SpamAssassin no user / group

**Mutschas** · Jun 5th 2017

Hi,

i've noticed the following error in the mail.log

Code

warning: connect to Milter service unix:/spamass/spamass.sock: Permission denied

So...

Code

server:/var/spool/postfix/spamass# ls -latotal 8.0Kdrwxr-xr-x 2 spamass-milter root 4.0K Jun 1 11:03 .drwxr-xr-x 24 root root 4.0K May 7 21:31 ..srwxr-xr-x 1 spamass-milter nogroup 0 Jun 1 11:03 spamass.sock

And...

Code

server:/var/spool/postfix/spamass# less /etc/group | grep spam
debian-spamd:x:110:

No spamass-milter user and no usergroup.

Is it a Plugin-Bug?

Debian Jessie
i-MSC 1.4.3
Plugin ClamAV 1.2.1
Plugin Mailgraph 1.1.1
Plugin OpenDKIM 1.1.3
Plugin Panel Redirect 1.1.5
Plugin RecaptchaPMA 1.1.1
Plugin ServerDefaultPage 1.2.5
Plugin SpamAssassin 1.1.1
Postfix + Courier

**Nuxwin** · Jun 5th 2017

Quote from Mutschas

No spamass-milter user and no usergroup.

Is it a Plugin-Bug?

The bug is in your head

Shell-Script

nuxwin@srv01:~$ getent passwd spamass-milterspamass-milter:x:117:65534::/var/lib/spamass-milter:/bin/false

Shell-Script

nuxwin@srv01:~$ getent group nogroupnogroup:x:65534:

Shell-Script

nuxwin@srv01:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description: Debian GNU/Linux 8.7 (jessie)
Release: 8.7
Codename: jessie

**Mutschas** · Jun 5th 2017

Acha...

Code

server# getent passwd spamass-milterspamass-milter:x:119:65534::/var/lib/spamass-milter:/bin/false

Code

server# getent group nogroup
nogroup:x:65534:

So should i just change the usergroup for "/var/spool/postfix/spamass/spamass.sock" ?

**Mutschas** · Jun 5th 2017

Doesn't work:

Code

server: chown spamass-milter:spamass-milter /var/spool/postfix/spamass/spamass.sock
chown: invalid group: ‘spamass-milter:spamass-milter’

**Nuxwin** · Jun 6th 2017

@Mutschas

You should avoid playing without knowning what you're doing.

There is no spamass-milter group. There is one spamass-milter user for which group is nogroup.

So please, answer the following questions:

Result of the following command (full output): service spamass-milter status
Content of the /etc/default/spamass-milter file
Content of the /etc/init.d/spamass-milter sysvinit script

Note that when Postfix executable is here (that should be your case), the spamass-milter socket should be created with postfix user and postfix group:

Part of /etc/init.d/spamass-milter:

Shell-Script

...# If /usr/sbin/postfix exists, set up the defaults for a postfix install# These can be overridden in /etc/default/spamass-milterif [ -x /usr/sbin/postfix ]; then SOCKET="/var/spool/postfix/spamass/spamass.sock" SOCKETOWNER="postfix:postfix" SOCKETMODE="0660"fi;...

Resulting in:

Shell-Script

root@srv01:/home/nuxwin# ls -la /var/spool/postfix/spamass/
total 8
drwxr-xr-x 2 spamass-milter root 4096 Jun 6 06:40 .
drwxr-xr-x 21 root root 4096 Jan 18 23:14 ..
srw-rw---- 1 postfix postfix 0 Jun 6 06:40 spamass.sock
root@srv01:/home/nuxwin#

So again, just answer all my questions above and don't try to do something manually without more thinking.

Thank you.

**Mutschas** · Jun 6th 2017

Thanks.

Here are the outputs:

Code

server:/# service spamass-milter status● spamass-milter.service - LSB: milter for spamassassin Loaded: loaded (/etc/init.d/spamass-milter) Active: failed (Result: exit-code) since Thu 2017-06-01 11:03:01 CEST; 5 days agoWarning: Journal has been rotated since unit was started. Log output is incomplete or unavailable.

Code

server:/# cat /etc/default/spamass-milter# spamass-milt startup defaults# OPTIONS are passed directly to spamass-milter.# man spamass-milter for details# Non-standard configuration notes:# See README.Debian if you use the -x option with sendmail# You should not pass the -d option in OPTIONS; use SOCKET for that.# Default, use the spamass-milter user as the default user, ignore# messages from localhostOPTIONS="-e -f -u spamass-milter -r 15"# Reject emails with spamassassin scores > 15.#OPTIONS="-r 15"# Do not modify Subject:, Content-Type: or body.#OPTIONS="-m"####################################### If /usr/sbin/postfix is executable, the following are set by# default. You can override them by uncommenting and changing them# here.######################################SOCKET="/var/spool/postfix/spamass/spamass.sock"# SOCKETOWNER="postfix:postfix"# SOCKETMODE="0660"######################################

Code

server:# cat /etc/init.d/spamass-milter
#!/bin/sh
#
# $Id: spamass-milter.init 553 2011-06-14 00:30:42Z don $
#
# Sample init script for Debian GNU/Linux
#
# all rights maintained by FSF Europe e.V.,
# Villa Vogelsang, Antonienallee 1, 45279 Essen, Germany
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#
# Contact:
# Michael Brown <michaelb@opentext.com>
# This init script was modified on Thu, 30 Jan 2003 02:06:04 -0500 by
# Don Armstrong <don@donarmstrong.com> from contrib/spamass-milter to
# allow force-reload and options specified in
# /etc/default/spamass-milter necessary for inclusion in debian.
# It has been modified additionally to support LSB Boot options and
# status on Friday, July 6, 2007 14:02:44 PDT
### BEGIN INIT INFO
# Provides: spamass-milter
# Required-Start: $syslog $local_fs $remote_fs
# Required-Stop: $syslog $local_fs $remote_fs
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: milter for spamassassin
# Description: Calls spamassassin to allow filtering out
# spam from ham in libmilter compatible MTAs.
### END INIT INFO
PATH=/sbin:/bin:/usr/sbin:/usr/bin
NAME=spamass-milter
DAEMON=/usr/sbin/spamass-milter
SOCKET=/var/run/spamass/spamass.sock
PIDFILE=/var/run/spamass/spamass.pid
DESC="Sendmail milter plugin for SpamAssassin"
DEFAULT=/etc/default/spamass-milter
OPTIONS=""
RUNAS="spamass-milter"
CHUID=""
SOCKETMODE="0600"
SOCKETOWNER="root:root"
test -x $DAEMON || exit 0
if [ -e /etc/mail/sendmail.cf ] && egrep -q 'X.+S=local:/var/run/sendmail/spamass\.sock' /etc/mail/sendmail.cf; then
SOCKET=/var/run/sendmail/spamass.sock
SOCKETMODE=""
SOCKETOWNER=""
RUNAS=""
echo "WARNING: You are using the old location of spamass.sock. Change your input filter to use";
echo "/var/run/spamass/spamass.sock so spamass-milter can run as spamass-milter";
fi;
# If /usr/sbin/postfix exists, set up the defaults for a postfix install
# These can be overridden in /etc/default/spamass-milter
if [ -x /usr/sbin/postfix ]; then
SOCKET="/var/spool/postfix/spamass/spamass.sock"
SOCKETOWNER="postfix:postfix"
SOCKETMODE="0660"
fi;
if [ -r $DEFAULT ]; then
. $DEFAULT;
fi;
if [ -n "$RUNAS" ]; then
CHUID="--chuid $RUNAS";
fi;
set -e
start() {
# Because the default socket is in the same location as the
# pidfile, we create them in this order.
for DIR in "$(dirname $PIDFILE)" "$(dirname $SOCKET)"; do
# if the dirname is '.', then it's some kind of odd socket, like
# an inet socket. Don't create the directory in such a case
if [ "$DIR" != "." ] && [ ! -d "$DIR" ]; then
mkdir -p "$DIR";
if [ -x /sbin/restorecon ]; then
/sbin/restorecon "$DIR";
fi;
if [ -n "$RUNAS" ]; then
chown "$RUNAS" "$DIR";
fi;
fi;
done;
if [ -n "$RUNAS" ] && [ -d $(dirname $PIDFILE) ] &&
[ "$(stat -c '%U' $(dirname $PIDFILE))" != "$RUNAS" ]; then
echo "WARNING: $NAME will run as user $RUNAS but $(dirname $PIDFILE) is not owned by $RUNAS";
echo "Either delete this directory or chown it appropriately. Startup attempts may fail.";
fi;
if [ -n "$RUNAS" ] && [ $(dirname $SOCKET) != "." ] &&
[ -d $(dirname $SOCKET) ] &&
[ "$(stat -c '%U' $(dirname $SOCKET))" != "$RUNAS" ]; then
echo "WARNING: $NAME will run as user $RUNAS but $(dirname $SOCKET) is not owned by $RUNAS";
echo "Either delete this directory or chown it appropriately. Startup attempts may fail.";
fi;
if [ $(dirname $SOCKET) != "." ]; then
/bin/rm -f $SOCKET
fi;
start-stop-daemon --start -p $PIDFILE $CHUID --exec $DAEMON -- -P $PIDFILE -f -p $SOCKET $OPTIONS
sleep 1s
if [ -n "$SOCKETMODE" ]; then
chmod $SOCKETMODE $SOCKET;
fi;
if [ -n "$SOCKETOWNER" ]; then
chown $SOCKETOWNER $SOCKET;
fi;
}
stop(){
start-stop-daemon --oknodo --stop -p $PIDFILE --signal 3 --exec $DAEMON
/bin/sleep 5s
/bin/rm -f $SOCKET
/bin/rm -f $PIDFILE
}
status(){
if [ -e $PIDFILE ]; then
if kill -0 $(cat $PIDFILE); then
echo "${NAME} running";
exit 0;
else
echo "${NAME} dead but $PIDFILE exists";
exit 1;
fi;
echo "${NAME} not running";
exit 3;
fi;
}
case "$1" in
start)
echo -n "Starting $DESC: "
start
echo "${NAME}"
;;
stop)
echo -n "Stopping $DESC: "
stop
echo "${NAME}"
;;
force-reload | restart)
echo -n "Restarting $DESC: "
stop
start
echo "${NAME}"
;;
status)
status
;;
*)
N=$0
echo "Usage: $N {start|stop|restart|force-reload|status}" >&2
exit 1
;;
esac
exit 0

Display More

**Mutschas** · Jun 6th 2017

So, socketowner is "postfix:postfix" like in your example. I have nothing changed in this config.
I just installed like in the wiki via apt-get and then installed the SA-Plugin....

**Nuxwin** · Jun 6th 2017

Your spama-milter service is down since 5 days...

Shell-Script

Active: failed (Result: exit-code) since Thu 2017-06-01 11:03:01 CEST; 5 days ago

So far, try to start the spamass-milter service and give us the resulting log once after. In order, do the following:

Shell-Script

# rm /var/spool/postfix/spamass/spamass.sock
# service spamass-milter start
# service spamass-milter status

**Mutschas** · Jun 6th 2017

The question is, why has it stopped....

Code

server:# service spamass-milter startJob for spamass-milter.service failed. See 'systemctl status spamass-milter.service' and 'journalctl -xn' for details.

Code

server:# service spamass-milter status● spamass-milter.service - LSB: milter for spamassassin Loaded: loaded (/etc/init.d/spamass-milter) Active: failed (Result: exit-code) since Tue 2017-06-06 21:17:26 CEST; 54s ago Process: 29225 ExecStart=/etc/init.d/spamass-milter start (code=exited, status=1/FAILURE)Jun 06 21:17:26 server spamass-milter[29225]: Starting Sendmail milter plugin for SpamAssassin: /usr/sbin/spamass-milter already running.Jun 06 21:17:26 server systemd[1]: spamass-milter.service: control process exited, code=exited status=1Jun 06 21:17:26 server systemd[1]: Failed to start LSB: milter for spamassassin.Jun 06 21:17:26 server systemd[1]: Unit spamass-milter.service entered failed state.

Code

server:# journalctl -xn
-- Logs begin at Sun 2017-06-04 23:37:27 CEST, end at Tue 2017-06-06 21:21:37 CEST. --
Jun 06 21:21:37 server systemd[1]: Starting LSB: milter for spamassassin...
-- Subject: Unit spamass-milter.service has begun with start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit spamass-milter.service has begun starting up.
Jun 06 21:21:37 server spamass-milter[31021]: Starting Sendmail milter plugin for SpamAssassin: /usr/sbin/spamass-milter already running.
Jun 06 21:21:37 server systemd[1]: spamass-milter.service: control process exited, code=exited status=1
Jun 06 21:21:37 server systemd[1]: Failed to start LSB: milter for spamassassin.
-- Subject: Unit spamass-milter.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit spamass-milter.service has failed.
--
-- The result is failed.
Jun 06 21:21:37 server systemd[1]: Unit spamass-milter.service entered failed state.

Display More

**Nuxwin** · Jun 6th 2017

@Mutschas

Please, try:

Shell-Script

# pkill -KILL -f spamass-milter
# rm -f /var/spool/postfix/spamass/spamass.sock
# service spamass-milter start

Once done, give us the result of: service spamass-milter status

SpamAssassin no user / group

Share

Similar Threads

Spamassassin didn't install

Wrong Public OpenDKIM key in GUI under Debian Stretch

OpenDKIM plugin v2.0.0 RELEASED

SpamAssassin plugin v2.0.0 RELEASED

Error SpamAssassin plugin

Daily visitors