Solr - Another app is currently holding the xtables lock

sozotech

Well-Known Member
Jul 26, 2013
107
5
68
cPanel Access Level
Root Administrator
An update to address this case was published to the cpanel-plugins YUM repo. Ensure to run the "yum update" command on systems without automatic package updates enabled to update the cpanel-dovecot-solr RPM. Once the update completes, you can see the fix in the RPM change log for the package when running the "rpm -q --changelog cpanel-dovecot-solr" command:

Code:
rpm -q --changelog cpanel-dovecot-solr
* Thu Apr 27 2017 Felipe Gasper <[email protected]> 6.4.0-5.cp1162
- Don’t start the service on RPM upgrade if the service is disabled.
Thank you.
I see this rpm update has been applied on our system(s) but we still continue to see solr failing to start.

Code:
May 02 09:17:42 XXXXXX cpanel_dovecot_solr_firewall[393489]: Another app is currently holding the xtables lock; waiting (3s) for it to exit...
May 02 09:17:42 XXXXXX  cpanel_dovecot_solr_firewall[393489]: Another app is currently holding the xtables lock; waiting (5s) for it to exit...
May 02 09:17:42 XXXXXX  cpanel_dovecot_solr_firewall[393489]: Another app is currently holding the xtables lock; waiting (7s) for it to exit...
May 02 09:17:42 XXXXXX  cpanel_dovecot_solr_firewall[393489]: Another app is currently holding the xtables lock; waiting (9s) for it to exit...
May 02 09:17:42 XXXXXX  cpanel_dovecot_solr_firewall[393489]: Another app is currently holding the xtables lock. Stopped waiting after 10s.
May 02 09:17:42 XXXXXX cpanel_dovecot_solr_firewall[393489]: : The subprocess reported error number 4 when it ended. at /usr/local/cpanel/Cpanel/IpTables.pm line 291.
May 02 09:17:42 XXXXXX  systemd[1]: cpanel-dovecot-solr.service: control process exited, code=exited status=4
May 02 09:17:42 XXXXXX  systemd[1]: Failed to start Solr for cPanel Dovecot.
May 02 09:17:42 XXXXXX  systemd[1]: Unit cpanel-dovecot-solr.service entered failed state.
May 02 09:17:42 XXXXXX  systemd[1]: cpanel-dovecot-solr.service failed.
Do we need to do something after this update to fix the issue?

Best regards,
Eric
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,229
463
Hello Eric,

I moved this post to a new thread as it's unrelated to the cases discussed on the previous thread.

May 02 09:17:42 XXXXXX cpanel_dovecot_solr_firewall[393489]: Another app is currently holding the xtables lock. Stopped waiting after 10s.
The error message suggests another application is modifying your iptables firewall rules, which is preventing the cpanel_dovecot_solr_firewall script from completing.

Is this system running a firewall management utility such as CSF? If so, try restarting the CSF service to see if that allows cpanel_dovecot_solr to successfully start.

Thank you.