RE: samba-vscan with clamav on AIX

<Lamar.Saxon-3osVxHMge1hy/[email protected]> Tue, 24 May 2005 09:35:51 -0500
Newsgroups gmane.comp.security.virus.openantivirus.general
Message-ID <5C066E580F0244458087CC59AC4F74E31ED148@srvexcharl02.acf.americredit.com>
I think you might be accurate in the VFS support under AIX.=0D

Some modules seem to work and others seem to return the same errors as
below.  I am working on the Samba 3.0.14a patch ( to  suffix the a ).
Once I get that corrected I will test the modules again once I recompile
vscan-samba.

Thanks for the quick response !  Once I get it all corrected, I would
like to be a tester if you require one on AIX 5L ( 5.2 and 5.3 ).

Lamar=0D

-----Original Message-----
From: Rainer Link [mailto:[email protected]] On Behalf Of Rainer Link
Sent: Saturday, May 21, 2005 4:46 PM
To: Saxon, Lamar
Cc: openantivirus-discuss-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
Subject: Re: [Openantivirus-discuss]samba-vscan with clamav on AIX

On Fri, May 20, 2005 at 09:44:31AM -0500, Lamar.Saxon-3osVxHMge1hy/[email protected]
wrote:
> vscan-clamav: config-file =3D /usr/local/samba/etc/vscan-clamav.conf
> vfs object =3D vscan-clamav

Looks correct.

> [2005/05/19 17:20:23, 0] smbd/server.c:open_sockets_smbd(388)
> open_sockets_smbd: accept: Software caused connection abort
> [2005/05/20 08:16:48, 0] smbd/server.c:open_sockets_smbd(388)
> open_sockets_smbd: accept: Software caused connection abort
> [2005/05/20 08:52:13, 0] smbd/server.c:open_sockets_smbd(388)
> open_sockets_smbd: accept: Software caused connection abort
>=0D
> Workstation log -
>=0D
> [2005/05/20 08:55:49, 1] smbd/service.c:make_connection_snum(642)
> PANIC: internal error
> [2005/05/20 08:55:26, 0] lib/util.c:smb_panic2(1495)
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> [2005/05/20 08:55:26, 0] lib/fault.c:fault_report(39)
> Please read the appendix Bugs of the Samba HOWTO collection
> INTERNAL ERROR: Signal 11 in pid 25124 (3.0.14a)
> [2005/05/20 08:55:26, 0] lib/fault.c:fault_report(37)
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> [2005/05/20 08:55:26, 0] lib/fault.c:fault_report(36)
> PANIC: internal error
> [2005/05/20 08:55:26, 0] lib/util.c:smb_panic2(1495)
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D


Hm, strange. Did you try a module as shipped within Samba 3? For
example, the vfs_audit module? Does this work?

Thanks

cheers, Rainer


Privileged and Confidential.  This e-mail, and any attachments there to, is=
 intended only for use by the addressee(s) named herein and may contain=
 privileged or confidential information.  If you have received this e-mail=
 in error, please notify me immediately by a return e-mail and delete this=
 e-mail.  You are hereby notified that any dissemination, distribution or=
 copying of this e-mail and/or any attachments thereto, is strictly=
 prohibited.


-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005