Multi Proxy - mail client failed

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
thonglm
Posts: 12
Joined: Mon Aug 29, 2016 12:54 pm

Multi Proxy - mail client failed

Post by thonglm »

Hi all,

My system Zimbra 8.6.0 U7 on RHEL 6.4:

Server1: Ldap/store/apache/logger/snmp (they are all uses normal ports-http/imap/pop - Mailmode:http;)
Server2: mta/snmp/proxy (the upstream proxy use http - zimbraReverseProxySSLToUpstreamEnabled FALSE; proxymode mixed;)
It works fine!

I added Server3 (to share proxy loading and use one more mta relay), exactly the same with Server2.

Everything is fine, except the mail client. I cann't send by any mail client (pops/imaps is ok). It says smtp authentication error.

On server2: zimbraMtaAuthURL: https://<server1>:443/service/soap/ (I don't know why it works!)
On server3: zimbraMtaAuthURL: https://<server1>:443/service/soap/
The server3 ip was addded to zimbraHttpThrottleSafeIPs.

When using the Server3 to send mail, the log:

Code: Select all

Oct  3 00:51:18 mail2 saslauthd[83244]: authentication against url 'https://<server1>:7071/service/admin/soap/' caused error 'curl_easy_perform: error(28): Connection timed out after 15001 milliseconds'
Oct  3 00:51:18 mail2 saslauthd[83244]: authentication against url 'https://<server1>:7071/service/admin/soap/' caused error 'curl_easy_perform: error(28): Connection timed out after 15001 milliseconds'
Oct  3 00:51:18 mail2 saslauthd[83244]: url 'https://<server1>:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Oct  3 00:51:18 mail2 saslauthd[83244]: url 'https://<server1>:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Oct  3 00:51:18 mail2 saslauthd[83244]: Authentication cycle re-elected url https://<server1>:7071/service/admin/soap/, giving up ...
Oct  3 00:51:18 mail2 postfix/smtps/smtpd[107202]: warning: unknown[10.0.160.99]: SASL LOGIN authentication failed: authentication failure
Oct  3 00:51:18 mail2 postfix/smtps/smtpd[107202]: warning: unknown[10.0.160.99]: SASL LOGIN authentication failed: authentication failure
Oct  3 00:51:18 mail2 saslauthd[83244]: Authentication cycle re-elected url https://<server1>:7071/service/admin/soap/, giving up ...
Oct  3 00:51:18 mail2 saslauthd[83244]: auth_zimbra: my_name@my.domain.com auth failed: curl_easy_perform: error(28): Connection timed out after 15001 milliseconds
Oct  3 00:51:18 mail2 saslauthd[83244]: auth_zimbra: my_name@my.domain.com auth failed: curl_easy_perform: error(28): Connection timed out after 15001 milliseconds
Oct  3 00:51:18 mail2 saslauthd[83244]: do_auth         : auth failure: [user=my_name@my.domain.com] [service=smtp] [realm=my.domain.com] [mech=zimbra] [reason=Unknown]
Oct  3 00:51:18 mail2 saslauthd[83244]: do_auth         : auth failure: [user=my_name@my.domain.com] [service=smtp] [realm=my.domain.com] [mech=zimbra] [reason=Unknown]
Oct  3 00:51:18 mail2 postfix/smtps/smtpd[107202]: lost connection after AUTH from unknown[10.0.160.99]
Oct  3 00:51:18 mail2 postfix/smtps/smtpd[107202]: lost connection after AUTH from unknown[10.0.160.99]
Oct  3 00:51:18 mail2 postfix/smtps/smtpd[107202]: disconnect from unknown[10.0.160.99]
Oct  3 00:51:18 mail2 postfix/smtps/smtpd[107202]: disconnect from unknown[10.0.160.99]
Oct  3 00:51:19 mail2 postfix/smtps/smtpd[107202]: connect from unknown[10.0.160.99]
Oct  3 00:51:19 mail2 postfix/smtps/smtpd[107202]: connect from unknown[10.0.160.99]
Oct  3 00:51:19 mail2 postfix/smtps/smtpd[107202]: Anonymous TLS connection established from unknown[10.0.160.99]: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)
Oct  3 00:51:19 mail2 postfix/smtps/smtpd[107202]: Anonymous TLS connection established from unknown[10.0.160.99]: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)
Oct  3 00:51:20 mail2 saslauthd[83249]: zmauth: authenticating against elected url 'https://<server1>:7071/service/admin/soap/' ...
Oct  3 00:51:20 mail2 saslauthd[83249]: zmauth: authenticating against elected url 'https://<server1>:7071/service/admin/soap/' ...
Please help me this problem.
Thank you.
thonglm
Posts: 12
Joined: Mon Aug 29, 2016 12:54 pm

Re: Multi Proxy - mail client failed

Post by thonglm »

I think I found the problem, there's a firewall missed.

Sorry admin, I cann't delete this post.
Post Reply