Permission denied

RT Users
1

i’ve already changed owner (-R!) of the entire rt directory to “nobody” to
avoid any permission issues but still i’m getting this from sendmail:

550 “/opt/rt/bin/rt-mailgate newpos correspond”… Can’t create output:
Permission denied

any ideas?

thanks in advance!

mAX

2

i’ve already changed owner (-R!) of the entire rt directory to “nobody” to
avoid any permission issues but still i’m getting this from sendmail:

550 “/opt/rt/bin/rt-mailgate newpos correspond”… Can’t create output:
Permission denied

any ideas?

thanks in advance!

mAX

rt-users mailing list
rt-users@lists.fsck.com
http://lists.fsck.com/mailman/listinfo/rt-users

create a pseudo user ‘rt’ and chown the directory to rt &
ensure that rt-mailgate runs as a user with permissions to
write to that directory & the directory permissions are
apropriately set. If ‘rt-mailgate’ runs a root or rt the
0700 should do.

Regards
Jan Pompe
e-mail janp@aurema.com
Aurema P/L http://www.aurema.com/
79 Myrtle Street, Chippendale NSW 2008. Tel: 9698 2322

3

well, it was all rt:rt before. then i gave me this same error and i switched
it to nobody (to no effect)

mAX

4

well, it was all rt:rt before. then i gave me this same error and i switched
it to nobody (to no effect)

What are your permissions set to??

mAX

-----Original Message-----
create a pseudo user ‘rt’ and chown the directory to rt &
ensure that rt-mailgate runs as a user with permissions to
write to that directory & the directory permissions are
apropriately set. If ‘rt-mailgate’ runs a root or rt the
0700 should do.

Regards
Jan Pompe
e-mail janp@aurema.com
Aurema P/L http://www.aurema.com/
79 Myrtle Street, Chippendale NSW 2008. Tel: 9698 2322

5

it is all set to user “rt” and group “rt”

still i get the annoying:
“Can’t create output: Permission denied”

mAX

6

it is all set to user “rt” and group “rt”

still i get the annoying:
“Can’t create output: Permission denied”

mAX

-----Original Message-----
What are your permissions set to??

when I asked for permissions I meant just that not the ownership.

i.e.

peony 00:17:32 /usr/local/rt: ls -l
total 4
drwxr-xr-x 3 rt rt 1024 May 1 2000 bin
drwx------ 5 rt rt 1024 May 1 2000 etc
drwxr-xr-x 6 rt rt 1024 Apr 28 2000 lib
drwxr-x— 3 rt rt 1024 Apr 18 2000 transactions
^^^^^^^^^^
This

Jan

7

oh sorry

rt-mailgate, rt and rtq are lrwxrwxrwx

is there any other file involved on the process you need to know the
permissions?

mAX

8

oh sorry

rt-mailgate, rt and rtq are lrwxrwxrwx

is there any other file involved on the process you need to know the
permissions?

mAX

-----Original Message-----
when I asked for permissions I meant just that not the ownership.

I think using the -R option with chown might have been a mistake
should have picked up on it sooner. (Its after midnight & I’m
still working on a report needed yesterday) Permissions & ownership vary
throughout the directory tree.

e.g.

peony 00:30:49 /usr/local/rt/bin: ls -l
total 21
drwxr-xr-x 2 rt rt 1024 May 1 2000 cgi
lrwxrwxrwx 1 root root 30 May 1 2000 rt →
/usr/local/rt/bin/suid_wrapper
lrwxrwxrwx 1 root root 30 May 1 2000 rt-mailgate →
/usr/local/rt/bin/suid_wrapper
lrwxrwxrwx 1 root root 30 May 1 2000 rtadmin →
/usr/local/rt/bin/suid_wrapper
-rwxr-xr-x 1 rt rt 2104 May 1 2000 rtmux.pl
-rwxr-xr-x 1 rt rt 2167 Apr 26 2000 rtmux.pl.orig
lrwxrwxrwx 1 root root 30 May 1 2000 rtq →
/usr/local/rt/bin/suid_wrapper
—s–x–x 3 root rt 12780 May 1 2000 suid_wrapper

you may notice suid_wrapper is run setuid & is owned by root & this
could be the core of your problem.

& in another part of the tree where some storage occurs.
peony 00:36:16 /usr/local/rt/transactions/2000: ls -l
total 3
drwxr-x— 5 rt rt 1024 Apr 23 2000 Apr
drwx------ 3 root daemon 1024 Dec 7 00:06 Dec
drwx------ 4 root nogroup 1024 May 12 2000 May

I think this shohuld help you on your way. Please don’t ask
why ownerships are different as I have NFI:-(

In any case some sort of consistency is essential & the other
thing to watch out for is to ensure you don’t lock yourself
out of MySQL by changing who rt runs as though I expect this
is determined by suid_wrapper.

Jan

9

| it is all set to user “rt” and group “rt”
|
| still i get the annoying:
| “Can’t create output: Permission denied”
±–>8

Make sure suid_wrapper is owned by rt and setuid. Also make sure the
“transactions” directory and all subdirectories are writeable by the owner.

brandon s. allbery [os/2][linux][solaris][japh] allbery@kf8nh.apk.net
system administrator [WAY too many hats] allbery@ece.cmu.edu
electrical and computer engineering KF8NH
carnegie mellon university [“better check the oblivious first” -ke6sls]

10

I believe there’s a ‘make fixperms’ target designed to help with this
problem.

-Marc Hedlund marc@precipice.org

     Give your computer something to dream about.    (tm)
	 Popular Power - www.popularpower.comOn Wed, 6 Dec 2000, Brandon S. Allbery KF8NH wrote:

On Wednesday, December 06, 2000 10:38 -0200, Max Mismetti max@mediaworks.com.br wrote:
±----
| it is all set to user “rt” and group “rt”
|
| still i get the annoying:
| “Can’t create output: Permission denied”
±–>8

Make sure suid_wrapper is owned by rt and setuid. Also make sure the
“transactions” directory and all subdirectories are writeable by the owner.

–
brandon s. allbery [os/2][linux][solaris][japh] allbery@kf8nh.apk.net
system administrator [WAY too many hats] allbery@ece.cmu.edu
electrical and computer engineering KF8NH
carnegie mellon university [“better check the oblivious first” -ke6sls]

rt-users mailing list
rt-users@lists.fsck.com
http://lists.fsck.com/mailman/listinfo/rt-users

11

first i changed owner of suid_wrapper to rt:rt. still "permission denied"
then i did a make fixperms: “permission denied” again.

transactions and all its subdirs is in mode 777 now. still nothing.

sometimes i really do hate linux with all these permissions…sigh

mAX

12

ignore my previous message.

after a few tweaks i’m at least getting a different error:

sh: rt-mailgate not available for sendmail programs
554 |"/opt/rt/bin/rt-mailgate XXXXXX correspond"… Service unavailable

mAX

13

That sounds like smrsh. read the FAQOn Wed, Dec 06, 2000 at 03:49:01PM -0200, Max Mismetti wrote:

ignore my previous message.

after a few tweaks i’m at least getting a different error:

sh: rt-mailgate not available for sendmail programs
554 |“/opt/rt/bin/rt-mailgate XXXXXX correspond”… Service unavailable

mAX

rt-users mailing list
rt-users@lists.fsck.com
http://lists.fsck.com/mailman/listinfo/rt-users

jesse reed vincent – root@eruditorum.org – jesse@fsck.com
70EBAC90: 2A07 FC22 7DB4 42C1 9D71 0108 41A3 3FB3 70EB AC90

After all, it’s not every day you meet up with an evil power
-M. Bulgakov

14

Hmmm… strange…

I’m getting a response of ‘Permission denied’ when from an external
client I’m trying to respond to a ticket.

This was working OK - very unlike these sorts of systems to be
inconsistant?!?

Any ideas
Kevin Bailey
Director/Programmer - Freeway Projects Limited
Web: www.freewayprojects.com http://www.freewayprojects.com/
Email: kbailey@freewayprojects.com mailto:kbailey@freewayprojects.com
Phone: +44 (0)1752 267090

15

Hmmm… strange…

I’m getting a response of ‘Permission denied’ when from an external
client I’m trying to respond to a ticket.

This was working OK - very unlike these sorts of systems to be
inconsistant?!?
I really hate that error… hard to troubleshoot, but here’s what I
learned… (Hmmm I think I should put this in the wiki)

  1. Email addresses are used for auto-created accounts. Make sure the
    email address in a reply is the same as the original ticket.

  2. If tickets are moved to a new queue, make sure that the “requestor”
    group has privs to respond in new queue! ( this was our problem )

  3. RT logs using the SYSLOG mechanism… check your log for clues…
    remember to focus on email addresses.

Robert

16

I really hate that error… hard to troubleshoot, but here’s what I
learned… (Hmmm I think I should put this in the wiki)

  1. Email addresses are used for auto-created accounts. Make sure the
    email address in a reply is the same as the original ticket.

  2. If tickets are moved to a new queue, make sure that the “requestor”
    group has privs to respond in new queue! ( this was our problem )

I think that was the one - thanks!

Kev

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

Kevin Bailey
Director/Programmer - Freeway Projects Limited
Web: www.freewayprojects.com http://www.freewayprojects.com/
Email: kbailey@freewayprojects.com mailto:kbailey@freewayprojects.com
Phone: +44 (0)1752 267090