Hello All,
I'm trying to configure the scannedonly module with ClamAV on OpenSuSE
11.3 but it's failing to connect to the clamav socket and I can't
figure out why. Clamd is running and the socket is has 666
permissions. I've increase "log level = 5", tried stracing the
processes but nothing.
Any thoughts on what to try next?
OpenSuSE 11.3
samba-3.5.4
clamav-0.97
[share]
path = /srv/samba/share
read only = No
browseable = No
directory mask = 0775
create mask = 0644
oplocks = False
# Virus scanning
vfs objects = scannedonly
scannedonly:domain_socket = True
scannedonly:socketname = /var/lib/clamav/clamd-socket
scannedonly:hide_nonscanned_files = True
ls -l /var/lib/clamav/clamd-socket
srw-rw-rw- 1 vscan vscan 0 May 19 12:29 /var/lib/clamav/clamd-socket
[2011/05/19 12:46:32.541300, 2]
modules/vfs_scannedonly.c:207(connect_to_scanner)
failed to connect to socket /var/lib/clamav/clamd-socket
Initialising custom vfs hooks from [scannedonly]
vfs module [scannedonly] not loaded - trying to load...
Module '/usr/lib64/samba/vfs/scannedonly.so' loaded
Successfully added vfs backend 'scannedonly'
Successfully loaded vfs module [scannedonly] with the new modules system
[2011/05/19 12:46:32.822708, 2]
modules/vfs_scannedonly.c:207(connect_to_scanner)
failed to connect to socket /var/lib/clamav/clamd-socket
[2011/05/19 12:46:33.980909, 3] modules/vfs_scannedonly.c:264(flush_sendbuffer)
scannedonly flush_sendbuffer: error sending on socket 34 to scanner:
Transport endpoint is not connected (107)
[2011/05/19 12:46:33.980953, 2]
modules/vfs_scannedonly.c:207(connect_to_scanner)
failed to connect to socket /var/lib/clamav/clamd-socket
[2011/05/19 12:46:33.980965, 2] modules/vfs_scannedonly.c:302(flush_sendbuffer)
scannedonly flush_sendbuffer: failed to send files to AV scanner,
discarding files.smbd_dirptr_get_entry mask=[*] found
dperusich/test.txt is being scanned for viruses fname=test.txt is
being scanned for viruses (test.txt is being scanned for viruses)
smbd_dirptr_get_entry mask=[*] found dperusich/eicar.com is being
scanned for viruses fname=eicar.com is being scanned for viruses
(eicar.com is being scanned for viruses)
[2011/05/19 12:46:33.993187, 3] modules/vfs_scannedonly.c:264(flush_sendbuffer)
scannedonly flush_sendbuffer: error sending on socket 37 to scanner:
Transport endpoint is not connected (107)
[2011/05/19 12:46:33.993216, 2]
modules/vfs_scannedonly.c:207(connect_to_scanner)
failed to connect to socket /var/lib/clamav/clamd-socket
[2011/05/19 12:46:33.993228, 2] modules/vfs_scannedonly.c:302(flush_sendbuffer)
scannedonly flush_sendbuffer: failed to send files to AV scanner,
discarding files.Transaction 173 of length 188 (0 toread)
--
Later,
Darin