[syslog-ng] syslog-ng stalls system

[Sandor Geller]

Mario Aeby wrote:
> Hi
> 
> I've ran into serious problems yesterday with my Debian server and 
> finally was able to nail down the problem to syslog-ng and/or the 
> logging subsystem (or whatever it is called). I first noticed troubles 
> after I did a apt-get install, which hang while installing ssl-cert due 
> to a failure to create a group (connected to the symptoms mentioned 
> below).
> 
> Symptoms:
> - a growing number of unterminated /USR/SBIN/CRON processes (strace: 
> "connect(7, {sa_family=AF_FILE, path="/dev/log"}, 16")
> - unable to 'su <user>' (Ctrl-C to return to shell)
> - unable to establish a ssh connection (terminal hangs after entering 
> password, sshd <defunct> in processes)
> - unable to login physically at the server itself ("You have new mail", 
> but no command line, Ctrl-C to return to the login screen)
> - when logged in prior the failures, either 'shutdown' nor 'reboot' 
> have any effect (system must be shut down by /etc/init.d/reboot stop)
> - no new entries in /var/log/cron.log or /var/log/syslog
> 
> Temporary Cure:
> - reboot and prevent syslog-ng from starting at boot
> 
> Sidenotes:
> - All other services work as expected
> 
> I've got to know Linux in recent years, but it seems I'm not capable of 
> solving such a difficult issue by myself. Do you have any suggestions?
> 
> Thank you very much!
> Kind regards
> Mario

Hi Mario,

Thanks for your report. I haven't seen this issue in the Debian BTS, so
please give more details:

1. which syslog-ng package are you using
2. if it isn't confidental what looks your configuration like

Regards,

-- 
Sandor Geller
wildy at balabit.hu