Kopano spamd error - PermissionError: [Errno 1] Operation not permitted

fbartels

kopano-spamd by default runs in the user context of the user kopano (as defined by run_as_user and run_as_group). To succesfully run sa-learn make sure that the provided user is both part of the amavis group (so spamassasin can process the item), as well as local_admin_user within Kopano (so kopano-spamd has access to the users mailboxes).

Yes, you could add the Kopano user to the amavis group.

cblaha

I am so desperate. This is my /etc/group

amavis:x:116:clamav,kopano
kopano:x:996:kapi,konnect,amavis,spamassassin
spamassassin:x:1007:kopano
spamd:x:5555:spamassassin,kopano

The Logfile always shows:

2018-12-31 16:28:16,639 - spamd - INFO - Learning message as SPAM, entryid: 00000000F83B1B5FC8F84509B0B0AE1E455E51610100000005000000E787D0AFFB7047ABB8F6EBD1DDE8AE6F00000000
2018-12-31 16:28:16,676 - spamd - ERROR - Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/kopano/log.py”, line 103, in log_exc
try: yield
File “/usr/lib/python3/dist-packages/kopano_spamd/init.py”, line 83, in update
self.learn(item, searchkey, True)
File “/usr/lib/python3/dist-packages/kopano_spamd/init.py”, line 106, in learn
os.chown(emlfilename, uid, gid)
PermissionError: [Errno 1] Operation not permitted: ‘/var/lib/kopano/spamd/spam/FFAC2B62292B4D3887ABE9DDE18C87DA.eml’

Whats wrong with my configuration?

fbartels

Using the default configuration? Would need to check on a test system next week.

For some dedicated attention I would recommend to open a support case.

fbartels

It certainly is a bit strange. I did some test as wekk and I get the same error message:

2019-01-02 15:52:15,041 - spamd - INFO - Learning message as SPAM, entryid: 00000000D5713A05C54F4CBB9899E84DD9B593FE0100000005000000548FAD18C4534CA78B2374C46D55FD2700000000
2019-01-02 15:52:15,042 - spamd - ERROR - Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/kopano/log.py", line 103, in log_exc
    try: yield
  File "/usr/lib/python3/dist-packages/kopano_spamd/__init__.py", line 83, in update
    self.learn(item, searchkey, True)
  File "/usr/lib/python3/dist-packages/kopano_spamd/__init__.py", line 106, in learn
    os.chown(emlfilename, uid, gid)
PermissionError: [Errno 1] Operation not permitted: '/var/lib/kopano/spamd/spam/E6F09EA690A54940988C8C8467345422.eml'

what makes it even stranger, what the script does when giving the error is a chown, and doing this manually works: sudo -H -u kopano chown kopano:amavis /var/lib/kopano/spamd/spam/E6F09EA690A54940988C8C8467345422.eml

Will need to check with a python developer tomorrow.

PS: nevertheless I updated the manual to make the steps more clear and also added a hint to the repo where you got that sudoers stuff from that the content of the repo are outdated. https://documentation.kopano.io/kopanocore_administrator_manual/special_kc_configurations.html#configuring-kopano-spamd-for-automatic-spam-ham-learning

fbartels

Diving into this caused quite some head scratching. The issue is caused by failing over to the bundled daemon module in python-kopano, which was still required in the python2 world, but not anymore in python3. The issue should go away when you install the python3-module manually. We will add this as an official dependency soon.

https://packages.debian.org/stretch/python3-daemon

BMWfan

I have tried it now also in the newest Version (kopano-spamd_8.7.80.424.3b35b58f3-0+49.1_amd64.deb) but also there is the problem not fixed:

2019-01-05 14:00:58,351 - spamd - INFO - Learning message as SPAM, entryid: 00000000A497753E7B1B4CE3894BB06ABB7C1F4501000000050000003AF8292887AE435FA977C1660CBA61C500000000
2019-01-05 14:00:58,377 - spamd - ERROR - Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/kopano/log.py", line 103, in log_exc
    try: yield
  File "/usr/lib/python3/dist-packages/kopano_spamd/__init__.py", line 83, in update
    self.learn(item, searchkey, True)
  File "/usr/lib/python3/dist-packages/kopano_spamd/__init__.py", line 106, in learn
    os.chown(emlfilename, uid, gid)
PermissionError: [Errno 1] Operation not permitted: '/var/lib/kopano/spamd/spam/B469CB25904A45A79A66D3F5B6882661.eml'

ashceryth

@BMWfan

Did you install python3-daemon manually as suggested by @fbartels ?

Assuming you’re running Debian: apt-get install python3-daemon

cblaha

@fbartels: I’ve installed python3-daemon via apt-get but I get the error already.

BMWfan

@ashceryth yes, but i doesn’t work.

BMWfan

@fbartels have you changed more then only installing the python-deamon?

thctlo

try both
apt install python-daemon python3-daemon

and/or
apt install python-daemonize python3-daemonize

And what are the rights on : /var/lib/kopano/spamd/spam/
i havent looked at my system, but the rights are probley 755
you can try
chmod -R 1770 /var/lib/kopano/spamd

adduser spamassassin kopano
adduser amavis kopano

restart spamassassin and amavis

cblaha

I’ve now installed

python-daemon, python3-daemon,python-daemonize, python3-daemonize

but i got always the same error message.

I always changed the permission on /var/lib/kopano/spamd and add the user to the group kopano.

BMWfan

@thctlo i’ve already done and now again without any progress depending on the failure.

i have the same problem on centos 7.

2019-01-09 21:08:27,656 - spamd - ERROR - Traceback (most recent call last):
File “/usr/lib/python2.7/site-packages/kopano/log.py”, line 103, in log_exc
try: yield
File “/usr/lib/python2.7/site-packages/kopano_spamd/init.py”, line 83, in update
self.learn(item, searchkey, True)
File “/usr/lib/python2.7/site-packages/kopano_spamd/init.py”, line 106, in learn
os.chown(emlfilename, uid, gid)
OSError: [Errno 1] Operation not permitted: ‘/var/lib/kopano/spamd/spam/EEEE4E84C38D4D4DAC3EC2BCA3CD477A.eml’

mark dufour

which version of python3-daemon are you using? so we can try to reproduce the problem here…

@mark-dufour

Hi mark i am using python3.6.

iam starting the service like this

0_1547131538467_671c1cb3-539f-4645-aa24-3df9199628b9-image.png

BMWfan

@mark-dufour here is the needed output from a Debian 9 Server:

$ pip3.5 list
Package           Version
----------------- -------
python-daemon     2.1.1

@BMWfan

hi here is mine

0_1547151908400_4fe8c8ba-334f-4ae4-ab0d-b9ee05ddfa22-image.png

thctlo

Check if the rights are correct for the user that is running the spam daemon.
@ckruijntjens

The systemd config of inotify-spamleard looks good, except the user/group.
it might be ok, but check the full path rights off : /var/lib/kopano/spamd/spam
In this folder check if folder spamd is acceccable (RWX) buy kopano user and group and same for the spam folder
of test with a 777 on the folders and check what happens.

@thctlo

hi i indeed allredeay gave the folders 777 permissions however same issue.

0_1547192328519_9ddb7d4e-2d67-4c4b-aebe-0d4e8063e620-image.png

0_1547192392867_d395a25a-db02-497c-8438-98f7d46d84bb-image.png