Koozali.org: home of the SME Server

Critical: authcvm crash - users unable to send email

Offline Michail Pappas

  • *
  • 339
  • +1/-0
Critical: authcvm crash - users unable to send email
« on: December 03, 2021, 07:05:58 AM »
This is the 2nd time this issue appears and it is definitely critical: if I am not around to restart SME, my users are unable to send email, due to being unable to authenticate. From /var/log/sqpsmtpd/current:
Code: [Select]
@4000000061a9a93a1e10ffa4 Accepted conqnection 0/10 from 10.128.66.73 / pc-00585.mydomain.gr
@4000000061a9a93a1e12c4c4 Connection from pc-00585.mydomain.gr [10.128.66.73]
@4000000061a9a93a21448c54 (connect) tls: pass, connect via SMTPS
@4000000061a9a93a214f560c (connect) relay: skip, no match
@4000000061a9a93a21522c9c 220 mail.mydomain.gr ESMTP
@4000000061a9a93a2467d4f4 dispatching EHLO [10.128.66.73]
@4000000061a9a93a247adc0c 250-mydomain.gr Hi pc-00585.mydomain.gr [10.128.66.73]
@4000000061a9a93a247ca514 250-PIPELINING
@4000000061a9a93a247e1c14 250-8BITMIME
@4000000061a9a93a247f9ecc 250-SIZE 30000000
@4000000061a9a93a24811d9c 250 AUTH PLAIN LOGIN
@4000000061a9a93a24bc423c dispatching AUTH PLAIN <hidden credentials>
@4000000061a9a93a24c85be4 (auth-plain) auth::auth_cvm_unix_local: skip: socket connection attempt for: a.user
@4000000061a9a93a24cdfd4c (deny) logging::logterse: ` 10.128.66.73 pc-00585.mydomain.gr      [10.128.66.73]                  auth::auth_cvm_unix_local       901     authcvm, connection failed      msg denied before queued
@4000000061a9a93a24d0dbac 535 PLAIN authentication failed for a.user - authcvm, connection failed
@4000000061a9a93a24f82a2c dispatching AUTH LOGIN
@4000000061a9a93a24fdeebc 334 VXNlcm5hbWU6
@4000000061a9a93a25284a7c 334 UGFzc3dvcmQ6
@4000000061a9a93a25481334 (auth-login) auth::auth_cvm_unix_local: skip: socket connection attempt for: a.user
@4000000061a9a93a254c6894 (deny) logging::logterse: ` 10.128.66.73 pc-00585.mydomain.gr      [10.128.66.73]                  auth::auth_cvm_unix_local       901     authcvm, connection failed      msg denied before queued
@4000000061a9a93a254f1814 535 LOGIN authentication failed for a.user - authcvm, connection failed
@4000000061a9a9b22560988c Connection Timed Out

In /var/log/messages cvm-unix went dead hours ago and unable to restart?
Code: [Select]
Dec  2 21:49:38 mail esmith::event[30365]: Processing event: fail2ban-update
Dec  2 21:49:38 mail esmith::event[30365]: Running event handler: /etc/e-smith/events/actions/generic_template_expand
Dec  2 21:49:38 mail esmith::event[30365]: expanding /etc/rc.d/init.d/masq
Dec  2 21:49:38 mail esmith::event[30365]: generic_template_expand=action|Event|fail2ban-update|Action|generic_template_expand|Start|1638474578 830838|End|1638474578 967647|Elapsed|0.136809
Dec  2 21:49:38 mail esmith::event[30365]: Running event handler: /etc/e-smith/events/actions/adjust-services
Dec  2 21:49:39 mail esmith::event[30365]: adjusting non-supervised masq (start)
Dec  2 21:49:39 mail esmith::event[30365]: adjusting non-supervised masq (adjust)
Dec  2 21:49:39 mail esmith::event[30365]: adjust-services=action|Event|fail2ban-update|Action|adjust-services|Start|1638474578 968233|End|1638474579 379923|Elapsed|0.41169
Dec  2 22:16:04 mail kernel: [47736.447761] cvm-unix[627]: segfault at 0 ip 00007f0b38f2afd6 sp 00007fff23dd5418 error 4 in libc-2.17.so[7f0b38dec000+1c4000]
Dec  2 22:16:05 mail /sbin/e-smith/db[30828]: /home/e-smith/db/configuration: OLD cvm-unix=service|access|localhost|status|enabled
Dec  2 22:16:05 mail /sbin/e-smith/db[30828]: /home/e-smith/db/configuration: NEW cvm-unix=service
Dec  2 22:16:05 mail /sbin/e-smith/db[30828]: /home/e-smith/db/configuration: OLD cvm-unix=service
Dec  2 22:16:05 mail /sbin/e-smith/db[30828]: /home/e-smith/db/configuration: NEW cvm-unix=service|status|enabled
Dec  2 22:16:05 mail kernel: [47736.940855] cvm-unix[30833]: segfault at 0 ip 00007f01eaad6037 sp 00007fff65fbb288 error 4 in libc-2.17.so[7f01ea997000+1c4000]
Dec  2 22:16:05 mail /sbin/e-smith/db[30839]: /home/e-smith/db/configuration: OLD cvm-unix=service|status|enabled
Dec  2 22:16:05 mail /sbin/e-smith/db[30839]: /home/e-smith/db/configuration: NEW cvm-unix=service
Dec  2 22:16:05 mail /sbin/e-smith/db[30839]: /home/e-smith/db/configuration: OLD cvm-unix=service
Dec  2 22:16:05 mail /sbin/e-smith/db[30839]: /home/e-smith/db/configuration: NEW cvm-unix=service|status|enabled
Dec  2 22:16:05 mail kernel: [47737.436415] cvm-unix[30845]: segfault at 0 ip 00007f0f8b34d037 sp 00007ffcc4f91968 error 4 in libc-2.17.so[7f0f8b20e000+1c4000]
Dec  2 22:16:05 mail /sbin/e-smith/db[30850]: /home/e-smith/db/configuration: OLD cvm-unix=service|status|enabled
Dec  2 22:16:05 mail /sbin/e-smith/db[30850]: /home/e-smith/db/configuration: NEW cvm-unix=service
Dec  2 22:16:05 mail /sbin/e-smith/db[30850]: /home/e-smith/db/configuration: OLD cvm-unix=service
Dec  2 22:16:05 mail /sbin/e-smith/db[30850]: /home/e-smith/db/configuration: NEW cvm-unix=service|status|enabled
Dec  2 22:16:06 mail kernel: [47737.930168] cvm-unix[30856]: segfault at 0 ip 00007fd8beb78037 sp 00007ffe90374b28 error 4 in libc-2.17.so[7fd8bea39000+1c4000]
Dec  2 22:16:06 mail /sbin/e-smith/db[30861]: /home/e-smith/db/configuration: OLD cvm-unix=service|status|enabled
Dec  2 22:16:06 mail /sbin/e-smith/db[30861]: /home/e-smith/db/configuration: NEW cvm-unix=service
Dec  2 22:16:06 mail /sbin/e-smith/db[30861]: /home/e-smith/db/configuration: OLD cvm-unix=service
Dec  2 22:16:06 mail /sbin/e-smith/db[30861]: /home/e-smith/db/configuration: NEW cvm-unix=service|status|enabled
Dec  2 22:16:06 mail kernel: [47738.424304] cvm-unix[30867]: segfault at 0 ip 00007fd3aa104037 sp 00007ffe0e9576d8 error 4 in libc-2.17.so[7fd3a9fc5000+1c4000]
Dec  2 22:16:06 mail /sbin/e-smith/db[30872]: /home/e-smith/db/configuration: OLD cvm-unix=service|status|enabled
Dec  2 22:16:06 mail /sbin/e-smith/db[30872]: /home/e-smith/db/configuration: NEW cvm-unix=service
Dec  2 22:16:06 mail /sbin/e-smith/db[30872]: /home/e-smith/db/configuration: OLD cvm-unix=service
Dec  2 22:16:06 mail /sbin/e-smith/db[30872]: /home/e-smith/db/configuration: NEW cvm-unix=service|status|enabled
Dec  2 22:16:07 mail kernel: [47738.923693] cvm-unix[30878]: segfault at 0 ip 00007fdea842c037 sp 00007ffd772fa338 error 4 in libc-2.17.so[7fdea82ed000+1c4000]
Dec  2 22:16:11 mail /sbin/e-smith/smeserver-fail2ban[30884]: /home/e-smith/db/fail2ban: OLD 8gxxvfrh8clfwbe=(undefined)
Dec  2 22:16:11 mail /sbin/e-smith/smeserver-fail2ban[30884]: /home/e-smith/db/fail2ban: NEW 8gxxvfrh8clfwbe=ban|BanTimestamp|1638476171|Host|163.123.142.194|Port|25,465|Protocol|tcp|UnbanTimestamp|1638477971
Dec  2 22:16:11 mail esmith::event[30885]: Processing event: fail2ban-update
Dec  2 22:16:11 mail esmith::event[30885]: Running event handler: /etc/e-smith/events/actions/generic_template_expand
Dec  2 22:16:11 mail esmith::event[30885]: expanding /etc/rc.d/init.d/masq
Dec  2 22:16:11 mail esmith::event[30885]: generic_template_expand=action|Event|fail2ban-update|Action|generic_template_expand|Start|1638476171 728954|End|1638476171 891975|Elapsed|0.163021
Dec  2 22:16:11 mail esmith::event[30885]: Running event handler: /etc/e-smith/events/actions/adjust-services
Dec  2 22:16:11 mail esmith::event[30885]: adjusting non-supervised masq (start)
Dec  2 22:16:11 mail esmith::event[30885]: adjusting non-supervised masq (adjust)
Dec  2 22:16:12 mail esmith::event[30885]: adjust-services=action|Event|fail2ban-update|Action|adjust-services|Start|1638476171 892395|End|1638476172 279228|Elapsed|0.386833
Dec  2 22:16:12 mail /sbin/e-smith/smeserver-fail2ban[31054]: /home/e-smith/db/fail2ban: OLD jeik95ltaklnuu6=(undefined)
Dec  2 22:16:12 mail /sbin/e-smith/smeserver-fail2ban[31054]: /home/e-smith/db/fail2ban: NEW jeik95ltaklnuu6=ban|BanTimestamp|1638476172|Host|163.123.142.194|UnbanTimestamp|1639080972
Dec  2 22:16:12 mail esmith::event[31055]: Processing event: fail2ban-update
Dec  2 22:16:12 mail esmith::event[31055]: Running event handler: /etc/e-smith/events/actions/generic_template_expand
Dec  2 22:16:12 mail esmith::event[31055]: expanding /etc/rc.d/init.d/masq
Dec  2 22:16:12 mail esmith::event[31055]: generic_template_expand=action|Event|fail2ban-update|Action|generic_template_expand|Start|1638476172 415428|End|1638476172 551251|Elapsed|0.135823
Dec  2 22:16:12 mail esmith::event[31055]: Running event handler: /etc/e-smith/events/actions/adjust-services
Dec  2 22:16:12 mail esmith::event[31055]: adjusting non-supervised masq (start)
Dec  2 22:16:12 mail esmith::event[31055]: adjusting non-supervised masq (adjust)
Dec  2 22:16:12 mail esmith::event[31055]: adjust-services=action|Event|fail2ban-update|Action|adjust-services|Start|1638476172 551782|End|1638476172 986411|Elapsed|0.434629
Dec  2 22:46:11 mail /sbin/e-smith/smeserver-fail2ban[31514]: /home/e-smith/db/fail2ban: DELETE 8gxxvfrh8clfwbe=ban|BanTimestamp|1638476171|Host|163.123.142.194|Port|25,465|Protocol|tcp|UnbanTimestamp|1638477971
Dec  2 22:46:11 mail esmith::event[31515]: Processing event: fail2ban-update
Dec  2 22:46:11 mail esmith::event[31515]: Running event handler: /etc/e-smith/events/actions/generic_template_expand
Dec  2 22:46:11 mail esmith::event[31515]: expanding /etc/rc.d/init.d/masq
Dec  2 22:46:11 mail esmith::event[31515]: generic_template_expand=action|Event|fail2ban-update|Action|generic_template_expand|Start|1638477971 523265|End|1638477971 662989|Elapsed|0.139724

I don't know what has triggered the crash. Last time this occured, there was an ongoing effort to brute-force crack mailboxes via smtp access. Not this time though from examining /var/log/qpsmtpd/current. Could bug# 11315 be related?

I've kept a copy of /var/log for dissemination. Let me know what else I can provide.

I'd really appreciate if we could tackle this with priority. Stability regarding the core functionality should be our main concern here. Never had issues with 9.2, could this be a CentOS 7 thing?
« Last Edit: December 03, 2021, 07:08:06 AM by Michail Pappas »

Offline Michail Pappas

  • *
  • 339
  • +1/-0
Re: Critical: authcvm crash - users unable to send email
« Reply #1 on: December 03, 2021, 07:10:34 AM »
Opened bug 11792.

Offline ReetP

  • *
  • 3,731
  • +5/-0
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation