The mailing list for listmasters using Sympa

[Elwyn Davies <address@concealed>]

Roger B.A. Klorese wrote:
> Roger B.A. Klorese wrote:
> > David Verdin wrote:
> > > Under what uid is wwsympa.fcgi run?
> >
> > wwsympa-wrapper.fcgi is used in the ScriptAlias.
> > And it is, of course, owned by sympa.  Which, of course, keeps it 
> > from writing to the files.
> >
> > But newaliases fails if I change the ownership to sympa.
> >
> > And if I change the group to sympa, leave the owner as root, and 
> > chown the files g+w, the lock file creation fails.
>
>
> Any ideas - anyone?  Surely at least one of you has set up mod_fcgid, 
> Postfix, and automatic alias generation... What are the permissions 
> and ownership for:
> - aliaswrapper
> - the directory that sympa_aliases is in
> - sympa_aliases
> ...and the httpd.conf config for mod_fcgid?
Yes.. me.  And I have just finished documenting my experiences.
I will be publishing this on the web very shortly.

My configuration is Gentoo/Apache2/Postfix 2.1.4/Sympa 5.3.4.
And it is, after some considerable head scratching, working fine and I 
have a solution to the virtual alias wildcard problem.

As regards the permissions:
My arrangements are:
Users:
postfix for Postfix
sympa for Sympa
apache for Apache
Groups:
mailctrl: (contains users) postfix sympa apache + personal ids for 
webmasters (me + 1)
sympa: (contains users) sympa + personal id of Sympa admin (me)

sympa_aliases : is in /etc/mail/sympa_aliases
drwxrwxr-x  3 postfix mailctrl 4096 Mar 25 18:43 /etc/mail
-rw-r--r--  1 sympa sympa 134 Feb 29 17:58 /etc/mail/sympa_aliases
-rw-r--r--  1 sympa sympa 1111 Mar 25 18:38 
/etc/mail/sympa_virtual_regexp_<domain_name> (for virtual aliases)

aliaswrapper:
-rwsr-xr--  1 root  sympa  21057 Jan 19 01:19 /home/sympa/bin/aliaswrapper

I use the sudo method to execute wwsympa.fcgi.
/etc/sudoers has:
# Allow user apache to run sympa mailing list interface as user sympa
# without requiring password
apache ALL=(sympa) NOPASSWD: /home/sympa/bin/wwsympa.fcgi

I am sending a pre-release copy of my writeup to Roger off-list as it is 
rather large.  I will write to the list this afternoon with a web address.

Hope this helps.

Regards,
Elwyn