cyrus + sendmail -=-=> problem !

**shumer** · 10-17-2005, 12:50 PM

hi...

i've configured sendmail 8.13 with cyrus imap 2.1 on my fedora core 3
i set them both up to work with smtpauth and saslauthd
it's worked fine for about a month and then it started to give this error : ( taken from the /var/log/maillog )

Oct 16 17:32:48 shumer sendmail[27463]: j9GFWi1Z027463: from=<galushka@gmail.com>, size=1416, class=0, nrcpts=1, msgid=<98db013f0510160834k4f068fa7g8c7744e676e0e79 4@mail. gmail.com>, proto=ESMTP, daemon=MTA, relay=qproxy.gmail.com [72.14.204.199]
Oct 16 17:32:48 shumer sendmail[27467]: j9GFWi1Z027463: SYSERR(root): makeconnection_ds: unsafe domain socket
/var/lib/imap/socket/lmtp

Oct 16 17:32:48 shumer sendmail[27468]: j9GFWi1Z027463: to=<shumer@shumer.homelinux.com>, delay=03:17:00, xdelay=00:00:00, mailer=cyrusv2, pri=480662, relay=localhost, dsn=4.3.5, stat=Deferred: World writable directory

i tried cleaning the mqueue dir - didn't help.
checked that the /var/lib/imap/socket/lmtp is there - it's there , and the permissions are 777 ( srwxrwxrwx )
checked that the imapd.conf has
configdirectory: /var/lib/imap - which matches the path of the lmtp
checked that in cyrus.conf the line is :
lmtpunix cmd="lmtpd" listen="/var/lib/imap/socket/lmtp" prefork=1

i say again - it worked and i did nothing, changed nothing at all.
there is little about this subject in google.com or google.com/linux

any help will be great

**starfish** · 10-17-2005, 01:46 PM

I'm not very familiar with Cyrus, but it looks like it's complaining that /var/lib/imap/socket/lmtp is world writable and maybe creating an "unsafe domain socket". Should it be that only cyrus has access?

**shumer** · 10-18-2005, 11:52 AM

thanks for the reply !

i've tried changing the lmtp permission to 660 and to 600 and it didn't work,
i even tried to change the owner and the group but yet no success here....

anything else you can think about ?
cause i have been fighting with this for a couple of days and haven't found a clue.
for my opionion it looks like a permission problem, but if it's so, it should have given the permission error right away, and not after a month or so of perfect work. i didn't change anything at all.

thanks again.
:lol: