fine but I am
> not
> > > > >getting
> > > > > > > any
> > > > > > > > messages.........
> > > > > > > >
> > > > > > > > HELP!
> > > > > > > >
> > > > > > > > Oh I have read through every readme supplyied and set up my
> system
> > >as
> > > > > > > > suggested. I have also searched through the archives with the
> key
> > > > >words
> > > > > > > > qmail and bsd.
> > > > > > > >
> > > > > > > > Cheers
> > > > > > > > John Wards
> > > > > > > > SportNetwork.net
> > > > > > > >
> > > > > > > >
> > > > > > > > ------------------------------------------------------
> > > > > > > > Mailman-Users mailing list
> > > > > > > > Mailman-Users at python.org
> > > > > > > > http://mail.python.org/mailman/listinfo/mailman-users
> > > > > > > > Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> > > > > > > > Searchable Archives:
> > > > > > > http://www.mail-archive.com/mailman-users%40python.org/
> > > > > > >
> > > > > > >
> > > > > > > ------------------------------------------------------
> > > > > > > Mailman-Users mailing list
> > > > > > > Mailman-Users at python.org
> > > > > > > http://mail.python.org/mailman/listinfo/mailman-users
> > > > > > > Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> > > > > > > Searchable Archives:
> > > > >http://www.mail-archive.com/mailman-users%40python.org/
> > > > > >
> > > > > >
> > > > > >
> > > > > > ------------------------------------------------------
> > > > > > Mailman-Users mailing list
> > > > > > Mailman-Users at python.org
> > > > > > http://mail.python.org/mailman/listinfo/mailman-users
> > > > > > Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> > > > > > Searchable Archives:
> > > > >http://www.mail-archive.com/mailman-users%40python.org/
> > > > >
> > > > >
> > > > >------------------------------------------------------
> > > > >Mailman-Users mailing list
> > > > >Mailman-Users at python.org
> > > > >http://mail.python.org/mailman/listinfo/mailman-users
> > > > >Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> > > > >Searchable Archives:
> > >http://www.mail-archive.com/mailman-users%40python.org/
> >
> >
> > ------------------------------------------------------
> > Mailman-Users mailing list
> > Mailman-Users at python.org
> > http://mail.python.org/mailman/listinfo/mailman-users
> > Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> > Searchable Archives:
> http://www.mail-archive.com/mailman-users%40python.org/
> 
> 
> ------------------------------------------------------
> Mailman-Users mailing list
> Mailman-Users at python.org
> http://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/

More information about the Mailman-Users mailing list