sudoers configuration

Hello Commmunity,

First time with Ciphermail and it seems to have what I need so far.

I finished the installation of packages djigzo_3.1.1-1.tar.gz and djigzo-web_3.1.1-1.tar.gz on a Linux Mint 18 box. I followed each and every step of the documentation (installation-guide.pdf), which by the way is really good.
Right now I have a problem. Via Web, the option "Admins | MTA | config" and other similar options return the error:
An unexpected application exception has occurred.
Render queue error in BeforeRenderTemplate[admin/mta/Config:relaydomains]: Failure reading parameter 'model' of component admin/mta/Config:relaydomains: ProcessException: Error running [/usr/local/djigzo/scripts/execute-script.sh,postfix-main-config,-g]. exit value: 1 (1), Class: class mitm.common.util.ProcessException

I read the documentation and some posts and they all relate the possible cause to the file /etc/sudoers.d/ciphermail, which in my case has the following settings (the whole text consists of 5 consecutive and uncommented lines):

User_Alias DJIGZO_USERS = djigzo
Cmnd_Alias DJIGZO_COMMANDS = /usr/share/djigzo/scripts/do-execute-script.sh
DJIGZO_USERS ALL=(ALL) NOPASSWD: DJIGZO_COMMANDS

Defaults:root,djigzo !requiretty

Running:
# sudo -u djigzo /usr/local/djigzo/scripts/execute-script.sh postfix-main-config -g
returns the error:
Sorry, user djigzo is not allowed to execute '/usr/local/djigzo/scripts/do-execute-script.sh postfix-main-config -g' as root on (...).

I will appreciate any directions/recommendations/suggestions on this matter.
Thanks in advance.

Kind Regards / Mit freundlichen Grüßen
Alejandro Monett
IT-Consultant

Terminal-Services.NET Germany vendere GmbH
Paulsborner Straße 3
10709 Berlin

Telefon: +49-30-6098878-15
Telefon: +49-30-84716276
Telefax: +49-30-84716277
E-Mail: amonett(a)sbcpro.de<mailto:amonett(a)sbcpro.de>
Internet: www.sbcpro.de<http://www.sbcpro.de/&gt;

Sitz der Gesellschaft: Berlin
Registergericht: AG Charlottenburg, HRB 90683
Geschäftsführer: Holger Xue

Umsatzsteuer-Identifikationsnummer gemäss §27a Umsatzsteuergesetz:
DE813843574

Berufs-/Vermögensschadenhaftpflichtversicherung
Versicherungsschein HV.VSH.6.221.448 der Hiscox AG,
Niederlassung für Deutschland, Arnulfstr. 31, 80636 München
Versicherungsschutz besteht weltweit für IT-Beratungs- und Dienstleistungen
[Logo_Terminal-Services]
This e-mail is confidential and may well also be legally privileged. If you have received it in error, you are on notice of its status. Please notify us immediately by reply e-mail and then delete this message from your system.
Please do not copy it or use it for any purposes, or disclose its contents to any other person: to do so could be a breach of confidence. Thank you for your co-operation. Please contact our IT Helpdesk on support(a)sbcpro.de<mailto:support(a)sbcpro.de> if you need assistance.

image001.png

Hello Commmunity,

First time with Ciphermail and it seems to have what I need so far.

I finished the installation of packages djigzo_3.1.1-1.tar.gz and
djigzo-web_3.1.1-1.tar.gz on a Linux Mint 18 box. I followed each and
every step of the documentation (installation-guide.pdf), which by
the way is really good.

Is there a particular reason why you used the .tar files and not the
.deb files? I haven't tried installing the debs on Linux Mint but since
Mint afaik is built on top of Ubuntu, I guess the debs should work

Right now I have a problem. Via Web, the
option "Admins | MTA | config" and other similar options return the
error: An unexpected application exception has occurred. Render queue
error in BeforeRenderTemplate[admin/mta/Config:relaydomains]: Failure
reading parameter 'model' of component admin/mta/Config:relaydomains:
ProcessException: Error running
[/usr/local/djigzo/scripts/execute-script.sh,postfix-main-config,-g].
exit value: 1 (1), Class: class mitm.common.util.ProcessException

I read the documentation and some posts and they all relate the
possible cause to the file /etc/sudoers.d/ciphermail, which in my
case has the following settings (the whole text consists of 5
consecutive and uncommented lines):

User_Alias DJIGZO_USERS = djigzo Cmnd_Alias DJIGZO_COMMANDS =
/usr/share/djigzo/scripts/do-execute-script.sh DJIGZO_USERS ALL=(ALL)
NOPASSWD: DJIGZO_COMMANDS

Defaults:root,djigzo !requiretty

The path to the script from your ciphermail sudoers fragment is set to:

/usr/share/djigzo/scripts/do-execute-script.sh

But since you installed using the tar files, the path in the sudoers
fragment should probably be:

/usr/local/djigzo/scripts/do-execute-script.sh

Where did you get the sudoers content from? The install guide on page 7
uses /usr/local/... and not /user/share/...

Kind regards,

Martijn Brinkers

···

On 08/17/2016 02:13 PM, Alejandro Monett | Terminal-Services.NET wrote:

Running: # sudo -u djigzo /usr/local/djigzo/scripts/execute-script.sh
postfix-main-config -g returns the error: Sorry, user djigzo is not
allowed to execute '/usr/local/djigzo/scripts/do-execute-script.sh
postfix-main-config -g' as root on (...).

I will appreciate any directions/recommendations/suggestions on this
matter. Thanks in advance.

Kind Regards / Mit freundlichen Grüßen Alejandro Monett
IT-Consultant

Terminal-Services.NET Germany vendere GmbH Paulsborner Straße 3 10709
Berlin

Telefon: +49-30-6098878-15 Telefon: +49-30-84716276 Telefax:
+49-30-84716277 E-Mail: amonett(a)sbcpro.de<mailto:amonett(a)sbcpro.de>
Internet: www.sbcpro.de<http://www.sbcpro.de/&gt;

Sitz der Gesellschaft: Berlin Registergericht: AG Charlottenburg, HRB
90683 Geschäftsführer: Holger Xue

Umsatzsteuer-Identifikationsnummer gemäss §27a Umsatzsteuergesetz:
DE813843574

Berufs-/Vermögensschadenhaftpflichtversicherung Versicherungsschein
HV.VSH.6.221.448 der Hiscox AG, Niederlassung für Deutschland,
Arnulfstr. 31, 80636 München Versicherungsschutz besteht weltweit für
IT-Beratungs- und Dienstleistungen [Logo_Terminal-Services] This
e-mail is confidential and may well also be legally privileged. If
you have received it in error, you are on notice of its status.
Please notify us immediately by reply e-mail and then delete this
message from your system. Please do not copy it or use it for any
purposes, or disclose its contents to any other person: to do so
could be a breach of confidence. Thank you for your co-operation.
Please contact our IT Helpdesk on
support(a)sbcpro.de<mailto:support(a)sbcpro.de> if you need assistance.

_______________________________________________ Users mailing list
Users(a)lists.djigzo.com https://lists.djigzo.com/lists/listinfo/users

--
CipherMail email encryption

Email encryption with support for S/MIME, OpenPGP, PDF encryption and
secure webmail pull.

Twitter: http://twitter.com/CipherMail