Service Router Aborted

[maclauk]

Back in April I setup a Scalix Server 11.0.2.17 on Fedora Core 5. Everything appeared to be working OK and a week or so later I added ClamAV. Again everything seemed to be OK with test emails being sent, received and scanned OK.

Other pressures meant that the final move from the old email system to the new one was delayed and coming back to the system yesterday I was unable to send or receive emails.

On running /etc/init.d/scalix status I saw all services running since April. However on running /etc/init.d/scalix restart I find that Service Router has Aborted.

Following advice elsewhere in the forum I ran omcheck -s -d > /tmp/sxfix followed by /tmp/sxfix. The response was :

Code: Select all

/var/opt/scalix/md/s/Copyright/OM-LDAP: /var/opt/scalix/md/s/Copyright/OM-LDAP: Success

I then restarted the system and got the following results :

Code: Select all

[root@marigold ~]# omshut
Disabling 14 subsystem(s).
omoff : [OM 4835] Subsystem Item Structure Server is already off.
Disabling 8 subsystem(s).
[root@marigold ~]# omrc
Scalix 11.0.2.17

Copyright (C) 2002-2007 Scalix Corporation.  All rights reserved.
Copyright (C) 2002 Hewlett-Packard Development Company, L.P. All rights reserved.
(c) Copyright Hewlett-Packard Company 1989-2001.  All rights reserved.
Portions (c) Copyright Raima(TM) Corporation 1984,1990.  All rights reserved.
Portions (c) Copyright 1991-1995 Regents of the University of Michigan.
             All rights reserved.
Portions (c) Copyright 1989-1994 Regents of the University of California.
             All rights reserved.
Portions (c) Copyright 1999 The MITRE Corporation, Keith Visco.
             All rights reserved.
Portions (c) Copyright 1998-1999 James Clark. All rights reserved.
Portions (c) Copyright 1998-1999 Zveno Pty Ltd, Steve Ball. All rights reserved.
Portions (c) Copyright 1994-1999 Australian National University, CSIRO.
             All rights reserved.
Portions (c) Copyright 1996-1999 Andrew G. Morgan. All rights reserved.
Portions (c) Copyright 1996,1998 Cristian Gafton, CRYPTOCard Inc.
Portions (c) Copyright 1994-1999 Sun Microsystems Inc, Scriptics Corporation.

The Logictran R2Net Converter is copyright (C) 2000, Logictran, Inc.  Portions
of the R2Net Converter are based in part on the work of the University of
Toronto.

                         RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the U.S. Government is subject to
restrictions as set forth in sub-paragraph (c)(1)(ii) of the Rights in
Technical Data and Computer Software clause in DFARS 252.227-7013.

                        Scalix Corporation
                        1400 Fashion Island Blvd.
                        Suite 602
                        San Mateo, CA 94404-2061
                        USA

Rights for non-DOD U.S. Government Departments and Agencies are as set
forth in FAR 52.227-19(c)(1,2).

Enabling 8 subsystem(s).
Database Monitor            Started
IMAP Server Daemon          Started
Directory Relay Server      Started
Notification Server         Started
LDAP Daemon                 Started
SMTP Relay                  Started
Mime Browser Controller     Started
Event Server                Started
Enabling 14 subsystem(s).
Local Delivery              Started
Internet Mail Gateway       Started
Sendmail Interface          Stopped
Local Client Interface      Enabled
Remote Client Interface     Enabled
Test Server                 Started
Request Server              Started
Print Server                Started
Directory Synchronization   Stopped
Bulletin Board Server       Started
Background Search Service   Started
Dump Server                 Stopped
POP3 interface              Started
Service Router              Aborted
CDA Server                  Started
Omscan Server               Started
Archiver                    Started
omrc : Scalix started

I'm afraid I'm not sure what to try next, any help appreciated.

[mikethebike]

Hi,

have a look in you ~logs/fatal file and post any errors that occured at the time you started scalix.

Thanks,

Mick

[maclauk]

On running /etc/init.d/scalix start I get the following errors added to the fatal log file :

Code: Select all

ERROR                   Service Router(Service Router) Wed Aug  1 10:29:04 2007
[OM 5181] Reply timed out or invalid - Mapper protocol problem.
Command sent: <none - expect greeting reply>
Reply received: 503 "ClamAV" cannot scan Scalix-owned file
Pid of logging process: 3498


ERROR                   Service Router(Service Router) Wed Aug  1 10:29:04 2007
[OM 5181] Reply timed out or invalid - Mapper protocol problem.
Command sent: QUIT Please Close This Session
Reply received: 220 Virus Scanning Client Ready
Pid of logging process: 3498


ERROR                   Service Router(Service Router) Wed Aug  1 10:29:04 2007
[OM 5183] A Mapper error has been detected.
Pid of logging process: 3498


SERIOUS ERROR           Service Router(Service Router) Wed Aug  1 10:29:04 2007
[OM 5183] A Mapper error has been detected.
Pid of logging process: 3498

However on running ps -A I cannot see process 3498.

Thanks in advance for any help.

[mikethebike]

Hi,

looks like a permissions problem (you will not see that PID as the router has already aborted).

I think Dave at Scalix has already provided a solution to this at viewtopic.php?t=1333

basically what Dave said was:

You need to make sure that the clamav user is part of the Scalix group. You should check that clamd is able to scan a file in /var/opt/scalix/data somewhere without reporting a permissions error.

[maclauk]

I have changed the entries in the passwd file to :

Code: Select all

scalix:x:100:101:Scalix User:/var/opt/scalix:/bin/true
clamav:x:46:101:Clam AntiVirus:/var/lib/clamav:/sbin/nologin

I then restarted Scalix with the results seen below :

Code: Select all

[root@marigold ~]# /etc/init.d/scalix restart
Stopping Scalix services (marigold):                       [  OK  ]
Starting Scalix services (marigold):                       [  OK  ]
[root@marigold ~]# /etc/init.d/scalix status
*** marigold
PC Monitor                    Started        NON-STOP       0
Directory Relay Server        Started        11:47:08
Notification Server           Started        11:47:08       0
Shared memory daemon          Started        NON-STOP
Notification Monitor          Started        NON-STOP
Session Monitor               Started        NON-STOP
Indexer                       Started        NON-STOP
Stats Daemon                  Started        NON-STOP
Container Access Monitor      Started        NON-STOP
Item Structure Server         Stopped
Database Monitor              Started        11:47:08
Licence Monitor Daemon        Started        NON-STOP
LDAP Daemon                   Started        11:47:08
Queue Manager                 Started        NON-STOP
Item Delete Daemon            Started        NON-STOP
IMAP Server Daemon            Started        11:47:08
SMTP Relay                    Started        11:47:08
Mime Browser Controller       Started        11:47:08
Event Server                  Started        11:47:08
Service Router                Aborted        11:47:10       3
Local Delivery                Started        11:47:10       0
Internet Mail Gateway         Started        11:47:10       0
Local Client Interface        Enabled        11:47:10       0
Remote Client Interface       Enabled        11:47:10       0
Test Server                   Started        11:47:10       0
Request Server                Started        11:47:10       0
Print Server                  Started        11:47:10       0
Bulletin Board Server         Started        11:47:10       0
Background Search Service     Started        11:47:10       0
CDA Server                    Started        11:47:10       0
POP3 interface                Started        11:47:10       0
Omscan Server                 Started        11:47:10       0
Archiver                      Started        11:47:10       0

A check of the fatal log shows :

Code: Select all

ERROR                   Service Router(Service Router) Wed Aug  1 11:47:10 2007
[OM 5181] Reply timed out or invalid - Mapper protocol problem.
Command sent: <none - expect greeting reply>
Reply received: 503 "ClamAV" cannot scan Scalix-owned file
Pid of logging process: 4543


ERROR                   Service Router(Service Router) Wed Aug  1 11:47:10 2007
[OM 5181] Reply timed out or invalid - Mapper protocol problem.
Command sent: QUIT Please Close This Session
Reply received: 220 Virus Scanning Client Ready
Pid of logging process: 4543


ERROR                   Service Router(Service Router) Wed Aug  1 11:47:10 2007
[OM 5183] A Mapper error has been detected.
Pid of logging process: 4543


SERIOUS ERROR           Service Router(Service Router) Wed Aug  1 11:47:10 2007
[OM 5183] A Mapper error has been detected.
Pid of logging process: 4543

The last part of your reference states :

You should check that clamd is able to scan a file in /var/opt/scalix/data somewhere without reporting a permissions error.

Under /var/opt/scalix I only have the directory md, not data. Also as clamd only launches a daemon how do I check it can access something without a permissions error?

Looking at /var/log/clamav/clamd.log I notice that since I changed the user group that clamd is unable to bind to a port :

Code: Select all

Wed Aug  1 10:02:45 2007 -> +++ Started at Wed Aug  1 10:02:45 2007
Wed Aug  1 10:02:45 2007 -> clamd daemon 0.90.3 (OS: linux-gnu, ARCH: i386, CPU: i386)
Wed Aug  1 10:02:45 2007 -> Log file size limit disabled.
Wed Aug  1 10:02:45 2007 -> Reading databases from /var/lib/clamav
Wed Aug  1 10:03:38 2007 -> Loaded 141825 signatures.
Wed Aug  1 10:03:38 2007 -> Bound to tcp port 3310
Wed Aug  1 10:03:38 2007 -> Setting connection queue length to 30
Wed Aug  1 10:03:38 2007 -> Archive: Archived file size limit set to 10485760 bytes.
Wed Aug  1 10:03:38 2007 -> Archive: Recursion level limit set to 8.
Wed Aug  1 10:03:38 2007 -> Archive: Files limit set to 1000.
Wed Aug  1 10:03:38 2007 -> Archive: Compression ratio limit set to 300.
Wed Aug  1 10:03:38 2007 -> Archive support enabled.
Wed Aug  1 10:03:38 2007 -> Archive: Blocking encrypted archives.
Wed Aug  1 10:03:38 2007 -> Archive: Blocking archives that exceed limits.
Wed Aug  1 10:03:38 2007 -> Algorithmic detection enabled.
Wed Aug  1 10:03:38 2007 -> Portable Executable support enabled.
Wed Aug  1 10:03:38 2007 -> ELF support enabled.
Wed Aug  1 10:03:38 2007 -> Detection of broken executables enabled.
Wed Aug  1 10:03:38 2007 -> Mail files support enabled.
Wed Aug  1 10:03:38 2007 -> Mail: Recursion level limit set to 64.
Wed Aug  1 10:03:38 2007 -> OLE2 support enabled.
Wed Aug  1 10:03:38 2007 -> PDF support disabled.
Wed Aug  1 10:03:38 2007 -> HTML support enabled.
Wed Aug  1 10:03:38 2007 -> Self checking every 1800 seconds.
Wed Aug  1 11:03:41 2007 -> No stats for Database check - forcing reload
Wed Aug  1 11:03:41 2007 -> Reading databases from /var/lib/clamav
Wed Aug  1 11:04:18 2007 -> Database correctly reloaded (142091 signatures)
Wed Aug  1 11:53:48 2007 -> +++ Started at Wed Aug  1 11:53:48 2007
Wed Aug  1 11:53:48 2007 -> clamd daemon 0.90.3 (OS: linux-gnu, ARCH: i386, CPU: i386)
Wed Aug  1 11:53:48 2007 -> Log file size limit disabled.
Wed Aug  1 11:53:48 2007 -> Reading databases from /var/lib/clamav
Wed Aug  1 11:54:20 2007 -> Loaded 142091 signatures.
Wed Aug  1 11:54:20 2007 -> ERROR: bind() error: Address already in use

Thanks for your help on this.

[mikethebike]

maclauk,

I think you shold have left he passwd file as it was, and added the clamav user to the scalix group in the "group" file.

so in /etc/group

scalix::100:clamav

or something like that.
Then stop and restart the clamd

Mick

[maclauk]

The entry in /etc/group already reads :

Code: Select all

scalix:x:101:clamav,scalix

ClamAV already is a member of the Scalix group.

However I restarted ClamAV and the Scalix as follows but still without joy....

Code: Select all

[root@marigold ~]# telnet localhost 3310
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.
PING
PONG
Connection closed by foreign host.
[root@marigold ~]# telnet localhost 3310
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.
SHUTDOWN
Connection closed by foreign host.
[root@marigold ~]# telnet localhost 3310
Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Connection refused
telnet: Unable to connect to remote host: Connection refused
[root@marigold ~]# clamd
Running as user clamav (UID 46, GID 101)
[root@marigold ~]# /etc/init.d/scalix restart
Stopping Scalix services (marigold):                       [  OK  ]
Starting Scalix services (marigold):                       [  OK  ]
[root@marigold ~]# /etc/init.d/scalix status
*** marigold
PC Monitor                    Started        NON-STOP       0
Directory Relay Server        Started        13:25:09
Notification Server           Started        13:25:09       0
Shared memory daemon          Started        NON-STOP
Notification Monitor          Started        NON-STOP
Session Monitor               Started        NON-STOP
Indexer                       Started        NON-STOP
Stats Daemon                  Started        NON-STOP
Container Access Monitor      Started        NON-STOP
Item Structure Server         Stopped
Database Monitor              Started        13:25:09
Licence Monitor Daemon        Started        NON-STOP
LDAP Daemon                   Started        13:25:09
Queue Manager                 Started        NON-STOP
Item Delete Daemon            Started        NON-STOP
IMAP Server Daemon            Started        13:25:09
SMTP Relay                    Started        13:25:09
Mime Browser Controller       Started        13:25:09
Event Server                  Started        13:25:09
Service Router                Aborted        13:25:10       3
Local Delivery                Started        13:25:10       0
Internet Mail Gateway         Started        13:25:10       0
Local Client Interface        Enabled        13:25:10       0
Remote Client Interface       Enabled        13:25:10       0
Test Server                   Started        13:25:10       0
Request Server                Started        13:25:10       0
Print Server                  Started        13:25:10       0
Bulletin Board Server         Started        13:25:10       0
Background Search Service     Started        13:25:10       0
CDA Server                    Started        13:25:11       0
POP3 interface                Started        13:25:11       0
Omscan Server                 Started        13:25:11       0
Archiver                      Started        13:25:11       0

So the Service Router still has a problem.

Code: Select all

ERROR                   Service Router(Service Router) Wed Aug  1 13:25:12 2007
[OM 5181] Reply timed out or invalid - Mapper protocol problem.
Command sent: <none - expect greeting reply>
Reply received: 503 "ClamAV" cannot scan Scalix-owned file
Pid of logging process: 5613


ERROR                   Service Router(Service Router) Wed Aug  1 13:25:12 2007
[OM 5181] Reply timed out or invalid - Mapper protocol problem.
Command sent: QUIT Please Close This Session
Reply received: 220 Virus Scanning Client Ready
Pid of logging process: 5613


ERROR                   Service Router(Service Router) Wed Aug  1 13:25:12 2007
[OM 5183] A Mapper error has been detected.
Pid of logging process: 5613


SERIOUS ERROR           Service Router(Service Router) Wed Aug  1 13:25:12 2007
[OM 5183] A Mapper error has been detected.
Pid of logging process: 5613

But we can see that ClamAV seems to have launched OK

Code: Select all

Wed Aug  1 13:24:46 2007 -> +++ Started at Wed Aug  1 13:24:46 2007
Wed Aug  1 13:24:46 2007 -> clamd daemon 0.90.3 (OS: linux-gnu, ARCH: i386, CPU: i386)
Wed Aug  1 13:24:46 2007 -> Log file size limit disabled.
Wed Aug  1 13:24:46 2007 -> Reading databases from /var/lib/clamav
Wed Aug  1 13:25:25 2007 -> Loaded 142091 signatures.
Wed Aug  1 13:25:25 2007 -> Bound to tcp port 3310
Wed Aug  1 13:25:25 2007 -> Setting connection queue length to 30
Wed Aug  1 13:25:25 2007 -> Archive: Archived file size limit set to 10485760 bytes.
Wed Aug  1 13:25:25 2007 -> Archive: Recursion level limit set to 8.
Wed Aug  1 13:25:25 2007 -> Archive: Files limit set to 1000.
Wed Aug  1 13:25:25 2007 -> Archive: Compression ratio limit set to 300.
Wed Aug  1 13:25:25 2007 -> Archive support enabled.
Wed Aug  1 13:25:25 2007 -> Archive: Blocking encrypted archives.
Wed Aug  1 13:25:25 2007 -> Archive: Blocking archives that exceed limits.
Wed Aug  1 13:25:25 2007 -> Algorithmic detection enabled.
Wed Aug  1 13:25:25 2007 -> Portable Executable support enabled.
Wed Aug  1 13:25:25 2007 -> ELF support enabled.
Wed Aug  1 13:25:25 2007 -> Detection of broken executables enabled.
Wed Aug  1 13:25:25 2007 -> Mail files support enabled.
Wed Aug  1 13:25:25 2007 -> Mail: Recursion level limit set to 64.
Wed Aug  1 13:25:25 2007 -> OLE2 support enabled.
Wed Aug  1 13:25:25 2007 -> PDF support disabled.
Wed Aug  1 13:25:25 2007 -> HTML support enabled.
Wed Aug  1 13:25:25 2007 -> Self checking every 1800 seconds.

Cheers for the advice.

:D Finally solved it. ClamAV had lost the rights to create files in the /tmp directory. Confused myself a bit further by relaunching Scalix whilst ClamAV was still loading its database. Once I had give ClamAV enough time the system came up OK. Thanks for your help in solving this.

[mikethebike]

Cool...glad you got there in teh end :-)

Mick