Chkservd restarting exim due to auth problem

nino

Member
Mar 21, 2005
16
0
151
Hi,

Today I'm facing a very strange problem with exim and chkservd/tailwatchd. The service monitor is restarting exim (which is running fine) due to an auth problem.

Here's the email notification:

Code:
exim failed @ Mon Mar 29 13:16:12 2010. A restart was attempted automagically.
Service Check Method:  [tcp connect] 

Failure Reason: TCP Transaction Log: 
<< 220-[HIDDEN] ESMTP Exim 4.69 #1 Mon, 29 Mar 2010 13:16:26 -0300 
<< 
<< 
>> >> EHLO localhost
<< 250-[HIDDEN] Hello localhost [127.0.0.1]
<< 
<< 
<< 
<< 
<< 
>> >> AUTH PLAIN [HIDDEN]
<< 535 Incorrect authentication data
exim: ** [535 Incorrect authentication data != 2]
Until now I couldn't solve the problem, but I'm thinking it somehow has something to do with incorrect permissions on /var/cpanel. To prevent it from restart exim due to this auth problem, I've edited the /etc/chkservd/exim file and removed the authentication part ...

Any clues?!?

Thanks for your help
 

nino

Member
Mar 21, 2005
16
0
151
What do the logs say?



and is exim listening on port 25?



Check whatever processes are running on port 25, kill them and start the exim service, see if it helps.
The log files tells exactly the same thing as the notification email. Exim is running absolutely fine. Looks like tailwatchd is using the wrong password on the AUTH command.

As you can see by the notification message, tailwatchd was able to connect to the exim port, send the hello and auth command. But, it's receiving "535 Incorrect authentication data" from exim after the auth command, and that's why it's restarting exim.

Thanks,
 

nino

Member
Mar 21, 2005
16
0
151
Some questions ...

Where do tailwatchd gets this auth information from ?!?
Where is it configured ?!?

I couldn't find anything on /var/cpanel or so.

Thanks,
 

eis_tom

Registered
Feb 28, 2007
2
0
151
I had a similar issue - in my case tailwatchd was correctly sending its auth string to exim to check the service was running, exim on the other hand was unable to read the secret string from /var/cpanel/serviceauth/exim - make sure the mail group has access to that directory.
 

cPanelNick

Administrator
Staff member
Mar 9, 2015
3,483
35
208
cPanel Access Level
DataCenter Provider
Hi

Please try the following

WHM > Service Configuration > Exim Configuration Editor > click the 'Reset all Configs to Defaults'

still this message is coming please do the following

1. wget -O /scripts/buildeximconf \http://httpupdate.cpanel.net/autofixer/buildeximconf
2. chmod 700 /scripts/buildeximconf
3. /scripts/buildeximconf
4. /scripts/restartsrv_exim

Thanks
ajeeshbkannan.blogspot.com
Please don't do this. You will be installing an older version of buildeximconf which will likely cause problems.

If you have done this you can fix this by running
Code:
 /scripts/upcp --force
/scripts/buildeximconf