Hi Wietse,

I am running OS X (10.6.2) but beyond that I don't know what security software 
might interfere as Apple hides a lot from the admin. However, as I stated in an 
earlier reply, TLS seems to be working without that parameter. The only thing 
that gives me pause, is that I get this warning in the log for incoming TLS 
connections:

postfix/tlsmgr[67966]: warning: no entropy source specified with parameter 
tls_random_source

I don't know if that is something I need to worry about or not.

On Dec 29, 2009, at 10:54 AM, Wietse Venema wrote:

> Dennis Putnam:
>> Hi Ralf,
>> 
>> Thanks for the reply
>> 
>> Here is the text of the sequence of errors:
>> 
>> Dec 29 08:26:41 xserveeml postfix/tlsmgr[64439]: fatal: poll: Unknown error: >> 0
>> Dec 29 08:26:42 xserveeml postfix/master[64050]: warning: process 
>> /usr/libexec/postfix/tlsmgr pid 64439 exit status 1
>> Dec 29 08:26:42 xserveeml postfix/master[64050]: warning: 
>> /usr/libexec/postfix/tlsmgr: bad command startup -- throttling
>> 
>> The only way I found which statement was doing it, was to comment/uncomment 
>> each TLS parameter one at a time reloading postfix.
> 
> Apparently, your system's poll() implementation returns -1 with
> errno==0 when applied to /dev/urandom.
> 
> Maybe you have "security" software turned on such as SeLinux,
> Apparmor, or other that interferes with legitimate system calls.
> I don't support such configurations.
> 
> Otherwise, consider upgrading to a less buggy kernel.
> 
>       Wietse



Dennis Putnam
Sr. IT Systems Administrator

AIM Systems, Inc.
11675 Rainwater Dr., Suite 200
Alpharetta, GA  30009
Phone: 678-240-4112
Main Phone: 678-297-0700
FAX: 678-297-2666 or 770-576-1000
The information contained in this e-mail and any attachments is strictly 
confidential. If you are not the intended recipient, any use, dissemination, 
distribution, or duplication of any part of this e-mail or any attachment is 
prohibited. If you are not the intended recipient, please notify the sender by 
return e-mail and delete all copies, including the attachments.



Reply via email to