[Mailman-Users] Re: group mismatch
Thanks to both. But I'm afraid that this advice does not help, and I am giving up. I suspect that what I am trying to do is impossible. And I also think I was going about it wrong. I was trying to use /etc/aliases to get the mail to go to procmail, with lines like this: Method 1 jdm-society: "|/usr/bin/procmail -m /etc/procmailrc" or Method 2 jdm-society-owner: "|/usr/lib/mailman/mail/mailman owner jdm-society" And then /etc/procmail had lines like this: :0 * To:.*jdm-society-ow...@sjdm.org | /etc/smrsh/mailman owner jdm-society and /etc/smrsh has a soft links to /usr/bin/procmail and to ../../usr/lib/mailman/mail/mailm (I don't know why the ../../ is there.) Method 2 is what yielded the group mismatch. Method 1 just said user not found. I still have no idea where "baron" is coming from. I thought if I could figure that out it would lead to a solution. procmail is not "running". It is not listed in any version of "ps". It is evoked by sendmail or by /etc/aliases.db. sendmail and aliases.db are both owned by root and smmsp. I tried to change the owner of aliases.db to mail rather than root, but it got changed back when I ran newaliases. So I am giving up. We will just deal with the spam by hand. The list is moderated, so none of it actually gets posted, and we discourage some of it with a small captcha. (The really fancy ones are impossible. I can't do them myself.) I did read the link below, but I had not gotten up to trying to modify the code. It seems to be written mainly for some other system than what I have. (I'm using the last available Fedora RPM. I don't think they are going to update Mailman 2, or fix the bug. I do not have time to compile from source, since it is a major change - everything is in a different place. And I won't change to Mailman 3 because, so far as I can tell, we would not want any of its features and configuration would also take a lot of time. I will leave all this to my successor. Right now, everything works except the spam.) https://wiki.list.org/DOC/4.23%20How%20do%20I%20use%20SpamAssassin%20with%20Mailman%3F Thanks for trying. Jon On 05/16/22 00:45, Bruce Johnson wrote: > Are any of the processes being run by that user? like cron jobs? > > Look throughthe mailman logs or other logs (it’s been a very long time; I > cannot remember if procmail and spamassasin have their own logs or they get > dumped into /var/log/messages (for RH-style systems; I forget what the > general syslog file is called in Debian style) Answers: No. No. Nothing in the logs (several of them.) > > > > On May 15, 2022, at 4:35 PM, Jon Baron wrote: > > > > I'm sure this is a very dumb question, because I have seen several > > posts about it, all of which imply that there is some simple solution. > > > > I am trying to use spamassassin by running everything through > > /etc/procmail, and I get the following in /var/log/procmail: > > > > "Group mismatch error. Mailman expected the mail wrapper script to be > > executed as one of the following groups: > > [mail, postfix, mailman, nobody, daemon], > > but the system's mail server executed the mail script as group: "baron". > > Try tweaking the mail server to run the script as one of these groups: > > [mail, postfix, mailman, nobody, daemon]," > > > > The dumb question is: "What is the 'mail server'?" I thought it was > > sendmail, but I have no idea where "baron" comes from. baron is just a > > user on the system. The various IDs for mailman are set to sjdm.org in > > the configuration file. I installed it as "root" from a Fedora RPM, > > and the name "baron" had no part of that. So far as I can tell, > > NOTHING in this system is owned by "baron" except my own account > > (which is, however, included in several groups). > > > > Jon > > -- > > Jonathan Baron, Professor of Psychology, University of Pennsylvania > > Home page: https://www.sas.upenn.edu/~baron > > -- -- Jonathan Baron, Professor of Psychology, University of Pennsylvania Home page: https://www.sas.upenn.edu/~baron Founding Editor: Judgment and Decision Making (http://journal.sjdm.org) -- Mailman-Users mailing list -- mailman-users@python.org To unsubscribe send an email to mailman-users-le...@python.org https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/ https://mail.python.org/archives/list/mailman-users@python.org/
[Mailman-Users] Re: group mismatch
On 5/16/2022 3:42 AM, Jon Baron wrote: procmail is not "running". It is not listed in any version of "ps". It is evoked by sendmail or by /etc/aliases.db. sendmail and aliases.db are both owned by root and smmsp. It is "run" or "envoked" on-demand by sendmail to execute the line in the alias file; you'll only see it in ps when actually running. the procmail man file states -m [...] If the rcfile is an absolute path starting with /etc/procmailrcs/ without backward references (i.e. the parent directory cannot be mentioned) procmail will, only if no security violations are found, take on the identity of the owner of the rcfile (or symbolic link). [...] [that path may change in different versions of procmail] That last sentence is important- check the ownership of /etc/procmailrc, I'm betting it's "baron"; that can happen easily when editing. z! -- Mailman-Users mailing list -- mailman-users@python.org To unsubscribe send an email to mailman-users-le...@python.org https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/ https://mail.python.org/archives/list/mailman-users@python.org/
[Mailman-Users] Re: group mismatch
On Sun, 15 May 2022, Jon Baron wrote: I am trying to use spamassassin by running everything through /etc/procmail, Sorru, I do not understand what procmail and spamassassin, intended to process INCOMING mail, have to do with mailman which is SENDING OUT mail. I still have a few almost-dead mailman lists on my machine, and I do use procmail to filter my personal incoming mail. It is a long time we have abandoned (been forced to abandon) spamassassin, but that was running on the institute MX, not on my own machine. As far as I remember (after a first trial) spamassassin was run as a milter in sendmail.cf (the sendmail doc had s[pecial instructions). Procmail instead is run (by me only on my own machine) via my own ~/.procmailrc (no need to pass through /etc/aliases or amy other system file). That occurs definining it as default deliveryi agent for the local mailer in sendmail.cf (see also sendmail doc). My sendmail.cf has a section starting with Mlocal, P=/usr/bin/procmail, F=lsDFMAw5:/|@qSPfhn09, S=EnvFromL/HdrFromL, R=EnvToL/HdrToL, A=procmail -a $h -d $u The default aliases needed for the mailman lists are kept in a separate alias file, and sendmail.cf concatenates it with the system one O AliasFile=/etc/aliases,/etc/mail/mailman.aliases (do NOT use the sendmail.cf lines I quote as they are ... go through the proper sendmail configuration) -- Lucio Chiappetti - INAF/IASF - via Corti 12 - I-20133 Milano (Italy) For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html "All that is google does not glitter Nor all who use alpine/procmail are lost" -- Mailman-Users mailing list -- mailman-users@python.org To unsubscribe send an email to mailman-users-le...@python.org https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/ https://mail.python.org/archives/list/mailman-users@python.org/
[Mailman-Users] Re: group mismatch
On 2022-05-16 at 12:32:54 UTC-0400 (Mon, 16 May 2022 18:32:54 +0200 (CEST)) Lucio Chiappetti is rumored to have said: On Sun, 15 May 2022, Jon Baron wrote: I am trying to use spamassassin by running everything through /etc/procmail, Sorru, I do not understand what procmail and spamassassin, intended to process INCOMING mail, have to do with mailman which is SENDING OUT mail. It is fairly common for SpamAssassin to be used on both incoming and outgoing mail, but obviously outgoing would need to use something other than procmail to call it. I still have a few almost-dead mailman lists on my machine, and I do use procmail to filter my personal incoming mail. It is a long time we have abandoned (been forced to abandon) spamassassin, but that was running on the institute MX, not on my own machine. As far as I remember (after a first trial) spamassassin was run as a milter in sendmail.cf (the sendmail doc had s[pecial instructions). SpamAssassin can be used as a milter during the SMTP transaction or as a filter in the delivery pipeline via a delivery agent like procmail. Using procmail is generally suboptimal, but it may be the only mechanism available for an end user to deploy SA for their own mail without root access. Also: procmail is antique abandonware that no one should use in 2022, but it can be very hard to replace. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and many *@billmail.scconsult.com addresses) Not Currently Available For Hire -- Mailman-Users mailing list -- mailman-users@python.org To unsubscribe send an email to mailman-users-le...@python.org https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/ https://mail.python.org/archives/list/mailman-users@python.org/
[Mailman-Users] Re: group mismatch
Going back to the original email- On 5/15/2022 4:35 PM, Jon Baron wrote: "Group mismatch error. Mailman expected the mail wrapper script to be executed as one of the following groups: [mail, postfix, mailman, nobody, daemon], but the system's mail server executed the mail script as group: "baron". Try tweaking the mail server to run the script as one of these groups: [mail, postfix, mailman, nobody, daemon]," _Something_ (possibly procmail) was executing the mailman wrapper which produced the message above. When it was exec'd, for some reason the GID it was started under wasn't good. One thing is odd about the message above, it says "one of the groups" whereas some versions (eg 2.1.25) have "Mailman expected the %s wrapper to be executed as group" (singular). Could be that the OP's version is rather old. Later, z! -- Mailman-Users mailing list -- mailman-users@python.org To unsubscribe send an email to mailman-users-le...@python.org https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/ https://mail.python.org/archives/list/mailman-users@python.org/
[Mailman-Users] Re: group mismatch
On 5/16/22 16:18, Carl Zwanzig wrote: One thing is odd about the message above, it says "one of the groups" whereas some versions (eg 2.1.25) have "Mailman expected the %s wrapper to be executed as group" (singular). Could be that the OP's version is rather old. That's a Debian 'feature'. -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list -- mailman-users@python.org To unsubscribe send an email to mailman-users-le...@python.org https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/ https://mail.python.org/archives/list/mailman-users@python.org/
[Mailman-Users] Re: group mismatch
On 2022-05-16 3:31 PM, Bill Cole wrote: ... SpamAssassin can be used as a milter during the SMTP transaction or as a filter in the delivery pipeline via a delivery agent like procmail. Using procmail is generally suboptimal, but it may be the only mechanism available for an end user to deploy SA for their own mail without root access. You also get per-user thresholds and Bayes training etc. Also: procmail is antique abandonware that no one should use in 2022, but it can be very hard to replace. Courier maildrop works and has a somewhat saner syntax. However what does this have to do with mailman? -- IIRC I had to add an extra python file, edit something in another, and add a config setting, to have spamassassin work with MM2. Dima -- Mailman-Users mailing list -- mailman-users@python.org To unsubscribe send an email to mailman-users-le...@python.org https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/ https://mail.python.org/archives/list/mailman-users@python.org/
[Mailman-Users] Re: group mismatch
> Also: procmail is antique abandonware that no one should use in 2022, > but it can be very hard to replace. I have a massive time investment in working procmail rules. Use is not abandoned here. "If it aint broke dont fix it." ;-) Cheers, -- Julian Stacey http://berklix.com/jhs/ http://stolenVotes.uk Arm Ukraine, Zap killer Putin, grain & fuel loss hits poorest. -- Mailman-Users mailing list -- mailman-users@python.org To unsubscribe send an email to mailman-users-le...@python.org https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/ https://mail.python.org/archives/list/mailman-users@python.org/
[Mailman-Users] Re: group mismatch
On 5/16/2022 4:31 PM, Mark Sapiro wrote: That's a Debian 'feature'. Which then makes me wonder if there are other Debian "features" getting in the way. z! -- Mailman-Users mailing list -- mailman-users@python.org To unsubscribe send an email to mailman-users-le...@python.org https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/ https://mail.python.org/archives/list/mailman-users@python.org/
[Mailman-Users] Re: group mismatch
Lucio Chiappetti writes: > On Sun, 15 May 2022, Jon Baron wrote: > > > I am trying to use spamassassin by running everything through > > /etc/procmail, > > Sorru, I do not understand what procmail and spamassassin, intended to > process INCOMING mail, have to do with mailman which is SENDING OUT > mail. I assumed the OP knows procmail fairly well, doesn't understand milters (or whatever the equivalent is for $MTA), and is using a pipeline like sendmail | procmail | spamassassin && mailman since the error message implied that mailman was started by procmail. procmail may not be the tool of choice these days, but it should work. Note that the error message mentions postfix several times; I'm not sure that a sendmail cf is of much use to the OP. Steve -- Mailman-Users mailing list -- mailman-users@python.org To unsubscribe send an email to mailman-users-le...@python.org https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/ https://mail.python.org/archives/list/mailman-users@python.org/
[Mailman-Users] Re: group mismatch
On 5/16/22 19:27, Carl Zwanzig wrote: On 5/16/2022 4:31 PM, Mark Sapiro wrote: That's a Debian 'feature'. Which then makes me wonder if there are other Debian "features" getting in the way. No. It's a simple group mismatch. The OP has to arrange for the process that pipes the mail to Mailman to run with an effective group of one of mail, postfix, mailman, nobody or daemon. -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list -- mailman-users@python.org To unsubscribe send an email to mailman-users-le...@python.org https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/ https://mail.python.org/archives/list/mailman-users@python.org/
