The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Jailed Shell/Disabled Shell prevents Email Piping

Discussion in 'Security' started by sparek-3, Jun 4, 2014.

  1. sparek-3

    sparek-3 Well-Known Member

    Joined:
    Aug 10, 2002
    Messages:
    1,383
    Likes Received:
    23
    Trophy Points:
    38
    cPanel Access Level:
    Root Administrator
    I have a user that has an email pipe set up. The pipe doesn't appear to be working, although running the script directly (even through the user's jailshell) does not seem to yield any errors.

    The error in the exim_mainlog involves:

    Code:
    T=jailed_virtual_address_pipe: Child process of jailed_virtual_address_pipe transport returned 1 from command: /usr/local/cpanel/bin/jailexec
    Are there any issues with email piping? This is cPanel 11.42.1.16.
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,828
    Likes Received:
    672
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    re: Jailed Shell/Disabled Shell prevents Email Piping

    Hello :)

    Could you let us know how you have setup the filter/pipe exactly? Also, does the issue persist when you enable normal shell access on the account?

    Thank you.
     
  3. sparek-3

    sparek-3 Well-Known Member

    Joined:
    Aug 10, 2002
    Messages:
    1,383
    Likes Received:
    23
    Trophy Points:
    38
    cPanel Access Level:
    Root Administrator
    re: Jailed Shell/Disabled Shell prevents Email Piping

    This might have been a permission issue. I seem to see that this problem can be raised if there is a permission problem either with the script or with one of it's parent directories.

    I don't know if the client figured this out or what, I don't seem to be seeing the issue any more, and the client hasn't responded.
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,828
    Likes Received:
    672
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    re: Jailed Shell/Disabled Shell prevents Email Piping

    Feel free to let us know if the issue persists and we can investigate further. Note that cPanel version 11.42.1.1 did address a similar issue:

    Fixed case 83797: Deliver all local mail outside the jail when inside the jail.

    Thanks.
     
  5. BlueSteam

    BlueSteam Well-Known Member

    Joined:
    Feb 21, 2013
    Messages:
    53
    Likes Received:
    2
    Trophy Points:
    8
    cPanel Access Level:
    Reseller Owner
    Hi,

    If I enable Jail Shell or disable shell altogether for a specific account, their email piping breaks completely. The mail is received in the inbox but the pipe program doesn't work at all.

    If I enable Normal shell for the user, then the Email Piping works again.

    The specific account I am trying to get working with jail shell is a reseller account.

    EDIT: I forgot to mention my server versions:
    CENTOS 6.6 x86_64 – ssdsvr01 WHM 11.46.2 (build 0)

    Please can someone assist me in figuring this one out?

    Thanks
    BlueSteam
     
    egillette likes this.
  6. dan_haworth

    dan_haworth Registered

    Joined:
    Jan 20, 2015
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    I too have been seeing this issue this morning since the upgrade to WHM 11.46.2 (build 2). All piped email if failing with the following error in exim_mainlog:

    R=virtual_aliases_nostar T=jailed_virtual_address_pipe: Child process of jailed_virtual_address_pipe transport returned 1 from command: /usr/local/cpanel/bin/jailexec

    Enabling normal shell for the account in question does work around the issue for now (thanks for the tip BlueSteam! - saved me some headaches..)

    Hope that helps,

    --dan

    - - - Updated - - -

    Just thought I would add, email piping on jailed shell accounts has been working flawlessly for months until last nights update to build 2, everything since has failed.
     
  7. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,471
    Likes Received:
    199
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Please feel free to open a ticket directly to cPanel Technical Support about this if you like.
     
  8. dan_haworth

    dan_haworth Registered

    Joined:
    Jan 20, 2015
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Since I'm not directly responsible for these cPanel boxen (or have a support login) I've advised the powers that be of the issue and that they should log a ticket.

    Now I have to get back to solving other network related problems.. It's just being one of those days!! ^.^

    Cheers!

    --dan
     
  9. okeith

    okeith Member
    PartnerNOC

    Joined:
    Jan 5, 2005
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    re: Jailed Shell/Disabled Shell prevents Email Piping

    This problem seems to have resurfaced today, scritps that were working yesterday now do not.

    We're using version 11.46.2 (build 2) and getting: "Child process of jailed_virtual_address_pipe transport returned 1 from command: /usr/local/cpanel/bin/jailexec".

    Would you advise enabling normal shell access until the issue is corrected?
     
  10. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,471
    Likes Received:
    199
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Merged two threads with similar issue here.
     
  11. okeith

    okeith Member
    PartnerNOC

    Joined:
    Jan 5, 2005
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    Thanks for merging, sorry for resurrecting tickets unnecessarily...

    Here's hoping there's something in the pipeline because the "enable normal shell" workaround is less than preferable for obvious reasons.
     
  12. JamieD

    JamieD Well-Known Member

    Joined:
    Sep 3, 2003
    Messages:
    58
    Likes Received:
    0
    Trophy Points:
    6
    I'm having this same issue also, email piping stopped working today. Switching to normal shell allowed the piping to start working again.
     
  13. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,828
    Likes Received:
    672
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    Internal case number 156285 is open to address an issue where updating to cPanel version 11.46.2.2 results in the following error when calling the jailed_virtual_address_pipe transport:

    Code:
    jailed_virtual_address_pipe: Child process of jailed_virtual_address_pipe transport returned 1 from command: /usr/local/cpanel/bin/jailexec
    There's currently no specific time frame available on the publication of a resolution, but I'd expect a quick turnaround time due to the nature of this bug. Feel free to monitor our change log for the inclusion of the case number:

    11.46 Change Log

    Thank you.
     
  14. Saurabh Singla

    Saurabh Singla Registered

    Joined:
    Jan 20, 2015
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Jalandhar, India, India
    cPanel Access Level:
    Root Administrator
    I was able to fix this issue by making the following changes:

    In your exim configuration file that is /etc/exim.conf comment the following code with # as mentioned:

    ========
    jailed_virtual_address_pipe:
    driver = pipe
    #force_command
    #command = /usr/local/cpanel/bin/jailexec $address_pipe
    #user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
    #group = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
    return_output
    =============
     
  15. egillette

    egillette Well-Known Member

    Joined:
    Jan 5, 2010
    Messages:
    68
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Orlando, FL
    cPanel Access Level:
    DataCenter Provider
    Just adding to this thread -- same issue here -- started today around 8AM.

    Switching to normal shell did resolve the issue for now.
     
  16. jandafields

    jandafields Well-Known Member

    Joined:
    May 6, 2004
    Messages:
    426
    Likes Received:
    2
    Trophy Points:
    18
    Location:
    USA
    cPanel Access Level:
    Root Administrator
    Same here ... this is a significant problem, not that it is hard to workaround, but it affects a lot of people without warning and without an obvious fix other than this thread in the forum.
     
  17. schoeps

    schoeps Well-Known Member

    Joined:
    Sep 22, 2004
    Messages:
    51
    Likes Received:
    0
    Trophy Points:
    6
    So glad I found this thread, we were pulling our hair out!
     
  18. Jcats

    Jcats Well-Known Member

    Joined:
    May 25, 2011
    Messages:
    275
    Likes Received:
    31
    Trophy Points:
    28
    Location:
    New Jersey
    cPanel Access Level:
    DataCenter Provider
  19. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,828
    Likes Received:
    672
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    New builds have been published to address internal case 156285. You can manually update cPanel via "/scripts/upcp" if you prefer to update right away.

    Thank you.
     
  20. BlueSteam

    BlueSteam Well-Known Member

    Joined:
    Feb 21, 2013
    Messages:
    53
    Likes Received:
    2
    Trophy Points:
    8
    cPanel Access Level:
    Reseller Owner
    After running /scripts/upcp and retesting this bug, it still fails. This has not been resolved.
     
Loading...

Share This Page