Milter-greylist

Kai Schaetzl <maillists@...> wrote:

> My first chosen user daemon indeed has several secondary groups, so I
> changed the user to smmsp. Still that error. group smmsp has a password. I
> changed to user mail, that user's primary group doesn't have a password
> and it doesn't have secondary groups. Still no go. I donated it a real
> login shell. Still no go. What's causing this?

This is the offending code (milter-greylist.c):

#ifdef HAVE_INITGROUPS
                if (initgroups(conf.c_user, pw->pw_gid) != 0) {
                        syslog(LOG_ERR, "%s: cannot change "
                            "supplementary groups: %s\n",
                            argv[0], strerror(errno)); 
                        exit(EX_OSERR);
                }
#endif

Proposed fixes:
1) Make it a warning and don't exit

2) Make a runtime configure test and undef HAVE_INITGROUPS if initgroups
gets a EPERM. But that would be tricky since configure is not run as
user smmsp.

3) Understand what's wrong here. What does your initgroup man page says
about EPERM? 

-- 
Emmanuel Dreyfus
Un bouquin en français sur BSD:
http://www.eyrolles.com/Informatique/Livre/9782212114638/livre-bsd.php
manu@netbsd.org