Bug 1041546

Summary: opendkim.service needs user/group
Product: [Fedora] Fedora Reporter: Juraci Paixão Kröhling <jcosta>
Component: opendkimAssignee: Steve Jenkins <steve>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: stevejenkins, steve
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: opendkim-2.9.0-2.fc19 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-01-10 01:09:17 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Juraci Paixão Kröhling 2013-12-12 16:54:03 UTC
Description of problem:
OpenDKIM systemd service file is missing user/group to start the service, making it fail to startup. 

Version-Release number of selected component (if applicable):
19, 29

How reproducible:
Always

Steps to Reproduce:
1. On a clean Fedora 20 machine, install opendkim package
2. systemctl start opendkim
3. systemctl status opendkim

Actual results:

mani conf.d # systemctl start opendkim
Job for opendkim.service failed. See 'systemctl status opendkim.service' and 'journalctl -xn' for details.
mani conf.d # systemctl status opendkim
opendkim.service - DomainKeys Identified Mail (DKIM) Milter
   Loaded: loaded (/usr/lib/systemd/system/opendkim.service; enabled)
   Active: failed (Result: exit-code) since Thu 2013-12-12 16:49:23 UTC; 2s ago
     Docs: man:opendkim(8)
           man:opendkim.conf(5)
           man:opendkim-genkey(8)
           man:opendkim-genzone(8)
           man:opendkim-testadsp(8)
           man:opendkim-testkey
           http://www.opendkim.org/docs.html
  Process: 16801 ExecStart=/usr/sbin/opendkim $OPTIONS (code=exited, status=78)
  Process: 16798 ExecStartPre=/usr/sbin/opendkim-default-keygen (code=exited, status=0/SUCCESS)
 Main PID: 16752 (code=exited, status=0/SUCCESS)

Dec 12 16:49:23 mani.kroehling.de opendkim[16801]: /etc/opendkim/keys/default.private: open(): Permission denied
Dec 12 16:49:23 mani.kroehling.de opendkim[16801]: opendkim: /etc/opendkim.conf: /etc/opendkim/keys/default.private: open(): Permission denied
Dec 12 16:49:23 mani.kroehling.de systemd[1]: opendkim.service: control process exited, code=exited status=78
Dec 12 16:49:23 mani.kroehling.de systemd[1]: Failed to start DomainKeys Identified Mail (DKIM) Milter.
Dec 12 16:49:23 mani.kroehling.de systemd[1]: Unit opendkim.service entered failed state.


Expected results:
The service would start normally. 

Additional info:
Adding the following lines to the service file, under the Service section, made it work (/lib/systemd/system/opendkim.service)

User=opendkim
Group=opendkim

Comment 1 Steve Jenkins 2013-12-12 18:37:27 UTC
Great catch, Juraci. I'm actually rolling a new version of the package now, since a new upstream version was just released. I'll include this fix in the new package. Thanks!

Comment 2 Steve Jenkins 2013-12-19 02:33:31 UTC
FYI - I've created a bug for the upstream developer to include this in the service file that comes with the source.

For this next release, I'll just patch it.

Comment 3 Steve Jenkins 2013-12-19 02:33:41 UTC
https://sourceforge.net/p/opendkim/bugs/184/

Comment 4 Fedora Update System 2013-12-19 03:47:58 UTC
opendkim-2.9.0-2.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/opendkim-2.9.0-2.fc19

Comment 5 Fedora Update System 2013-12-19 03:48:12 UTC
opendkim-2.9.0-2.el6 has been submitted as an update for Fedora EPEL 6.
https://admin.fedoraproject.org/updates/opendkim-2.9.0-2.el6

Comment 6 Fedora Update System 2013-12-19 03:48:23 UTC
opendkim-2.9.0-2.fc18 has been submitted as an update for Fedora 18.
https://admin.fedoraproject.org/updates/opendkim-2.9.0-2.fc18

Comment 7 Fedora Update System 2013-12-19 03:48:35 UTC
opendkim-2.9.0-2.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/opendkim-2.9.0-2.fc20

Comment 8 Fedora Update System 2013-12-19 03:48:46 UTC
opendkim-2.9.0-2.el5 has been submitted as an update for Fedora EPEL 5.
https://admin.fedoraproject.org/updates/opendkim-2.9.0-2.el5

Comment 9 Steve Jenkins 2013-12-19 03:50:31 UTC
As you can see from the auto-generated noise above, I just submitted new build that should address this issue.

I'd appreciate if you'd consider pulling the latest version (2.9.0-2) from the testing repos and verifying this fixes the issue for you.

Thanks!

Comment 10 Fedora Update System 2013-12-19 17:09:58 UTC
Package opendkim-2.9.0-2.el6:
* should fix your issue,
* was pushed to the Fedora EPEL 6 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=epel-testing opendkim-2.9.0-2.el6'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2013-12414/opendkim-2.9.0-2.el6
then log in and leave karma (feedback).

Comment 11 Fedora Update System 2014-01-10 01:09:17 UTC
opendkim-2.9.0-2.el5 has been pushed to the Fedora EPEL 5 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 12 Fedora Update System 2014-01-10 01:10:20 UTC
opendkim-2.9.0-2.el6 has been pushed to the Fedora EPEL 6 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 13 Fedora Update System 2014-01-10 07:47:39 UTC
opendkim-2.9.0-2.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 14 Fedora Update System 2014-01-10 07:53:47 UTC
opendkim-2.9.0-2.fc18 has been pushed to the Fedora 18 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 15 Fedora Update System 2014-01-10 07:54:45 UTC
opendkim-2.9.0-2.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.