[Dovecot] dovecot w/ libwrap on fbsd

Timo Sirainen tss at iki.fi
Tue Aug 30 06:03:51 EEST 2011

On Mon, 2011-08-29 at 13:26 -0700, Gelu Lupas wrote:
> Aug 29 22:48:38 dodo dovecot: pop3-login: Error: connect(tcpwrap) failed: Permission denied

Service permissions are set wrong.

> service imap-login {
>   user = dovecot
> }
> service pop3-login {
>   user = dovecot
> }

You have explicitly changed the login process user above.

> service tcpwrap {
>   unix_listener login/tcpwrap {
>     group = $default_login_user

This group isn't right.. The default is taken from user's default group,
so just don't set it.

>     user = $default_login_user

Here you're using default_login_user, which most likely isn't the same
as what the login processes are using ("dovecot").

So your solution is to remove the explicit user=dovecot from login
services and then possibly set default_login_user=dovecot if you really
want that (dovenull user is the default and preferred one).

More information about the dovecot mailing list