Xbeech

Q: doveadm process going nutso

I'm running Server 5.015, and the computer on which it is running got to be very sluggish a couple of software updates ago.  I looked in Console and found the following in the logs - happening many times every second, and Activity Monitor shows Python and doveadm regularly using 80%+ CPU:

 

2/17/16 4:59:23.000 PM kernel[0]: Sandbox: doveadm(83371) deny(1) mach-lookup com.apple.lsd.mapdb

2/17/16 4:59:23.055 PM doveadm[83371]: LaunchServices: received XPC_ERROR_CONNECTION_INVALID trying to map database

2/17/16 4:59:23.055 PM doveadm[83371]: LaunchServices: disconnect event received for service com.apple.lsd.mapdb

2/17/16 4:59:23.131 PM servermgr_dns[83618]: validating connection from 0 : 100000

2/17/16 4:59:23.000 PM kernel[0]: Sandbox: doveadm(83371) deny(1) mach-lookup com.apple.lsd.mapdb

2/17/16 4:59:23.000 PM kernel[0]: Sandbox: doveadm(83371) deny(1) mach-lookup com.apple.lsd.mapdb

2/17/16 4:59:23.000 PM kernel[0]: Sandbox: doveadm(83371) deny(1) mach-lookup com.apple.lsd.mapdb

2/17/16 4:59:23.000 PM kernel[0]: Sandbox: doveadm(83371) deny(1) mach-lookup com.apple.lsd.mapdb

2/17/16 4:59:23.000 PM kernel[0]: Sandbox: doveadm(83371) deny(1) mach-lookup com.apple.lsd.mapdb

2/17/16 4:59:23.000 PM kernel[0]: Sandbox: doveadm(83371) deny(1) mach-lookup com.apple.lsd.mapdb

2/17/16 4:59:23.000 PM kernel[0]: Sandbox: doveadm(83371) deny(1) mach-lookup com.apple.lsd.mapdb

2/17/16 4:59:23.000 PM kernel[0]: Sandbox: doveadm(83371) deny(1) mach-lookup com.apple.lsd.mapdb

2/17/16 4:59:23.000 PM kernel[0]: Sandbox: doveadm(83371) deny(1) mach-lookup com.apple.lsd.mapdb

 

Any thoughts are MUCH appreciated!

Posted on Feb 17, 2016 5:05 PM

Close

Q: doveadm process going nutso

  • All replies
  • Helpful answers

Page 1 Next
  • by Linc Davis,

    Linc Davis Linc Davis Feb 18, 2016 8:53 AM in response to Xbeech
    Level 10 (207,926 points)
    Applications
    Feb 18, 2016 8:53 AM in response to Xbeech

    This procedure will delete certain temporary and cache files. The files are automatically generated and don't contain any of your data. Occasionally they can become corrupt and cause problems such as yours.

    Please back up all data and read this whole message before doing anything. If you use Time Machine to back up and it isn't working, ask for guidance.

    Triple-click anywhere in the line below on this page to select it:

    /var/folders/zz/zyxvpxvq6csfxvn_n00000tr00006p

    Right-click or control-click the highlighted line and select

              Services Reveal in Finder (or just Reveal)

    from the contextual menu.* A folder should open with a subfolder selected. The subfolder has a long name beginning with "zyx" and ending with "6p". Move that subfolder to the Trash. Don't move any of the other subfolders with similar names. You may be prompted for your administrator login password. Restart the computer and empty the Trash.

    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select

              Go Go to Folder...

    from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return.

  • by Xbeech,

    Xbeech Xbeech Feb 18, 2016 12:59 PM in response to Linc Davis
    Level 1 (0 points)
    Feb 18, 2016 12:59 PM in response to Linc Davis

    Thanks very much.  I did as you suggested.  In the 00006p folder there were two subfolders: "C" and "T".  I deleted the entire 00006p folder, emptied the trash, and restarted.  I'm getting pretty close to the same messages in my log file, still, though (below).  I went back and looked at the 00006p folder again, and it had been re-created, again with the C and T subfolders.  Any thoughts?  Thanks agian.

     

    2/18/16 12:47:34.788 PM doveadm[2736]: LaunchServices: disconnect event received for service com.apple.lsd.mapdb

    2/18/16 12:47:34.000 PM kernel[0]: Sandbox: doveadm(2736) deny(1) mach-lookup com.apple.lsd.mapdb

    2/18/16 12:47:34.789 PM doveadm[2736]: LaunchServices: disconnect event received for service com.apple.lsd.mapdb

    2/18/16 12:47:34.789 PM doveadm[2736]: LaunchServices: received XPC_ERROR_CONNECTION_INVALID trying to map database

    2/18/16 12:47:34.789 PM doveadm[2736]: LaunchServices: Database mapping failed with result -10822, retrying

    2/18/16 12:47:34.000 PM kernel[0]: Sandbox: doveadm(2736) deny(1) mach-lookup com.apple.lsd.mapdb

    2/18/16 12:47:34.789 PM doveadm[2736]: LaunchServices: received XPC_ERROR_CONNECTION_INVALID trying to map database

    2/18/16 12:47:34.789 PM doveadm[2736]: LaunchServices: disconnect event received for service com.apple.lsd.mapdb

    2/18/16 12:47:34.000 PM kernel[0]: Sandbox: doveadm(2736) deny(1) mach-lookup com.apple.lsd.mapdb

    2/18/16 12:47:34.823 PM doveadm[2736]: LaunchServices: received XPC_ERROR_CONNECTION_INVALID trying to map database

    2/18/16 12:47:34.823 PM doveadm[2736]: LaunchServices: disconnect event received for service com.apple.lsd.mapdb

    2/18/16 12:47:34.000 PM kernel[0]: Sandbox: doveadm(2736) deny(1) mach-lookup com.apple.lsd.mapdb

    2/18/16 12:47:34.823 PM doveadm[2736]: LaunchServices: Database mapping failed with result -10822, retrying

  • by Linc Davis,

    Linc Davis Linc Davis Feb 18, 2016 1:08 PM in response to Xbeech
    Level 10 (207,926 points)
    Applications
    Feb 18, 2016 1:08 PM in response to Xbeech

    Anything in the mail service logs?

  • by Xbeech,

    Xbeech Xbeech Feb 19, 2016 1:40 PM in response to Linc Davis
    Level 1 (0 points)
    Feb 19, 2016 1:40 PM in response to Linc Davis

    There are some warnings that scanning and syncing mail directories is taking a long time...

     

    Feb 19 13:28:26 imap(pid 47026 user bbeecher): Warning: Maildir: Scanning /Library/Server/Mail/Data/mail/43F2FD40-B141-4C7B-887D-409AED2CE259/cur took 119 seconds (46577 readdir()s, 0 rename()s to cur/, why=0xc0)

    Feb 19 13:28:26 imap(pid 47026 user bbeecher): Warning: Maildir /Library/Server/Mail/Data/mail/43F2FD40-B141-4C7B-887D-409AED2CE259: Synchronization took 119 seconds (0 new msgs, 0 flag change attempts, 0 expunge attempts)

    Feb 19 13:28:50 imap(pid 47022 user rtrompeter): Warning: Maildir: Scanning /Library/Server/Mail/Data/mail/1FEB2B52-DCD0-4882-B73A-9ACDB070179D/cur took 141 seconds (55896 readdir()s, 0 rename()s to cur/, why=0xc0)

    Feb 19 13:28:50 imap(pid 47022 user rtrompeter): Warning: Maildir /Library/Server/Mail/Data/mail/1FEB2B52-DCD0-4882-B73A-9ACDB070179D: Synchronization took 141 seconds (0 new msgs, 0 flag change attempts, 0 expunge attempts)

     

     

    And, there are a few sandboxd errors mixed in from time to time...

     

    2/19/16 1:38:19.398 PM doveadm[46344]: LaunchServices: received XPC_ERROR_CONNECTION_INVALID trying to map database

    2/19/16 1:38:19.398 PM doveadm[46344]: LaunchServices: disconnect event received for service com.apple.lsd.mapdb

    2/19/16 1:38:19.401 PM sandboxd[188]: ([46344]) doveadm(46344) deny mach-lookup com.apple.lsd.mapdb (indexing "/tmp/uid=9443&where=body&rand=b5fab0e1595a7911" type "application/pdf")

    2/19/16 1:38:19.648 PM sandboxd[188]: ([46344]) doveadm(46344) deny mach-lookup com.apple.lsd.mapdb (indexing "/tmp/uid=9443&where=body&rand=b5fab0e1595a7911" type "application/pdf")

    2/19/16 1:38:19.000 PM kernel[0]: Sandbox: doveadm(46344) deny(1) mach-lookup com.apple.lsd.mapdb

     

    Is there something in particular I should be looking for in the mail service logs?

  • by Xbeech,

    Xbeech Xbeech Feb 19, 2016 6:24 PM in response to Xbeech
    Level 1 (0 points)
    Feb 19, 2016 6:24 PM in response to Xbeech

    Here's where the problem first presents on startup.  Permissions issue?

     

    2/19/16 6:06:58.353 PM doveadm[1109]: LaunchServices: received XPC_ERROR_CONNECTION_INVALID trying to map database

    2/19/16 6:06:58.353 PM doveadm[1109]: LaunchServices: disconnect event received for service com.apple.lsd.mapdb

    2/19/16 6:06:58.353 PM doveadm[1109]: LaunchServices: Database mapping failed with result -10822, retrying

    2/19/16 6:06:58.356 PM doveadm[1109]: LaunchServices: received XPC_ERROR_CONNECTION_INVALID trying to map database

    2/19/16 6:06:58.356 PM doveadm[1109]: LaunchServices: disconnect event received for service com.apple.lsd.mapdb

    2/19/16 6:06:58.378 PM doveadm[1109]: libcoreservices: _dirhelper: 400: mkdir: path=/var/folders/zz/zyxvpxvq6csfxvn_n00000tr00006p/0/ modes[0]=0755: Operation not permitted

    2/19/16 6:07:05.077 PM sandboxd[190]: ([1109]) doveadm(1109) deny mach-lookup com.apple.lsd.mapdb (fts_sk: loading metadata importers)

    2/19/16 6:07:05.333 PM sandboxd[190]: ([1109]) doveadm(1109) deny mach-lookup com.apple.lsd.mapdb (fts_sk: loading metadata importers)

    2/19/16 6:07:05.496 PM sandboxd[190]: ([1109]) doveadm(1109) deny file-write-create /private/var/empty/Library (fts_sk: loading metadata importers)

    2/19/16 6:07:05.654 PM sandboxd[190]: ([1109]) doveadm(1109) deny file-write-create /private/var/empty/Library (fts_sk: loading metadata importers)

    2/19/16 6:07:06.691 PM sandboxd[190]: ([1109]) doveadm(1109) deny mach-lookup com.apple.SecurityServer (fts_sk: loading metadata importers)

    2/19/16 6:07:11.464 PM doveadm[1109]: LaunchServices: disconnect event received for service com.apple.lsd.modifydb

    2/19/16 6:07:11.466 PM doveadm[1109]: LaunchServices: received XPC_ERROR_CONNECTION_INVALID trying to map database

  • by Linc Davis,

    Linc Davis Linc Davis Feb 20, 2016 1:16 PM in response to Xbeech
    Level 10 (207,926 points)
    Applications
    Feb 20, 2016 1:16 PM in response to Xbeech

    This procedure will delete certain temporary and cache files. The files are automatically generated and don't contain any of your data. Occasionally they can become corrupt and cause problems such as yours.

    Please back up all data.

    Triple-click anywhere in the line below on this page to select it:

    /var/folders

    Right-click or control-click the highlighted line and select

              Services Open

    from the contextual menu.* A folder with the odd name "folders" should open.

    Inside "folders" are several subfolders, each with a two-character name. Drag all the subfolders except the one named "zz" to the Trash. Don't delete the subfolder named "zz". You'll be prompted for your administrator login credentials.

    Restart the computer and empty the Trash.

    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select

              Go Go to Folder...

    from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return.

  • by Xbeech,

    Xbeech Xbeech Feb 20, 2016 5:42 PM in response to Linc Davis
    Level 1 (0 points)
    Feb 20, 2016 5:42 PM in response to Linc Davis

    Thank you.  I was optimistic this had done the trick - the error messages didn't reappear until a few minutes after restart.  But then they did again.  Here's where its appears to have begun this time:

     

    2/20/16 5:31:17.632 PM servermgr_certs[1401]: validating connection from 0 : 100000

    2/20/16 5:31:19.129 PM doveadm[3066]: LaunchServices: received XPC_ERROR_CONNECTION_INVALID trying to map database

    2/20/16 5:31:19.129 PM doveadm[3066]: LaunchServices: disconnect event received for service com.apple.lsd.mapdb

    2/20/16 5:31:19.129 PM doveadm[3066]: LaunchServices: Database mapping failed with result -10822, retrying

    2/20/16 5:31:19.131 PM doveadm[3066]: LaunchServices: received XPC_ERROR_CONNECTION_INVALID trying to map database

    2/20/16 5:31:19.131 PM doveadm[3066]: LaunchServices: disconnect event received for service com.apple.lsd.mapdb

    2/20/16 5:31:19.226 PM doveadm[3066]: libcoreservices: _dirhelper: 400: mkdir: path=/var/folders/zz/zyxvpxvq6csfxvn_n00000tr00006p/0/ modes[0]=0755: Operation not permitted

    2/20/16 5:31:27.243 PM sandboxd[159]: ([3066]) doveadm(3066) deny mach-lookup com.apple.lsd.mapdb (fts_sk: loading metadata importers)

    2/20/16 5:31:27.321 PM servermgr_info[981]: idle exit

    2/20/16 5:31:27.321 PM Server[819]: Dispatcher: servermgr_info plugin disconnected

    2/20/16 5:31:27.348 PM sandboxd[159]: ([3066]) doveadm(3066) deny mach-lookup com.apple.lsd.mapdb (fts_sk: loading metadata importers)

    2/20/16 5:31:27.403 PM sandboxd[159]: ([3066]) doveadm(3066) deny file-write-create /private/var/empty/Library (fts_sk: loading metadata importers)

    2/20/16 5:31:27.473 PM sandboxd[159]: ([3066]) doveadm(3066) deny file-write-create /private/var/empty/Library (fts_sk: loading metadata importers)

    2/20/16 5:31:28.059 PM sandboxd[159]: ([3066]) doveadm(3066) deny mach-lookup com.apple.SecurityServer (fts_sk: loading metadata importers)

    2/20/16 5:31:29.216 PM doveadm[3066]: LaunchServices: disconnect event received for service com.apple.lsd.modifydb

    2/20/16 5:31:29.219 PM doveadm[3066]: LaunchServices: received XPC_ERROR_CONNECTION_INVALID trying to map database

    2/20/16 5:31:29.219 PM doveadm[3066]: LaunchServices: disconnect event received for service com.apple.lsd.mapdb

    2/20/16 5:31:29.219 PM doveadm[3066]: LaunchServices: Database mapping failed with result -10822, retrying

    2/20/16 5:31:29.221 PM doveadm[3066]: LaunchServices: received XPC_ERROR_CONNECTION_INVALID trying to map database

    2/20/16 5:31:29.221 PM doveadm[3066]: LaunchServices: disconnect event received for service com.apple.lsd.mapdb

    2/20/16 5:31:29.000 PM kernel[0]: Sandbox: doveadm(3066) deny(1) mach-lookup com.apple.lsd.mapdb

     

    The 2X folder was recreated almost as soon as I moved it to the trash, but I suspect that's fine...  Shoot - I thought that had licked it...  Thanks again very much.

  • by Linc Davis,

    Linc Davis Linc Davis Feb 20, 2016 9:07 PM in response to Xbeech
    Level 10 (207,926 points)
    Applications
    Feb 20, 2016 9:07 PM in response to Xbeech

    Please back up all data.

    Quit the Server application and drag it to the Trash, but don't empty. You'll be prompted to confirm that you want to stop all services. You won't lose any data.

    If you're using the server for DNS, temporarily change the primary DNS setting in the Network preference pane to another DNS.

    Put the app back where it was and launch it. Test.

    Revert the DNS setting, if applicable.

  • by Xbeech,

    Xbeech Xbeech Feb 24, 2016 11:16 AM in response to Linc Davis
    Level 1 (0 points)
    Feb 24, 2016 11:16 AM in response to Linc Davis

    Thank you, Linc.  I did that, and problem persists unchanged.  I did notice that during the startup sequence processes other than just doveadm were getting very similar errors.  If that's relevant, I can restart and find them in them in the log.

     

    Would there be any benefit to downloading a fresh copy of Server rather than dragging the old one out of the trash? 

  • by Linc Davis,

    Linc Davis Linc Davis Feb 25, 2016 11:46 AM in response to Xbeech
    Level 10 (207,926 points)
    Applications
    Feb 25, 2016 11:46 AM in response to Xbeech

    1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.

    The test works on OS X 10.8 ("Mountain Lion") and later. I don't recommend running it on older versions of OS X. It will do no harm, but it won't do much good either.

    Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.

    2. If you don't already have a current backup, please back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.

    There are ways to back up a computer that isn't fully functional. Ask if you need guidance.

    3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.

    You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.

    In this case, however, there are ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone who understands the code can verify what it does.

    You may not be able to understand the script yourself. But variations of it have been posted on this website many times over a period of years. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message. See, for example, this discussion.

    Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.

    4. Here's a general summary of what you need to do, if you choose to proceed:

    ☞ Copy the text of a particular web page (not this one) to the Clipboard.

    ☞ Paste into the window of another application.

    ☞ Wait for the test to run. It usually takes a few minutes.

    ☞ Paste the results, which will have been copied automatically, back into a reply on this page.

    These are not specific instructions; just an overview. The details are in parts 7 and 8 of this comment. The sequence is: copy, paste, wait, paste again. You don't need to copy a second time.

    5. Try to test under conditions that reproduce the problem, as far as possible. For example, if the computer is intermittently slow, run the test during a slowdown.

    You may have started up in safe mode. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual before running it. If you can only test in safe mode, do that.

    6. If you have more than one user, and only one user is affected by the problem,, and the affected user is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.

    7. Load this linked web page (on the website "Pastebin.") Press the key combination command-A to select all the text, then copy it to the Clipboard by pressing command-C.

    8. Launch the built-in Terminal application in any one of the following ways:

    ☞ Enter the first few letters of its name ("Terminal") into a Spotlight search. Select it in the results (it should be at the top.)

    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

    ☞ Open LaunchPad and start typing the name.

    Click anywhere in the Terminal window to activate it. Paste from the Clipboard into the window by pressing command-V, then press return. The text you pasted should vanish immediately.

    9. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. If you don't know the password, or if you prefer not to enter it, just press return three times at the password prompt. Again, the script will still run.

    If the test is taking much longer than usual to run because the computer is very slow, you might be prompted for your password a second time. The authorization that you grant by entering it expires automatically after five minutes.

    If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.

    10. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, a series of lines will appear in the Terminal window like this:

        Test started
            Part 1 of 4 done at: … sec
            …
            Part 4 of 4 done at: … sec
        The test results are on the Clipboard.
        Please close this window.

    The intervals between parts won't be exactly equal, but they give a rough indication of progress.

    Wait for the final message "Please close this window" to appear—again, usually within a few minutes. If you don't see that message within about 30 minutes, the test probably won't complete in a reasonable time. In that case, press the key combination control-C or command-period to stop it. Then go to the next step. You'll have incomplete results, but still something.

    In order to get results, the test must either be allowed to complete or else manually stopped as above. If you close the Terminal window while the test is still running, the partial results won't be saved.

    11. When the test is complete, or if you stopped it manually, quit Terminal. The results will have been saved to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.

    At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "close this window" message. Please wait for it and try again.

    If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.

    12. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the software that runs this website. Please post the test results on Pastebin, then post a link here to the page you created.

    If you have an account on Pastebin, please don't select Private from the Paste Exposure menu on the page, because then no one but you will be able to see it.

    13. When you're done with the test, it's gone. There is nothing to uninstall or clean up.

    14. This is a public forum, and others may give you advice based on the results of the test. They speak for themselves, not for me. The test itself is harmless, but whatever else you do may not be. For others who choose to run it, I don't recommend that you post the test results on this website unless I asked you to.

    15. The linked UNIX shell script bears a notice of copyright. Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

  • by Xbeech,

    Xbeech Xbeech Mar 1, 2016 4:37 PM in response to Linc Davis
    Level 1 (0 points)
    Mar 1, 2016 4:37 PM in response to Linc Davis
  • by Linc Davis,

    Linc Davis Linc Davis Mar 2, 2016 7:15 PM in response to Xbeech
    Level 10 (207,926 points)
    Applications
    Mar 2, 2016 7:15 PM in response to Xbeech

    That machine is running at least ten times slower than normal, and the problem with doveadm doesn't account for it. You're probably dealing with a drive failure or some other hardware fault.

  • by Xbeech,

    Xbeech Xbeech Mar 3, 2016 9:46 AM in response to Linc Davis
    Level 1 (0 points)
    Mar 3, 2016 9:46 AM in response to Linc Davis

    Thank you, Linc. I surely appreciate your time and help. I can replace the drive and migrate the data, but is there a way to determine the fault so I can zap it for sure?  I'm concerned that if I cloned the drive and restored it on new hardware, I'd be preserving some crud.  If is a hardware fault other than a drive, it would be an exercise in futility. Thanks again.

     

    Brent

  • by Linc Davis,

    Linc Davis Linc Davis Mar 3, 2016 11:28 AM in response to Xbeech
    Level 10 (207,926 points)
    Applications
    Mar 3, 2016 11:28 AM in response to Xbeech

    There's no point in trying to solve the original problem when you have a hardware fault. The fault may be causing the problem. The only way to determine that is to repair the fault.

Page 1 Next