The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Chkservd restarting exim due to auth problem

Discussion in 'General Discussion' started by nino, Mar 29, 2010.

  1. nino

    nino Member

    Joined:
    Mar 21, 2005
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    Hi,

    Today I'm facing a very strange problem with exim and chkservd/tailwatchd. The service monitor is restarting exim (which is running fine) due to an auth problem.

    Here's the email notification:

    Code:
    exim failed @ Mon Mar 29 13:16:12 2010. A restart was attempted automagically.
    Service Check Method:  [tcp connect] 
    
    Failure Reason: TCP Transaction Log: 
    << 220-[HIDDEN] ESMTP Exim 4.69 #1 Mon, 29 Mar 2010 13:16:26 -0300 
    << 
    << 
    >> >> EHLO localhost
    << 250-[HIDDEN] Hello localhost [127.0.0.1]
    << 
    << 
    << 
    << 
    << 
    >> >> AUTH PLAIN [HIDDEN]
    << 535 Incorrect authentication data
    exim: ** [535 Incorrect authentication data != 2]
    
    Until now I couldn't solve the problem, but I'm thinking it somehow has something to do with incorrect permissions on /var/cpanel. To prevent it from restart exim due to this auth problem, I've edited the /etc/chkservd/exim file and removed the authentication part ...

    Any clues?!?

    Thanks for your help
     
  2. madaboutlinux

    madaboutlinux Well-Known Member

    Joined:
    Jan 24, 2005
    Messages:
    1,052
    Likes Received:
    2
    Trophy Points:
    38
    Location:
    Earth
    What do the logs say?

    and is exim listening on port 25?

    Check whatever processes are running on port 25, kill them and start the exim service, see if it helps.
     
  3. nino

    nino Member

    Joined:
    Mar 21, 2005
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    The log files tells exactly the same thing as the notification email. Exim is running absolutely fine. Looks like tailwatchd is using the wrong password on the AUTH command.

    As you can see by the notification message, tailwatchd was able to connect to the exim port, send the hello and auth command. But, it's receiving "535 Incorrect authentication data" from exim after the auth command, and that's why it's restarting exim.

    Thanks,
     
  4. nino

    nino Member

    Joined:
    Mar 21, 2005
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    Some questions ...

    Where do tailwatchd gets this auth information from ?!?
    Where is it configured ?!?

    I couldn't find anything on /var/cpanel or so.

    Thanks,
     
  5. eis_tom

    eis_tom Registered

    Joined:
    Feb 28, 2007
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    I had a similar issue - in my case tailwatchd was correctly sending its auth string to exim to check the service was running, exim on the other hand was unable to read the secret string from /var/cpanel/serviceauth/exim - make sure the mail group has access to that directory.
     
  6. cPanelNick

    cPanelNick Administrator
    Staff Member

    Joined:
    Mar 9, 2015
    Messages:
    3,426
    Likes Received:
    2
    Trophy Points:
    38
    cPanel Access Level:
    DataCenter Provider
    Please don't do this. You will be installing an older version of buildeximconf which will likely cause problems.

    If you have done this you can fix this by running
    Code:
     /scripts/upcp --force
    /scripts/buildeximconf 
     
Loading...

Share This Page