HTTP Anti-Virus Proxy
http://havp.hege.li/forum/

Using ClamD do not work
http://havp.hege.li/forum/viewtopic.php?f=3&t=334		 Page 1 of 1
Author:  guentner [ 10 Feb 2008 12:34 ]
Post subject:  Using ClamD do not work
Hi all,

I want to use ClamD instead of the library version. As far as I see, I configured as described here in the forum. But it do not work (see log below). When I configure using the lib version, it work. What's wrong?

Regards Josef

10/02/2008 10:10:10 === Starting HAVP Version: 0.87
10/02/2008 10:10:10 Running as user: havp, group: havp
10/02/2008 10:10:10 Use parent proxy: 10.0.0.254:8118
10/02/2008 10:10:10 --- Initializing Clamd Socket Scanner
10/02/2008 10:10:10 ERROR: Clamd Socket Scanner failed EICAR virus test! (Access denied.)
10/02/2008 10:11:15 === Starting HAVP Version: 0.87
10/02/2008 10:11:15 Running as user: havp, group: havp
10/02/2008 10:11:15 Use parent proxy: 10.0.0.254:8118
10/02/2008 10:11:15 --- Initializing ClamAV Library Scanner
10/02/2008 10:11:15 ClamAV: Using database directory: /var/lib/clamav
10/02/2008 10:11:27 ClamAV: Loaded 372912 signatures (engine 0.92)
10/02/2008 10:11:27 ClamAV Library Scanner passed EICAR virus test (Eicar-Test-Signature)
10/02/2008 10:11:27 --- All scanners initialized
10/02/2008 10:11:27 Process ID: 2624
Author:  hege [ 10 Feb 2008 13:16 ]
Post subject: 
viewtopic.php?t=5

"you need to enable AllowSupplementaryGroups in clamd.conf,
and add clamav user to havp group"

Have you done this?
Author:  guentner [ 10 Feb 2008 18:30 ]
Post subject: 
Yes, as far as I see, I did:

My clamav user (vscan) is member of the havp group and in clamd.conf I set "AllowSupplementaryGroups yes".

Now I made two tests:

When I configure using the socket => it does not work
When I configure using TCP => it works (see below)

What's goes wrong when using a socket?

Part of havp.conf
"
:
ENABLECLAMD true

# Path to clamd socket
#
# Default:
# CLAMDSOCKET /tmp/clamd

# CLAMDSOCKET /var/lib/clamav/clamd-socket

# ..OR if you use clamd TCP socket, uncomment to enable use
#
# Clamd daemon needs to run on the same server as HAVP
#
# Default: NONE
CLAMDSERVER 127.0.0.1
CLAMDPORT 3310
:
"
Author:  hege [ 10 Feb 2008 20:29 ]
Post subject: 
guentner wrote:
What's goes wrong when using a socket?


Havp user must have write access to the socket. You need to see that all the directories up to the socket and socket itself allow this.
Author:  guentner [ 10 Feb 2008 21:50 ]
Post subject: 
Hi,

granting write access on the directory solved the problem.

Lot of thanks!!!

Josef
Page 1 of 1 All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/