6.13 McAfee Antivirus Requires Additional Configuration

After installing McAfee Antivirus support on an OES server with NSS and/or NCP volumes, various problems might be seen, including clustered volumes going comatose because of mount failures with an error code of 150.

This happens because the antivirus software is locking .trustee_dabase.xml files on NSS and NCP volumes.

To prevent these problems, make sure you do the following, as described in the McAfee documentation. (References to OES 2 apply to OES 11 as well.)

  1. Exclude the ._NETWARE and /_admin/* folders on all NSS and NCP volumes as documented in Chapter 5 > Anti-virus Exclusions in the McAfee VirusScan Enterprise for Linux 1.7.0 Best Practices Guide, except that the /_admin/* path is documented incorrectly as ._ADMIN in the McAfee guide.

    For example:

    • /_admin/* (for NSS)

    • /admin/* (for NCS)

    • /media/nss/volume_name/._NETWARE

  2. Using iManager, create a nails user and a nailsgroup group in eDirectory and assign them administrative privileges on all NSS and/or NCP volumes as documented in Chapter 2 > Prerequisites in the McAfee VirusScan Enterprise for Linux 1.7.0 Software Configuration Guide.

IMPORTANT:Be sure to configure any new NSS or NCP volumes you add to the server.