Topic: smeplus.sh: group accounts bug

[pmiranda]

Sorry, I don't know who to notify this bug to and how...

The bug

After having applied smeplus.sh, a newly created group can't receive email - the SMTP server refuses it.


The diagnosis

The update limits valid addresses to those listed in /var/qmail/control/mailrules.default, and the newly created groups do not get added in this file anymore.


The solution

[Re]create two two [missing] links:

Code: [Select]

# cd /etc/e-smith/events/group-create
# ln -s ../actions/mailfront-conf-control S55mailfront-conf-control
# cd /etc/e-smith/events/group-create
# ln -s ../actions/mailfront-conf-control S55mailfront-conf-control

[edb]

Just curious, were you getting an error when creating the new group or was it just that the new group could not receive mail?

I'm getting an error when ever I create a new group and I also cannot receive mail to the group.

Thanks for your fix.

Ed

[pmiranda]

Just curious, were you getting an error when creating the new group or was it just that the new group could not receive mail?

An error page on the manager web interface, you mean?

No, I got no error whatsoever. The only hint of a problem was the group address not receiving mail because of the SMTP refusing it.

Now, I am curious about the error you get... is it another problem at all, or my fix worked on it too?

[slords]

Sorry, I don't know who to notify this bug to and how...

That would be the bug tracker if it is a bug in the basic SME Server functionality and can be duplicated on a clean system, which this is.

The solution

[Re]create two two [missing] links:

Code: [Select]

# cd /etc/e-smith/events/group-create
# ln -s ../actions/mailfront-conf-control S55mailfront-conf-control
# cd /etc/e-smith/events/group-create
# ln -s ../actions/mailfront-conf-control S55mailfront-conf-control

Thanks for the fix as well.  I've reported the bug in the tracker and provided an updated e-smith-mailfront in the updates dir to fix this issue.

-Shad

[mbachmann]

[...] if it is a bug in the basic SME Server functionality and can be duplicated on a clean system, which this is.

But pmiranda wrote, that he had applied a script:

[...] After having applied smeplus.sh [...]

Ergo this is not a clean system anymore? Do i get anything wrong?

[pmiranda]

Ergo this is not a clean system anymore? Do i get anything wrong?

No, you are right: the problem arose after applying the smeplus.sh update.

As far as I remember, the bug was not present in the base SME Server distribution - I guess that the smtpfront security has been enhanced with some component of smeplus.sh, that left the two event link creation behind...

I have not used the bug tracking system because I have been implicitly told in the past that the system is reserved to base SME Server.

[edb]

pmiranda

Here is the error I get in server manager when I try to update some groups:

Create, modify, or remove user groups
Operation status report
An error occurred while modifying user group.

Some of my older groups have no problem updating and I get the "modify group successful" message.

So why only some groups? I don't get it.

I tried your fix above but it never solved my issue.

Ed

[CharlieBrady]

pmiranda

Here is the error I get in server manager when I try to update some groups:

Create, modify, or remove user groups
Operation status report
An error occurred while modifying user group.

Some of my older groups have no problem updating and I get the "modify group successful" message.

So why only some groups? I don't get it.

Look through your logfiles, especially /var/log/messages. Details of the failure will likely appear there.

[edb]

This is the message log results when it fails:

Feb  1 09:38:30 mail e-smith[17306]: Processing event: group-modify comp_sales
Feb  1 09:38:30 mail e-smith[17306]: Running event handler: /etc/e-smith/events/group-modify/S15group-modify-unix
Feb  1 09:38:33 mail e-smith[17306]: Failed to get supplementary group list for www.
Feb  1 09:38:33 mail e-smith[17306]: S15group-modify-unix=action|Event|group-modify|Action|S15group-modify-unix|Start|1107272310 654581|End|1107272313 699140|Elapsed|3.044559|Status|256
Feb  1 09:38:33 mail e-smith[17306]: Running event handler: /etc/e-smith/events/group-modify/S20conf-httpd-admin
Feb  1 09:38:34 mail e-smith[17306]: S20conf-httpd-admin=action|Event|group-modify|Action|S20conf-httpd-admin|Start|1107272313 699314|End|1107272314 357177|Elapsed|0.657863
Feb  1 09:38:34 mail e-smith[17306]: Running event handler: /etc/e-smith/events/group-modify/S20email-update-group
Feb  1 09:38:34 mail e-smith[17306]: S20email-update-group=action|Event|group-modify|Action|S20email-update-group|Start|1107272314 357397|End|1107272314 729503|Elapsed|0.372106
Feb  1 09:38:34 mail e-smith[17306]: Running event handler: /etc/e-smith/events/group-modify/S25ldap-update
Feb  1 09:38:35 mail slapd[1905]: daemon: conn=0 fd=9 connection from IP=127.0.0.1:35120 (IP=0.0.0.0:389) accepted.
Feb  1 09:38:35 mail slapd[17314]: conn=0 op=0 BIND dn="CN=ROOT,DC=DOMAIN,DC=CA" method=128
Feb  1 09:38:35 mail slapd[17314]: conn=0 op=0 RESULT tag=97 err=0 text=
Feb  1 09:38:35 mail slapd[17314]: conn=0 op=1 MOD dn="uid=comp_sales,dc=domain,dc=ca"
Feb  1 09:38:36 mail slapd[17314]: conn=0 op=1 RESULT tag=103 err=0 text=
Feb  1 09:38:36 mail slapd[17314]: conn=0 op=2 UNBIND
Feb  1 09:38:36 mail slapd[17314]: conn=-1 fd=9 closed
Feb  1 09:38:36 mail e-smith[17306]: S25ldap-update=action|Event|group-modify|Action|S25ldap-update|Start|1107272314 729661|End|1107272316 231500|Elapsed|1.501839
Feb  1 09:38:36 mail e-smith[17306]: Running event handler: /etc/e-smith/events/group-modify/S25reload-httpd-admin
Feb  1 09:38:36 mail httpd-admin: httpd-admin -USR1 succeeded
Feb  1 09:38:36 mail e-smith[17306]: Gracefully reloading e-smith httpd-admin: [   OK   ]^M
Feb  1 09:38:36 mail e-smith[17306]: S25reload-httpd-admin=action|Event|group-modify|Action|S25reload-httpd-admin|Start|1107272316 231661|End|1107272316 954295|Elapsed|0.722634
Feb  1 09:38:36 mail e-smith[17306]: Running event handler: /etc/e-smith/events/group-modify/S50email-assign
Feb  1 09:38:37 mail e-smith[17306]: S50email-assign=action|Event|group-modify|Action|S50email-assign|Start|1107272316 954479|End|1107272317 795953|Elapsed|0.841474
Feb  1 09:38:37 mail e-smith[17306]: Running event handler: /etc/e-smith/events/group-modify/S75reload-samba
Feb  1 09:38:38 mail e-smith[17306]: S75reload-samba=action|Event|group-modify|Action|S75reload-samba|Start|1107272317 796132|End|1107272318 315783|Elapsed|0.519651
Feb  1 09:40:01 mail last message repeated 8 times

This is the results of message log when update of older group is successful:

Feb  1 09:50:33 mail e-smith[18069]: Processing event: group-modify accrecpaymts
Feb  1 09:50:33 mail e-smith[18069]: Running event handler: /etc/e-smith/events/group-modify/S15group-modify-unix
Feb  1 09:50:34 mail e-smith[18069]: S15group-modify-unix=action|Event|group-modify|Action|S15group-modify-unix|Start|1107273033 852015|End|1107273034 12323|Elapsed|0.160308
Feb  1 09:50:34 mail e-smith[18069]: Running event handler: /etc/e-smith/events/group-modify/S20conf-httpd-admin
Feb  1 09:50:34 mail e-smith[18069]: S20conf-httpd-admin=action|Event|group-modify|Action|S20conf-httpd-admin|Start|1107273034 12500|End|1107273034 343967|Elapsed|0.331467
Feb  1 09:50:34 mail e-smith[18069]: Running event handler: /etc/e-smith/events/group-modify/S20email-update-group
Feb  1 09:50:34 mail e-smith[18069]: S20email-update-group=action|Event|group-modify|Action|S20email-update-group|Start|1107273034 344128|End|1107273034 522588|Elapsed|0.17846
Feb  1 09:50:34 mail e-smith[18069]: Running event handler: /etc/e-smith/events/group-modify/S25ldap-update
Feb  1 09:50:34 mail slapd[1905]: daemon: conn=2 fd=9 connection from IP=127.0.0.1:35172 (IP=0.0.0.0:389) accepted.
Feb  1 09:50:34 mail slapd[17314]: conn=2 op=0 BIND dn="CN=ROOT,DC=DOMAIN,DC=CA" method=128
Feb  1 09:50:34 mail slapd[17314]: conn=2 op=0 RESULT tag=97 err=0 text=
Feb  1 09:50:34 mail slapd[17314]: conn=2 op=1 MOD dn="uid=accrecpaymts,dc=domain,dc=ca"
Feb  1 09:50:35 mail slapd[17314]: conn=2 op=1 RESULT tag=103 err=0 text=
Feb  1 09:50:35 mail slapd[17314]: conn=2 op=2 UNBIND
Feb  1 09:50:35 mail slapd[17314]: conn=-1 fd=9 closed
Feb  1 09:50:35 mail e-smith[18069]: S25ldap-update=action|Event|group-modify|Action|S25ldap-update|Start|1107273034 522751|End|1107273035 775223|Elapsed|1.252472
Feb  1 09:50:35 mail e-smith[18069]: Running event handler: /etc/e-smith/events/group-modify/S25reload-httpd-admin
Feb  1 09:50:36 mail httpd-admin: httpd-admin -USR1 succeeded
Feb  1 09:50:36 mail e-smith[18069]: Gracefully reloading e-smith httpd-admin: [   OK   ]^M
Feb  1 09:50:36 mail e-smith[18069]: S25reload-httpd-admin=action|Event|group-modify|Action|S25reload-httpd-admin|Start|1107273035 775444|End|1107273036 57167|Elapsed|0.281723
Feb  1 09:50:36 mail e-smith[18069]: Running event handler: /etc/e-smith/events/group-modify/S50email-assign
Feb  1 09:50:36 mail e-smith[18069]: S50email-assign=action|Event|group-modify|Action|S50email-assign|Start|1107273036 57344|End|1107273036 544395|Elapsed|0.487051
Feb  1 09:50:36 mail e-smith[18069]: Running event handler: /etc/e-smith/events/group-modify/S75reload-samba
Feb  1 09:50:36 mail e-smith[18069]: S75reload-samba=action|Event|group-modify|Action|S75reload-samba|Start|1107273036 544575|End|1107273036 750827|Elapsed|0.206252
Feb  1 09:55:00 mail last message repeated 8 times

[CharlieBrady]

This is the message log results when it fails:

Feb  1 09:38:30 mail e-smith[17306]: Processing event: group-modify comp_sales
Feb  1 09:38:30 mail e-smith[17306]: Running event handler: /etc/e-smith/events/group-modify/S15group-modify-unix
Feb  1 09:38:33 mail e-smith[17306]: Failed to get supplementary group list for www.
Feb  1 09:38:33 mail e-smith[17306]: S15group-modify-unix=action|Event|group-modify|Action|S15group-modify-unix|Start|1107272310 654581|End|1107272313 699140|Elapsed|3.044559|Status|256

So there's your problem. Something in your system has distured the group memberships of the 'www' user. From your various posts I'd guess that your system is somewhat non-standard, so I can't hazzard a guess as to what has gone wrong.

[edb]

This issue has been around for me for a long time now and though my system may be somewhat non-standard right now, it's not a new issue for me.
I have not created any "www" acount so I don't know what it would be refering to or where to start for that matter? Is there some default "www" acount that the system creates?

[CharlieBrady]

I have not created any "www" acount so I don't know what it would be refering to or where to start for that matter? Is there some default "www" acount that the system creates?

Yes.