I'm setting up a mailserver with postfix/dovecot.
I followed the tutorial and at first glimpse everything looked fine ... but when I try to access the mailbox Thunderbird tells me "account not found".
A quick check on the /var/log/maillog revealed:
Code: Select all
Mar 27 12:03:03 data-server postfix/postfix-script[14977]: stopping the Postfix mail system
Mar 27 12:03:03 data-server postfix/master[14574]: terminating on signal 15
Mar 27 12:03:04 data-server postfix/postfix-script[15059]: starting the Postfix mail system
Mar 27 12:03:04 data-server postfix/master[15061]: daemon started -- version 2.10.1, configuration /etc/postfix
Mar 27 12:03:35 data-server postfix/submission/smtpd[15085]: warning: cannot get RSA certificate from file /etc/pki/dovecot/certs/dovecot.pem: disabling TLS support
Mar 27 12:03:35 data-server postfix/submission/smtpd[15085]: warning: TLS library problem: 15085:error:0200100D:system library:fopen:Permission denied:bss_file.c:398:fopen('/etc/pki/dovecot/certs/dovecot.pem','r'):
Mar 27 12:03:35 data-server postfix/submission/smtpd[15085]: warning: TLS library problem: 15085:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400:
Mar 27 12:03:35 data-server postfix/submission/smtpd[15085]: warning: TLS library problem: 15085:error:140DC002:SSL routines:SSL_CTX_use_certificate_chain_file:system lib:ssl_rsa.c:722:
Mar 27 12:03:35 data-server postfix/submission/smtpd[15085]: connect from unknown[192.168.0.12]
Mar 27 12:03:35 data-server postfix/submission/smtpd[15088]: warning: cannot get RSA certificate from file /etc/pki/dovecot/certs/dovecot.pem: disabling TLS support
Mar 27 12:03:35 data-server postfix/submission/smtpd[15088]: warning: TLS library problem: 15088:error:0200100D:system library:fopen:Permission denied:bss_file.c:398:fopen('/etc/pki/dovecot/certs/dovecot.pem','r'):
Mar 27 12:03:35 data-server postfix/submission/smtpd[15088]: warning: TLS library problem: 15088:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400:
Mar 27 12:03:35 data-server postfix/submission/smtpd[15088]: warning: TLS library problem: 15088:error:140DC002:SSL routines:SSL_CTX_use_certificate_chain_file:system lib:ssl_rsa.c:722:
Mar 27 12:03:35 data-server postfix/submission/smtpd[15085]: lost connection after CONNECT from unknown[192.168.0.12]
Mar 27 12:03:35 data-server postfix/submission/smtpd[15085]: disconnect from unknown[192.168.0.12]
Mar 27 12:03:35 data-server postfix/submission/smtpd[15088]: connect from unknown[192.168.0.12]
Mar 27 12:03:35 data-server postfix/submission/smtpd[15088]: lost connection after CONNECT from unknown[192.168.0.12]
Mar 27 12:03:35 data-server postfix/submission/smtpd[15088]: disconnect from unknown[192.168.0.12]
Code: Select all
Mar 27 12:03:44 data-server python: SELinux is preventing /usr/libexec/postfix/smtpd from open access on the file /etc/pki/dovecot/certs/dovecot.pem.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that smtpd should be allowed open access on the dovecot.pem file by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'smtpd' --raw | audit2allow -M my-smtpd#012# semodule -i my-smtpd.pp#012
Code: Select all
-r--r--r--. root root unconfined_u:object_r:dovecot_cert_t:s0 /etc/pki/dovecot/certs/dovecot.pem
Code: Select all
ausearch -c 'smtpd' --raw | audit2allow -M my-smtpd
libsepol.sepol_string_to_security_class: unrecognized class dir
libsepol.sepol_string_to_security_class: unrecognized class file
libsepol.sepol_string_to_security_class: unrecognized class file
grep "denied { write }" /var/log/audit/audit.log|grep "smtpd"|audit2allow -M smtpd-write
semodule -i smtpd-write.pp
and
grep "denied { read }" /var/log/audit/audit.log|grep "smtpd"|audit2allow -M smtpd-read
semodule -i smtpd-read.pp
I restarted the postfix service and retried to connect via Tunderbird.
But still I receive the same errors ...
I assume it's a problem of the "unrecognized class dir" and "unrecognized class file" ... But how to fix this ?