Koozali.org: home of the SME Server

cvm-unix segfault

Offline mauro

  • ***
  • 101
  • +0/-0
cvm-unix segfault
« on: August 03, 2021, 10:22:54 AM »
SME10
Every about 30 min I get this in /var/log/messages:

Code: [Select]
Aug  3 08:06:35 wintermute kernel: [216543.570193] cvm-unix[13482]: segfault at 0 ip 00007fefe53e9ec6 sp 00007fff8eec3bc8 error 4 in libc-2.17.so[7fefe52ab000+1c4000]
Is it 'normal' log noise or should I open a bug?
All parts should go together without forcing. You must remember that the parts you are reassembling were disassembled by you. Therefore, if you can't get them together again, there must be a reason. By all means, do not use a hammer.
-- IBM maintenance manual (1975)

Online Jean-Philippe Pialasse

  • *
  • 2,744
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: cvm-unix segfault
« Reply #1 on: August 03, 2021, 01:07:23 PM »
from memory already reported and seems related to trial to auth an account without password defined /locked

you can check time in this error and in qpsmtpd/sqpsmtpd logs
« Last Edit: August 03, 2021, 01:16:31 PM by Jean-Philippe Pialasse »

Offline mauro

  • ***
  • 101
  • +0/-0
Re: cvm-unix segfault
« Reply #2 on: August 03, 2021, 02:39:22 PM »
Indeed that is the case.
I see in sqpsmtpd continuous attempts to auth non-existing users. The user names seem to come from a dictionary. Whenever by chance one of this user names matches the name of an existing group in the server, I get the segfault.
I'm thinking to install fail2ban contrib.
All parts should go together without forcing. You must remember that the parts you are reassembling were disassembled by you. Therefore, if you can't get them together again, there must be a reason. By all means, do not use a hammer.
-- IBM maintenance manual (1975)

Online Jean-Philippe Pialasse

  • *
  • 2,744
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: cvm-unix segfault
« Reply #3 on: August 03, 2021, 06:18:04 PM »
stop thinking. do it ;)

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: cvm-unix segfault
« Reply #4 on: August 03, 2021, 06:41:37 PM »
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline RDMidtun

  • *
  • 27
  • +0/-0
Re: cvm-unix segfault
« Reply #5 on: September 28, 2021, 08:36:46 PM »
SME10
Every about 30 min I get this in /var/log/messages:

Code: [Select]
Aug  3 08:06:35 wintermute kernel: [216543.570193] cvm-unix[13482]: segfault at 0 ip 00007fefe53e9ec6 sp 00007fff8eec3bc8 error 4 in libc-2.17.so[7fefe52ab000+1c4000]
Is it 'normal' log noise or should I open a bug?

I had the same problem and installed fail2ban to see if lowering the load on the cvm-unix service would fix the problem. But, no success, I still had a segfault every half an hour or so causing the cvm-unix service to restart. Since the module is used to authenticate users for the mail system, I tried to change the email setting "SMTP authentication" from "Allow both SMTP and SSMTP" to "Allow SMTP" only. This fixed the problem! Since making the change a few days back, I have not seen any cvm-unix segfault in  the /var/log/messages file.

Online Jean-Philippe Pialasse

  • *
  • 2,744
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: cvm-unix segfault
« Reply #6 on: September 28, 2021, 10:05:15 PM »
fail2ban will not prevent any occurrence but could lower by baning offending ip.

preventing auth on smtp port is an idea, please do so if not an issue for you, but you might prevent user behind a firewall to send mail. sometimes smtps port is filtered by firewalls.

Offline Mace

  • **
  • 65
  • +0/-0
Re: cvm-unix segfault
« Reply #7 on: September 29, 2021, 07:06:40 AM »
Also if using fail2ban see https://forums.contribs.org/index.php/topic,54609.msg286443.html#msg286443 as it's service fails to start when a reconfig and reboot is executed at the moment.

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: cvm-unix segfault
« Reply #8 on: September 29, 2021, 09:07:07 AM »
Yes we know.

More accurately see this and the relevant bugs.

https://forums.contribs.org/index.php/topic,54609.msg286445.html#msg286445

It's an irritation, but not a reason to not use it.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: cvm-unix segfault
« Reply #9 on: August 11, 2023, 02:15:46 PM »
This should be fixed in smeserver-qpsmtpd.noarch 0:2.7.0-12.el7.sme which was released a few days ago.

Please let us know if you have any issues.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation