FAQ
Hi,

I am running Centos 5.3 with all of the updates. I needed a mail list server so I installed mailman and postfix. I did yum install postfix and yum install mailman. postfix installed and can send email to my live account so it is working. mailman is installed and I can goto my server and subscribe to a list. I get the confirmation email from mailman. However when I try to post I get a group mismatch error.

I have done a google search and everyone says to recompile with the proper ./configure. I installed from packages. I would rather not have to recompile. Everything seems to be ok except I can't post.

# /usr/lib/mailman/mail/mailman post mailman
Group mismatch error. Mailman expected the mail wrapper script to be executed
as one of the following groups:
[mail, postfix, mailman, nobody, daemon],
but the system's mail server executed the mail script as group: "root".
Try tweaking the mail server to run the script as one of these groups:
[mail, postfix, mailman, nobody, daemon],
or re-run configure providing the command line option:
'--with-mail-gid=root'.
# /usr/lib/mailman/bin/check_perms -f
No problems found

So what did I do wrong? And why isn't check_perms detecting the problem. >From what I read on the internet this is a very common problem.

Thanks,
Greg


_________________________________________________________________
Windows Live? SkyDrive?: Store, access, and share your photos. See how.
http://windowslive.com/Online/SkyDrive?ocid=TXT_TAGLM_WL_CS_SD_photos_072009

Search Discussions

  • Mark Sapiro at Jul 30, 2009 at 6:20 pm

    Greg White wrote:
    I am running Centos 5.3 with all of the updates. I needed a mail list server so I installed mailman and postfix. I did yum install postfix and yum install mailman. postfix installed and can send email to my live account so it is working. mailman is installed and I can goto my server and subscribe to a list. I get the confirmation email from mailman. However when I try to post I get a group mismatch error.

    I have done a google search and everyone says to recompile with the proper ./configure. I installed from packages. I would rather not have to recompile. Everything seems to be ok except I can't post.

    # /usr/lib/mailman/mail/mailman post mailman
    Group mismatch error. Mailman expected the mail wrapper script to be executed
    as one of the following groups:
    [mail, postfix, mailman, nobody, daemon],
    but the system's mail server executed the mail script as group: "root".
    Try tweaking the mail server to run the script as one of these groups:
    [mail, postfix, mailman, nobody, daemon],
    or re-run configure providing the command line option:
    '--with-mail-gid=root'.

    This only tells us that you ran the wrapper as root. It doesn't say how
    Postfix ran it.
    # /usr/lib/mailman/bin/check_perms -f
    No problems found

    So what did I do wrong? And why isn't check_perms detecting the problem. From what I read on the internet this is a very common problem.

    Group mismatch errors have little to do with permissions and
    check_perms can't really check them. See the FAQ at
    <http://wiki.list.org/x/tYA9>.

    The answer in your case is that Mailman's aliases need to be in an
    aliases.db file whose owner's primary group is one of your above list
    - normally 'mailman'. Note that this doesn't mean the file's group; it
    means the primary group of the file's owner. This is a Postfix thing.

    If you have Mailman/Postfix integration properly configured, this
    should be automatic because the aliases will be in Mailman's
    data/aliases* files and data/aliases.db will be owned by the Mailman
    user.

    Note that if this isn't all properly set up from the rpms, that is a
    RedHat/CentOS packaging issue over which we have no control.

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan
  • Greg White at Jul 31, 2009 at 7:56 pm

    Mark wrote:
    Greg wrote:

    I am running Centos 5.3 with all of the updates. I needed a mail list server so I installed mailman and postfix. I did yum install postfix and yum install mailman. postfix installed and can send email to my live account so it is working. mailman is installed and I can goto my server and subscribe to a list. I get the confirmation email from mailman. However when I try to post I get a group mismatch error.

    I have done a google search and everyone says to recompile with the proper ./configure. I installed from packages. I would rather not have to recompile. Everything seems to be ok except I can't post.

    # /usr/lib/mailman/mail/mailman post mailman
    Group mismatch error. Mailman expected the mail wrapper script to be executed
    as one of the following groups:
    [mail, postfix, mailman, nobody, daemon],
    but the system's mail server executed the mail script as group: "root".
    Try tweaking the mail server to run the script as one of these groups:
    [mail, postfix, mailman, nobody, daemon],
    or re-run configure providing the command line option:
    '--with-mail-gid=root'.

    This only tells us that you ran the wrapper as root. It doesn't say how
    Postfix ran it.
    # /usr/lib/mailman/bin/check_perms -f
    No problems found

    So what did I do wrong? And why isn't check_perms detecting the problem. >From what I read on the internet this is a very common problem.

    Group mismatch errors have little to do with permissions and
    check_perms can't really check them. See the FAQ at
    .

    The answer in your case is that Mailman's aliases need to be in an
    aliases.db file whose owner's primary group is one of your above list
    - normally 'mailman'. Note that this doesn't mean the file's group; it
    means the primary group of the file's owner. This is a Postfix thing.

    If you have Mailman/Postfix integration properly configured, this
    should be automatic because the aliases will be in Mailman's
    data/aliases* files and data/aliases.db will be owned by the Mailman
    user.

    Note that if this isn't all properly set up from the rpms, that is a
    RedHat/CentOS packaging issue over which we have no control.

    --
    Mark Sapiro The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan
    # ls -lhZ /etc/aliases*
    -rw-r--r-- root root system_u:object_r:etc_aliases_t /etc/aliases
    -rw-r--r-- root root system_u:object_r:etc_aliases_t /etc/aliases.db

    # ls -lhZ /etc/mailman/aliases*
    -rw-rw---- root mailman user_u:object_r:mailman_data_t /etc/mailman/aliases
    -rw-rw-r-- mailman mailman user_u:object_r:mailman_data_t /etc/mailman/aliases.db

    # cat /etc/mailman/aliases
    # This file is generated by Mailman, and is kept in sync with the
    # binary hash file aliases.db. YOU SHOULD NOT MANUALLY EDIT THIS FILE
    # unless you know what you're doing, and can keep the two files properly
    # in sync. If you screw it up, you're on your own.

    # The ultimate loop stopper address
    mailman-loop: /var/lib/mailman/data/owner-bounces.mbox

    # STANZA START: mailman
    # CREATED: Thu Jul 23 14:23:19 2009
    mailman: "|/usr/lib/mailman/mail/mailman post mailman"
    mailman-admin: "|/usr/lib/mailman/mail/mailman admin mailman"
    mailman-bounces: "|/usr/lib/mailman/mail/mailman bounces mailman"
    mailman-confirm: "|/usr/lib/mailman/mail/mailman confirm mailman"
    mailman-join: "|/usr/lib/mailman/mail/mailman join mailman"
    mailman-leave: "|/usr/lib/mailman/mail/mailman leave mailman"
    mailman-owner: "|/usr/lib/mailman/mail/mailman owner mailman"
    mailman-request: "|/usr/lib/mailman/mail/mailman request mailman"
    mailman-subscribe: "|/usr/lib/mailman/mail/mailman subscribe mailman"
    mailman-unsubscribe: "|/usr/lib/mailman/mail/mailman unsubscribe mailman"
    # STANZA END: mailman

    # STANZA START: test
    # CREATED: Thu Jul 23 16:21:13 2009
    test: "|/usr/lib/mailman/mail/mailman post test"
    test-admin: "|/usr/lib/mailman/mail/mailman admin test"
    test-bounces: "|/usr/lib/mailman/mail/mailman bounces test"
    test-confirm: "|/usr/lib/mailman/mail/mailman confirm test"
    test-join: "|/usr/lib/mailman/mail/mailman join test"
    test-leave: "|/usr/lib/mailman/mail/mailman leave test"
    test-owner: "|/usr/lib/mailman/mail/mailman owner test"
    test-request: "|/usr/lib/mailman/mail/mailman request test"
    test-subscribe: "|/usr/lib/mailman/mail/mailman subscribe test"
    test-unsubscribe: "|/usr/lib/mailman/mail/mailman unsubscribe test"
    # STANZA END: test

    # postconf -n
    alias_database = hash:/etc/aliases
    alias_maps = hash:/etc/mailman/aliases, hash:/etc/aliases
    command_directory = /usr/sbin
    config_directory = /etc/postfix
    daemon_directory = /usr/libexec/postfix
    debug_peer_level = 2
    home_mailbox = Maildir/
    html_directory = no
    inet_interfaces = localhost
    mail_owner = postfix
    mailq_path = /usr/bin/mailq.postfix
    manpage_directory = /usr/share/man
    mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
    mydomain = xyz.com
    myhostname = list.xyz.com
    mynetworks = 10.100.159.0/24, 127.0.0.0/8
    myorigin = $mydomain
    newaliases_path = /usr/bin/newaliases.postfix
    queue_directory = /var/spool/postfix
    readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
    recipient_delimiter = +
    relay_domains =
    relayhost =
    sample_directory = /usr/share/doc/postfix-2.3.3/samples
    sendmail_path = /usr/sbin/sendmail.postfix
    setgid_group = postdrop
    smtpd_banner = $myhostname ESMTP $mail_name
    unknown_local_recipient_reject_code = 550

    So do I have everything configured right??
    Do I have to recompile mailman? If so it looks like I have to recompile starting with ./configure --with-mail-gid=root

    Thanks,


    _________________________________________________________________
    Windows Live? Hotmail?: Search, add, and share the web?s latest sports videos. Check it out.
    http://www.windowslive.com/Online/Hotmail/Campaign/QuickAdd?ocid=TXT_TAGLM_WL_QA_HM_sports_videos_072009&cat=sports
  • Mark Sapiro at Jul 31, 2009 at 9:58 pm

    Greg White wrote:
    # ls -lhZ /etc/aliases*
    -rw-r--r-- root root system_u:object_r:etc_aliases_t /etc/aliases
    -rw-r--r-- root root system_u:object_r:etc_aliases_t /etc/aliases.db

    # ls -lhZ /etc/mailman/aliases*
    -rw-rw---- root mailman user_u:object_r:mailman_data_t /etc/mailman/aliases
    -rw-rw-r-- mailman mailman user_u:object_r:mailman_data_t /etc/mailman/aliases.db

    This looks good. The key thing is that Mailman's aliases.db is owned by
    mailman.

    # cat /etc/mailman/aliases
    # This file is generated by Mailman, and is kept in sync with the
    # binary hash file aliases.db. YOU SHOULD NOT MANUALLY EDIT THIS FILE
    # unless you know what you're doing, and can keep the two files properly
    # in sync. If you screw it up, you're on your own.

    # The ultimate loop stopper address
    mailman-loop: /var/lib/mailman/data/owner-bounces.mbox

    # STANZA START: mailman
    # CREATED: Thu Jul 23 14:23:19 2009
    mailman: "|/usr/lib/mailman/mail/mailman post mailman"
    mailman-admin: "|/usr/lib/mailman/mail/mailman admin mailman"
    mailman-bounces: "|/usr/lib/mailman/mail/mailman bounces mailman"
    mailman-confirm: "|/usr/lib/mailman/mail/mailman confirm mailman"
    mailman-join: "|/usr/lib/mailman/mail/mailman join mailman"
    mailman-leave: "|/usr/lib/mailman/mail/mailman leave mailman"
    mailman-owner: "|/usr/lib/mailman/mail/mailman owner mailman"
    mailman-request: "|/usr/lib/mailman/mail/mailman request mailman"
    mailman-subscribe: "|/usr/lib/mailman/mail/mailman subscribe mailman"
    mailman-unsubscribe: "|/usr/lib/mailman/mail/mailman unsubscribe mailman"
    # STANZA END: mailman

    # STANZA START: test
    # CREATED: Thu Jul 23 16:21:13 2009
    test: "|/usr/lib/mailman/mail/mailman post test"
    test-admin: "|/usr/lib/mailman/mail/mailman admin test"
    test-bounces: "|/usr/lib/mailman/mail/mailman bounces test"
    test-confirm: "|/usr/lib/mailman/mail/mailman confirm test"
    test-join: "|/usr/lib/mailman/mail/mailman join test"
    test-leave: "|/usr/lib/mailman/mail/mailman leave test"
    test-owner: "|/usr/lib/mailman/mail/mailman owner test"
    test-request: "|/usr/lib/mailman/mail/mailman request test"
    test-subscribe: "|/usr/lib/mailman/mail/mailman subscribe test"
    test-unsubscribe: "|/usr/lib/mailman/mail/mailman unsubscribe test"
    # STANZA END: test

    # postconf -n
    alias_database = hash:/etc/aliases
    alias_maps = hash:/etc/mailman/aliases, hash:/etc/aliases
    command_directory = /usr/sbin
    config_directory = /etc/postfix
    daemon_directory = /usr/libexec/postfix
    debug_peer_level = 2
    home_mailbox = Maildir/
    html_directory = no
    inet_interfaces = localhost
    mail_owner = postfix
    mailq_path = /usr/bin/mailq.postfix
    manpage_directory = /usr/share/man
    mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
    mydomain = xyz.com
    myhostname = list.xyz.com
    mynetworks = 10.100.159.0/24, 127.0.0.0/8
    myorigin = $mydomain
    newaliases_path = /usr/bin/newaliases.postfix
    queue_directory = /var/spool/postfix
    readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
    recipient_delimiter = +
    relay_domains =
    relayhost =
    sample_directory = /usr/share/doc/postfix-2.3.3/samples
    sendmail_path = /usr/sbin/sendmail.postfix
    setgid_group = postdrop
    smtpd_banner = $myhostname ESMTP $mail_name
    unknown_local_recipient_reject_code = 550

    So do I have everything configured right??
    Do I have to recompile mailman? If so it looks like I have to recompile starting with ./configure --with-mail-gid=root

    The above looks good. what is the exact group mismatch error message
    you get in the DSN and/or maillog when you mail to test at list.xyz.com?

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan
  • Greg White at Aug 1, 2009 at 6:43 pm

    Mark wrote:
    Greg wrote:

    # ls -lhZ /etc/aliases*
    -rw-r--r-- root root system_u:object_r:etc_aliases_t /etc/aliases
    -rw-r--r-- root root system_u:object_r:etc_aliases_t /etc/aliases.db

    # ls -lhZ /etc/mailman/aliases*
    -rw-rw---- root mailman user_u:object_r:mailman_data_t /etc/mailman/aliases
    -rw-rw-r-- mailman mailman user_u:object_r:mailman_data_t /etc/mailman/aliases.db

    This looks good. The key thing is that Mailman's aliases.db is owned by
    mailman.
    snip
    So do I have everything configured right??
    Do I have to recompile mailman? If so it looks like I have to recompile starting with ./configure --with-mail-gid=root

    The above looks good. what is the exact group mismatch error message
    you get in the DSN and/or maillog when you mail to test at list.xyz.com?
    To send the test message I sshd into my box as user, su - to root, and did:
    # /usr/lib/mailman/mail/mailman post test
    Group mismatch error. Mailman expected the mail wrapper script to be
    executed as one of the following groups:
    [mail, postfix, mailman, nobody, daemon],
    but the system's mail server executed the mail script as group: "root".
    Try tweaking the mail server to run the script as one of these groups:
    [mail, postfix, mailman, nobody, daemon],
    or re-run configure providing the command line option:
    '--with-mail-gid=root'.

    I then use mutt (still as root) to send an email and this is what I see in /var/log/maillog
    Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix mail system
    Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version 2.3.3, configuration /etc/postfix
    Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error. Mailman expected the mail wrapper script to be executed as one of the following groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server executed the mail script as group: "root". Try tweaking the mail server to run the script as one of these groups: [mail, postfix, mailman, nobody, daemon], or re-run configure providing the command line option: '--with-mail-gid=root'.
    Aug 1 13:25:01 list postfix/pickup[2498]: C122C8604E0: uidA fromAug 1 13:25:01 list postfix/cleanup[2767]: C122C8604E0: message-idAug 1 13:25:01 list postfix/qmgr[2499]: C122C8604E0: from=, sizeb5, nrcpt=1 (queue active)
    Aug 1 13:25:02 list postfix/local[2769]: C122C8604E0: to=, orig_to=, relay=local, delay=0.51, delays=0.25/0.05/0/0.21, dsn=2.0.0, status=sent (delivered to command: /usr/lib/mailman/mail/mailman post mailman)
    Aug 1 13:25:02 list postfix/qmgr[2499]: C122C8604E0: removed
    Aug 1 13:25:04 list postfix/smtpd[2771]: connect from localhost.localdomain[127.0.0.1]
    Aug 1 13:25:04 list postfix/smtpd[2771]: 792BE8604DD: client=localhost.localdomain[127.0.0.1]
    Aug 1 13:25:04 list postfix/cleanup[2767]: 792BE8604DD: message-idAug 1 13:25:04 list postfix/qmgr[2499]: 792BE8604DD: from=, size52, nrcpt=1 (queue active)
    Aug 1 13:25:04 list postfix/smtpd[2771]: disconnect from localhost.localdomain[127.0.0.1]
    Aug 1 13:25:04 list postfix/local[2769]: 792BE8604DD: to=, relay=local, delay=0.07, delays=0.01/0/0/0.06, dsn=2.0.0, status=sent (delivered to maildir)
    Aug 1 13:25:04 list postfix/qmgr[2499]: 792BE8604DD: removed
    Aug 1 13:26:19 list postfix/pickup[2498]: C49B88604E0: uid=0 fromAug 1 13:26:19 list postfix/cleanup[2767]: C49B88604E0: message-idAug 1 13:26:19 list postfix/qmgr[2499]: C49B88604E0: from=, sizeA8, nrcpt=1 (queue active)
    Aug 1 13:26:20 list postfix/local[2769]: C49B88604E0: to=, relay=local, delay=0.28, delays=0.1/0/0/0.18, dsn=2.0.0, status=sent (delivered to command: /usr/lib/mailman/mail/mailman post test)
    Aug 1 13:26:20 list postfix/qmgr[2499]: C49B88604E0: removed

    Finally I exit root and go back to being a user and I do:
    /usr/lib/mailman/mail/mailman post test
    Group mismatch error. Mailman expected the mail wrapper script to be
    executed as one of the following groups:
    [mail, postfix, mailman, nobody, daemon],
    but the system's mail server executed the mail script as group: "user".
    Try tweaking the mail server to run the script as one of these groups:
    [mail, postfix, mailman, nobody, daemon],
    or re-run configure providing the command line option:
    '--with-mail-gid=user'.

    Thanks,
    Greg

    _________________________________________________________________
    Get free photo software from Windows Live
    http://www.windowslive.com/online/photos?ocid=PID23393::T:WLMTAGL:ON:WL:en-US:SI_PH_software:082009
  • Mark Sapiro at Aug 1, 2009 at 8:05 pm

    Greg White wrote:
    Mark wrote:

    The above looks good. what is the exact group mismatch error message
    you get in the DSN and/or maillog when you mail to test at list.xyz.com?
    To send the test message I sshd into my box as user, su - to root, and did:
    # /usr/lib/mailman/mail/mailman post test
    Group mismatch error. Mailman expected the mail wrapper script to be
    executed as one of the following groups:
    [mail, postfix, mailman, nobody, daemon],
    but the system's mail server executed the mail script as group: "root".
    Try tweaking the mail server to run the script as one of these groups:
    [mail, postfix, mailman, nobody, daemon],
    or re-run configure providing the command line option:
    '--with-mail-gid=root'.

    As I said in an earlier post, this means nothing. It only says that
    root can't run the wrapper, but says nothing about Postfix running the
    wrapper.

    I then use mutt (still as root) to send an email and this is what I see in /var/log/maillog
    Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix mail system
    Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version 2.3.3, configuration /etc/postfix
    Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error. Mailman expected the mail wrapper script to be executed as one of the following groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server executed the mail script as group: "root". Try tweaking the mail server to run the script as one of these groups: [mail, postfix, mailman, nobody, daemon], or re-run configure providing the command line option: '--with-mail-gid=root'.

    OK. This one is meaningful. It says Postfix is trying to run the
    wrapper as root (or does it?), and that is a problem. See below for
    more.

    Finally I exit root and go back to being a user and I do:
    /usr/lib/mailman/mail/mailman post test
    Group mismatch error. Mailman expected the mail wrapper script to be
    executed as one of the following groups:
    [mail, postfix, mailman, nobody, daemon],
    but the system's mail server executed the mail script as group: "user".
    Try tweaking the mail server to run the script as one of these groups:
    [mail, postfix, mailman, nobody, daemon],
    or re-run configure providing the command line option:
    '--with-mail-gid=user'.

    Again, this one is not relevant. If you do

    sudo -u mailman /usr/lib/mailman/mail/mailman post test

    it should work. That is also what Postfix should be doing.

    Earlier you said -
    # ls -lhZ /etc/mailman/aliases*
    -rw-rw---- root mailman user_u:object_r:mailman_data_t /etc/mailman/aliases
    -rw-rw-r-- mailman mailman user_u:object_r:mailman_data_t /etc/mailman/aliases.db

    I.e. the aliases.db is owned by 'mailman'. Also, Postfix's 'man 8
    local' says in part

    DELIVERY RIGHTS
    Deliveries to external files and external commands are made
    with the
    rights of the receiving user on whose behalf the delivery is
    made. In
    the absence of a user context, the local(8) daemon uses the
    owner
    rights of the :include: file or alias database. When those
    files are
    owned by the superuser, delivery is made with the rights
    specified with
    the default_privs configuration parameter.


    This says that Postfix executes the wrapper as the user who owns the
    alias database in which the pipe to the wrapper is found which is
    mailman, not root.

    Do you have Mailman aliases in /etc/aliases too? Even that shouldn't
    cause this problem as (you said) /etc/aliases.db is owned by root and
    that should cause Postfix to execute any pipes found there as the
    default-privs user which is normally 'nobody'.

    This appears to be a Postfix issue of some kind, or perhaps not.

    How is mutt delivering mail? In your log excerpt I only see
    Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix mail system
    Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version 2.3.3, configuration /etc/postfix
    Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error. Mailman expected the mail wrapper script to be executed as one of the following groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server executed the mail script as group: "root". Try tweaking the mail server to run the script as one of these groups: [mail, postfix, mailman, nobody, daemon], or re-run configure providing the command line option: '--with-mail-gid=root'.
    I see nothing preceding this that indicates Postfix received the mail
    and tried to pipe it to the wrapper. I only see over two minutes later
    Aug 1 13:25:01 list postfix/pickup[2498]: C122C8604E0: uidA from>Aug 1 13:25:01 list postfix/cleanup[2767]: C122C8604E0: message-id>Aug 1 13:25:01 list postfix/qmgr[2499]: C122C8604E0: from=, sizeb5, nrcpt=1 (queue active)
    Aug 1 13:25:02 list postfix/local[2769]: C122C8604E0: to=, orig_to=, relay=local, delay=0.51, delays=0.25/0.05/0/0.21, dsn=2.0.0, status=sent >(delivered to command: /usr/lib/mailman/mail/mailman post mailman)
    Aug 1 13:25:02 list postfix/qmgr[2499]: C122C8604E0: removed
    Which looks like a successful delivery to me. Is Mailman running? Is
    this message in qfiles/in? What happened to it?

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan
  • Greg White at Aug 3, 2009 at 2:11 pm
    Mark wrote:
    Greg White wrote:
    >>
    Mark wrote:
    >>>
    The above looks good. what is the exact group mismatch error
    message
    you get in the DSN and/or maillog when you mail to
    test at list.xyz.com?

    >>
    To send the test message I sshd into my box as user, su - to root, and
    did:
    # /usr/lib/mailman/mail/mailman post test
    Group mismatch error. Mailman expected the mail wrapper script to be
    executed as one of the following groups:
    [mail, postfix, mailman, nobody, daemon],
    but the system's mail server executed the mail script as group:
    "root".
    Try tweaking the mail server to run the script as one of these groups:
    [mail, postfix, mailman, nobody, daemon],
    or re-run configure providing the command line option:
    '--with-mail-gid=root'.
    >

    >
    As I said in an earlier post, this means nothing. It only says that
    root can't run the wrapper, but says nothing about Postfix running the
    wrapper.


    If this means nothing then way is it displayed? It is a worrysome message for the first time maillist admin.


    I then use mutt (still as root) to send an email and this is what I
    see in /var/log/maillog
    Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix mail
    system
    Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version
    2.3.3, configuration /etc/postfix
    Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error.
    Mailman expected the mail wrapper script to be executed as one of the following
    groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server
    executed the mail script as group: "root". Try tweaking the mail
    server to run the script as one of these groups: [mail, postfix, mailman,
    nobody, daemon], or re-run configure providing the command line option:
    '--with-mail-gid=root'.

    >

    >
    OK. This one is meaningful. It says Postfix is trying to run the
    wrapper as root (or does it?), and that is a problem. See below for
    more.
    >

    >
    Finally I exit root and go back to being a user and I do:
    /usr/lib/mailman/mail/mailman post test
    Group mismatch error. Mailman expected the mail wrapper script to be
    executed as one of the following groups:
    [mail, postfix, mailman, nobody, daemon],
    but the system's mail server executed the mail script as group:
    "user".
    Try tweaking the mail server to run the script as one of these groups:
    [mail, postfix, mailman, nobody, daemon],
    or re-run configure providing the command line option:
    '--with-mail-gid=user'.
    >

    >
    Again, this one is not relevant. If you do >
    sudo -u mailman /usr/lib/mailman/mail/mailman post test >
    it should work. That is also what Postfix should be doing. >
    Earlier you said -
    >
    # ls -lhZ /etc/mailman/aliases*
    -rw-rw---- root mailman user_u:object_r:mailman_data_t
    /etc/mailman/aliases
    -rw-rw-r-- mailman mailman user_u:object_r:mailman_data_t
    /etc/mailman/aliases.db

    >

    >
    I.e. the aliases.db is owned by 'mailman'. Also, Postfix's 'man 8
    local' says in part >
    DELIVERY RIGHTS
    Deliveries to external files and external commands are made
    with the
    rights of the receiving user on whose behalf the delivery is
    made. In
    the absence of a user context, the local(8) daemon uses the
    owner
    rights of the :include: file or alias database. When those
    files are
    owned by the superuser, delivery is made with the rights
    specified with
    the default_privs configuration parameter.
    >

    >
    This says that Postfix executes the wrapper as the user who owns the
    alias database in which the pipe to the wrapper is found which is
    mailman, not root. >
    Do you have Mailman aliases in /etc/aliases too? Even that shouldn't
    cause this problem as (you said) /etc/aliases.db is owned by root and
    that should cause Postfix to execute any pipes found there as the
    default-privs user which is normally 'nobody'. >
    This appears to be a Postfix issue of some kind, or perhaps not. >
    How is mutt delivering mail? In your log excerpt I only see
    >
    Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix mail
    system
    Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version
    2.3.3, configuration /etc/postfix
    Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error.
    Mailman expected the mail wrapper script to be executed as one of the following
    groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server
    executed the mail script as group: "root". Try tweaking the mail
    server to run the script as one of these groups: [mail, postfix, mailman,
    nobody, daemon], or re-run configure providing the command line option:
    '--with-mail-gid=root'.

    >
    I see nothing preceding this that indicates Postfix received the mail
    and tried to pipe it to the wrapper. I only see over two minutes later
    >
    Aug 1 13:25:01 list postfix/pickup[2498]: C122C8604E0: uidA from
    Aug 1 13:25:01 list postfix/cleanup[2767]: C122C8604E0: message-id
    Aug 1 13:25:01 list postfix/qmgr[2499]: C122C8604E0: from=, sizeb5,
    nrcpt=1 (queue active)
    Aug 1 13:25:02 list postfix/local[2769]: C122C8604E0: to=, orig_to=,
    relay=local, delay=0.51, delays=0.25/0.05/0/0.21, dsn=2.0.0, status=sent
    (delivered to command: /usr/lib/mailman/mail/mailman post mailman)
    Aug 1 13:25:02 list postfix/qmgr[2499]: C122C8604E0: removed
    >
    Which looks like a successful delivery to me. Is Mailman running? Is
    this message in qfiles/in? What happened to it?

    No there are no mailman aliases in the /etc/aliases file. Mutt should be using the local postfix server to send the message. I checked /etc/Muttrc and there is no setting for smtp.


    Mailman is running. Logging in as root and doing:

    # su mailman /usr/lib/mailman/mail/mailman post test

    This account is currently not available.



    # sudo -u mailman /usr/lib/mailman/mail/mailman post test

    The system just sits there and does nothing. There is only 1 account
    signed up for the mail list so it should take 10 minutes to do something.
    It has been 10 minutes since I pressed enter and nothing has happened. I waited 30 minutes and pressed Ctrl-C. This is what I saw:Traceback (most recent call last):
    File "/usr/lib/mailman/scripts/post", line 69, in ?
    main()
    File "/usr/lib/mailman/scripts/post", line 62, in main
    inq.enqueue(sys.stdin.read(),
    KeyboardInterrupt


    How am I supposed to post to the maillist if I can't do it from root or a user
    account. I can't login into the system as mailman:

    # cat /etc/passwd

    mailman:x:41:41:GNU Mailing List Manager:/usr/lib/mailman:/sbin/nologin




    The following is everything from the /var/log/maillog since I turn the PC on

    this morning:



    Aug 3 08:24:18 list postfix/postfix-script: starting the Postfix mail

    system

    Aug 3 08:24:18 list postfix/master[2468]: daemon started -- version

    2.3.3, configuration /etc/postfix

    Aug 3 08:25:02 list postfix/pickup[2472]: 38DFD8604E0: uidA

    from
    Aug 3 08:25:02 list postfix/cleanup[2711]: 38DFD8604E0:

    message-id
    Aug 3 08:25:02 list postfix/qmgr[2473]: 38DFD8604E0:
    from=,

    sizeb5, nrcpt=1 (queue active)

    Aug 3 08:25:02 list postfix/local[2713]: 38DFD8604E0:
    to=,

    orig_to=, relay=local, delay=0.56, delays=0.28/0.05/0/0.23,

    dsn=2.0.0, status=sent (delivered to command: /usr/lib/mailman/mail/mailman

    post mailman)

    Aug 3 08:25:02 list postfix/qmgr[2473]: 38DFD8604E0: removed

    Aug 3 08:25:03 list postfix/smtpd[2715]: connect from

    localhost.localdomain[127.0.0.1]

    Aug 3 08:25:03 list postfix/smtpd[2715]: BEB718604DD:

    client=localhost.localdomain[127.0.0.1]

    Aug 3 08:25:03 list postfix/cleanup[2711]: BEB718604DD:

    message-id
    Aug 3 08:25:03 list postfix/qmgr[2473]: BEB718604DD:

    from=, size52, nrcpt=1 (queue active)

    Aug 3 08:25:03 list postfix/smtpd[2715]: disconnect from

    localhost.localdomain[127.0.0.1]

    Aug 3 08:25:03 list postfix/local[2713]: BEB718604DD:
    to=,

    relay=local, delay=0.09, delays=0.01/0/0/0.07, dsn=2.0.0, status=sent

    (delivered to maildir)

    Aug 3 08:25:03 list postfix/qmgr[2473]: BEB718604DD: removed

    Aug 3 08:30:01 list postfix/pickup[2472]: 694258604E0: uidA

    from
    Aug 3 08:30:01 list postfix/cleanup[2723]: 694258604E0:

    message-id
    Aug 3 08:30:01 list postfix/qmgr[2473]: 694258604E0:
    from=,

    sizeb5, nrcpt=1 (queue active)

    Aug 3 08:30:01 list postfix/local[2725]: 694258604E0:
    to=,

    orig_to=, relay=local, delay=0.31, delays=0.14/0.01/0/0.16,

    dsn=2.0.0, status=sent (delivered to command: /usr/lib/mailman/mail/mailman

    post mailman)

    Aug 3 08:30:01 list postfix/qmgr[2473]: 694258604E0: removed

    Aug 3 08:30:02 list postfix/smtpd[2727]: connect from
    localhost.localdomain[127.0.0.1]

    Aug 3 08:30:02 list postfix/smtpd[2727]: DCB7F8604DD:

    client=localhost.localdomain[127.0.0.1]

    Aug 3 08:30:02 list postfix/cleanup[2723]: DCB7F8604DD:

    message-id
    Aug 3 08:30:02 list postfix/qmgr[2473]: DCB7F8604DD:

    from=, size52, nrcpt=1 (queue active)

    Aug 3 08:30:02 list postfix/smtpd[2727]: disconnect from

    localhost.localdomain[127.0.0.1]

    Aug 3 08:30:02 list postfix/local[2725]: DCB7F8604DD:
    to=,

    relay=local, delay=0.02, delays=0.01/0.01/0/0, dsn=2.0.0, status=sent

    (delivered to maildir)

    Aug 3 08:30:02 list postfix/qmgr[2473]: DCB7F8604DD: removed

    Aug 3 08:35:01 list postfix/pickup[2472]: 92E238604E0: uidA

    from
    Aug 3 08:35:01 list postfix/cleanup[2735]: 92E238604E0:

    message-id
    Aug 3 08:35:01 list postfix/qmgr[2473]: 92E238604E0:
    from=,

    sizeb5, nrcpt=1 (queue active)

    Aug 3 08:35:01 list postfix/local[2737]: 92E238604E0: to=,

    orig_to=, relay=local, delay=0.41, delays=0.13/0.01/0/0.27,

    dsn=2.0.0, status=sent (delivered to command: /usr/lib/mailman/mail/mailman

    post mailman)

    Aug 3 08:35:01 list postfix/qmgr[2473]: 92E238604E0: removed

    Aug 3 08:35:02 list postfix/smtpd[2739]: connect from

    localhost.localdomain[127.0.0.1]

    Aug 3 08:35:02 list postfix/smtpd[2739]: E853B8604DD:

    client=localhost.localdomain[127.0.0.1]

    Aug 3 08:35:02 list postfix/cleanup[2735]: E853B8604DD:

    message-id
    Aug 3 08:35:02 list postfix/qmgr[2473]: E853B8604DD:

    from=, size52, nrcpt=1 (queue active)

    Aug 3 08:35:02 list postfix/smtpd[2739]: disconnect from
    localhost.localdomain[127.0.0.1]

    Aug 3 08:35:02 list postfix/local[2737]: E853B8604DD:
    to=,

    relay=local, delay=0.02, delays=0.01/0.01/0/0, dsn=2.0.0, status=sent

    (delivered to maildir)

    Aug 3 08:35:02 list postfix/qmgr[2473]: E853B8604DD: removed

    Aug 3 08:40:02 list postfix/pickup[2472]: 1E5398604F5: uidA

    from
    Aug 3 08:40:02 list postfix/cleanup[2836]: 1E5398604F5:

    message-id
    Aug 3 08:40:02 list postfix/qmgr[2473]: 1E5398604F5:
    from=,

    sizeb5, nrcpt=1 (queue active)

    Aug 3 08:40:02 list postfix/local[2838]: 1E5398604F5:
    to=,

    orig_to=, relay=local, delay=0.43, delays=0.25/0.01/0/0.17,

    dsn=2.0.0, status=sent (delivered to command: /usr/lib/mailman/mail/mailman

    post mailman)

    Aug 3 08:40:02 list postfix/qmgr[2473]: 1E5398604F5: removed

    Aug 3 08:40:04 list postfix/smtpd[2840]: connect from

    localhost.localdomain[127.0.0.1]

    Aug 3 08:40:05 list postfix/smtpd[2840]: 00ED08604E3:
    client=localhost.localdomain[127.0.0.1]

    Aug 3 08:40:05 list postfix/cleanup[2836]: 00ED08604E3:

    message-id
    Aug 3 08:40:05 list postfix/qmgr[2473]: 00ED08604E3:

    from=, size52, nrcpt=1 (queue active)

    Aug 3 08:40:05 list postfix/smtpd[2840]: disconnect from

    localhost.localdomain[127.0.0.1]

    Aug 3 08:40:05 list postfix/local[2838]: 00ED08604E3:
    to=,

    relay=local, delay=0.02, delays=0.01/0.01/0/0, dsn=2.0.0, status=sent

    (delivered to maildir)

    Aug 3 08:40:05 list postfix/qmgr[2473]: 00ED08604E3: removed

    Aug 3 08:45:01 list postfix/pickup[2472]: 64CBB8604F5: uidA
    from
    Aug 3 08:45:01 list postfix/cleanup[2923]: 64CBB8604F5:
    message-id
    Aug 3 08:45:01 list postfix/qmgr[2473]: 64CBB8604F5:
    from=, sizeb5, nrcpt=1 (queue active)

    Aug 3 08:45:01 list postfix/local[2925]: 64CBB8604F5:
    to=, orig_to=, relay=local, delay=0.29,
    delays=0.12/0.01/0/0.16, dsn=2.0.0, status=sent (delivered to command:
    /usr/lib/mailman/mail/mailman post mailman)

    Aug 3 08:45:01 list postfix/qmgr[2473]: 64CBB8604F5: removed

    Aug 3 08:45:04 list postfix/smtpd[2927]: connect from
    localhost.localdomain[127.0.0.1]

    Aug 3 08:45:04 list postfix/smtpd[2927]: 0EA3D8604E3:
    client=localhost.localdomain[127.0.0.1]

    Aug 3 08:45:04 list postfix/cleanup[2923]: 0EA3D8604E3:
    message-id
    Aug 3 08:45:04 list postfix/qmgr[2473]: 0EA3D8604E3:
    from=, size52, nrcpt=1 (queue active)

    Aug 3 08:45:04 list postfix/smtpd[2927]: disconnect from
    localhost.localdomain[127.0.0.1]

    Aug 3 08:45:04 list postfix/local[2925]: 0EA3D8604E3:
    to=, relay=local, delay=0.03, delays=0.01/0/0/0.01,
    dsn=2.0.0, status=sent (delivered to maildir)

    Aug 3 08:45:04 list postfix/qmgr[2473]: 0EA3D8604E3: removed

    Aug 3 08:50:01 list postfix/pickup[2472]: AAA1E8604F5: uidA
    from
    Aug 3 08:50:01 list postfix/cleanup[2936]: AAA1E8604F5:
    message-id
    Aug 3 08:50:01 list postfix/qmgr[2473]: AAA1E8604F5:
    from=, sizeb5, nrcpt=1 (queue active)

    Aug 3 08:50:01 list postfix/local[2938]: AAA1E8604F5:
    to=, orig_to=, relay=local, delay=0.3,
    delays=0.13/0.01/0/0.16, dsn=2.0.0, status=sent (delivered to command:
    /usr/lib/mailman/mail/mailman post mailman)

    Aug 3 08:50:01 list postfix/qmgr[2473]: AAA1E8604F5: removed

    Aug 3 08:50:04 list postfix/smtpd[2940]: connect from
    localhost.localdomain[127.0.0.1]

    Aug 3 08:50:04 list postfix/smtpd[2940]: 1C3DA8604E3:
    client=localhost.localdomain[127.0.0.1]

    Aug 3 08:50:04 list postfix/cleanup[2936]: 1C3DA8604E3:
    message-id
    Aug 3 08:50:04 list postfix/qmgr[2473]: 1C3DA8604E3:
    from=, size52, nrcpt=1 (queue active)

    Aug 3 08:50:04 list postfix/smtpd[2940]: disconnect from
    localhost.localdomain[127.0.0.1]

    Aug 3 08:50:04 list postfix/local[2938]: 1C3DA8604E3:
    to=, relay=local, delay=0.02, delays=0.01/0/0/0.01,
    dsn=2.0.0, status=sent (delivered to maildir)

    Aug 3 08:50:04 list postfix/qmgr[2473]: 1C3DA8604E3: removed


    _________________________________________________________________
    Windows Live?: Keep your life in sync.
    http://windowslive.com/explore?ocid=PID23384::T:WLMTAGL:ON:WL:en-US:NF_BR_sync:082009
  • Mark Sapiro at Aug 3, 2009 at 2:43 pm

    Greg White wrote:
    Mark wrote:
    Greg White wrote:

    To send the test message I sshd into my box as user, su - to root, and
    did:
    # /usr/lib/mailman/mail/mailman post test
    Group mismatch error. Mailman expected the mail wrapper script to be
    executed as one of the following groups:
    [mail, postfix, mailman, nobody, daemon],
    but the system's mail server executed the mail script as group:
    "root".
    Try tweaking the mail server to run the script as one of these groups:
    [mail, postfix, mailman, nobody, daemon],
    or re-run configure providing the command line option:
    '--with-mail-gid=root'.

    As I said in an earlier post, this means nothing. It only says that
    root can't run the wrapper, but says nothing about Postfix running the
    wrapper.


    If this means nothing then way is it displayed? It is a worrysome message for the first time maillist admin.

    It is displayed because you ran the wrapper from the command line as
    root and root's group is not allowed to run the wrapper.

    It means nothing because that is not how mail is delivered to Mailman.
    Mail is delivered by the MTA executing the wrapper, so the only
    meaningful test is to run the wrapper as the same group that the MTA
    runs it.



    [...]
    How is mutt delivering mail? In your log excerpt I only see
    Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix mail
    system
    Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version
    2.3.3, configuration /etc/postfix
    Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error.
    Mailman expected the mail wrapper script to be executed as one of the following
    groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server
    executed the mail script as group: "root". Try tweaking the mail
    server to run the script as one of these groups: [mail, postfix, mailman,
    nobody, daemon], or re-run configure providing the command line option:
    '--with-mail-gid=root'.
    I see nothing preceding this that indicates Postfix received the mail
    and tried to pipe it to the wrapper. I only see over two minutes later

    And as I said in a follow-up post and LuKreme said in a reply, the
    above log message was logged by the wrapper when you ran it by hand as
    root.

    Aug 1 13:25:01 list postfix/pickup[2498]: C122C8604E0: uidA from>>>Aug 1 13:25:01 list postfix/cleanup[2767]: C122C8604E0: message-id>>>Aug 1 13:25:01 list postfix/qmgr[2499]: C122C8604E0: from=, sizeb5,
    nrcpt=1 (queue active)
    Aug 1 13:25:02 list postfix/local[2769]: C122C8604E0: to=, orig_to=,
    relay=local, delay=0.51, delays=0.25/0.05/0/0.21, dsn=2.0.0, status=sent
    (delivered to command: /usr/lib/mailman/mail/mailman post mailman)
    Aug 1 13:25:02 list postfix/qmgr[2499]: C122C8604E0: removed
    Which looks like a successful delivery to me. Is Mailman running? Is
    this message in qfiles/in? What happened to it?
    No there are no mailman aliases in the /etc/aliases file. Mutt should be using the local postfix server to send the message. I checked /etc/Muttrc and there is no setting for smtp.

    And mutt is delivering to Postfix and Postfix is successfully
    delivering to Mailman per the above.

    Mailman is running. Logging in as root and doing:

    # su mailman /usr/lib/mailman/mail/mailman post test

    This account is currently not available.



    # sudo -u mailman /usr/lib/mailman/mail/mailman post test

    The system just sits there and does nothing.

    It's reading your message from stdin which is your terminal. So no
    group mismatch.

    There is only 1 account
    signed up for the mail list so it should take 10 minutes to do something.
    It has been 10 minutes since I pressed enter and nothing has happened. I waited 30 minutes and pressed Ctrl-C. This is what I saw:Traceback (most recent call last):
    File "/usr/lib/mailman/scripts/post", line 69, in ?
    main()
    File "/usr/lib/mailman/scripts/post", line 62, in main
    inq.enqueue(sys.stdin.read(),
    KeyboardInterrupt


    How am I supposed to post to the maillist if I can't do it from root or a user
    account. I can't login into the system as mailman:

    You are successfully posting to Mailman from mutt. You could also
    successfully post from the command line via

    sudo -u mailman /usr/lib/mailman/mail/mailman post test < file

    where file contains your email message with headers and body, or by
    doing what you did and then typing the headers and body of the message
    followed by control-D.

    I'm not saying you don't have a delivery problem somewhere, but it is
    not a group mismatch and it is not a Postfix issue. it is somewhere
    beyond that. The message you posted with mutt got to Mailman's 'in'
    queue. You need to start looking for what happened after that. Read
    the FAQ at <http://wiki.list.org/x/A4E9>.



    The following is everything from the /var/log/maillog since I turn the PC on
    this morning:

    Aug 3 08:24:18 list postfix/postfix-script: starting the Postfix mail
    system
    Aug 3 08:24:18 list postfix/master[2468]: daemon started -- version
    2.3.3, configuration /etc/postfix
    Aug 3 08:25:02 list postfix/pickup[2472]: 38DFD8604E0: uidA
    from>Aug 3 08:25:02 list postfix/cleanup[2711]: 38DFD8604E0:
    message-id>Aug 3 08:25:02 list postfix/qmgr[2473]: 38DFD8604E0:
    from=,
    sizeb5, nrcpt=1 (queue active)
    Aug 3 08:25:02 list postfix/local[2713]: 38DFD8604E0:
    to=,
    orig_to=, relay=local, delay=0.56, delays=0.28/0.05/0/0.23,
    dsn=2.0.0, status=sent (delivered to command: /usr/lib/mailman/mail/mailman
    post mailman)

    Above is a successful delivery of a post to the 'mailman' list.

    Aug 3 08:25:02 list postfix/qmgr[2473]: 38DFD8604E0: removed
    Aug 3 08:25:03 list postfix/smtpd[2715]: connect from
    localhost.localdomain[127.0.0.1]
    Aug 3 08:25:03 list postfix/smtpd[2715]: BEB718604DD:
    client=localhost.localdomain[127.0.0.1]
    Aug 3 08:25:03 list postfix/cleanup[2711]: BEB718604DD:
    message-id>>Aug 3 08:25:03 list postfix/qmgr[2473]: BEB718604DD:
    from=, size52, nrcpt=1 (queue active)
    Aug 3 08:25:03 list postfix/smtpd[2715]: disconnect from
    localhost.localdomain[127.0.0.1]
    Aug 3 08:25:03 list postfix/local[2713]: BEB718604DD:
    to=,
    relay=local, delay=0.09, delays=0.01/0/0/0.07, dsn=2.0.0, status=sent
    (delivered to maildir)

    And this looks like a successful delivery of some kind of response from
    Mailman. What was in this message?

    [followed by repeats of the same scenario]

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan
  • Mark Sapiro at Aug 1, 2009 at 8:49 pm

    Greg White wrote:
    I then use mutt (still as root) to send an email and this is what I see in /var/log/maillog
    Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix mail system
    Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version 2.3.3, configuration /etc/postfix
    Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error. Mailman expected the mail wrapper script to be executed as one of the following groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server executed the mail script as group: "root". Try tweaking the mail server to run the script as one of these groups: [mail, postfix, mailman, nobody, daemon], or re-run configure providing the command line option: '--with-mail-gid=root'.

    Now that I've thought about this a bit more, I think I see it more
    clearly. To summarize, the above message was written by the wrapper
    itself when you ran it from the command line as root.

    Aug 1 13:25:01 list postfix/pickup[2498]: C122C8604E0: uidA from>Aug 1 13:25:01 list postfix/cleanup[2767]: C122C8604E0: message-id>Aug 1 13:25:01 list postfix/qmgr[2499]: C122C8604E0: from=, sizeb5, nrcpt=1 (queue active)
    Aug 1 13:25:02 list postfix/local[2769]: C122C8604E0: to=, orig_to=, relay=local, delay=0.51, delays=0.25/0.05/0/0.21, dsn=2.0.0, status=sent (delivered to command: /usr/lib/mailman/mail/mailman post mailman)
    Aug 1 13:25:02 list postfix/qmgr[2499]: C122C8604E0: removed

    And these messages indicate a successful delivery to the wrapper by
    Postfix with no group mismatch error of the message you sent with mutt.

    So you don't have a group mismatch problem. The only group mismatch
    errors occur when you run the wrapper by hand as the 'wrong' user
    which is supposed to produce the group mismatch error so everything is
    working.

    If your posts are not reaching the 'mailman' list, there is some reason
    other than aliases or group mismatch for it. See the FAQ at
    <http://wiki.list.org/x/A4E9>.

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan
  • Greg White at Aug 3, 2009 at 2:38 pm

    Mark wrote:
    Greg White wrote:

    I then use mutt (still as root) to send an email and this is what I see in /var/log/maillog
    Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix mail system
    Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version 2.3.3, configuration /etc/postfix
    Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error. Mailman expected the mail wrapper script to be executed as one of the following groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server executed the mail script as group: "root". Try tweaking the mail server to run the script as one of these groups: [mail, postfix, mailman, nobody, daemon], or re-run configure providing the command line option: '--with-mail-gid=root'.

    Now that I've thought about this a bit more, I think I see it more
    clearly. To summarize, the above message was written by the wrapper
    itself when you ran it from the command line as root.

    Aug 1 13:25:01 list postfix/pickup[2498]: C122C8604E0: uidA from>>Aug 1 13:25:01 list postfix/cleanup[2767]: C122C8604E0: message-id>>Aug 1 13:25:01 list postfix/qmgr[2499]: C122C8604E0: from=, sizeb5, nrcpt=1 (queue active)
    Aug 1 13:25:02 list postfix/local[2769]: C122C8604E0: to=, orig_to=, relay=local, delay=0.51, delays=0.25/0.05/0/0.21, dsn=2.0.0, status=sent (delivered to command: /usr/lib/mailman/mail/mailman post mailman)
    Aug 1 13:25:02 list postfix/qmgr[2499]: C122C8604E0: removed

    And these messages indicate a successful delivery to the wrapper by
    Postfix with no group mismatch error of the message you sent with mutt.

    So you don't have a group mismatch problem. The only group mismatch
    errors occur when you run the wrapper by hand as the 'wrong' user
    which is supposed to produce the group mismatch error so everything is
    working.

    If your posts are not reaching the 'mailman' list, there is some reason
    other than aliases or group mismatch for it. See the FAQ at
    1)
    # /usr/lib/mailman/bin/check_perms
    Warning: Private archive directory is other-executable (o+x).
    This could allow other users on your system to read private archives.
    If you're on a shared multiuser system, you should consult the
    installation manual on how to fix this.
    No problems found

    2a)
    # ps aux |grep cron |grep -v grep
    root 2503 0.0 0.1 5288 1208 ? Ss 08:24 0:00 crond
    root 2519 0.0 0.0 1668 624 ? SNs 08:24 0:00 anacron -s

    2b)
    # ps auxww| grep mailmanctl |grep -v grep
    mailman 2615 0.0 0.5 13060 4880 ? Ss 08:24 0:00 /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start

    3)
    # grep wrapper /etc/aliases
    no results
    # grep mailman /etc/aliases
    no results

    Since my aliases aren't in /etc/aliases I ran the following too:
    # grep wrapper /etc/mailman/aliases
    no results

    # grep mailman /etc/mailman/aliases
    mailman-loop: /var/lib/mailman/data/owner-bounces.mbox
    # STANZA START: mailman
    mailman: "|/usr/lib/mailman/mail/mailman post mailman"
    mailman-admin: "|/usr/lib/mailman/mail/mailman admin mailman"
    mailman-bounces: "|/usr/lib/mailman/mail/mailman bounces mailman"
    mailman-confirm: "|/usr/lib/mailman/mail/mailman confirm mailman"
    mailman-join: "|/usr/lib/mailman/mail/mailman join mailman"
    mailman-leave: "|/usr/lib/mailman/mail/mailman leave mailman"
    mailman-owner: "|/usr/lib/mailman/mail/mailman owner mailman"
    mailman-request: "|/usr/lib/mailman/mail/mailman request mailman"
    mailman-subscribe: "|/usr/lib/mailman/mail/mailman subscribe mailman"
    mailman-unsubscribe: "|/usr/lib/mailman/mail/mailman unsubscribe mailman"
    # STANZA END: mailman
    test: "|/usr/lib/mailman/mail/mailman post test"
    test-admin: "|/usr/lib/mailman/mail/mailman admin test"
    test-bounces: "|/usr/lib/mailman/mail/mailman bounces test"
    test-confirm: "|/usr/lib/mailman/mail/mailman confirm test"
    test-join: "|/usr/lib/mailman/mail/mailman join test"
    test-leave: "|/usr/lib/mailman/mail/mailman leave test"
    test-owner: "|/usr/lib/mailman/mail/mailman owner test"
    test-request: "|/usr/lib/mailman/mail/mailman request test"
    test-subscribe: "|/usr/lib/mailman/mail/mailman subscribe test"
    test-unsubscribe: "|/usr/lib/mailman/mail/mailman unsubscribe test"

    4) Not applicable as sendmail is not installed.
    5) Not applicable as sendmail is not installed.

    6a) not applicable as I am using 2.1.9-4.el5
    6b) no command to run
    7) I can't find the locks.
    8)
    #cat /var/log/mailman/smtp
    Aug 03 08:25:03 2009 (2622) smtp to mailman for 1 recips, completed in 0.101 seconds
    Aug 03 08:30:02 2009 (2622) smtp to mailman for 1 recips, completed in 0.040 seconds
    Aug 03 08:35:02 2009 (2622) smtp to mailman for 1 recips, completed in 0.040 seconds
    Aug 03 08:40:05 2009 (2622) smtp to mailman for 1 recips, completed in 0.039 seconds
    Aug 03 08:45:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.042 seconds
    Aug 03 08:50:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.041 seconds
    Aug 03 08:55:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.040 seconds
    Aug 03 09:00:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.041 seconds
    Aug 03 09:00:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.052 seconds
    Aug 03 09:05:03 2009 (2622) smtp to mailman for 1 recips, completed in 0.041 seconds
    Aug 03 09:10:03 2009 (2622) smtp to mailman for 1 recips, completed in 0.041 seconds
    Aug 03 09:15:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.041 seconds
    Aug 03 09:20:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.041 seconds
    Aug 03 09:25:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.042 seconds

    #cat /var/log/mailman/qrunner
    Aug 03 08:24:27 2009 (2617) ArchRunner qrunner started.
    Aug 03 08:24:27 2009 (2620) IncomingRunner qrunner started.
    Aug 03 08:24:27 2009 (2619) CommandRunner qrunner started.
    Aug 03 08:24:27 2009 (2623) VirginRunner qrunner started.
    Aug 03 08:24:27 2009 (2625) RetryRunner qrunner started.
    Aug 03 08:24:27 2009 (2621) NewsRunner qrunner started.
    Aug 03 08:24:27 2009 (2618) BounceRunner qrunner started.
    Aug 03 08:24:27 2009 (2622) OutgoingRunner qrunner started.

    The rest were empty or didn't exist.

    9) All folders are empty.
    10) I added SMTPHOST='127.0.0.1' to my mm_cfy.py, restarted mailman, service stop mailman, service start mailman, tried sudo -u mailman /usr/lib/mailman/mail/mailman post sjpd
    and it still didn't do anything.
    11) No mm-handler found

    Thanks,


    _________________________________________________________________
    Get your vacation photos on your phone!
    http://windowsliveformobile.com/en-us/photos/default.aspx?&OCID09TL-HM
  • Mark Sapiro at Aug 3, 2009 at 2:55 pm

    Greg White wrote:
    #cat /var/log/mailman/smtp
    Aug 03 08:25:03 2009 (2622) smtp to mailman for 1 recips, completed in 0.101 seconds
    Aug 03 08:30:02 2009 (2622) smtp to mailman for 1 recips, completed in 0.040 seconds
    Aug 03 08:35:02 2009 (2622) smtp to mailman for 1 recips, completed in 0.040 seconds
    Aug 03 08:40:05 2009 (2622) smtp to mailman for 1 recips, completed in 0.039 seconds
    Aug 03 08:45:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.042 seconds
    Aug 03 08:50:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.041 seconds
    Aug 03 08:55:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.040 seconds
    Aug 03 09:00:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.041 seconds
    Aug 03 09:00:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.052 seconds
    Aug 03 09:05:03 2009 (2622) smtp to mailman for 1 recips, completed in 0.041 seconds
    Aug 03 09:10:03 2009 (2622) smtp to mailman for 1 recips, completed in 0.041 seconds
    Aug 03 09:15:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.041 seconds
    Aug 03 09:20:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.041 seconds
    Aug 03 09:25:04 2009 (2622) smtp to mailman for 1 recips, completed in 0.042 seconds

    Mailman is delivering mail to Postfix and from your previously posted
    Postfix log, Postfix is delivering it to someone's maildir, e.g.
    (corresponding to the second message above)

    Aug 3 08:30:02 list postfix/smtpd[2727]: connect from
    localhost.localdomain[127.0.0.1]
    Aug 3 08:30:02 list postfix/smtpd[2727]: DCB7F8604DD:
    client=localhost.localdomain[127.0.0.1]
    Aug 3 08:30:02 list postfix/cleanup[2723]: DCB7F8604DD:
    message-idAug 3 08:30:02 list postfix/qmgr[2473]: DCB7F8604DD:
    from=, size52, nrcpt=1 (queue active)
    Aug 3 08:30:02 list postfix/smtpd[2727]: disconnect from
    localhost.localdomain[127.0.0.1]
    Aug 3 08:30:02 list postfix/local[2725]: DCB7F8604DD:
    to=,
    relay=local, delay=0.02, delays=0.01/0.01/0/0, dsn=2.0.0, status=sent
    (delivered to maildir)
    Aug 3 08:30:02 list postfix/qmgr[2473]: DCB7F8604DD: removed


    Perhaps you should try to find this mail. Since you've elided all the
    message-id's, I can't tell if this is a delivered post or a notice
    about a held message. I'm confused about that because you say there's
    no vette log which indicates the post wasn't held, but if it was
    delivered, there should be a post log entry, and you say there's no
    post log either.

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan
  • Adam McGreggor at Aug 3, 2009 at 5:42 pm

    On Mon, Aug 03, 2009 at 07:55:04AM -0700, Mark Sapiro wrote:
    Greg White wrote:
    #cat /var/log/mailman/smtp
    Aug 03 08:25:03 2009 (2622) smtp to mailman for 1 recips, completed in 0.101 seconds
    [...]
    Perhaps you should try to find this mail. Since you've elided all the
    message-id's, I can't tell if this is a delivered post or a notice
    about a held message. I'm confused about that because you say there's
    no vette log which indicates the post wasn't held, but if it was
    delivered, there should be a post log entry, and you say there's no
    post log either.
    [ I don't think i've seen this in the mail-exchanges so far ]

    It may be useful to check the list-members of the 'mailman' list, too.
    (either via list_members, or the web-interface)

    Is the recipient of the list what you expect it to be?

    (I'm by no means a Postfix fan)

    --
    ``Jim Hacker: What appalling cynicism.''
    ``Sir Humphrey: We call it diplomacy, Minister.''
  • Mark Sapiro at Aug 3, 2009 at 7:16 pm

    Adam McGreggor wrote:
    On Mon, Aug 03, 2009 at 07:55:04AM -0700, Mark Sapiro wrote:
    Greg White wrote:
    #cat /var/log/mailman/smtp
    Aug 03 08:25:03 2009 (2622) smtp to mailman for 1 recips, completed in 0.101 seconds
    [...]
    Perhaps you should try to find this mail. Since you've elided all the
    message-id's, I can't tell if this is a delivered post or a notice
    about a held message. I'm confused about that because you say there's
    no vette log which indicates the post wasn't held, but if it was
    delivered, there should be a post log entry, and you say there's no
    post log either.
    [ I don't think i've seen this in the mail-exchanges so far ]
    From the post I quote above archived at
    <http://mail.python.org/pipermail/mailman-users/2009-August/066667.html>

    <quote>
    8)
    #cat /var/log/mailman/smtp
    Aug 03 08:25:03 2009 (2622) smtp to mailman for 1 recips, completed in
    0.101 seconds
    <snip>

    #cat /var/log/mailman/qrunner
    Aug 03 08:24:27 2009 (2617) ArchRunner qrunner started.
    <snip>

    The rest were empty or didn't exist.
    </quote>

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan
  • LuKreme at Aug 2, 2009 at 7:34 am

    On 1-Aug-2009, at 12:43, Greg White wrote:
    To send the test message I sshd into my box as user, su - to root,
    and did:
    # /usr/lib/mailman/mail/mailman post test
    Group mismatch error. Mailman expected the mail wrapper script to be
    executed as one of the following groups:
    [mail, postfix, mailman, nobody, daemon],
    but the system's mail server executed the mail script as group:
    "root".
    Try tweaking the mail server to run the script as one of these groups:
    [mail, postfix, mailman, nobody, daemon],
    or re-run configure providing the command line option:
    '--with-mail-gid=root'.
    Right. The error message is quite clear. Why do you think running the
    command as root WOULD work?

    try su mailman ( or sudo -u mailman ) and then run the command.
    I then use mutt (still as root) to send an email and this is what I
    see in /var/log/maillog
    Sent an email to what, exactly? the list?
    Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix
    mail system
    Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version
    2.3.3, configuration /etc/postfix
    Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error.
    Mailman expected the mail wrapper script to be executed as one of
    the following groups: [mail, postfix, mailman, nobody, daemon], but
    the system's mail server executed the mail script as group: "root".
    Try tweaking the mail server to run the script as one of these
    groups: [mail, postfix, mailman, nobody, daemon], or re-run
    configure providing the command line option: '--with-mail-gid=root'.
    This looks like test attempt above.
    Aug 1 13:25:02 list postfix/local[2769]: C122C8604E0: to=,
    orig_to=, relay=local, delay=0.51, delays=0.25/0.05/0/0.21,
    dsn=2.0.0, status=sent (delivered to command: /usr/lib/mailman/mail/
    mailman post mailman)
    That worked. Mailman is configured correctly.
    Finally I exit root and go back to being a user and I do:
    /usr/lib/mailman/mail/mailman post test
    And why do you think that would work? Again, the error message is
    quite clear.

    What is the problem? It looks to me like everything is working properly.


    --
    Do not meddle in the affairs of Dragons for you are crunchy and
    taste good with ketchup
  • Greg White at Aug 3, 2009 at 2:42 pm

    kremels at kreme.com wrote:
    On 1-Aug-2009, at 12:43, Greg White wrote:
    To send the test message I sshd into my box as user, su - to root,
    and did:
    # /usr/lib/mailman/mail/mailman post test
    Group mismatch error. Mailman expected the mail wrapper script to be
    executed as one of the following groups:
    [mail, postfix, mailman, nobody, daemon],
    but the system's mail server executed the mail script as group:
    "root".
    Try tweaking the mail server to run the script as one of these groups:
    [mail, postfix, mailman, nobody, daemon],
    or re-run configure providing the command line option:
    '--with-mail-gid=root'.
    Right. The error message is quite clear. Why do you think running the
    command as root WOULD work?

    try su mailman ( or sudo -u mailman ) and then run the command.
    Since the mailman account on a centos and redhat system is setup as nologin how else would you send a post?
    I then use mutt (still as root) to send an email and this is what I
    see in /var/log/maillog
    Sent an email to what, exactly? the list?
    I tried to post a message to the list. I started mutt, pressed m, to: test at xyz.com, subject test, wrote this is a test :wq, pressed y to send.
    Aug 1 13:21:44 list postfix/postfix-script: starting the Postfix
    mail system
    Aug 1 13:21:44 list postfix/master[2494]: daemon started -- version
    2.3.3, configuration /etc/postfix
    Aug 1 13:22:23 list Mailman mail-wrapper: Group mismatch error.
    Mailman expected the mail wrapper script to be executed as one of
    the following groups: [mail, postfix, mailman, nobody, daemon], but
    the system's mail server executed the mail script as group: "root".
    Try tweaking the mail server to run the script as one of these
    groups: [mail, postfix, mailman, nobody, daemon], or re-run
    configure providing the command line option: '--with-mail-gid=root'.
    This looks like test attempt above.
    Aug 1 13:25:02 list postfix/local[2769]: C122C8604E0: to=,
    orig_to=, relay=local, delay=0.51, delays=0.25/0.05/0/0.21,
    dsn=2.0.0, status=sent (delivered to command: /usr/lib/mailman/mail/
    mailman post mailman)
    That worked. Mailman is configured correctly.
    Finally I exit root and go back to being a user and I do:
    /usr/lib/mailman/mail/mailman post test
    And why do you think that would work? Again, the error message is
    quite clear.

    What is the problem? It looks to me like everything is working properly.
    If the mailman user can't login can I post to the list?

    _________________________________________________________________
    Get back to school stuff for them and cashback for you.
    http://www.bing.com/cashback?form=MSHYCB&publ=WLHMTAG&crea=TEXT_MSHYCB_BackToSchool_Cashback_BTSCashback_1x1
  • Mark Sapiro at Aug 3, 2009 at 4:01 pm

    Greg White wrote:
    Since the mailman account on a centos and redhat system is setup as nologin how else would you send a post?

    Via SMTP to the incoming MTA.

    I tried to post a message to the list. I started mutt, pressed m, to: test at xyz.com, subject test, wrote this is a test :wq, pressed y to send.

    And it worked. Your message was delivered to Mailman.

    If the mailman user can't login can I post to the list?

    The Mailman user doesn't ever need to log in. The MTA pipes the post to
    the wrapper which invokes the proper script to queue it for Mailman.

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan
  • Greg White at Aug 5, 2009 at 7:51 pm

    Mark wrote:
    Greg White wrote:

    Since the mailman account on a centos and redhat system is setup as nologin how else would you send a post?

    Via SMTP to the incoming MTA.

    I tried to post a message to the list. I started mutt, pressed m, to: test at xyz.com, subject test, wrote this is a test :wq, pressed y to send.

    And it worked. Your message was delivered to Mailman.

    If the mailman user can't login can I post to the list?

    The Mailman user doesn't ever need to log in. The MTA pipes the post to
    the wrapper which invokes the proper script to queue it for Mailman.
    It appears that part of my problem is that I didn't understand how to properly send a message. I have postfix only listening on the loopback interface. It appears like I will have to change the config so it listens on the eth0 interface. Then I have to setup user authentication on postfix. Finally I have to open the smtp port on the firewall. I was hoping that I could just use the local mutt to post a message. Does this sound about right?

    Thanks,

    _________________________________________________________________
    Express your personality in color! Preview and select themes for Hotmail?.
    http://www.windowslive-hotmail.com/LearnMore/personalize.aspx?ocid=PID23391::T:WLMTAGL:ON:WL:en-US:WM_HYGN_express:082009
  • Mark Sapiro at Aug 5, 2009 at 8:03 pm

    Greg White wrote:
    It appears that part of my problem is that I didn't understand how to properly send a message. I have postfix only listening on the loopback interface. It appears like I will have to change the config so it listens on the eth0 interface. Then I have to setup user authentication on postfix. Finally I have to open the smtp port on the firewall. I was hoping that I could just use the local mutt to post a message. Does this sound about right?

    No. This does not sound right. Your messages from Mutt are being
    delivered to Mailman with your current setup. And Mailman's replies
    are being accepted and delivered by Postfix.

    As long as you don't care that non-local users will not be able to
    subscribe or post or send commands to Mailman via email and you don't
    care that external bounces can't be delivered back to Mailman, you
    don't need an MTA listening on an external interface.

    Even if you do want those things, you don't need user authentication.
    User authentication is onnly needed if you want to relay mail from
    non-local to non-local. It is not required to accept external mail on
    port 25 and deliver it locally.

    I am still concerned that you don't think you are successfully posting
    to Mailman from your local Mutt. You are! Look in your maildir
    directory and find the messages from Mailman.

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan

Related Discussions

Discussion Navigation
viewthread | post
Discussion Overview
groupmailman-users @
categoriespython
postedJul 29, '09 at 10:41p
activeAug 5, '09 at 8:03p
posts18
users4
websitelist.org

People

Translate

site design / logo © 2023 Grokbase