-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --On August 18, 2007 7:52:50 AM -0400 Jon Spinney <[EMAIL PROTECTED]> wrote:
| Peter
|
| Update on my end. I did essentially the same thing. Rebuilt my machine.
| Unfortunately, I am getting a similar error but different. Instead of File
| missing, it is telling me 'Permission denied'. I checked permissions on
| nfsen.comm and it is what everyone else is telling me is should be.
| srw-rw----
| The problem is that even as root, I can not open and view the file. It
| tells me bad device or address. If I'm correctly following your train of
| thought through the various php files, I believe nfsen.comm is where I'm
| running into issues, but I'm not sure what is does, what it refers to, etc.
| If you can give me any insight, I'd appreciate it.
'Permission denied' is most likely a SElinux issue! check the Security
setting for httpd. Maybe for testing switch the SElinux level from enforcing
to permissive.
- Peter
|
| Jon.
|
| On 8/18/07, Peter Haag <[EMAIL PROTECTED]> wrote:
| >
| > -----BEGIN PGP SIGNED MESSAGE-----
| > Hash: SHA1
| >
| > Jon,
| > I installed a Fedora 6 to see if I can reproduce your error.
| > Unfortunately I was not able to do so. nfsen1.3b installs cleanly on FC6.
| >
| > I wiped everything and installed nfsen-1.2.4. Then I upgraded nfsen-1.2.4to
| > nfsen-1.3b. The upgrade itself was smooth without troubles. However, it
| > seems
| > as the file $BINDIR/nfsen.rc is not upgraded properly. This legacy
| > nfsen.rc
| > file must be removed. It's no longer needed anyway. Instead of, create a
| > sym.
| > link nfsen -> nfsen.rc if you rely on rc files for some startup reason.
| > I'll
| > fix that in next 1.3b coming next week.
| >
| > The access to the web page works without any connection problem. The
| > socket is
| > found. Make sure your SElinux policy for the web server is set properly.
| > Check the messages syslog file for any blocked attempts to access a
| > socket.
| > If you had nfsen-1.2.4 working, then 1.3b does work too.
| >
| > So please check you web server environment for any configuration settings.
| >
| > nb. The 'file missing' messages below in the syslog output can be ignored.
| > They will disappear when setting an expire value for this profile.
| >
| > - Peter
| >
| >
| > - --On August 16, 2007 8:13:08 PM -0400 Jon Spinney <
| > [EMAIL PROTECTED]> wrote:
| >
| > | Alright, I believe I have some information from the syslog that I don't
| > | totally understand, but might be helpful to you. Here is a snapshot of
| > the
| > | syslog file which seems to repeat itself every couple of minutes
| > |
| > | --- Start of log file ---
| > | Aug 16 19:37:53 bumblebee nfsen[2950]: Startup. Version: 1.3b-20070720$Id:
| > | nfsend 18 2007-07-20 12:33:25Z phaag $
| > | Aug 16 19:37:53 bumblebee nfsen[2952]: Comm server started: [2952]
| > | Aug 16 19:37:53 bumblebee nfsen[2951]: nfsend: [2951]
| > | Aug 16 19:37:54 bumblebee nfsen[2951]: Run periodic at Thu Aug 16
| > 19:35:00
| > | 2007
| > | Aug 16 19:37:54 bumblebee nfsen[2951]: Prepare profiling './live'
| > | Aug 16 19:37:54 bumblebee nfsen[2951]: 0 channels/alerts to profile
| > | Aug 16 19:37:54 bumblebee nfsen[2951]: No continous profiles - nothing
| > to
| > | profile
| > | Aug 16 19:37:54 bumblebee nfsen[2951]: Update profile live in group .
| > | Aug 16 19:37:54 bumblebee nfsen[2951]: Channel info file missing for
| > channel
| > | 'Building23' in './live'
| > | ~ for size sake removed several lines similar to the previous line ~
| > | Aug 16 19:37:54 bumblebee nfsen[2951]: Channel info file missing for
| > channel
| > | 'CoreRouter' in './live'
| > | Aug 16 19:37:54 bumblebee nfsen[2951]: Set new profile size: 0
| > | Aug 16 19:37:56 bumblebee nfsen[2951]: Add .:live:200708161930 for
| > plugin
| > | processing
| > | Aug 16 19:38:01 bumblebee nfsen[2951]: Run plugins for 200708161930
| > | Aug 16 19:38:01 bumblebee nfsen[2952]: connection on UNIX socket
| > | Aug 16 19:38:01 bumblebee nfsen[2952]: comm server started: 2976
| > | Aug 16 19:38:01 bumblebee nfsen[2976]: Cmd Decode: run-plugins
| > | Aug 16 19:38:01 bumblebee nfsen[2976]: Plugin Cycle: ., live,
| > 200708161930
| > | Aug 16 19:38:01 bumblebee nfsen[2976]: Cmd Decode: quit
| > | Aug 16 19:38:01 bumblebee nfsen[2952]: comm child[2976] terminated with
| > no
| > | exit value
| > | Aug 16 19:38:01 bumblebee nfsen[2951]: Run plugins done.
| > | Aug 16 19:38:01 bumblebee nfsen[2951]: Check alerts for Thu Aug 16
| > 19:30:00
| > | 2007
| > | Aug 16 19:38:01 bumblebee nfsen[2951]: Check alerts done.
| > | Aug 16 19:38:01 bumblebee nfsen[2951]: Run expire at Thu Aug 16 19:35:00
| > | 2007
| > | Aug 16 19:38:01 bumblebee nfsen[2951]: End expire at Thu Aug 16 19:35:00
| > | 2007
| > | --- End of Log file ---
| >
| >
| >
| > - --
| > _______ SWITCH - The Swiss Education and Research Network ______
| > Peter Haag, Security Engineer, Member of SWITCH CERT
| > PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
| > SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
| > E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
| > -----BEGIN PGP SIGNATURE-----
| > Version: GnuPG v1.4.5 (Darwin)
| >
| > iQCVAwUBRsbOqP5AbZRALNr/AQL3FQP7BuGcQ5SvyAayFrFMbT0lYqx4P51lmmpo
| > ZNSZptP3AnKLCL6RKN7akNc5VFrZzGJaPqFORtsq4LGJhvVSNvFDPZGp76UEa7u8
| > xVAWmYEKJF5DJ0pHDYMCLl/akUpktUHI1Ao10fGqv6VuTmbHNwc9AhlpL0Gdw0UQ
| > QHlE3GOaQqo=
| > =LEc5
| > -----END PGP SIGNATURE-----
| >
| >
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
iQCVAwUBRsbiDf5AbZRALNr/AQIiIAQAjkOxxM2TEGOH5LD9l+siAGQ8Z7qGqUAU
7wJxRoiEVMtHZ/ib0S2LF1vuH52eZFFQGWNQxXjQYlQg6duBogElgagczC2/m5Hv
Q7UA/l7o1U7O5DsbIx5PVRtCC0vpd81kYceD5fDExJZLanR3ATaA+bICXJuAe5QH
1fEtyZIcQu4=
=mwX+
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
