Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 8 subscribers
  • Views 6161 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Spohos Free v9 and Ilias: file upload impossible

Ulrich Agricola

Hi,

we encounter a problem with Sophos in combination with LMS Ilias. If Sophos is activated in Ilias setup, Ilas produces an unknown error.

Details:

Three machines (A & B: ubuntu 14.04, C: ubuntu 16.04) provide access to Ilias. They reside behind a proxy/load balancer. All three have an active apache2. Server A contains the Ilias MySQL database, server C works as NFS, which contains the program files of Ilias. The servers are connected such as to reach all necessary data via either apache webserver.

Sophos is installed on machine C. 

Test:

  • I activate Sophos in Ilias setup
  • I login as learner (i.e. NOT admin!) onto machine C, where Sopos is installed. This is just for testing, usually people would log in via proxy
  • file upload - either uninfected or infected - works fine, infected file is detected

Problem:

  • Sophos still activated
  • I log in via proxy (or directly on machine A or B)
  • file upload does not work but produces an "unknown error"
  • there are no hints in either Sophos logs, Ilias error logs or system logs
  • deactivate Sophos => all works well

As all three servers use the same Ilias settings and program files, which reside on machine C, I'd assume, that it's sufficient to have Sophos installed on this machine. Or is it necessary to install it on all three machines? Or what else could cause the error?

Kind regards

Uli



This thread was automatically locked due to age.
  • 0

    Hello Uli,

    just trying to understand what it does: The unknown error comes from Apache? How is Sophos activated in the Ilias setup and when you deactivate Sophos you do it in the setup (not in Sophos)? You expect that Sophos (what command exactly) is run from the NFS?

    Christian

  • 0 in reply to QC

    Hi Christian,

    I can't tell, where the error comes from, but it pops up in Ilias:

    Sophos is (de-)activated in Ilias setup:

    Commands:

    Scan: savscav -all -nc -archive

    Clean: savscan -all -nc -remove -archive

    NFS:

    Sophos is installed inUbuntu, path /opt/sophos-av/, so it is run from the linux file system. Obviously it works ok on files uploaded to the NFS, as long as you are logged in into Ilias directly on machine C. If logged in via proxy, as normal learners would do, upload fails ...

    Uli

  • 0 in reply to Ulrich Agricola

    Hello Uli,

    first of all, there's as far as I know no savscav command or alias.  Looks like Ilias has some idea about Sophos (as it's in a drop-down), wonder why you then have to put in the command. Locally on a machine you can use savscan (or sweep) without a path as there are links in /usr/local/bin/ - apparently this won't work on a remote machine. And even if Ilias uses /opt/sophos-av/ the same path must exist on A and B.

    Christian

Unfiltered HTML