PAM-CM-0690: An error occurred sending the email

book

Article ID: 196890

calendar_today

Updated On:

Products

CA Privileged Access Manager (PAM) CA Privileged Access Manager - Cloakware Password Authority (PA) PAM SAFENET LUNA HSM CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

[Use Case]

Reporting Scheduled Job is set to send out emails but out of sudden following error is being reported and no emails have been sent.

 

PAM-CM-0690: An error occurred sending the email

Cause

This could be due to permission issue and require checking 'syslog' to see if there is any error for the following folders.

They only allow Debian-exim user for Read+Write and Debian-exim group for Read.

1. /var/spool/exim4/input/
2. /var/log/exim4/

It is possible the process that is trying to write to this folder was with wrong account or there might have been some issue at the file system level.

 

Aug  3 06:25:06 pam34x01 exim[12345]: 2020-08-03 06:25:06 1k2TuE-0007Ci-Di Failed to create spool file /var/spool/exim4//input//1k2TuE-0007Ci-Di-D: Permission denied
Aug  3 06:25:06 pam34x01 exim[12345]: 2020-08-03 06:25:06 1k2TuE-0007Ci-Di Cannot open main log file "/var/log/exim4/mainlog": Permission denied: euid=112 egid=117
Aug  3 06:25:06 pam34x01 exim[12345]: exim: could not open panic log - aborting: see message(s) above
Aug  3 06:25:06 pam34x01 CRON[34567]: (root) MAIL (mailed 8252 bytes of output but got status 0x0001 from MTA#012)

 

Environment

Release : 3.4

Component : PRIVILEGED ACCESS MANAGEMENT

Resolution

In the above sample log, the account used for accessing the file was euid=112 and egid=117.

stat -c "%U %G" <filepath> will give you the friendly username and groupname.

stat -c "%u %g" <filepath> will give you the numeric representation of username and groupname.

 

 

In this case correct account was used.

Then it might be the corruption at the file system or the server hosting the Virtual Appliance.

A reboot of the server may resolve this, otherwise a filesystem check on PAM appliance and check on the host machine will be required.

 

Attachments