Applicable to:
- Plesk Onyx for Linux
Symptoms
- The following notification is received every hour:
CONFIG_TEXT: Message:
/etc/cron.hourly/asl:
Error: ASL has not been configured
run-parts: /etc/cron.hourly/asl exited with return code 1
EMAIL ERROR - 2 - Manual execution if the task results in the same outcome:
# run-parts /etc/cron.hourly/
/etc/cron.hourly/asl:
Error: ASL has not been configured - Executing
aum -cvia SSH results in another error:# aum -c
-------------------------------------------------------------------------------
Errors were encountered:
L CODE SOURCE MESSAGE
- ---- ----------------------------- ------------------------------------------
4 9998 Core::_get_config New key, updating config
2 2 ASLConfig::config_update An error occurred attempting to read file /etc/asl/config
3 9998 Core::_get_config Failed to update configuration
4 9998 Core::app_exit Exiting with error level 3
------------------------------------------------------------------------------- /etc/asl/configfile is empty (1 byte size):# ls -l /etc/asl/config
-rw-------. 1 tortix root 1 Aug 31 04:11 /etc/asl/config
Cause
Aum was updated, but was not configured properly or /etc/asl/config file is empty.
Resolution
Note: in case you have access to the server via SSH, check solution from the spoiler below first. Restoring the config from the backup overall is a faster way in case there is a backup.
At first, try switching ModSecurity Rule Set Back and forth. For that:
- Log into Plesk.
- Navigate to Tools & Settings > Web Application Firewall (ModSecurity) > Settings.
- Temporary select any other Rule Set, for example OWASP ModSecurity, and click 'Apply'.
- Select Atomic Basic ModSecurity back and click 'Apply'.
Those actions should re-create empty /etc/asl/config file.
In case it did not help, try restoring /etc/asl/config from the backup.
Click here to reveal additional information. SSH access is required in order to proceed.
- Log into the server via SSH.
- List all the configs of asl, there should be a previous version of this file listed, for example:
# ls -lt /etc/asl/config*
-rw-------. 1 tortix root 1 Aug 31 04:11 /etc/asl/config
-rw-------. 1 tortix root 13032 Jun 30 10:09 /etc/asl/config.rpmnew
-rw-------. 1 tortix root 13311 Jun 29 06:00 config.##### - Remove empty /etc/asl/config:
# rm -f /etc/asl/config
- Use the most recent backup of the file found on step 2 to restore it:
# cp -a /etc/asl/config.rpmnew /etc/asl/config
- Try to configure aum:
# aum -c
- Verify that the issue is gone by executing the task manually (it may take a while, in case there is no error from the notification right after the start of the command below, than all is fine):
# run-parts /etc/cron.hourly/
Comments
16 comments
After the command "run-parts /etc/cron.hourly/" nothing happens, it seems stuck.
Hi @info!
It might be possible in case there were an interference with another task that was running from /etc/cron.hourly/. In general, in case there were no errors right after the start of run-parts, just interrupt the process.
That worked. After waiting about 10-15 minutes step 3 finished, and I could proceed to step 4. Thanks!
It worked! :)
I don't understand this page : it says the issue has been resolved on atomic side, if so why os it still hapening? (last alert 2 min ago)
Hi, @Arnaud!
Based on our information, fix should he delivered in scope of the rule set updates, in case the issue is still actual, force the Atomic Basic ModSecurity rule set update by switching it on and off via Tools & Settings > Web Application Firewall.
aum -c gives -bash: aum: command not found
yum remove aum
downloaded aum-4.0.18-36.el7.art.x86_64.rpm package
yum install aum-4.0.18-36.el7.art.x86_64.rpm
run-parts /etc/cron.hourly/
now gives me new error
This Helped
https://support.plesk.com/hc/en-us/articles/115000143534-ModSecurity-failed-to-update-rule-set-modsecurity-ctl-failed-HTTP-Error-403-Forbidden
The error is now back. I followed the steps of enabling/disabling, it didn't fix it this time. Was there a recent update again?
Hi @Victoria!
Thanks for the report. We are checking this right now and will update the article accordingly.
We had this occur again today. 14 VMs. Had to manually run through each machine (as root user) with:
# aum -c
This seemed to do the trick.
Hope this helps.
Hello, @Nathan Walsh!
Thank you very much for the feedback!
I have also updated the article with the resolution in case aum -c is not working fine.
Hi again, @Victoria!
Please, check the article once again and let me know if that helps.
Same problem here (again). Neither, deactivating the Web Application Firewall NOR following all the steps until aum -c are working. I wasn't able to cp -a /etc/asl/config.rpmnew /etc/asl/config because that file does not exist. aum-c output is:
root@login:/etc/asl# aum -c
-------------------------------------------------------------------------------
Errors were encountered:
L CODE SOURCE MESSAGE
- ---- ----------------------------- ------------------------------------------
4 9998 Core::_get_config New key, updating config
2 2 ASLConfig::config_update An error occurred attempting to read file
/etc/asl/config
3 9998 Core::_get_config Failed to update configuration
4 9998 Core::app_exit Exiting with error level 3
-------------------------------------------------------------------------------
VERSION info:
---
First output was:
root@login:/tmp# ls -lt /etc/asl/config*
-rw------- 1 tortix root 1 Aug 31 06:32 /etc/asl/config
Now same situation:
root@login:/etc/asl# run-parts /etc/cron.hourly/
Error: ASL has not been configured
run-parts: /etc/cron.hourly//asl exited with return code 1
Can you make any suggestions?
Hello, @Globalhawk!
I tested it a little bit more and was able to find another workaround: in case /etc/asl/config exists and empty, and there is no backup, navigate to Tools & Settings > Web Application Firewall > Settings, select any other rule set for a moment (for example OWASP ModSecurity), apply it, and then select Atomic Basic ModSecurity back and apply it.
This actions re-created my /etc/asl/config.
Hello everybody!
The article was updated with only Plesk UI solution that should work without any need to access the server via SSH.
Do not hesitate to leave a comment in case it is not working.
Problem is solved after manually recreating the config-file (touch /ets/asl/config) and switching back to Atomic.
Please sign in to leave a comment.