[BlueOnyx:06453] Re: Fwd: Email user/alias problem

[Steve Howes]

On 2 Feb 2011, at 14:33, Jeffrey Pellin wrote:
> Steve et al
> 
> I have looked further back in the log and have found this:
> 
> Feb  1 13:30:12 www cced(smd)[11768]: client 0:[0:11759]: CREATE 
> fail_users blocking = 0 failcnt = 2 username = zhaomin 
> Feb  1 13:30:12 www cced(smd)[11768]: LOCKDEBUG: Locked file (null):
> Success
> <snip>
> 
> It looks like some kind person is trying to add new users for me to save me
> the trouble. I am very puzzled about how this is possible.

It's crating 'fail_users' which are records of failed authentication attempts (you probably have some kind of brute force detection package installed). Don't think this is anything to worry about. In heavy load situations (brute force) this locking is not that unexpected.

> Here is an extract from the log created when I tried to add a new user
> yesterday. I had just suspended a site and it starts from there. I can see
> that the cleanup failed, but I had the problem prior to this.
> 
> Feb  2 13:17:30 www cced(smd)[24151]: client
> 9:handlers/base/vsite/suspend.pl: SET succeeded
> Feb  2 13:17:31 www cced(smd)[24151]: handler
> handlers/nuonce/fixhosts/fixhosts failed
> Feb  2 13:17:31 www cced(smd)[24151]: WARNING, WARNING, WARNING!!! Cleanup
> stage FAILED

It looks fairly hard for that script to fail.. What happens if you run /usr/sausalito/handlers/nuonce/fixhosts/fixhosts manually?

S