The default mailman 2.1.2-r1 assumes the --with-cgi-gid (set in the ebuild to variable APACHEGID) is a hardcoded 81 rather than the group name "nobody". On some Gentoo systems, the group "nobody" corresponds to gid 65534, not 81. To fix this problem, the following APACHEGID line should read: APACHEGID="nobody" Reproducible: Always Steps to Reproduce: 0. Set your nobody gid to anything BUT 81 1. ACCEPT_KEYWORDS="~x86" emerge mailman 2. Setup mailman according to the README.gentoo.gz file 3. Add a mailing list with at least one recipient 4. Send a message to the mailing list 5. Receive error message from postfix/mailman. Actual Results: Postfix/Mailman returned a message similar to this: <security@headnut.org>: Command died with status 2: "/usr/local/mailman/mail/mailman post security". Command output: Group mismatch error. Mailman expected the mail wrapper script to be executed as group "mailman", but the system's mail server executed the mail script as group "nobody". Try tweaking the mail server to run the script as group "mailman", or re-run configure, providing the command line option `--with-mail-gid=nobody'. Expected Results: The message sent to the group should have been sent correctly.
Created attachment 18928 [details] fixed ebuild with proper APACHEGID line
I had this problem but in my case I had to set MAILGID="nobody" to fix it. By the way, the attached ebuild has APACHEGID="81" rather than what you intended APACHEGID="nobody".
Ah, yes ... Sorry. I forgot I had done an rsync prior to submitting this. Anyway, yes, I think the ebuild should reflect what the other packages do in their base installs. So if apache runs as nobody, then mailman should run as nobody. etc. Just brings more uniformity to the situation.
gentoo default is apache:x:81:81:apache:/home/httpd:/bin/false and apache runs as apache
(In reply to comment #4) > gentoo default is > > apache:x:81:81:apache:/home/httpd:/bin/false > and apache runs as apache For historical reasons, the gid for apache is not 81 on my system. But it builds if I edit the ebuild to read: APACHEGID=apache Is there any reason why the ebuild can not be changed to use "apache" instead of the hard coded "81". I have a similar problem with MAILGID using sendmail. I have to change it from "daemon" to: MAILGID=mailnull.
