Oracle sendmail queue denied

[Steven Chen_1]

I would like to have guru help with sendmail for client:

Sendmail for root is working fine, but for user Oracle I have problem as:

"Oracle >queuename: Cannot create "qfJAA04903" in "/var/spool/mqueue" (euid=101
): Permission denied"

The /var/spoo/mqueue is 755 bin/bin.

What is problem?

Thanks a lot!

Steven

[Christopher Caldwell]

How are you invoking sendmail (what's the mail client)?

[Steven Chen_1]

I use date|sendmail -v my@dom to test from Oracle user.

root user is fine.

Or maybe something is missing. I grep sendmail daemon as:
"quarry #ps -ef|grep sendmail
root 4760 1 0 09:13:58 ? 0:00 sendmail: accepting connections"

I have done /sbin/init.d/sendmail start.

[Christopher Caldwell]

How about the results of

ll /usr/sbin/sendmail

[Steven Chen_1]

Chris,

It is
"Server # ll /usr/sbin/sendmail
-rwxr-xr-x 1 root mail 344064 Jun 7 1996 /usr/sbin/sendmail"

[Christopher Caldwell]

Your sendmail isn't setuid, so it can't change uid from oracle to root to get permission to write to the mail queue.

Stock HP permissions are
$ ll /usr/sbin/sendmail
-r-sr-sr-t 1 root mail 409600 Feb 26 1999 /usr/sbin/sendmail
$ ll -d /var/spool/mqueue
drwxr-xr-x 2 bin bin 54272 May 30 10:48 /var/spool/mqueue

[Steven Chen_1]

Chris,

Could you please tell me how to change them? The problem came from yesterday after /usr permission was 444 (accident), then recovered.

Something are missing then.

Please help.

[Christopher Caldwell · Accepted solution]

chmod 7555 /usr/sbin/sendmail

[Steven Chen_1]

Chris,

Thank you very much and it works!

Can you tell me more what 7 means here (7555)? I am missing sth.

Steven

[Christopher Caldwell]

4000 (= u=s) Set user ID on file execution (file only)
2000 (= g=s) Set group ID on file execution (file only)
1000 (= u=t) Set sticky bit; save text image after execution (a.k.a. leave it in memory 'cause it'll probably get used alot)
Add 'em up to get the 7000. Add that to 555 to get 7555.

[Steven Chen_1]

Chris,

Thank you very much for the decent help.

I have the similar situation on lp. I re-create network printer via sam, and print job is just hung (all after /usr error before).

Checking /usr/bin/lp*, I get:

"-r-sr-sr-t 1 root bin 45056 Oct 26 1998 lp
-r-sr-sr-t 1 root bin 36864 Oct 26 1998 lpalt
-rwxr-xr-x 1 bin bin 621 May 30 1996 lpr
-r-sr-sr-t 1 lp bin 49152 Oct 26 1998 lpstat"

/etc/lp:
"drwxr-xr-x 2 lp bin 96 Mar 30 1998 cinterface
drwxr-xr-x 2 lp bin 96 May 30 10:38 class
drwxr-xr-x 2 lp bin 96 Mar 5 1997 info
drwxr-xr-x 3 lp bin 96 May 30 10:39 interface
drwxr-xr-x 2 lp bin 96 May 30 10:39 member
drwxr-xr-x 2 lp bin 96 Mar 30 1998 sinterface"

There should be somewhere not right.

Thanks a lot,

Steven