10.7.5 Server Crashing - short log included
Thanks:
PROBLEM: This server will run fine for up to 3-4 weeks then crash unexpectedly. I'm hoping the log below might yield some clues to someone:
SPECS:
Mid 2010 Mac Pro
2x2.4 Ghz Quad-Core Intel Xeon
24 GB 1066 MHz DDR3 EEC
OS X LION SERVER 10.7.5 (11G63)
FUNCTION: It's primarily a File Server but it's also running Universal Type Server 4.2. It has an external fiber feed to a Compellant external storage source. The only Apple Service running is File Sharing.
LOG:
Oct 29 08:54:13 ios sandboxd[96922] ([96921]): rpcsvchost(96921) deny file-read-metadata /
Oct 29 08:54:13 ios sandboxd[96922] ([96921]): rpcsvchost(96921) deny file-read-metadata /Library
Oct 29 08:54:13: --- last message repeated 4 times ---
Oct 29 08:54:13 ios sandboxd[96922] ([96921]): rpcsvchost(96921) deny file-read-metadata /private/var/run/systemkeychaincheck.done
Oct 29 08:54:13 ios sandboxd[96922] ([96921]): rpcsvchost(96921) deny network-outbound /private/var/run/systemkeychaincheck.socket
Oct 29 08:54:13 ios rpcsvchost[96921]: Can not connect to /var/run/systemkeychaincheck.socket: Operation not permitted
Oct 29 08:54:13 ios smbd[96550]: check_account - [7]:[permission denied] pam_acct_mgmt
Oct 29 08:55:01 ios rpcsvchost[96925]: sandbox_init: com.apple.msrpc.srvsvc.sb succeeded
Oct 29 08:55:01 ios smbd[96550]: domain\userid connected to path /var/rpc/ncacn_np
Oct 29 08:55:01 ios smbd[96550]: domain\userid connected to path /Volumes/COMPELLANT/departmentname
Oct 29 08:55:02 ios smbd[96550]: domain\userid connected to path /var/rpc/ncacn_np
Oct 29 08:55:02 ios smbd[96550]: domain\userid connected to path /Volumes/COMPELLANT/departmentname
Oct 29 08:55:12 ios sandboxd[96926] ([96925]): rpcsvchost(96925) deny mach-lookup com.apple.distributed_notifications@1v3
Oct 29 08:55:28 ios scep_daemon[301]: summ[012d0400]: vdb=26468, agent=fac, name="/Library/Server/PostgreSQL/Data/pg_stat_tmp/pgstat.tmp", virus="", action="", info="Event occurred on a newly created file.", avstatus="not scanned", hop="accepted"
Oct 29 09:06:19 ios smbd[96550]: domain\userid connected to path /Volumes/COMPELLANT/departmentname
Oct 29 09:06:20 ios smbd[96550]: domain\userid connected to path /var/rpc/ncacn_np
Oct 29 09:06:20 ios rpcsvchost[96963]: sandbox_init: com.apple.msrpc.lsarpc.sb succeeded
Oct 29 09:06:20 ios sandboxd[96964] ([96963]): rpcsvchost(96963) deny file-read-data /usr/libexec
Oct 29 09:06:25 ios smbd[96550]: domain\userid connected to path /var/rpc/ncacn_np
Oct 29 09:06:25 ios rpcsvchost[96967]: sandbox_init: com.apple.msrpc.mdssvc.sb succeeded
Oct 29 09:06:36 ios sandboxd[96964] ([96967]): rpcsvchost(96967) deny file-read-data /usr/libexec
Oct 29 09:06:36 ios sandboxd[96964] ([96967]): rpcsvchost(96967) deny mach-lookup com.apple.distributed_notifications@1v3
Oct 29 09:10:23 ios smbd[96550]: check_account - [7]:[permission denied] pam_acct_mgmt
Oct 29 09:13:18 ios smbd[96550]: check_account - [7]:[permission denied] pam_acct_mgmt
Oct 29 09:16:16 ios smbd[96550]: check_account - [7]:[permission denied] pam_acct_mgmt
Oct 29 09:25:01 ios rpcsvchost[97022]: sandbox_init: com.apple.msrpc.srvsvc.sb succeeded
Oct 29 09:25:01 ios smbd[96550]: domain\userid connected to path /var/rpc/ncacn_np
Oct 29 09:25:01 ios smbd[96550]: domain\userid connected to path /Volumes/COMPELLANT/departmentname
Oct 29 09:25:02 ios smbd[96550]: domain\userid connected to path /var/rpc/ncacn_np
Oct 29 09:25:02 ios smbd[96550]: domain\userid connected to path /Volumes/COMPELLANT/departmentname
Oct 29 09:25:12 ios sandboxd[97023] ([97022]): rpcsvchost(97022) deny mach-lookup com.apple.distributed_notifications@1v3
Oct 29 09:37:18 ios rpcsvchost[97062]: sandbox_init: com.apple.msrpc.netlogon.sb succeeded
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny file-read-metadata /Library/Managed Preferences
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny file-read-metadata /private/var/root
Oct 29 09:37:18: --- last message repeated 2 times ---
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny file-read-metadata /private/var/root/Library/Preferences/ByHost/.GlobalPreferences.A51142AA-AD79-5 294-BF83-41FFD70D6532.plist
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny file-read-data /private/var/root/Library/Preferences/ByHost/.GlobalPreferences.A51142AA-AD79-5 294-BF83-41FFD70D6532.plist
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny file-read-metadata /private/var/root
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny file-read-metadata /private/var/root/Library/Preferences/.GlobalPreferences.plist
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny file-read-data /private/var/root/Library/Preferences/.GlobalPreferences.plist
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny file-read-metadata /private/var/root/Library/Preferences/ByHost/.GlobalPreferences.A51142AA-AD79-5 294-BF83-41FFD70D6532.plist
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny file-read-data /private/var/root/Library/Preferences/ByHost/.GlobalPreferences.A51142AA-AD79-5 294-BF83-41FFD70D6532.plist
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny file-read-metadata /private/var/root/Library/Preferences/.GlobalPreferences.plist
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny file-read-data /private/var/root/Library/Preferences/.GlobalPreferences.plist
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny file-read-metadata /
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny file-read-metadata /Library
Oct 29 09:37:18: --- last message repeated 4 times ---
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny file-read-metadata /private/var/run/systemkeychaincheck.done
Oct 29 09:37:18 ios sandboxd[97063] ([97062]): rpcsvchost(97062) deny network-outbound /private/var/run/systemkeychaincheck.socket
Oct 29 09:37:18 ios rpcsvchost[97062]: Can not connect to /var/run/systemkeychaincheck.socket: Operation not permitted
Oct 29 09:37:19 ios smbd[96550]: domain\userid connected to path /Volumes/COMPELLANT/IT
Oct 29 09:37:20 ios smbd[96550]: domain\userid connected to path /var/rpc/ncacn_np
Oct 29 09:37:20 ios rpcsvchost[97064]: sandbox_init: com.apple.msrpc.lsarpc.sb succeeded
Oct 29 09:37:20 ios sandboxd[97063] ([97064]): rpcsvchost(97064) deny file-read-data /usr/libexec
Oct 29 09:37:20 ios smbd[96550]: domain\userid connected to path /var/rpc/ncacn_np
Oct 29 09:37:20 ios rpcsvchost[97065]: sandbox_init: com.apple.msrpc.mdssvc.sb succeeded
Oct 29 09:37:31 ios sandboxd[97063] ([97065]): rpcsvchost(97065) deny file-read-data /usr/libexec
Oct 29 09:37:31 ios sandboxd[97063] ([97065]): rpcsvchost(97065) deny mach-lookup com.apple.distributed_notifications@1v3
Oct 29 09:38:13 ios com.apple.launchd[1] (com.adobe.fpsaud[97068]): Exited with code: 214
Oct 29 09:44:18 ios smbd[96550]: check_account - [7]:[permission denied] pam_acct_mgmt
rc.server[ 13 ]: Tuning server for 24 GB (rounded down).
CRASH
Oct 29 10:21:13 localhost bootlog[0]: BOOT_TIME 1446128473 0
Mac Pro, Mac OS X (10.7.3)