1

Topic: Installation error on Debian 5 with iRedMail-0.5.0

I'm trying to install iRedMail-0.5.0 on OpenVZ.  I issued the command "mount -o remount,rw,acl /" but I still get this error during install.  Can anyone help?

< ERROR > Your system doesn't support advance file system access control list (acl). Please setup acl support in /etc/fstab before we go further.
Reference:

* Setup acl on Ubuntu:
  http://code.google.com/p/iredmail/wiki/ … package(s)

* Setup acl on Debian:
  http://code.google.com/p/iredmail/wiki/ … y_packages

2

Re: Installation error on Debian 5 with iRedMail-0.5.0

Did you install 'acl' package first?

If it's already installed, please paste the tail of output while use below command to perform installation:

# bash -xv iRedMail.sh

3

Re: Installation error on Debian 5 with iRedMail-0.5.0

Reading package lists... Done
Building dependency tree
Reading state information... Done
acl is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

# ------------------------------
# Check target platform and environment.
# ------------------------------
check_env
+ check_env
+ check_user root
id -u
++ id -u
id -u ${1}
++ id -u root
+ '[' X0 '!=' X0 ']'
id -u
++ id -u
+ '[' X0 == X0 ']'
+ export PATH=/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
+ PATH=/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
+ check_hostname
+ echo mail.xxxxxxxxx.com
+ grep '\.'
+ '[' X0 '!=' X0 ']'
+ check_acl
+ '[' XDEBIAN '!=' XRHEL ']'
${RANDOM_STRING}
++ eval '</dev/urandom' tr -dc 'A-Za-z0-9|' '(head' -c '$1' '>' /dev/null '2>&1' '||' head -c '30)'
</dev/urandom tr -dc A-Za-z0-9| (head -c $1 > /dev/null 2>&1 || head -c 30)
+++ tr -dc A-Za-z0-9
+++ head -c
+++ head -c 30
+ tmp_file=/tmp/4dUxpJpk21D0Akt2T9Ib3gC5SLLd0A
+ touch /tmp/4dUxpJpk21D0Akt2T9Ib3gC5SLLd0A
+ setfacl -m u:bin:--- /tmp/4dUxpJpk21D0Akt2T9Ib3gC5SLLd0A
+ '[' X1 '!=' X0 ']'
+ ECHO_ERROR 'Your system doesn'\''t support advance file system access control list (acl). Please setup acl support in /etc/fstab before we go further.'
+ '[' 'XYour system doesn'\''t support advance file system access control list (acl). Please setup acl support in /etc/fstab before we go further.' == X-n ']'
+ '[' Xxterm == Xxterm -o Xxterm == Xlinux -o Xxterm == Xpcconsole ']'
+ echo -e '\033[41m< ERROR >\033[0m Your system doesn'\''t support advance file system access control list (acl). Please setup acl support in /etc/fstab before we go further.'
< ERROR > Your system doesn't support advance file system access control list (acl). Please setup acl support in /etc/fstab before we go further.
+ cat
Reference:

* Setup acl on Ubuntu:
  http://code.google.com/p/iredmail/wiki/ … package(s)

* Setup acl on Debian:
  http://code.google.com/p/iredmail/wiki/ … y_packages

+ rm -f /tmp/4dUxpJpk21D0Akt2T9Ib3gC5SLLd0A
+ exit 255

4

Re: Installation error on Debian 5 with iRedMail-0.5.0

Here:

+ setfacl -m u:bin:--- /tmp/4dUxpJpk21D0Akt2T9Ib3gC5SLLd0A
+ '[' X1 '!=' X0 ']'

Some questions:
- Did you run below command before installation:

# mount -o remount,rw,acl /

- Did you install 'acl' package before installation?

# apt-get install acl

5

Re: Installation error on Debian 5 with iRedMail-0.5.0

Have the same problem,

mail:~/imail/iRedMail-0.5.0# mount
/dev/sda1 on / type ext3 (rw,acl,errors=remount-ro,acl)
tmpfs on /lib/init/rw type tmpfs (rw,nosuid,mode=0755)
proc on /proc type proc (rw,noexec,nosuid,nodev)
sysfs on /sys type sysfs (rw,noexec,nosuid,nodev)
procbususb on /proc/bus/usb type usbfs (rw)
udev on /dev type tmpfs (rw,mode=0755)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev)
devpts on /dev/pts type devpts (rw,noexec,nosuid,gid=5,mode=620)
/dev/sda9 on /home type ext3 (rw)
/dev/sda8 on /tmp type ext3 (rw)
/dev/sda5 on /usr type ext3 (rw)
/dev/sda6 on /var type ext3 (rw)

this is my fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point>   <type>  <options>       <dump>  <pass>
proc            /proc           proc    defaults        0       0
#/dev/sda1       /               ext3    errors=remount-ro 0       1
/dev/sda1       /               ext3    acl,errors=remount-ro 0       1
/dev/sda9       /home           ext3    defaults        0       2
/dev/sda8       /tmp            ext3    defaults        0       2
/dev/sda5       /usr            ext3    defaults        0       2
/dev/sda6       /var            ext3    defaults        0       2
/dev/sda7       none            swap    sw              0       0
/dev/hda        /media/cdrom0   udf,iso9660 user,noauto     0       0

I have already installed the ACL

but this is the log

# ------------------------------
# Check target platform and environment.
# ------------------------------
check_env
+ check_env
+ check_user root
id -u
++ id -u
id -u ${1}
++ id -u root
+ '[' X0 '!=' X0 ']'
id -u
++ id -u
+ '[' X0 == X0 ']'
+ export PATH=/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
+ PATH=/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
+ check_hostname
+ echo mail.nomicorp.com.mx
+ grep '\.'
+ '[' X0 '!=' X0 ']'
+ check_acl
+ '[' XDEBIAN '!=' XRHEL ']'
${RANDOM_STRING}
++ eval '</dev/urandom' tr -dc 'A-Za-z0-9|' '(head' -c '$1' '>' /dev/null '2>&1' '||' head -c '30)'
</dev/urandom tr -dc A-Za-z0-9| (head -c $1 > /dev/null 2>&1 || head -c 30)
+++ tr -dc A-Za-z0-9
+++ head -c
+++ head -c 30
+ tmp_file=/tmp/Ah0staS6V8osCCHHgBtsAM6hLu2jZH
+ touch /tmp/Ah0staS6V8osCCHHgBtsAM6hLu2jZH
+ setfacl -m u:bin:--- /tmp/Ah0staS6V8osCCHHgBtsAM6hLu2jZH
+ '[' X1 '!=' X0 ']'
+ ECHO_ERROR 'Your system doesn'\''t support advance file system access control list (acl). Please setup acl support in /etc/fstab before we go further.'
+ '[' 'XYour system doesn'\''t support advance file system access control list (acl). Please setup acl support in /etc/fstab before we go further.' == X-n ']'
+ '[' Xxterm == Xxterm -o Xxterm == Xlinux -o Xxterm == Xpcconsole ']'
+ echo -e '\033[41m< ERROR >\033[0m Your system doesn'\''t support advance file system access control list (acl). Please setup acl support in /etc/fstab before we go further.'
< ERROR > Your system doesn't support advance file system access control list (acl). Please setup acl support in /etc/fstab before we go further.
+ cat
Reference:

* Setup acl on Ubuntu:
  http://code.google.com/p/iredmail/wiki/ … package(s)

* Setup acl on Debian:
  http://code.google.com/p/iredmail/wiki/ … y_packages

+ rm -f /tmp/Ah0staS6V8osCCHHgBtsAM6hLu2jZH
+ exit 255

What else need to check ??

Thanks

6

Re: Installation error on Debian 5 with iRedMail-0.5.0

hi, this is a bug in iRedMail: it creates a new file under /tmp and use 'setfacl' to set ACL.

How to fix:
- Edit file iRedMail-0.5.0/conf/core, replace '/tmp' by '/etc' in function 'check_acl()'.

7

Re: Installation error on Debian 5 with iRedMail-0.5.0

Solved ... thanks

8

Re: Installation error on Debian 5 with iRedMail-0.5.0

Still same error with Debian OpenVZ.  It keep saying my system doesn't support acl.

I have installed acl and issued "mount -o remount,rw,acl /" before starting the the intallation.

9

Re: Installation error on Debian 5 with iRedMail-0.5.0

synet2k wrote:

Still same error with Debian OpenVZ.  It keep saying my system doesn't support acl.

Could you please post error log?

Did you modify file i mentioned:

How to fix:
- Edit file iRedMail-0.5.0/conf/core, replace '/tmp' by '/etc' in function 'check_acl()'.

10

Re: Installation error on Debian 5 with iRedMail-0.5.0

# ------------------------------
# Check target platform and environment.
# ------------------------------
check_env
+ check_env
+ check_user root
id -u
++ id -u
id -u ${1}
++ id -u root
+ '[' X0 '!=' X0 ']'
id -u
++ id -u
+ '[' X0 == X0 ']'
+ export PATH=/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
+ PATH=/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
+ check_hostname
+ echo mail.my-idc.com
+ grep '\.'
+ '[' X0 '!=' X0 ']'
+ check_acl
+ '[' XDEBIAN '!=' XRHEL ']'
${RANDOM_STRING}
++ eval '</dev/urandom' tr -dc 'A-Za-z0-9|' '(head' -c '$1' '>' /dev/null '2>&1' '||' head -c '30)'
</dev/urandom tr -dc A-Za-z0-9| (head -c $1 > /dev/null 2>&1 || head -c 30)
+++ tr -dc A-Za-z0-9
+++ head -c
+++ head -c 30
+ tmp_file=/etc/tBhm5r9533BFy673hJvNnyKmJ47RIw
+ touch /etc/tBhm5r9533BFy673hJvNnyKmJ47RIw
+ setfacl -m u:bin:--- /etc/tBhm5r9533BFy673hJvNnyKmJ47RIw
+ '[' X1 '!=' X0 ']'
+ ECHO_ERROR 'Your system doesn'\''t support advance file system access control list (acl). Please setup acl support in /etc/fstab before we go further.'
+ '[' 'XYour system doesn'\''t support advance file system access control list (acl). Please setup acl support in /etc/fstab before we go further.' == X-n ']'
+ '[' Xxterm == Xxterm -o Xxterm == Xlinux -o Xxterm == Xpcconsole ']'
+ echo -e '\033[41m< ERROR >\033[0m Your system doesn'\''t support advance file system access control list (acl). Please setup acl support in /etc/fstab before we go further.'
< ERROR > Your system doesn't support advance file system access control list (acl). Please setup acl support in /etc/fstab before we go further.
+ cat
Reference:

* Setup acl on Ubuntu:
  http://code.google.com/p/iredmail/wiki/ … package(s)

* Setup acl on Debian:
  http://code.google.com/p/iredmail/wiki/ … y_packages

+ rm -f /etc/tBhm5r9533BFy673hJvNnyKmJ47RIw
+ exit 255

11

Re: Installation error on Debian 5 with iRedMail-0.5.0

Could you please run below commands manually and post the output?

# touch /etc/tBhm5r9533BFy673hJvNnyKmJ47RIw
# setfacl -m u:bin:--- /etc/tBhm5r9533BFy673hJvNnyKmJ47RIw

12

Re: Installation error on Debian 5 with iRedMail-0.5.0

root@mail:~# touch /etc/tBhm5r9533BFy673hJvNnyKmJ47RIw
root@mail:~# setfacl -m u:bin:--- /etc/tBhm5r9533BFy673hJvNnyKmJ47RIw
setfacl: /etc/tBhm5r9533BFy673hJvNnyKmJ47RIw: Operation not supported

13 (edited by Suno Ano 2009-08-26 04:09:17)

Re: Installation error on Debian 5 with iRedMail-0.5.0

About OpenVZ: There is always one HN (Hardware Node) and >= 0 VEs (Virtual Environments). More info here http://sunoano.name/ws/public_xhtml/openvz.html

Now that I am getting serious about setting up IRM, it seems it does not work with OpenVZ simply because ACL can not be set from within a VE but only on the HN. Many of us need to run IRM inside VEs so we need to find a solution; below some screendump showing the problem inside a VE where I am trying to install IRM:

mail:/home/sa/iRedMail-0.5.0# lsb_release -ric
Distributor ID:    Debian
Release:    5.0.2
Codename:    lenny
mail:/home/sa/iRedMail-0.5.0# whoami
root
mail:/home/sa/iRedMail-0.5.0# type dpl; dpl acl* | grep ii
dpl is aliased to `dpkg -l'
ii  acl                             2.2.47-2                 Access control list utilities
mail:/home/sa/iRedMail-0.5.0# 
mount: permission denied
mail:/home/sa/iRedMail-0.5.0# rm /tmp/tBhm5r9533BFy673hJvNnyKmJ47RIw 
mail:/home/sa/iRedMail-0.5.0# touch /tmp/somethingafqrr34r24rfrwesfsr2
mail:/home/sa/iRedMail-0.5.0# setfacl -m u:bin:--- /tmp/somethingafqrr34r24rfrwesfsr2
setfacl: /tmp/somethingafqrr34r24rfrwesfsr2: Operation not supported
mail:/home/sa/iRedMail-0.5.0# cat /etc/fstab 
# UNCONFIGURED FSTAB FOR BASE SYSTEM
mail:/home/sa/iRedMail-0.5.0# 

The simple fact is, that as of now irm is unusable with OpenVZ. We need to get this fixed by either
- making IRM not rely on ACL or
- find a way to make it (ACL that is) work on OpenVZ

There are a few post on the forum as well as the Install Guide for Debian mentions it e.g. to issue mount -o remount,rw,acl / or they say with OpenVZ it works out of the box and things like that. All that suggestions do not work. IRM does currently not work with OpenVZ; thereby it does not matter which Linux Distribution is used on the HN or within a VE e.g. Debian on the HN and CentOS within the VE etc.

One thing I will test tomorrow is to activate ACL on the HN. However, this should not be necessary -- I dislike the idea since the HN I use for testing currently runs 23 other VEs with various other software like for example Plone, Joomla, GITosis, CouchDB, etc. In other words, whatever goes inside a VE should not affect the HN or other VEs for that matter.

14

Re: Installation error on Debian 5 with iRedMail-0.5.0

ACL issue was fixed in -current, you can use hg to check out the lastest source code or mail me to get a working copy.

if acl testing failed, iRedMail will make the private SSL key world-readable, you know, it's not recommend, but it works. And that's why iRedMail force to use acl.

15 (edited by Suno Ano 2009-08-27 02:47:48)

Re: Installation error on Debian 5 with iRedMail-0.5.0

I tried with the latest version now and install works fine now. However, after logging into rouncube I cannot send or receive emails; note: I replaced mydomain.com with example.com in the screendump below

mail:/home/sa/iredmail/iRedMail# tail -n30 /var/log/mail.log 
Aug 26 16:14:11 mail postfix/qmgr[11263]: E3E652244751: from=<suno.ano@example.com>, size=549, nrcpt=1 (queue active)
Aug 26 16:14:11 mail roundcube: [26-Aug-2009 16:14:11 +0000]: User suno.ano@example.com [91.115.210.189]; Message for <suno.ano@gmail.com>; 250: 2.0.0 Ok: queued as E3E652244751
Aug 26 16:14:11 mail postfix/smtp[12517]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Aug 26 16:14:11 mail postfix/smtp[12517]: E3E652244751: to=<suno.ano@gmail.com>, relay=none, delay=0.03, delays=0.02/0.01/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Aug 26 16:14:12 mail postfix/smtpd[12512]: disconnect from mail.example.com[127.0.0.1]
Aug 26 16:15:58 mail postfix/smtpd[12577]: connect from mail-fx0-f213.google.com[209.85.220.213]
Aug 26 16:15:58 mail postfix-policyd: connection from: 127.0.0.1 port: 35480 slots: 0 of 4096 used
Aug 26 16:15:58 mail postfix-policyd: rcpt=1, greylist=new, host=209.85.220.213 (mail-fx0-f213.google.com), from=suno.ano@gmail.com, to=suno.ano@example.com, size=0
Aug 26 16:15:58 mail postfix/smtpd[12577]: NOQUEUE: reject: RCPT from mail-fx0-f213.google.com[209.85.220.213]: 450 4.7.1 <suno.ano@example.com>: Recipient address rejected: Policy Rejection- Please try later.; from=<suno.ano@gmail.com> to=<suno.ano@example.com> proto=ESMTP helo=<mail-fx0-f213.google.com>
Aug 26 16:15:58 mail postfix/smtpd[12577]: disconnect from mail-fx0-f213.google.com[209.85.220.213]
Aug 26 16:17:11 mail postfix/smtpd[12577]: connect from mail-fx0-f213.google.com[209.85.220.213]
Aug 26 16:17:11 mail postfix-policyd: rcpt=2, greylist=abuse, host=209.85.220.213 (mail-fx0-f213.google.com), from=suno.ano@gmail.com, to=suno.ano@example.com, size=0
Aug 26 16:17:11 mail postfix/smtpd[12577]: NOQUEUE: reject: RCPT from mail-fx0-f213.google.com[209.85.220.213]: 450 4.7.1 <suno.ano@example.com>: Recipient address rejected: Policy Rejection- Please try later.; from=<suno.ano@gmail.com> to=<suno.ano@example.com> proto=ESMTP helo=<mail-fx0-f213.google.com>
Aug 26 16:17:11 mail postfix/smtpd[12577]: disconnect from mail-fx0-f213.google.com[209.85.220.213]
Aug 26 16:20:31 mail postfix/anvil[12580]: statistics: max connection rate 1/60s for (smtp:209.85.220.213) at Aug 26 16:15:58
Aug 26 16:20:31 mail postfix/anvil[12580]: statistics: max connection count 1 for (smtp:209.85.220.213) at Aug 26 16:15:58
Aug 26 16:20:31 mail postfix/anvil[12580]: statistics: max cache size 1 at Aug 26 16:15:58
Aug 26 16:21:00 mail postfix/smtpd[12611]: connect from mail-fx0-f213.google.com[209.85.220.213]
Aug 26 16:21:00 mail postfix-policyd: connection from: 127.0.0.1 port: 45633 slots: 0 of 4096 used
Aug 26 16:21:00 mail postfix-policyd: rcpt=3, greylist=update, host=209.85.220.213 (mail-fx0-f213.google.com), from=suno.ano@gmail.com, to=suno.ano@example.com, size=0
Aug 26 16:21:00 mail postfix-policyd: rcpt=3, throttle_rcpt=new(a), host=209.85.220.213, from=suno.ano@gmail.com, to=suno.ano@example.com, count=1/64(1), threshold=0%
Aug 26 16:21:00 mail postfix/smtpd[12611]: 696792244754: client=mail-fx0-f213.google.com[209.85.220.213]
Aug 26 16:21:00 mail postfix/cleanup[12616]: 696792244754: message-id=<e0e3aacb0908260915k1a04fbep934e09c92351af0e@mail.gmail.com>
Aug 26 16:21:00 mail postfix/qmgr[11263]: 696792244754: from=<suno.ano@gmail.com>, size=1900, nrcpt=1 (queue active)
Aug 26 16:21:00 mail postfix/smtp[12617]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Aug 26 16:21:00 mail postfix/smtp[12617]: 696792244754: to=<suno.ano@example.com>, relay=none, delay=0.06, delays=0.05/0.01/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Aug 26 16:21:30 mail postfix/smtpd[12611]: disconnect from mail-fx0-f213.google.com[209.85.220.213]
Aug 26 16:23:03 mail postfix/qmgr[11263]: E3E652244751: from=<suno.ano@example.com>, size=549, nrcpt=1 (queue active)
Aug 26 16:23:03 mail postfix/smtp[12649]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Aug 26 16:23:03 mail postfix/smtp[12649]: E3E652244751: to=<suno.ano@gmail.com>, relay=none, delay=532, delays=532/0.01/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)

Any idea what's wrong here?

16

Re: Installation error on Debian 5 with iRedMail-0.5.0

Suno Ano wrote:

Aug 26 16:14:11 mail postfix/smtp[12517]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused

Restarting your amavis service should solve this issue.

17 (edited by Suno Ano 2009-08-30 03:31:56)

Re: Installation error on Debian 5 with iRedMail-0.5.0

It is working now smile ... see below about what I did:

Unable to start amavis + fixing the issue:

mail:/home/sa# type psa
psa is aliased to `ps aux | grep'
mail:/home/sa# psa amavis
root     18384  0.0  0.0   5160   776 pts/0    S+   18:49   0:00 grep amavis
mail:/home/sa# /etc/init.d/amavis restart
Stopping amavisd: (not running).
Starting amavisd: Array found where operator expected at /etc/amavis/conf.d/50-user line 22, at end of line
        (Missing semicolon on previous line?)
Error in config file "/etc/amavis/conf.d/50-user": syntax error at /etc/amavis/conf.d/50-user line 22, near "@bypass_virus_checks_maps "
(failed).
mail:/home/sa# nano /etc/amavis/conf.d/50-user


[here I edit /etc/amavis/conf.d/50-user ... see below about the missing semicolon]


mail:/home/sa# /etc/init.d/amavis start
Starting amavisd: amavisd-new.
mail:/home/sa# psa amavis
amavis   18428  0.2  5.2 203716 81972 ?        Ss   18:51   0:00 amavisd (master)
amavis   18429  0.0  5.1 204916 80844 ?        S    18:51   0:00 amavisd (virgin child)
amavis   18430  0.0  5.1 204916 80824 ?        S    18:51   0:00 amavisd (virgin child)
root     18433  0.0  0.0   5160   776 pts/0    R+   18:55   0:00 grep amavis
mail:/home/sa#

Adding the missing semicolon:
Here I am adding the missing semicolon at the end of line 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 );

[skipping a lot of lines ...]

chomp($mydomain = "mail.example.com");
@local_domains_maps = ['mail.example.com', 'example.com'];
@mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10 [FEC0::]/10
                  10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 );

[skipping a lot of lines ...]

Status:
Sending works now. Receiving emails (e.g. if I send from
foo@gmail.com to foo@example.com) takes a few minutes at first try
because of greylisting. I assume the 5min delay is only true for some
email address that is seen for the first time i.e. if IRM gets email
from the same address for the 2+ times there is no more greylisting
and thus no delay right?

18

Re: Installation error on Debian 5 with iRedMail-0.5.0

Suno Ano wrote:

Here I am adding the missing semicolon at the end of line 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 );

Fixed in -current. Thanks Suno smile