Queue browse error after 8.7 upgrade

Ask questions about your setup or get help installing ZCS server (ZD section below).
dafftu
Posts: 6
Joined: Thu May 12, 2016 10:36 am

Queue browse error after 8.7 upgrade

Postby dafftu » Fri Jul 15, 2016 1:48 pm

After upgrading to 8.7 queue browsing (summary counters and details) doesnt work.

Logs shows errors:
Jul 15 15:45:30 mail1 postfix/postqueue[25522]: fatal: Connect to the Postfix showq service: Permission denied

I already tried fixing permissions with below commands (as root), but no change:
/opt/zimbra/libexec/zmfixperms
/opt/zimbra/libexec/zmfixperms -extended

EDIT:
Additionally I need to run zmfixperms after every zmcontrol restart, because of errors with storing message in queue!

Jul 15 16:30:03 mail1 postfix/postdrop[7889]: warning: mail_queue_enter: create file maildrop/370137.7889: Permission denied
Jul 15 16:30:13 mail1 postfix/postdrop[7889]: warning: mail_queue_enter: create file maildrop/378964.7889: Permission denied
Jul 15 16:30:23 mail1 postfix/postdrop[7889]: warning: mail_queue_enter: create file maildrop/402504.7889: Permission denied


dafftu
Posts: 6
Joined: Thu May 12, 2016 10:36 am

Re: Queue browse error after 8.7 upgrade

Postby dafftu » Fri Jul 15, 2016 3:09 pm

Seems fixed after machine reboot (not only zmcontrol restart). Weird.
DavideSJHS
Posts: 2
Joined: Thu Jul 28, 2016 11:21 am

Re: Queue browse error after 8.7 upgrade

Postby DavideSJHS » Thu Jul 28, 2016 11:32 am

Hi,
I am having the same problem that zmfixperms or a machine reboot can't fix.
Anyone else had deal with the same error message?

edit:
I forgot to mention that mine was not a server upgrade, but a fresh 8.7 install with the data imported with the zextras utility



Regards
Davide
Last edited by DavideSJHS on Fri Jul 29, 2016 11:49 pm, edited 1 time in total.
joca
Posts: 6
Joined: Fri Jul 29, 2016 12:26 pm
Location: Carpina PE Brazil
ZCS/ZD Version: ZCS 8.8.9_GA_2055
Contact:

Re: Queue browse error after 8.7 upgrade

Postby joca » Fri Jul 29, 2016 12:28 pm

Same Problem;
Jul 29 09:16:41 webmail postfix/postdrop[21459]: warning: mail_queue_enter: create file maildrop/372478.21459: Permission denied
Jul 29 09:16:41 webmail postfix/postdrop[25715]: warning: mail_queue_enter: create file maildrop/852866.25715: Permission denied
Jul 29 09:16:43 webmail postfix/postdrop[28695]: warning: mail_queue_enter: create file maildrop/635361.28695: Permission denied
Jul 29 09:16:43 webmail postfix/postdrop[1599]: warning: mail_queue_enter: create file maildrop/645219.1599: Permission denied
Jul 29 09:16:44 webmail postfix/postqueue[26691]: fatal: Connect to the Postfix showq service: Permission denied
imx
Advanced member
Advanced member
Posts: 138
Joined: Sat Sep 13, 2014 12:30 am

Re: Queue browse error after 8.7 upgrade

Postby imx » Sat Jul 30, 2016 3:28 pm

DavideSJHS wrote:Hi,
I am having the same problem that zmfixperms or a machine reboot can't fix.
Anyone else had deal with the same error message?

edit:
I forgot to mention that mine was not a server upgrade, but a fresh 8.7 install with the data imported with the zextras utility



Regards
Davide


Exactly the same for me - migrated to fresh 8.7 install, Ubuntu 14.04 64bit, used ZExtras as well to migrate. Reboot doesn't fix it for me. Tried stopping Zimbra, killing all zimbra user processes (postdrop, postfix were still there), running the permissions fix extended, then starting again, problem still occurs.

You will likely also find you have a LOAD of sleeping postdrop processes, my server just alerted through nagios.
imx
Advanced member
Advanced member
Posts: 138
Joined: Sat Sep 13, 2014 12:30 am

Re: Queue browse error after 8.7 upgrade

Postby imx » Sat Jul 30, 2016 3:38 pm

Also doubled checked the upgrade notes, for the globalconfig value adjustments, just in case ZExtras ported any of these - I was on 8.6 previously, but this server that exhibits the problem is a fresh 8.7 install as earlier noted. All seems to be correct, same problem occurs.

https://wiki.zimbra.com/wiki/Zimbra_Rel ... .0/Upgrade
imx
Advanced member
Advanced member
Posts: 138
Joined: Sat Sep 13, 2014 12:30 am

Re: Queue browse error after 8.7 upgrade

Postby imx » Sat Jul 30, 2016 4:16 pm

Just something I note, perhaps someone with more Zimbra knowledge than me can advise - postdrop is running as zimbra user, everything else post* seems to run as postfix user?

I can make the error messages go away on a test machine, by changing the file permissions on the maildrop directory to zimba instead of postfix/postdrop, but potentially postdrop is running as the wrong user and the file permissions are correct?

For now, I just modified the permissions on the below directories to 777 - I was going to use setfacl to add the zimbra user but am not 100% sure if this would cause any issues for zimbra - the below is a security risk so do at your own risk:

/opt/zimbra/data/postfix/spool/maildrop/
/opt/zimbra/data/postfix/spool/public/
/opt/zimbra/data/postfix/spool/public/pickup
/opt/zimbra/data/postfix/spool/public/showq

... I don't think there is any immediate fall out, other than the security perspective
User avatar
quanah
Zimbra Alumni
Zimbra Alumni
Posts: 1655
Joined: Fri Sep 12, 2014 10:33 pm
Contact:

Re: Queue browse error after 8.7 upgrade

Postby quanah » Mon Aug 01, 2016 8:58 pm

dafftu wrote:After upgrading to 8.7 queue browsing (summary counters and details) doesnt work.

Logs shows errors:
Jul 15 15:45:30 mail1 postfix/postqueue[25522]: fatal: Connect to the Postfix showq service: Permission denied

I already tried fixing permissions with below commands (as root), but no change:
/opt/zimbra/libexec/zmfixperms
/opt/zimbra/libexec/zmfixperms -extended

EDIT:
Additionally I need to run zmfixperms after every zmcontrol restart, because of errors with storing message in queue!

Jul 15 16:30:03 mail1 postfix/postdrop[7889]: warning: mail_queue_enter: create file maildrop/370137.7889: Permission denied
Jul 15 16:30:13 mail1 postfix/postdrop[7889]: warning: mail_queue_enter: create file maildrop/378964.7889: Permission denied
Jul 15 16:30:23 mail1 postfix/postdrop[7889]: warning: mail_queue_enter: create file maildrop/402504.7889: Permission denied


What commands are you using to view the queue? "mailq" works fine for me.
--
Quanah Gibson-Mount https://github.com/quanah/
Systems Architect, Synacor http://wwwsynacor.com/
A Zetalliance Founder http://www.zetalliance.org/
OpenLDAP Core team http://www.openldap.org/project/
imx
Advanced member
Advanced member
Posts: 138
Joined: Sat Sep 13, 2014 12:30 am

Re: Queue browse error after 8.7 upgrade

Postby imx » Tue Aug 02, 2016 7:42 am

Those errors are/were just in the zimbra.log - for me, nothing was needed to make them happen, due to the file system permissions issues (or process as wrong user perhaps) they increment in the log file.
joca
Posts: 6
Joined: Fri Jul 29, 2016 12:26 pm
Location: Carpina PE Brazil
ZCS/ZD Version: ZCS 8.8.9_GA_2055
Contact:

Re: Queue browse error after 8.7 upgrade

Postby joca » Wed Aug 03, 2016 3:02 pm

My solution
/etc/init.d/postfix stop
killall -9 postdrop
chgrp -R postdrop /var/spool/postfix/public
chgrp -R postdrop /var/spool/postfix/maildrop
/usr/sbin/postfix set-permissions
postfix check
/etc/init.d/postfix start

Return to “Installation and Upgrade”

Who is online

Users browsing this forum: No registered users and 3 guests