Queue browse error after 8.7 upgrade

[dafftu]

After upgrading to 8.7 queue browsing (summary counters and details) doesnt work.

Logs shows errors:
Jul 15 15:45:30 mail1 postfix/postqueue[25522]: fatal: Connect to the Postfix showq service: Permission denied

I already tried fixing permissions with below commands (as root), but no change:
/opt/zimbra/libexec/zmfixperms
/opt/zimbra/libexec/zmfixperms -extended

EDIT:
Additionally I need to run zmfixperms after every zmcontrol restart, because of errors with storing message in queue!

Jul 15 16:30:03 mail1 postfix/postdrop[7889]: warning: mail_queue_enter: create file maildrop/370137.7889: Permission denied
Jul 15 16:30:13 mail1 postfix/postdrop[7889]: warning: mail_queue_enter: create file maildrop/378964.7889: Permission denied
Jul 15 16:30:23 mail1 postfix/postdrop[7889]: warning: mail_queue_enter: create file maildrop/402504.7889: Permission denied

[dafftu]

Seems fixed after machine reboot (not only zmcontrol restart). Weird.

[DavideSJHS]

Hi,
I am having the same problem that zmfixperms or a machine reboot can't fix.
Anyone else had deal with the same error message?

edit:
I forgot to mention that mine was not a server upgrade, but a fresh 8.7 install with the data imported with the zextras utility



Regards
Davide

[joca]

Same Problem;
Jul 29 09:16:41 webmail postfix/postdrop[21459]: warning: mail_queue_enter: create file maildrop/372478.21459: Permission denied
Jul 29 09:16:41 webmail postfix/postdrop[25715]: warning: mail_queue_enter: create file maildrop/852866.25715: Permission denied
Jul 29 09:16:43 webmail postfix/postdrop[28695]: warning: mail_queue_enter: create file maildrop/635361.28695: Permission denied
Jul 29 09:16:43 webmail postfix/postdrop[1599]: warning: mail_queue_enter: create file maildrop/645219.1599: Permission denied
Jul 29 09:16:44 webmail postfix/postqueue[26691]: fatal: Connect to the Postfix showq service: Permission denied

[imx]

Hi,
I am having the same problem that zmfixperms or a machine reboot can't fix.
Anyone else had deal with the same error message?

edit:
I forgot to mention that mine was not a server upgrade, but a fresh 8.7 install with the data imported with the zextras utility



Regards
Davide

Exactly the same for me - migrated to fresh 8.7 install, Ubuntu 14.04 64bit, used ZExtras as well to migrate. Reboot doesn't fix it for me. Tried stopping Zimbra, killing all zimbra user processes (postdrop, postfix were still there), running the permissions fix extended, then starting again, problem still occurs.

You will likely also find you have a LOAD of sleeping postdrop processes, my server just alerted through nagios.

[imx]

Also doubled checked the upgrade notes, for the globalconfig value adjustments, just in case ZExtras ported any of these - I was on 8.6 previously, but this server that exhibits the problem is a fresh 8.7 install as earlier noted. All seems to be correct, same problem occurs.

https://wiki.zimbra.com/wiki/Zimbra_Rel ... .0/Upgrade

[imx]

Just something I note, perhaps someone with more Zimbra knowledge than me can advise - postdrop is running as zimbra user, everything else post* seems to run as postfix user?

I can make the error messages go away on a test machine, by changing the file permissions on the maildrop directory to zimba instead of postfix/postdrop, but potentially postdrop is running as the wrong user and the file permissions are correct?

For now, I just modified the permissions on the below directories to 777 - I was going to use setfacl to add the zimbra user but am not 100% sure if this would cause any issues for zimbra - the below is a security risk so do at your own risk:

/opt/zimbra/data/postfix/spool/maildrop/
/opt/zimbra/data/postfix/spool/public/
/opt/zimbra/data/postfix/spool/public/pickup
/opt/zimbra/data/postfix/spool/public/showq

... I don't think there is any immediate fall out, other than the security perspective

[quanah]

After upgrading to 8.7 queue browsing (summary counters and details) doesnt work.

Logs shows errors:
Jul 15 15:45:30 mail1 postfix/postqueue[25522]: fatal: Connect to the Postfix showq service: Permission denied

I already tried fixing permissions with below commands (as root), but no change:
/opt/zimbra/libexec/zmfixperms
/opt/zimbra/libexec/zmfixperms -extended

EDIT:
Additionally I need to run zmfixperms after every zmcontrol restart, because of errors with storing message in queue!

Jul 15 16:30:03 mail1 postfix/postdrop[7889]: warning: mail_queue_enter: create file maildrop/370137.7889: Permission denied
Jul 15 16:30:13 mail1 postfix/postdrop[7889]: warning: mail_queue_enter: create file maildrop/378964.7889: Permission denied
Jul 15 16:30:23 mail1 postfix/postdrop[7889]: warning: mail_queue_enter: create file maildrop/402504.7889: Permission denied

What commands are you using to view the queue? "mailq" works fine for me.

[imx]

Those errors are/were just in the zimbra.log - for me, nothing was needed to make them happen, due to the file system permissions issues (or process as wrong user perhaps) they increment in the log file.

[joca]

My solution
/etc/init.d/postfix stop
killall -9 postdrop
chgrp -R postdrop /var/spool/postfix/public
chgrp -R postdrop /var/spool/postfix/maildrop
/usr/sbin/postfix set-permissions
postfix check
/etc/init.d/postfix start