AntiVirus unable to connect to localhost

[net4home]

Sorry if this has already been posted, but after 24 hours of searching without finding anything I've decided to ask the question...

I am unable to keep the antivirus demon running on my Ubuntu 6.10 box and with such unable to send or recieve email. Looking though the zmmtaconfig.log I also found these errors.


## This Error stoped about a day and a half after it started

Sun Jun 3 00:54:36 2007 Skipping Global system configuration update.
Sun Jun 3 00:54:36 2007 gacf ERROR: service.FAILURE (system failure: getDirectContext) (cause: javax.naming.CommunicationException ubuntuxxxxx:389)
Sun Jun 3 00:54:38 2007 Skipping Configuration for server ubuntuxxxxx update.
Sun Jun 3 00:54:38 2007 gs:ubuntuxxxxx ERROR: service.FAILURE (system failure: getDirectContext) (cause: javax.naming.CommunicationException ubuntuxxxxx:389)
Sun Jun 3 00:54:38 2007 Sleeping...Key lookup failed.


## This started on July 16 at 10:40 pm The Antivirus demon stared for a little while this after noon but then stopped. It tells me that the connection is over loaded at 127.0.0.1:3310 and it can not connect and give me a line number of 269.

Tue Jul 17 20:55:49 2007 Service imapproxy is not enabled. Skipping perdition
Tue Jul 17 20:55:50 2007 Watchdog adding antivirus to restart list
Tue Jul 17 20:55:50 2007 Section antivirus did not change skipping
Tue Jul 17 20:55:50 2007 Section antispam did not change skipping
Tue Jul 17 20:55:50 2007 Section mta did not change skipping
Tue Jul 17 20:55:50 2007 Section sasl did not change skipping
Tue Jul 17 20:55:50 2007 Section webxml did not change skipping
Tue Jul 17 20:55:50 2007 Section mailbox did not change skipping
Tue Jul 17 20:55:50 2007 Section perdition did not change skipping
Tue Jul 17 20:55:50 2007 CONTROL ANTIVIRUS: /opt/zimbra/bin/zmclamdctl restart
Tue Jul 17 20:55:57 2007 Sleeping for 60.

I also tried to upgrade to the newest open source version but I'm unable to because i do not have a key file. If this is the issue how do I reset the defaults in Zimbra? This install is only for my family and is a test for the company I work for before I install it for them. Any help would be usefull.

Please be kind I don't have an exstensive background in Linux I'm converting from the Windows world.

net4home

[phoenix]

Welcome to the forums.

Has this been a running installation that's gone wrong or is it a new install? What happened on your server around the time of the first error you posted above? Did you do any system update, did you have any system problems/hardware failure? Apart from what you've posted is there any errors in the /opt/zimbra/log/mailbox.log or /var/log/zimbra.log around that time?

Jul 14 17:19:01 chinook postfix/smtp[11496]: C634A538104: to=<me@domain.com>, relay=127.0.0.1[127.0.0.1], delay=10017, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=10746-01, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 54) line 269. (in reply to end of DATA command))
Jul 14 17:19:01 chinook amavis[10741]: (10741-02) (!!)ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 54) line 269.

Is this the sort of errors you're seeing over and over on your system? If it is, there is one quick check you can do for this problem. There's a package called 'gmp' that's required by the a/v stuff, look in your package manager and make sure it's installed. If it is installed the remove it and re-install it and see if that helps.

I'm a bit confused by your comment here: "I also tried to upgrade to the newest open source version but I'm unable to because i do not have a key file." - you don't need any 'key file' or licence for the OSS version. You have the OSS or NE version currently installed?

[net4home]

Bill thank you for the information.

I uninstalled and reinstalled the gmp packages that were available to me on Ubuntu 6.10 and I am waiting to see if there are any more problems with the antivirus stopping.

This isn't a new installation I've had it running since May 9th 2007. This past week power went out and my three UPS systems died before the power came back on and before I could get monitors and keyboards plugged in to shut them down. After that is when I've started getting issues with mail. I send an email but it never gets to who I'm sending it to. Also That is when I noticed the Antivirus daemon kept stopping.

My first error, my Zimbra logs don't go back that far anymore and I haven't created a backup schedule for them yet either. I don't have anything in my mailbox.log from that time either.

The one thing I do have is this error keeps reoccuring in my Zimbra log starting last week around the time the power failed.
--------------------------------------------------------------------------
Jul 16 13:04:51 slapd[3804]: <= bdb_equality_candidates: (zimbraDomainType) index_param failed (18)
Jul 16 13:04:51 slapd[3804]: <= bdb_equality_candidates: (zimbraMailStatus) index_param failed (18)
Jul 16 13:04:51 slapd[3804]: <= bdb_equality_candidates: (zimbraDomainType) index_param failed (18)
Jul 16 13:04:51 slapd[3804]: <= bdb_equality_candidates: (zimbraMailStatus) index_param failed (18)
--------------------------------------------------------------------------

I currently have the OSS installed and that is why I'm confused also with trying to upgrade to the 4.5.6 version. This is the file name that I downloaded "zcs-4.5.6_GA_1044.UBUNTU6.gz". When I try to install it I'm told that it can't find the key.xml file. I also verified that this is the file that is on my server that I tried to upgrade.

Thanks
net4home
(Kevin)

[phoenix]

You can ignore those error messages, they're just a warning about an unindexed field in LDAP (no, it shouldn't be indexed), those messages will disappear with an update to zimbra. I have a vague feeling there's a post on the forums about the failed OSS upgrade with that error, have a quick search and see if you can find it and if not let me know.

[net4home]

Bill,

Thanks again for your all your help. I did find some posts dealing with problems with installing but none that state the issue of missing a key file. I originaly installed Zimbra on Ubuntu 6.06 LTS and then after everything was working...about a month later I did an upgrade of Ubuntu to the 6.10 version. I did find a post with some instructions that were specific to the Ubuntu 6.10 install that pointed me to this page(How To Install Zimbra Collaboration Suite (ZCS) On Ubuntu - Page 2 | HowtoForge - Linux Howtos and Tutorials?)
and I have since made sure that those commands that were needed for the Ubuntu 6.10 install have been implemented on my system as well. The Prerequisites were installed under 6.06 but I made sure that I had all of them by re-running "apt-get install curl fetchmail libpcre3 libgmp3c2 libexpat1 libxml2 libtie-ixhash-perl", Sure enough I was missing the package libtie-ixhash-perl.

Those instructions look like they are for the zcs-4.5.3_GA_733.UBUNTU6 version, but i figured that it is close enought to the 4.5.6 version that the 4.5.6 version might also use them too. I have downloaded the 4.5.6 OSS version again to try to do an upgrade of my server, but I have a couple of questions.

Once the I've have backups of the mail data, Is there a way to restore the mailboxes or/and if things go really bad and I have to totaly reinstall Ubuntu and Zimbra will anyone loose any mail, calendar or contacts?

Thankyou for you time
net4home
(Kevin)

[phoenix]

Are you behind a firewall or router? What I suggest you do is block port 25 so you don't get any more mail in the queues then shutdown Zimbra and perform a backup with this command:

rsync -avrlHKpogDt /opt/zimbra/ /data/backup/zimbra

obviously change the backup directory '/data/backup/zimbra' to one you want and somewhere safe.

Don't let anyone try to use Zimbra while you're doing this. Start Zimbra again, do all the services come up? Do you still get the same error messages in the log that you posted earlier about the 'Key lookup failed'? That error looks like Zimbra couldn't contact LDAP. Is there still the problem with anti-virus? If you still have problems then look in catalina.out, /opt/zimbra/log/mailbox.log & /var/log/zimbra.log and see what errors are listed there.

[net4home]

Bill,

Thankyou again. I have backed up my data to another server in a tar format, I have downloaded the OSS version of Zimbra again to my server and have successfully had the install run all the way though.

I am behind a firewall, but currently I do not have port 25 open as Zimbra is currently used to pull email from other POP accounts.

I did not get the Key error when doing the upgrade this time. I assume that the tarball file was corrected or I somehow got the wrong one. So this error is cleared...yeah!

With the new install I had the server showing that all the services had started start once. I did have an error with the LDAP password. I've reset the LDAP password with the command "zmldappasswd --root password". This is the output from that command:

-------------------------------------------------------------
Updating local config
Stopping ldap
Killing slapd with pid 4286/opt/zimbra/bin/ldap: line 150: kill: (4286) - No such process
done.
Updating ldap configuration
Starting ldap
Updating zimbra.ldif
Running ldappasswd
Password change complete.
You may need to restart tomcat, if it is running.
------------------------------------------------------------

When I ran the "zmcontrol status" to check the status of the services, I recieve the following error:
---------------------------------------
Cannot determine services - exiting
--------------------------------------

Digging deeper I also find out that the mysql is not running or accepting connections when I run "logmysql status"
---------------------------------------------------------
ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/opt/zimbra/logger/db/mysql.sock' (2)
----------------------------------------------------------

I have also recieved an error that the zimbra password is incorrect for the mysql database but I have to first be able to tell that mysql is running before I go anywhere with that error message.

Bill sorry if I keep adding issues by upgrading or changing passwords like I've done. I will stop and wait for your reply before doing anything else.

Thanks
net4home
(Kevin)

[bobby]

Are services running? What is the output of these commands:

su - zimbra
zmlocalconfig -s | grep ldap | grep pass
host `hostname`
cat /etc/hosts
/sbin/ifconfig
ps aux | grep zimbra

[net4home]

Bobby,

I know this goes against all my security, but I need to get this going since I have been down for over a week now. Here are the outputs you were looking for:
----------------------------------------------------------------
zimbra@ubuntu-srv2:~$ zmlocalconfig -s | grep ldap | grep pass
ldap_root_password = [EDITED FOR SECURITY]
zimbra_ldap_password = [EDITED FOR SECURITY]
-----------------------------------------------------------------
zimbra@ubuntu-srv2:~$ host ubuntu-srv2.thekingsharvest.local
ubuntu-srv2.thekingsharvest.local has address 192.168.100.241
-----------------------------------------------------------------
zimbra@ubuntu-srv2:~$ host ubuntu-srv2
ubuntu-srv2.thekingsharvest.local has address 192.168.100.241
-----------------------------------------------------------------
zimbra@ubuntu-srv2:~$ cat /etc/hosts
127.0.0.1 localhost.localdomain localhost
127.0.1.1 ubuntu-srv2.thekingsharvest.local ubuntu-srv2
192.168.100.241 ubuntu-srv2.thekingsharvest.local ubuntu-srv2
192.168.100.1 smoothwall.thekingsharvest.local smoothwall
192.168.100.5 homesrv1.the-kings-harvest.local homesrv1
192.168.100.140 win03-srv1.thekingsharvest.local win03-srv1
192.168.100.240 ubuntu-srv1.thekingsharvest.local ubuntu-srv2
# The following lines are desirable for IPv6 capable hosts
#::1 ip6-localhost ip6-loopback
#fe00::0 ip6-localnet
#ff00::0 ip6-mcastprefix
#ff02::1 ip6-allnodes
#ff02::2 ip6-allrouters
#ff02::3 ip6-allhosts
-----------------------------------------------------------------
zimbra@ubuntu-srv2:~$ /sbin/ifconfig
eth0 Link encap:Ethernet HWaddr 00:02:55:91A:E3
inet addr:192.168.100.241 Bcast:192.168.100.255 Mask:255.255.255.0
inet6 addr: fe80::202:55ff:fe91:dae3/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:838 errors:0 dropped:0 overruns:0 frame:0
TX packets:709 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:159584 (155.8 KiB) TX bytes:132976 (129.8 KiB)
Interrupt:209 Base address:0x2000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:57 errors:0 dropped:0 overruns:0 frame:0
TX packets:57 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:4044 (3.9 KiB) TX bytes:4044 (3.9 KiB)
-----------------------------------------------------------------
zimbra@ubuntu-srv2:~$ ps aux | grep zimbra
zimbra 3790 0.0 0.4 83916 5036 ? Ssl 14:34 0:00 /opt/zimbra/openldap/libexec/slapd -l LOCAL0 -4 -u zimbra -h ldap://ubuntu-srv2.thekingsharvest.local -f /opt/zimbra/conf/slapd.conf
zimbra 3960 0.0 0.1 3672 1152 pts/0 S 14:36 0:00 su - zimbra
zimbra 3961 0.0 0.1 4496 2056 pts/0 S 14:36 0:00 -su
zimbra 4110 0.0 0.0 2244 892 pts/0 R+ 14:40 0:00 ps aux
zimbra 4111 0.0 0.0 1672 556 pts/0 R+ 14:40 0:00 grep zimbra

-----------------------------------------------------------------

I have made a backup again of the upgrade I did and if I need to I will have to uninstall Zimbra and reinstall a fresh copy of it and figure out how to move the mail from the old install to the new without corrupting the new install.

The output above is from a freshly rebooted server. This is all that starts on a reboot.

Thanks
net4home
(Kevin)

[bobby]

I wouldn't worry unless your users are checking out the forums; nobody else can resolve "ubuntu-srv2.thekingsharvest.local". What do you get from these commands:

su - zimbra
zmlocalconfig zimbra_server_hostname ldap_url
zmprov --ldap getAllServers