Subject: Upgrading to Sendmail 8.12.8 breaks PINE (but not 'mail' or delivery)

From: Jessica Blank <[email-masked]>
Date: Mon, 3 Mar 2003 22:13:40 -0500 (EST)

Hi guys.

I upgraded all my servers today to Sendmail 8.12.8 due to the security
fixes... however, at that point, PINE ceased to function properly. 'mail'
can still send, and mail is still received, delivered and sent just fine
(both from localhost and the outside network); however, PINE cannot
send...

I log in as [email-masked] and try composing a mail to jb... when I hit send,
I get:

[Sending mail |     0%   |]

...and it just SITS THERE indefinitely, doing nothing...

At this point, the ONLY way I can resume control of PINE is by stopping
sendmail!!! At which point PINE immediately responds, and says:

"[Error sending: SMTP greeting failure: 421 SMTP connection went away!]"

Does anyone have any idea why PINE would just hang on sending? Please
help!

Upgrading to the latest PINE (4.53) did NOT help. Same problem.

							--Jessica

      --
      Jessica L. Blank, Systems Administrator & Programmer
       
      www.starchefs.com
      9 East 19th St., 9th Floor  /  New York, NY 10003
      [email-masked] - (973) 485-0684
      Pager (917) 675-6618

      Help Wanted. Help Found.
      www.helpwantedhelpfound.com, a division of StarChefs

-- 
-----------------------------------------------------------------
 For information about this mailing list, and its archives, see: 
 http://www.washington.edu/pine/pine-info/
-----------------------------------------------------------------

---

From: Robert Larmon <[email-masked]>
Date: Tue, 4 Mar 2003 09:57:34 -0800 (Pacific Standard Time)

Hi Jessica,

Not that it helps, but I upgraded my servers (Solaris 8,9) to 8.12.8 and I
haven't experienced any issues (yet) with Pine 4.33/PC-Pine 4.33-4.53.  I
used the Sun patch instead of the Sendmail patch, but they should be based
on the same code.

Rob

> Upgrading to the latest PINE (4.53) did NOT help. Same problem.

_________________________________

Robert Larmon
Senior Systems Analyst
USC Law School Computing Services
[email-masked]
_________________________________

---

From: Mats Dufberg <[email-masked]>
Date: Tue, 4 Mar 2003 22:52:29 +0100 (CET)

> (both from localhost and the outside network); however, PINE cannot
(...)
> "[Error sending: SMTP greeting failure: 421 SMTP connection went away!]"

When you send mail by mail etc you use sendmail directly, whereas with
pine you have obviously chosen to send through sendmail acting as SMTP
server.

Are you sure that you are using the same senmail binary for SMTP as for
direct sending?

Have you tried to send directly to sendmail from pine (which is the
default)?

Are you sure that you have stopped and restarted sendmail?

How are you receiving mail?

Mats

-----------------------------------------------------------------
Mats Dufberg                                 [email-masked]
Blaoarvsgraend 42                                  +46-8-38 48 59
SE-162 45 Vaellingby, Sweden                      +46-70-258 2588

---

From: Jessica Blank <[email-masked]>
Date: Tue, 4 Mar 2003 17:00:56 -0500 (EST)

> Are you sure that you are using the same senmail binary for SMTP as for

How would I check? No one ever tells me these things.

> Have you tried to send directly to sendmail from pine (which is the

Yes, and (as noted earlier) it does not work... I can only send from pine
when I tell it to use the SMTP server "localhost" (as opposed to the
default, which is-- as you noted-- to use sendmail directly)

> Are you sure that you have stopped and restarted sendmail?

YES, AROUND FIFTEEN BILLION TIMES. Please... I am not a newbie, no matter
how "stupid" my question may sound.

> How are you receiving mail?

Just fine.

							--Jessica

      www.starchefs.com

      Help Wanted. Help Found.

---

From: Mats Dufberg <[email-masked]>
Date: Wed, 5 Mar 2003 00:07:38 +0100 (CET)

> How would I check? No one ever tells me these things.

Do you have more than one sendmail binary on the system? If so, remove the
execution bits on the one that you don't want to run, and test if the SMTP
comes up and if you still can send mail through mail.

> default, which is-- as you noted-- to use sendmail directly)

When you send mail from mail, can you do as a non-privileged user or only
as root? Is sendmail SUID to root? What error do you get when trying to
send directly to sendmail from pine?

If you select "J" (journal) from pine's first "page" you can see more
logging.

> how "stupid" my question may sound.

Well, anyone could forget, couldn't one? Why not just say "yes" to my
question? I'm not out to embarrass you. :-)

> > How are you receiving mail?

Are the mail going directly to the SMTP server? Or are you using
fetchmail?

Mats

---

From: Jessica Blank <[email-masked]>
Date: Tue, 4 Mar 2003 21:52:40 -0500 (EST)

This is driving me INSANE.

I followed the security tutorial in "sendmail/SECURITY" (in the sendail
distribution) TO THE LETTER and now users cannot send mail at all!!!

When I try to send mail, I get: (in the syslog)

Mar  4 21:44:27 knife sendmail[22406]: NOQUEUE: SYSERR(jessica): can not
write to queue directory /var/spool/clientmqueue/ (RunAsGid=0,
required=9001): Permission denied

OK, so that's nice. The SECURITY file suggests that we do all this fancy
SETGID stuff on the binary, and chown and chmod /var/spool/clientmqueue
certain ways, which I did... but now users cannot send mail at all!

I am making NO headway on this problem besides finding the above error
messages (which should help some wiser soul help me fix my problem).
PLEASE, I beg of you, help.

							--Jessica

      www.starchefs.com

      Help Wanted. Help Found.

---

From: Mats Dufberg <[email-masked]>
Date: Wed, 5 Mar 2003 23:18:53 +0100 (CET)

> required=9001): Permission denied

Sendmail has been started by the non-priviledged user jessica. It is
SGID wheel, but it should probably be SGID smmsp (GID 25). What are the
permissions on /var/spool/clientmqueue?

Mats