headers
micah anderson | 21 Jun 2012 21:24

problem talking to server private/tlsmgr: Resource temporarily unavailable


I'm running a busy server that is periodically experiencing problems
with tlsmgr, at various times (typically once a day at minimum), the
following appears in the logs:

Jun 16 07:34:40 willet postfix/smtp[24449]: warning: connect to private/tlsmgr: Resource temporarily unavailable
Jun 16 07:34:40 willet postfix/smtp[24449]: warning: problem talking to server private/tlsmgr:
Resource temporarily unavailable

(repeated)

this sometimes results in mailer-daemon bounces to postmaster with the
SMTP protocol messages including "TLS unavailable due to local
problem". Typically mail is working fine, and TLS connections work
normally, with this happening every once and a while. 

This is using postfix version: 2.7.1-1+squeeze1, what follows is the
postconf -n output, as well as the master.cf:

# postconf -n
alias_database = hash:$maps_dir/aliases
alias_maps = hash:$maps_dir/aliases,mysql:$maps_dir/mysql_aliases.cf,pcre:$maps_dir/bounce.pcre
allow_percent_hack = no
biff = no
body_checks = pcre:$checks_dir/body_checks
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
data_directory = /var/lib/postfix
default_privs = mail
(Continue reading)

Permalink | Reply |
headers
Patrick Ben Koetter | 21 Jun 2012 21:32
Picon

Re: problem talking to server private/tlsmgr: Resource temporarily unavailable

* micah anderson <micah <at> riseup.net>:
> 
> I'm running a busy server that is periodically experiencing problems
> with tlsmgr, at various times (typically once a day at minimum), the
> following appears in the logs:
> 
> Jun 16 07:34:40 willet postfix/smtp[24449]: warning: connect to private/tlsmgr: Resource
temporarily unavailable
> Jun 16 07:34:40 willet postfix/smtp[24449]: warning: problem talking to server private/tlsmgr:
Resource temporarily unavailable
> 
> (repeated)
> 
> this sometimes results in mailer-daemon bounces to postmaster with the
> SMTP protocol messages including "TLS unavailable due to local
> problem". Typically mail is working fine, and TLS connections work
> normally, with this happening every once and a while. 
> 
> This is using postfix version: 2.7.1-1+squeeze1, what follows is the
> postconf -n output, as well as the master.cf:

Running a virtualized system and running out of random?

# apt-get install haveged

p <at> rick

--

-- 
All technical questions asked privately will be automatically answered on the
list and archived for public access unless privacy is explicitely required and
(Continue reading)

Permalink | Reply |
headers
micah anderson | 21 Jun 2012 22:19

Re: problem talking to server private/tlsmgr: Resource temporarily unavailable

Patrick Ben Koetter <p <at> state-of-mind.de> writes:

> * micah anderson <micah <at> riseup.net>:
>> 
>> I'm running a busy server that is periodically experiencing problems
>> with tlsmgr, at various times (typically once a day at minimum), the
>> following appears in the logs:
>> 
>> Jun 16 07:34:40 willet postfix/smtp[24449]: warning: connect to private/tlsmgr: Resource
temporarily unavailable
>> Jun 16 07:34:40 willet postfix/smtp[24449]: warning: problem talking to server private/tlsmgr:
Resource temporarily unavailable
>> 
>> (repeated)
>> 
>> this sometimes results in mailer-daemon bounces to postmaster with the
>> SMTP protocol messages including "TLS unavailable due to local
>> problem". Typically mail is working fine, and TLS connections work
>> normally, with this happening every once and a while. 
>> 
>> This is using postfix version: 2.7.1-1+squeeze1, what follows is the
>> postconf -n output, as well as the master.cf:
>
> Running a virtualized system and running out of random?

No, its not virtualized.

> # apt-get install haveged

Not only am I already running haveged, but I have an entropykey feeding
(Continue reading)

Permalink | Reply |
headers
gloriamh | 9 Apr 2013 10:18
Favicon

Re: problem talking to server private/tlsmgr: Resource temporarily unavailable

Hello!

We're experiencing the same kind of problem. Did you find the cause of the
problem? Is there some log we can activate to help us diagnose it?

Thanks!

--
View this message in context: http://postfix.1071664.n5.nabble.com/problem-talking-to-server-private-tlsmgr-Resource-temporarily-unavailable-tp45909p56870.html
Sent from the Postfix Users mailing list archive at Nabble.com.
Permalink | Reply |
headers
Stan Hoeppner | 10 Apr 2013 07:04

Re: problem talking to server private/tlsmgr: Resource temporarily unavailable

On 4/9/2013 3:18 AM, gloriamh wrote:
> Hello!
> 
> We're experiencing the same kind of problem. Did you find the cause of the
> problem? Is there some log we can activate to help us diagnose it?

> View this message in context: http://postfix.1071664.n5.nabble.com/problem-talking-to-server-private-tlsmgr-Resource-temporarily-unavailable-tp45909p56870.html
> Sent from the Postfix Users mailing list archive at Nabble.com.

You're replying to a message that is 9 months old.  You are doing so
through the nabble web forum, which nobody here reads.  In other words,
nobody has any idea what your problem is.  Do not use the nabble web
forum to participate.

If you'd like to discuss your problem, join the postfix-users mailing
list, read the instructions that will be sent to you upon your
subscription, and follow them.

--

-- 
Stan
Permalink | Reply |
headers
Wietse Venema | 10 Apr 2013 13:58

Re: problem talking to server private/tlsmgr: Resource temporarily unavailable

gloriamh:
> We're experiencing the same kind of problem. Did you find the cause of the
> problem? Is there some log we can activate to help us diagnose it?

The most likely explanation is that tls_random_source uses a blocking
random device (traditionally named as /dev/random).  Postfix needs
a non-blocking random device (traditionally named as /dev/urandom).

	Wietse
Permalink | Reply |
headers
Glòria Martínez | 12 Apr 2013 11:47
Favicon

Re: problem talking to server private/tlsmgr: Resource temporarily unavailable

Thanks! We're already using /dev/urandom. We've installed haveged, to
increase the available entropy. Let's see if this works...

On Wed, Apr 10, 2013 at 1:58 PM, Wietse Venema <wietse <at> porcupine.org> wrote:
>
> gloriamh:
> > We're experiencing the same kind of problem. Did you find the cause of the
> > problem? Is there some log we can activate to help us diagnose it?
>
> The most likely explanation is that tls_random_source uses a blocking
> random device (traditionally named as /dev/random).  Postfix needs
> a non-blocking random device (traditionally named as /dev/urandom).
>
>         Wietse
Permalink | Reply |
headers
Wietse Venema | 21 Jun 2012 22:00

Re: problem talking to server private/tlsmgr: Resource temporarily unavailable

micah anderson:
> 
> I'm running a busy server that is periodically experiencing problems
> with tlsmgr, at various times (typically once a day at minimum), the
> following appears in the logs:
> 
> Jun 16 07:34:40 willet postfix/smtp[24449]: warning: connect to private/tlsmgr: Resource
temporarily unavailable

Your kernel runs out of resources.  Reduce Postfix process limits,
or get a bigger/faster machine.

> alias_maps = hash:$maps_dir/aliases,mysql:$maps_dir/mysql_aliases.cf,pcre:$maps_dir/bounce.pcre

You may save some file resources when you use proxy:mysql instead of mysql.

	Wietse
Permalink | Reply |

Gmane