Chkservd restarting exim due to auth problem

[nino]

Hi,

Today I'm facing a very strange problem with exim and chkservd/tailwatchd. The service monitor is restarting exim (which is running fine) due to an auth problem.

Here's the email notification:

exim failed @ Mon Mar 29 13:16:12 2010. A restart was attempted automagically.
Service Check Method:  [tcp connect] 

Failure Reason: TCP Transaction Log: 
<< 220-[HIDDEN] ESMTP Exim 4.69 #1 Mon, 29 Mar 2010 13:16:26 -0300 
<< 
<< 
>> >> EHLO localhost
<< 250-[HIDDEN] Hello localhost [127.0.0.1]
<< 
<< 
<< 
<< 
<< 
>> >> AUTH PLAIN [HIDDEN]
<< 535 Incorrect authentication data
exim: ** [535 Incorrect authentication data != 2]

Until now I couldn't solve the problem, but I'm thinking it somehow has something to do with incorrect permissions on /var/cpanel. To prevent it from restart exim due to this auth problem, I've edited the /etc/chkservd/exim file and removed the authentication part ...

Any clues?!?

Thanks for your help

 

[madaboutlinux]

What do the logs say?

cat /var/log/chkservd.log

and is exim listening on port 25?

netstat -alnp | grep :25

Check whatever processes are running on port 25, kill them and start the exim service, see if it helps.

 

[nino]

What do the logs say?



and is exim listening on port 25?



Check whatever processes are running on port 25, kill them and start the exim service, see if it helps.

The log files tells exactly the same thing as the notification email. Exim is running absolutely fine. Looks like tailwatchd is using the wrong password on the AUTH command.

As you can see by the notification message, tailwatchd was able to connect to the exim port, send the hello and auth command. But, it's receiving "535 Incorrect authentication data" from exim after the auth command, and that's why it's restarting exim.

Thanks,

 

[nino]

Some questions ...

Where do tailwatchd gets this auth information from ?!?
Where is it configured ?!?

I couldn't find anything on /var/cpanel or so.

Thanks,

 

[eis_tom]

I had a similar issue - in my case tailwatchd was correctly sending its auth string to exim to check the service was running, exim on the other hand was unable to read the secret string from /var/cpanel/serviceauth/exim - make sure the mail group has access to that directory.

 

[cPanelNick]

Hi

Please try the following

WHM > Service Configuration > Exim Configuration Editor > click the 'Reset all Configs to Defaults'

still this message is coming please do the following

1. wget -O /scripts/buildeximconf \http://httpupdate.cpanel.net/autofixer/buildeximconf
2. chmod 700 /scripts/buildeximconf
3. /scripts/buildeximconf
4. /scripts/restartsrv_exim

Thanks
ajeeshbkannan.blogspot.com

Please don't do this. You will be installing an older version of buildeximconf which will likely cause problems.

If you have done this you can fix this by running

 /scripts/upcp --force
/scripts/buildeximconf