patch-work
commented
1 week ago Running the milter in foreground shows the problem.
Sun Oct 20 20:54:43 2024 authentication_milter[5405] Warning: Pid_file "/var/run/authentication_milter.pid" already exists. Overwriting!
Sun Oct 20 20:54:43 2024 authentication_milter[5405] Warning: Use of uninitialized value $cwd_untainted in chdir at /usr/libdata/perl5/File/Find.pm line 292.
Sun Oct 20 20:54:43 2024 authentication_milter[5405] Warning: Use of uninitialized value $cwd in concatenation (.) or string at /usr/libdata/perl5/File/Find.pm line 293.
Sun Oct 20 20:54:43 2024 authentication_milter[5405] Server failed: Can't cd to : No such file or directory
Sun Oct 20 20:54:53 2024 authentication_milter[5405] Attempting automatic restart
[...]
Sun Oct 20 20:55:43 2024 authentication_milter[5405] Warning: Pid_file created by this same process. Doing nothing.
Sun Oct 20 20:55:43 2024 authentication_milter[5405] Child process 5405 shutting down due to fatal error: Can't connect to UNIX socket at file /var/[omissis]/fam.socket [Permission denied]
Sun Oct 20 20:55:43 2024 authentication_milter[5405] Server failed: Can't connect to UNIX socket at file /var/[omissis]/fam.socket [Permission denied]
Sun Oct 20 20:55:53 2024 authentication_milter[5405] Abandoning automatic restart: too many restarts in a short time
Sun Oct 20 20:55:53 2024 authentication_milter[5405] Server exiting abnormally> doas ls -halF /var/[omissis]/fam.socket
srw-rw-rw- 1 _milter-auth _milter-auth 0B Oct 20 21:14 /var/[omissis]/fam.socket=> grep _milter-auth /etc/authentication_milter.json
"runas" : "_milter-auth",
"rungroup" : "_milter-auth",By comparison, the log was silent when running as daemon.
marcbradshaw
The username and group are stated in the /etc file, and the pid file has ugo+w permissions anyway, so the problem is elsewhere.
The server shuts down without leaving an error log.
The server must chroot on "/" or it will fail; this is a security risk.
The previous version of the milter worked without interruptions since May. This is an update, leaving the old configuration in place.