Great Circle Associates Majordomo-Users
(February 2003)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Privilege problem with majordomo 1.94.5
From: Daniel Liston <dliston @ sonny . org>
Date: Mon, 17 Feb 2003 13:24:31 -0600
To: Bernard Lheureux <lheureub @ bbsoft4 . org>
Cc: majordomo-users @ greatcircle . com
References: <02031221543700.30849@mx.bbsoft4.org>
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.0.2) Gecko/20021120 Netscape/7.01

Assuming Mandrake 7.2 uses a newer sendmail, or at least as new as the 2001
message quoted below, start by checking permissions on your majordomo file
hierarchy and the security settings of sendmail.cf and submit.cf.  Make sure
no directories on the way to the majordomo directory are world or group
writable.  Majordomo should be installed with it's own user and group IDs
(uid:gid).  The "mail" user could be a member of the majordomo group to aid
with privileges.  If you are using dual aliases files, it is better to link
the majordomo aliases into the /etc/mail directory and point to that link in
the sendmail.cf than it is to point directly to the aliases file in the
majordomo directory.  If you are only using the /etc/aliases file, then the
previous comment does not apply to you.  I am sure this is more of a sendmail
issue than majordomo.  Perhaps more details about your system are in order.
What is the location of the majordomo $HOME directory?  How was it installed?
What version of sendmail are you running?  What user and group do your
sendmail and majordomo run as?  Does your sendmail require smrsh?

If your majordomo is working, you really do not need to "fix" it.  If the
sendmail logs bug you, be careful in your attempt to correct it.  Document
your changes carefully, and only make one change at a time before testing,
so you know what actually solves the problem.

Dan Liston

Bernard Lheureux wrote:
> Hello all,
> 
> I'm using Majordomo 1.94.5 on a Linux-Mandrake 7.2 for more than one year to 
> manage my 5 Mailinglists (3 public lists and 2 private lists) and from the 
> begining everytime a mail is sent ton one of the lists I get an error message 
> ins the syslog tellin: " SYSERR(majordom): openmailer: insufficient 
> privileges to change gid" but my lists are working correctly and mails are 
> sent anyway.
> I saw a discussion on this list about this problem dating from april 2001 
> between Jeffrey Kain and Dan Liston but I only found 3 mail an no solution 
> was given...
> My questions are: what mean those messages an what is that process that has 
> insufficient privileges and how to fix it.
> Thanks a lot for your help and if you can help me...
> 

Quoting the exchange you referred to:
> Considering it was working before the sendmail upgrade, I would start
> your search there.  See what new restrictions sendmail is putting on 
> permissions, and correct for majordomo accordingly.
> 
> Dan Liston
> 
> Jeffrey Kain wrote:
> 
>> 
>> Hi all,
>> 
>> I upgraded the version of Sendmail on our LInux server over the
>> weekend, and implemented some anti-spam rules.  Everything works now
>> except for Majordomo.
>> 
>> When I send a message to a majordomo list, the messages are not
>> usually delivered. I get the following line repeated once for each
>> recipient in the /var/log/mail.log file:
>> 
>> Apr  2 15:23:57 mail sendmail[2013]: f32KNva02006: SYSERR(majordomo):
>> openmailer: insufficient privileges to change gid
>> 
>> Can someone point me in the right direction to fix this?
>> 
>> I ran the config-test program through the wrapper, and everything
>> checked out OK.
>> 
>> More info:
>> 
>> linux-mandrake 7.1 (secure)
>> sendmail-8.11.0-3mdk
>> majordomo-1.94.4-7
>> 
>> Thanks in advance,
>> 
>> Jeff




References:
Indexed By Date Previous: I am Santiago Velazquez From Paraguay South America
From: "Santiago Velazquez" <svelazquez@skytel.com.py>
Next: Re: HTML
From: Daniel Liston <dliston@sonny.org>
Indexed By Thread Previous: Privilege problem with majordomo 1.94.5
From: Bernard Lheureux <lheureub@bbsoft4.org>
Next: TLS handshake error
From: Bob Bish <bobbish@earthlink.net>

Google
 
Search Internet Search www.greatcircle.com