[CentOS] postmap: fatal: open database /etc/postfix/sasl_passwd.db: Permission denied

Tue Oct 4 20:37:18 UTC 2011
Craig White <craig.white at ttiltd.com>

On Oct 4, 2011, at 12:18 PM, Alexander Farber wrote:

> Thank you, the "ls -laF" tip is good....
> 
> And now I unfortunately get:
> 
> postfix/postfix-script[2054]: starting the Postfix mail system
> postfix/master[2056]: daemon started -- version 2.6.6, configuration
> /etc/postfix
> postfix/qmgr[2059]: F10CC31D62CC: from=<root at preferans.localdomain>,
> size=609, nrcpt=1 (queue active)
> postfix/smtp[2061]: warning: cannot get RSA certificate from file
> /etc/pki/tls/gmail_relay/server.pem: disabling TLS support
> postfix/smtp[2061]: warning: TLS library problem:
> 2061:error:0906D06C:PEM routines:PEM_read_bio:no start
> line:pem_lib.c:698:Expecting: TRUSTED CERTIFICATE:
> postfix/smtp[2061]: warning: TLS library problem:
> 2061:error:140DC009:SSL
> routines:SSL_CTX_use_certificate_chain_file:PEM lib:ssl_rsa.c:729:
> postfix/smtp[2061]: F10CC31D62CC: to=<Alexander.Farber at gmail.com>,
> orig_to=<root>, relay=smtp.gmail.com[74.125.39.109]:587, delay=2963,
> delays=2963/0.07/0.03/0.01, dsn=5.7.0, status=bounced (host
> smtp.gmail.com[74.125.39.109] said: 530 5.7.0 Must issue a STARTTLS
> command first. m26sm26530788fac.6 (in reply to MAIL FROM command))
> postfix/cleanup[2064]: 2FE0C31D6686:
> message-id=<20111004191529.2FE0C31D6686 at preferans.localdomain>
> postfix/bounce[2063]: F10CC31D62CC: sender non-delivery notification:
> 2FE0C31D6686
> postfix/qmgr[2059]: 2FE0C31D6686: from=<>, size=2696, nrcpt=1 (queue active)
> postfix/qmgr[2059]: F10CC31D62CC: removed
----
this is your problem and it is significant...

> postfix/smtp[2061]: warning: TLS library problem:
> 2061:error:0906D06C:PEM routines:PEM_read_bio:no start
> line:pem_lib.c:698:Expecting: TRUSTED CERTIFICATE:
> postfix/smtp[2061]: warning: TLS library problem:
> 2061:error:140DC009:SSL

There's something wrong with this file as it is not a PEM encoded certificate file as is expected.

Easy enough to verify...

openssl x509 -in $YOUR_CERTIFICATE.pem -noout -text

Craig