Ownership of /etc/sasl2db is root:root instead of root:sasl

Adding cyrus to the sasl group should also solve it. I don't think this is an actual bug in cyrus-sasl2.

Hi,

Im not sure that will help as the permissions of the installed sasldb
are root.root with no acl on it.

Perhaps the issue is two-fold, the cyrus-common-2.2 install (which I
think creates the user) should include the sasl group permission for the
cyrus user, and cyrus-sasl2 should correct the group access on the
/etc/sasldb2 file to be root.sasl ?

Is it expected that all access will go through saslauthd? I used to run
this but changed to having the imap service access the sasldb directly
which saves memory etc as there is no need for me to run the saslauthd
service at all.

Or does this come under one of those cross-package configuration issues
that are basically resolved by hand?

Cheers,
Barry

Scott Kitterman wrote:
> Adding cyrus to the sasl group should also solve it. I don't think this
> is an actual bug in cyrus-sasl2.
>
>

--
Sincerely Yours

Copyright Witness Net Support
<email address hidden>

www.copyrightwitness.com
Registration centre for copyright works.

This e-mail and any attachments are confidential and intended for the addressee only.
The information in this mail does not amount to legal advice or opinion. Any views or legal references are those of the author and are based on personal opinion or understanding only.

Interesting. I checked a couple of my boxes and it was in the sasl group.

OK. Confirmed. All the boxes I have were upgraded from Hardy. If I remove /etc/sasldb2 and recreate it in Intrepid it's root:root. If I do it on a Hardy box it's root:sasl.

Hi,

The cyrus user *is* in the sasl group. However the permissions on
/etc/sasldb2 are root.root.
I believe this should either be cryus.sasl or as a minimum root.sasl

TTFN
Barry

Scott Kitterman wrote:
> Interesting. I checked a couple of my boxes and it was in the sasl
> group.
>
>

--
Sincerely Yours

Copyright Witness Net Support
<email address hidden>

www.copyrightwitness.com
Registration centre for copyright works.

This e-mail and any attachments are confidential and intended for the addressee only.
The information in this mail does not amount to legal advice or opinion. Any views or legal references are those of the author and are based on personal opinion or understanding only.

Proposed release note:

Cyrus SASL creates the database for its sasldb2 plugin with incorrect permissions. As a result, other users of this database, such as cyrus-imap, will not be able to access it and will fail. This does not affect upgrades of existing databases from a previous release. The work-around is to manually change the group of /etc/sasldb2 to sasl:

$ sudo chgrp sasl /etc/sasldb2

See Bug #288478 for details.

Updated Intrepid release notes with statement above.

I can't find anything in the package diff to explain this regression *or* the fix, but I've tested an install of the package on jaunty and the permissions on /etc/sasldb2 are set correctly by default; so I think this should be considered resolved for jaunty.

Thank you for reporting this bug to Ubuntu. Intrepid Ibex 8.10 reached EOL on 30 March 2010.
Please see this document for currently supported Ubuntu releases:
https://wiki.ubuntu.com/Releases

Please feel free to report any other bugs you may find.
Thank you.

I realized I had made a mistake, Intrepid Ibex 8.10 "will reach" EOL on 30 "APRIL" 2010.

Sorry for this.

Anyway, I think that one month doesn't make any difference now.