<HTML>
<HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="OPENWEBMAIL" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
One common reason for a "Failed to create" error is either drive space or quotas - preventing the system from writing to the drive in that partition.
<br />
<br />Since I doubt there are any quotas limiting root's ability to create files, that's probably not it.
<br />
<br />But you might check /var to insure that partition isn't full. We've had that same thing happen before, when there were prolonged attacks against one of our servers, and the log files fill that partition.
<br />
<br />
<br />Chuck
<br />
<br /><font size="2">
<br />
<br /><b>---------- Original Message
-----------</b>
<br />
From: Gerald Waugh <gwaugh@frontstreetnetworks.com>
<br />
To: BlueOnyx General Mailing List <blueonyx@mail.blueonyx.it>
<br />
Sent: Wed, 24 Sep 2014 08:50:58 -0500
<br />
Subject: [BlueOnyx:16019] spamd: failed to create readable default_prefs:
/var/spool/mqueue/.spamassassin/user_prefs
<br />
<br />>
<tt>build 20140205 for a 5108R in en_US
<br />>
<br />>
Seeing this in maillog
<br />>
<br />>
Sep 23 06:58:01 mail spamd[13018]: spamd: got connection
over
/var/run/spamd.sock</tt><tt>
<br />>
</tt><tt> Sep 23 06:58:01 mail spamd[13018]: spamd: setuid
to
mailnull succeeded</tt><tt>
<br />>
</tt><tt> Sep 23 06:58:01 mail spamd[13018]: spamd:
creating
default_prefs: /var/spool/mqueue/.spamassassin/user_prefs</tt><tt>
<br />>
</tt><tt> Sep 23 06:58:01 mail spamd[13018]: spamd: failed to
create
readable default_prefs:
/var/spool/mqueue/.spamassassin/user_prefs</tt><tt>
<br />>
</tt><tt> Sep 23 06:58:02 mail spamd[13018]: spamd:
processing
message <a href="mailto:0.0.56.F70.1CFD7259F4EB78C.0@omp.e1.llbean.com" class="moz-txt-link-rfc2396E"><0.0.56.F70.1CFD7259F4EB78C.0@omp.e1.llbean.com></a>
for mailnull:47</tt><tt>
<br />>
</tt><tt> Sep 23 06:58:10 mail spamd[13018]:
auto-whitelist:
sql-based unable to connect to
database
(DBI:mysql:av-spam5:localhost:3306) : Access denied for
user
'avspam'@'localhost' (using password: YES)</tt><tt>
<br />>
</tt><tt> Sep 23 06:58:10 mail spamd[13018]: spamd: clean
message
(0.7/5.0) for mailnull:47 in 8.2 seconds, 48837 bytes.</tt><tt>
<br />>
</tt><tt> Sep 23 06:58:10 mail spamd[13018]: spamd: result: . 0
-
DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_IMAGE_RATIO_04,HTML_MESSAGE,SPF_PASS,URIBL_BLOCKED,URIBL_DBLscantime=8.2,size=48837,user=mailnull,uid=47,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamd.sock,mid=<a href="mailto:0.0.56.F70.1CFD7259F4EB78C.0@omp.e1.llbean.com" class="moz-txt-link-rfc2396E"><0.0.56.F70.1CFD7259F4EB78C.0@omp.e1.llbean.com></a>,autolearn=no</tt><tt>
<br />>
</tt><tt> Sep 23 06:58:10 mail sendmail[18925]:
s8NBw0UG018925:
Milter add: header: X-Spam-Status: No, score=0.7
required=5.0
tests=DKIM_SIGNED,DKIM_VALID,\n\tDKIM_VALID_AU,HTML_IMAGE_RATIO_04,HTML_MESSAGE,SPF_PASS,URIBL_BLOCKED,\n\tURIBL_DBL
autolearn=no version=3.3.2
<br />>
<br />>
there was no directory /var/spool/mqueue/.spamassassin
<br />>
So I created one
<br />>
[root@mail ~]# ls -la /var/spool/mqueue/
<br />>
total 924
<br />>
drwx------. 3 root mail 28672 Sep 23 18:14 .
<br />>
drwxr-xr-x. 14 root root 4096 Sep 26 2012
..
<br />>
-rw------- 1 root smmsp 368640 Jun 16 10:07
dfs5GF4oWW002789
<br />>
-rw------- 1 root smmsp 131072 Jun 16 14:53
dfs5GJrLBr021575
<br />>
-rw------- 1 root smmsp 3495 Jun 16 15:47
dfs5GKloXI032116
<br />>
-rw------- 1 root smmsp 22220 Jun 20 09:11
dfs5KEBHTA001003
<br />>
-rw------- 1 root smmsp 258048 Sep 18 09:45
dfs8IEiPM6023442
<br />>
-rw------- 1 root smmsp 1776 Sep 18 09:45
dfs8IEjQrS024160
<br />>
-rw------- 1 root smmsp 118784 Sep 22 07:45
dfs8MB2ZiC022454
<br />>
<b>drwxr-xr-x 2 root smmsp 4096 Sep 23 14:45
.spamassassin</b>
<br />>
<br />>
[root@mail ~]# ls -la /var/spool/mqueue/.spamassassin
<br />>
total 32
<br />>
drwxr-xr-x 2 root smmsp 4096 Sep 23 14:45 .
<br />>
drwx------. 3 root mail 28672 Sep 23 18:15 ..
<br />>
<br />>
Still getting the error above
<br />>
I think that is why I see these errors in
logwatch</tt>,<tt>
interspersed amongst normal virus messages from - to users</tt>
<br />>
<pre wrap=""> Failed to create temporary
file
Failed to initiate
streaming/fdpassing</pre>
<tt>
</tt>
<br />> <tt>-- </tt><tt>
<br />>
</tt><tt>Gerald</tt>
<br /><b>------- End of Original Message
-------</b>
<br />
</font>
</BODY>
</HTML>