Debian Bug report logs - #462739
postfix: syslog reconnection

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: juan <bugs@niluje.net>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: postfix: syslog reconnection

Date: Fri, 03 Jun 2005 15:10:11 +0200

Package: postfix
Version: 2.1.5-9
Severity: important

If you happend to stop and restart syslog some postfix daemon do not reconnect to syslog and critical information can be lost.
cleanup,qmgr are concerned. smtpd,smtp,virtual seem to be ok.

FIX: if syslog has to be restarted for any reason (logroate ?), postfix should be restarted too.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.4.30-vs1.2.10
Locale: LANG=C, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)

Versions of packages postfix depends on:
ii  adduser                     3.63         Add and remove users and groups
ii  debconf [debconf-2.0]       1.4.30.13    Debian configuration management sy
ii  dpkg                        1.10.27      Package maintenance system for Deb
ii  libc6                       2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  libdb4.2                    4.2.52-18    Berkeley v4.2 Database Libraries [
ii  libgdbm3                    1.8.3-2      GNU dbm database routines (runtime
ii  netbase                     4.21         Basic TCP/IP networking system

-- debconf information excluded

Message #10 received at 311812@bugs.debian.org (full text, mbox, reply):

From: Martin Zobel-Helas <zobel@ftbfs.de>

To: 311812@bugs.debian.org

Subject: Re: postfix: syslog reconnection

Date: Thu, 17 Jan 2008 17:01:15 +0100

[Message part 1 (text/plain, inline)]

Hi, 

On Fri, Jun 03, 2005 at 03:10:11PM CEST, juan <bugs@niluje.net> wrote:

> If you happend to stop and restart syslog some postfix daemon do not
> reconnect to syslog and critical information can be lost.
> cleanup,qmgr are concerned. smtpd,smtp,virtual seem to be ok.

Why does that happen? Does postfix not communicate via /dev/log?

> FIX: if syslog has to be restarted for any reason (logroate ?),
> postfix should be restarted too.

Bah, that is an ugly workaround. I wish the underlying problem would be
fixed and not workarounded. 

Greetings
Martin
-- 
 Martin Zobel-Helas <zobel@debian.org> |  Debian Release Team Member
 Debian & GNU/Linux Developer          |           Debian Listmaster
 Public key at http://zobel.ftbfs.de/5d64f870.asc - KeyID: 5D64 F870
 GPG Fingerprint:  5DB3 1301 375A A50F 07E7 302F 493E FB8E 5D64 F870

[signature.asc (application/pgp-signature, inline)]

Message #15 received at 311812@bugs.debian.org (full text, mbox, reply):

From: Martin Zobel-Helas <zobel@ftbfs.de>

To: 311812@bugs.debian.org

Subject: Re: postfix: syslog reconnection

Date: Thu, 17 Jan 2008 17:06:29 +0100

Hi Lamot,

you might want to have a look on 
http://archives.neohapsis.com/archives/postfix/2008-01/0821.html

Greetings
Martin

Message #20 received at 311812@bugs.debian.org (full text, mbox, reply):

From: Alexander Wirt <formorer@debian.org>

To: 311812@bugs.debian.org

Cc: control@bugs.debian.org

Subject: postfix: syslog reconnection - please provide syslogd socket in jail

Date: Thu, 17 Jan 2008 16:17:12 +0000

severity 311812 grave
thanks

Hi, 

today I have been hit by this bug, which made logs from 3 days mostly
useless. Asking on postfix-users about it gave me the following answer:

	Complain to your maintainer.

	The bug is that YOUR DISTRIBUTION uses Postfix chroot with an
	incomplete chroot jail. In particular, the jail lacks a syslogd
	socket that the queue manager can connect to after the syslogd
	process is restarted. 

Which is what I'm doing here. It would be nice if you could add a fix also for etch r3 oder r4. 

Thanks 

Alex

Message #27 received at 311812@bugs.debian.org (full text, mbox, reply):

From: LaMont Jones <lamont@debian.org>

To: Alexander Wirt <formorer@debian.org>, 311812@bugs.debian.org

Cc: control@bugs.debian.org

Subject: Re: Bug#311812: postfix: syslog reconnection - please provide syslogd socket in jail

Date: Thu, 17 Jan 2008 09:33:55 -0700

severity 311812 important
--

On Thu, Jan 17, 2008 at 04:17:12PM +0000, Alexander Wirt wrote:
> severity 311812 grave

It's only grave if the bug is against syslogd.  Syslogd doesn't provide
a method for postfix to change the config file, and therefore it would
be a policy violation for postfix to edit syslog's config file so that
it sees things when it restarts.

Once there's a way for postfix to hook up to syslogd in a
policy-conformant manner, we can fix this bug.

lamont

Message #34 received at 311812@bugs.debian.org (full text, mbox, reply):

From: Bernd Zeimetz <bernd@bzed.de>

To: 311812@bugs.debian.org, control@bugs.debian.org

Subject: Re: Bug#311812: postfix: syslog reconnection - please provide, syslogd socket in jail

Date: Sun, 27 Jan 2008 00:01:57 +0100

severity 311812 grave
#rationale: data loss
tags 311812 + etch lenny sid
thanks

This bug introduce a serious risk of loosing important log data, which
is - especially for a MTA - not acceptable. Asking people to restart
postfix after reloading syslog is a *stupid* workaround, which also
results in the loss of log entries (during the time when syslog is
restarted but postfix not yet). The only working, but not less ugly,
workaround is to stop postfix first, then reload/restart syslog, and
start postfix again.

It seems you're just doing nothing to fix this bug, this behavior is a
shame as you're ruining the image of postfix as the best MTA we have in
Debian. If you really think the bug should be fixed in sysklogd -
where's the open grave bug in sysklogd, syslog-ng and other syslog
daemons which block *this* bug?

There're a few ways to get a syslog socket into the chroot, like
- using syslog-ng: my suggested way, but depending on a syslog daemon is
not nice.
- using bind mounts: not available on older kernels, also a bind mount
needs to be recreated after re{loading,starting} the syslog daemon

None of the ways is an optimal way for the common user, so my suggestion
is to write a little daemon which does nothing but providing a syslog
socket in the chroot and relying messages to the real syslog daemon,
like a proxy for sockets. Due to the flexibility of postfix's master.cf
the daemon could just be deactivated if a user prefers to have a real
syslog daemon dropping it's socket in there.


Best regards,

-- 
Bernd Zeimetz
<bernd@bzed.de>                         <http://bzed.de/>

Message #55 received at 462739@bugs.debian.org (full text, mbox, reply):

From: Guillem Jover <guillem@debian.org>

To: control@bugs.debian.org

Cc: 370349@bugs.debian.org, 424419@bugs.debian.org, 462739@bugs.debian.org

Subject: setting package to inetutils-tools inetutils-telnet inetutils-syslogd inetutils-talkd inetutils-talk inetutils-ftpd inetutils-telnetd inetutils-ftp inetutils-inetd inetutils-ping inetutils ...

Date: Thu, 03 Apr 2008 08:12:22 +0300

# Automatically generated email from bts, devscripts version 2.10.20
#
# inetutils (2:1.5.dfsg.1-5) UNRELEASED; urgency=low
#
#  * Fix FTBFS if built twice in a row: (Closes: #424419)
#    - Call distclean instead of clean.
#    - Move the unpatch step from the clean dependency to the body, after
#      the distclean call.
#    - Remove all files that autoreconf might have modified.
#  * Add support for syslogd configuration files under /etc/syslog.d/.
#    (Closes: #370349, #462739)
#    - debian/patches/51_add_load_confdir_support.patch: New file
#    - debian/patches/50_split_load_conffile.patch: Likewise.
#

package inetutils-tools inetutils-telnet inetutils-syslogd inetutils-talkd inetutils-talk inetutils-ftpd inetutils-telnetd inetutils-ftp inetutils-inetd inetutils-ping inetutils
tags 370349 + pending
tags 424419 + pending
tags 462739 + pending

Message #64 received at 462739-close@bugs.debian.org (full text, mbox, reply):

From: Guillem Jover <guillem@debian.org>

To: 462739-close@bugs.debian.org

Subject: Bug#462739: fixed in inetutils 2:1.5.dfsg.1-5

Date: Fri, 11 Apr 2008 05:47:05 +0000

Source: inetutils
Source-Version: 2:1.5.dfsg.1-5

We believe that the bug you reported is fixed in the latest version of
inetutils, which is due to be installed in the Debian FTP archive:

inetutils-ftp_1.5.dfsg.1-5_i386.deb
  to pool/main/i/inetutils/inetutils-ftp_1.5.dfsg.1-5_i386.deb
inetutils-ftpd_1.5.dfsg.1-5_i386.deb
  to pool/main/i/inetutils/inetutils-ftpd_1.5.dfsg.1-5_i386.deb
inetutils-inetd_1.5.dfsg.1-5_i386.deb
  to pool/main/i/inetutils/inetutils-inetd_1.5.dfsg.1-5_i386.deb
inetutils-ping_1.5.dfsg.1-5_i386.deb
  to pool/main/i/inetutils/inetutils-ping_1.5.dfsg.1-5_i386.deb
inetutils-syslogd_1.5.dfsg.1-5_i386.deb
  to pool/main/i/inetutils/inetutils-syslogd_1.5.dfsg.1-5_i386.deb
inetutils-talk_1.5.dfsg.1-5_i386.deb
  to pool/main/i/inetutils/inetutils-talk_1.5.dfsg.1-5_i386.deb
inetutils-talkd_1.5.dfsg.1-5_i386.deb
  to pool/main/i/inetutils/inetutils-talkd_1.5.dfsg.1-5_i386.deb
inetutils-telnet_1.5.dfsg.1-5_i386.deb
  to pool/main/i/inetutils/inetutils-telnet_1.5.dfsg.1-5_i386.deb
inetutils-telnetd_1.5.dfsg.1-5_i386.deb
  to pool/main/i/inetutils/inetutils-telnetd_1.5.dfsg.1-5_i386.deb
inetutils-tools_1.5.dfsg.1-5_i386.deb
  to pool/main/i/inetutils/inetutils-tools_1.5.dfsg.1-5_i386.deb
inetutils_1.5.dfsg.1-5.diff.gz
  to pool/main/i/inetutils/inetutils_1.5.dfsg.1-5.diff.gz
inetutils_1.5.dfsg.1-5.dsc
  to pool/main/i/inetutils/inetutils_1.5.dfsg.1-5.dsc



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 462739@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Guillem Jover <guillem@debian.org> (supplier of updated inetutils package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Fri, 11 Apr 2008 08:20:23 +0300
Source: inetutils
Binary: inetutils-ftp inetutils-ftpd inetutils-inetd inetutils-ping inetutils-syslogd inetutils-talk inetutils-talkd inetutils-telnet inetutils-telnetd inetutils-tools
Architecture: source i386
Version: 2:1.5.dfsg.1-5
Distribution: unstable
Urgency: low
Maintainer: Guillem Jover <guillem@debian.org>
Changed-By: Guillem Jover <guillem@debian.org>
Description: 
 inetutils-ftp - File Transfer Protocol client
 inetutils-ftpd - File Transfer Protocol server
 inetutils-inetd - Internet super server
 inetutils-ping - ICMP ECHO tool
 inetutils-syslogd - System logging daemon
 inetutils-talk - Talk to another user
 inetutils-talkd - Remote user communication server
 inetutils-telnet - Telnet client
 inetutils-telnetd - Telnet server
 inetutils-tools - Base networking utilities (experimental package)
Closes: 370349 418539 423944 424419 435049 462739
Changes: 
 inetutils (2:1.5.dfsg.1-5) unstable; urgency=low
 .
   * Remove Tag fields, those are better maintained outside the package,
     as a side effect there's not typo to fix anymore. (Closes: #418539)
   * Now using Standards-Version 3.7.3 (no changes needed).
   * Call configure with autotools-dev recommended --build and --host options.
   * Add Vcs-Browser and Vcs-Svn fields.
   * Add Homepage field.
   * Fix parallel FTBFS in debian/rules by moving 'patch' dependency from
     the build to a new setup-source target thar serializes configureation.
   * Do not ignore make errors on clean or install in debian/rules.
   * Switch Build-Depends from automake1.9 to automake.
   * Do not install a duplicated syslogd under /etc/default/, just
     inetutils-syslogd. Take care of removing the obsolete conffile if not
     modified, and move it to the new name otherwise. (Closes: #435049)
   * Do not start inetd if there's no services enabled (stolen from
     openbsd-inetd).
   * Complete copyright information in debian/copyright file.
   * Remove packaging svn information from debian/copyright.
   * Fix FTBFS if built twice in a row: (Closes: #424419)
     - Call distclean instead of clean.
     - Move the unpatch step from the clean dependency to the body, after
       the distclean call.
     - Remove all files that autoreconf might have modified.
   * Add dependency on 'inetutils-inetd | inet-superserver' to inetutils-talkd
     and inetutils-telnetd as they use update-inetd.
   * Add support for syslogd configuration files under /etc/syslog.d/.
     (Closes: #370349, #462739)
     - debian/patches/51_add_load_confdir_support.patch: New file
     - debian/patches/50_split_load_conffile.patch: Likewise.
   * Fix a race condition when setting the SIGALRM signal in syslogd parent
     when starting the daemon, causing it to exit with a non-zero status.
     - debian/patches/52_sigalarm.patch: New file.
   * Delay initialization of Shishi until telnet knows Kerberos is needed.
     Reducing the output when creating the directory has been fixed in
     shishi itself. (Closes: #423944)
     - debian/patches/05_shishi_delayed_init.patch: New file.
     Thanks to Simon Josefsson <simon@josefsson.org>.
Files: 
 0af205a697091599b0bffdc0b4638d36 1170 net extra inetutils_1.5.dfsg.1-5.dsc
 cbe56f1f9ce8fefe073bf5de0a2de5d0 29205 net extra inetutils_1.5.dfsg.1-5.diff.gz
 eae432b10203cde39924640fb82a8b71 101114 net extra inetutils-ftp_1.5.dfsg.1-5_i386.deb
 57cc8812e2a1b2d9e90b4d85c1a80a6e 92902 net extra inetutils-ftpd_1.5.dfsg.1-5_i386.deb
 8628987a48485edaeb6f8c58ae44bb04 80614 net extra inetutils-inetd_1.5.dfsg.1-5_i386.deb
 8b70e223cbccdec05e93de1f112dd988 82826 net extra inetutils-ping_1.5.dfsg.1-5_i386.deb
 7bf891752d334cacf7b8abbd2fe0b016 86410 net extra inetutils-syslogd_1.5.dfsg.1-5_i386.deb
 28d568bb6f7a5260bf3dee8ad7dcf1ca 71670 net extra inetutils-talk_1.5.dfsg.1-5_i386.deb
 7db9574c5d50b9755341fa6ae13595b8 73702 net extra inetutils-talkd_1.5.dfsg.1-5_i386.deb
 c515442d8aa41638cb5595d1968c7123 117154 net extra inetutils-telnet_1.5.dfsg.1-5_i386.deb
 78a32af4c99829b95f91f36e84915dd2 102802 net extra inetutils-telnetd_1.5.dfsg.1-5_i386.deb
 50d4ca5107e810d87303d1ee7a025898 74744 net extra inetutils-tools_1.5.dfsg.1-5_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFH/vcnuW9ciZ2SjJsRAn+EAJ9FozQvUyAmZZ2tX2+MO4LdCsLf4wCg4bvB
72riCzfORIEBOwVeUJQYz2I=
=FyWx
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.