[syslog-ng] syslog-ng not start

[Daniel Bartholomew]

On Tue, 2007-07-17 at 14:56 +0100, Geller, Sandor (IT) wrote:
> Hi,
> 
> > Hello list,
> > 
> > I got a problem with starting syslog-ng on my Debian Etch Vserver.
> > When I try to start it, it give me the following Error-Message:
> > 
> > lutz at 31:~$ sudo /etc/init.d/syslog-ng start
> > Password:
> > Starting system logging: syslog-ngError opening file for reading;
> > filename='/proc/kmsg', error='Operation not permitted (1)'
> > Error initializing source driver; source='s_all'
> > start failed.
> > 
> > I checked the file-permissions from /proc/kmsg:
> > 
> > lutz at 31:~$ ls -al /proc | grep kmsg
> > -r--------   1 root   root           0 May  8 18:08 kmsg
> 
> There is the chance that another syslog daemon already opened the file,
> so simply remove this from your syslog-ng config. /proc/kmsg should be
> read by only one syslog daemon at a time.
> 
> > the old syslog daemon i stopped by renaming in /etc/rc2.d - /etc/rc5.d
> 
> stopped by renaming? Sounds problematic, stop it explicitly, and make
> sure it
> won't get restarted. Renaming/ removing symlinks under /etc/rc*.d on
> Debian is
> strongly discouraged. use update-rc.d for this task, first remove the
> existing
> links, and then recreate them as K... ones. Otherwise the next package
> upgrade
> might reenable the daemon.
> 

You might also want to try removing the default syslog package. On
Ubuntu this is done with:
sudo apt-get remove sysklogd

I don't know if Debian's is named the same or not.

After that, restart syslog-ng and hopefully it will start.

-- 
Daniel Bartholomew


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20070717/5e1360f3/attachment.pgp