Subject: re: bad sendmail permissions
To: None <netbsd-help@netbsd.org>
From: None <thrashbarg@kaput.homeunix.org>
List: netbsd-help
Date: 01/05/2005 15:07:24
> > collect: Cannot write ./dfj03FWkOn005035 (bfcommit, uid=1008, gid=1001): 
> > Permission denied
> 
> So, 1008:1001 is your user?  That message can't be coming from the
> setgid "smmsp" mail submission program. Are you sure you started the
> (main) sendmail daemon as root? (hint: "/etc/rc.d/sendmail restart")

That's exactly what I'm doing, indeed i've done that several times. My user
account is in the users group which is 100, 1001 is ssmtp.

thrashbarg:*:1008:100::/home/thrashbarg:/usr/local/bin/bash
smmsp:*:1013:1001:Sendmail Message Submission Program:/nonexistent:/sbin/nologin

> It *should* *be* root:wheel.  What's supposed to happen, is that
> "sendmail" in path -- "/usr/sbin/sendmail" -- is a symlink to
> "/usr/sbin/mailwrapper". It sees the line in "/etc/mailer.conf"
> that redirects "sendmail" to "/usr/libexec/sendmail/sendmail",
> the real user submission program, which being setgid "smmsp",
> can write to "/var/spool/clientmqueue". Next, the user submission
> "sendmail" connects to the running daemon "sendmail" over localhost
> port 25. The daemon should be running as root, so it shouldn't
> have any problem writing to its own queue ("/var/spool/mqueue").

This is indeed strange, changing the /var/spool directories back to
root:wheel cleared the problem, now I'm confuesed, what caused the
error message in the first place? 

Anyway, all seems to be in order now. Thanks.