CID Directory of users list millions -> inodes full

pacacc

I have a big problem since a couple of days. The CID directories of the users fill millions of files. User /1/1/cid has 2'520'002 files in it. This user has a couple of thousand mails (<4k).

Similar goes for user /1/2/cid.

What is going on? Does anyone have an idea where I can look?

noplan

pacacc

Version?
LogFile location so that others can have a look?
Updated?

BrNP

pacacc

noplan I have updated to the latest versions. I see the number of files in cid directory growing rapidly when adding a mobile device.
In grommunio-sync I see following errors:

26/10/2021 10:24:43 [15791] [WARN] [XY@xvz.com] /usr/share/grommunio-sync/lib/core/asdevice.php:363 Undefined property: stdClass::$folderid (8)
26/10/2021 10:24:43 [15791] [WARN] [XY@xvz.com] /usr/share/grommunio-sync/lib/core/asdevice.php:363 Undefined property: stdClass::$id (8)
26/10/2021 10:24:43 [15791] [WARN] [XY@xvz.com] DeviceManager->CheckFolderData(): Folder 'Ua27cd' has sync states but is not in the hierarchy cache. Removing states.
26/10/2021 10:24:43 [15791] [WARN] [XY@xvz.com] DeviceManager->CheckFolderData(): Folder 'Ud57be' has sync states but is not in the hierarchy cache. Removing states.
26/10/2021 10:24:43 [15791] [WARN] [XY@xvz.com] DeviceManager->CheckFolderData(): Folder 'U4c72b' has sync states but is not in the hierarchy cache. Removing states.
26/10/2021 10:24:44 [15790] [WARN] [XY@xvz.com] DeviceManager->CheckFolderData(): Folder 'U8e08a' has sync states but is not in the hierarchy cache. Removing states.
26/10/2021 10:24:44 [15790] [WARN] [XY@xvz.com] /usr/share/grommunio-sync/lib/core/asdevice.php:361 Undefined property: stdClass::$folderid (8)
26/10/2021 10:24:44 [15790] [WARN] [XY@xvz.com] /usr/share/grommunio-sync/lib/core/asdevice.php:362 Undefined property: stdClass::$folderid (8)
26/10/2021 10:24:44 [15790] [WARN] [XY@xvz.com] /usr/share/grommunio-sync/lib/core/asdevice.php:363 Undefined property: stdClass::$folderid (8)
26/10/2021 10:24:44 [15790] [WARN] [XY@xvz.com] /usr/share/grommunio-sync/lib/core/asdevice.php:363 Undefined property: stdClass::$id (8)

I also see no contacts anymore being synchronized to the mobile devices. In the WebIF mail, contacts and calender look normal.

noplan

pacacc

allright:
tail -f /var/log/grommunio-sync/grommunio-sync-error.log
shows / here he same ... ( for me here it seems some of our sync is broken)

26/10/2021 15:23:54 [ 1345] [WARN] [user@domain.tld] DeviceManager->CheckFolderData(): Folder 'U4062e' has sync states but is not in the hierarchy cache. Removing states.

what do you mean by growing rapidly ?
usin disk space or file count

whats the output of

systemctl --failed

riddler

Maybe your server is attacked by an Exchange server scanner who is looking for vulnerable Exchange servers. This was in my case and i blocked its source addresses in the firewall in front of the grommunio-server.
Try a "journalctl -f -n 5500|grep -v systemd" or a "journalctl -f -n 5500 -u saslauthd" and maybe you will see lots of failed login attempts from the same ip address.

noplan

cool thing,

journalctl -f -n 5500|grep -v systemd
journalctl -f -n 5500 -u saslauthd

yeah those "scanners" are a problem ... firewall needs some rules

will be a good time to think about fail2ban for the webIf
for getting the vector smaller