Error: 503. Service unavailable.

Working with Zimbra Talk? This is your Forum, drop here your questions with the Installation, Configuration, etc.
User avatar
jorgedlcruz
Zimbra Alumni
Zimbra Alumni
Posts: 2773
Joined: Thu May 22, 2014 4:47 pm

Re: Error: 503. Service unavailable.

Postby jorgedlcruz » Thu Jun 02, 2016 3:32 pm

Hi skflone,
I have just tried by myself and it contains the .sh file. Have you tried to download right now? What is the name of the file you download?

Best regards


Jorge de la Cruz https://jorgedelacruz.es
Systems Engineer at Veeam Software https://www.veeam.com/
skflone
Posts: 19
Joined: Mon May 23, 2016 9:48 pm

Re: Error: 503. Service unavailable.

Postby skflone » Thu Jun 02, 2016 3:46 pm

Hello The file name is zimbra-talk-install-bundle.tgz and i download from :

https://www.zimbra.com/try/zimbra-talk/thank-you/

Link Directly: https://files.zimbra.com/downloads/zimb ... bundle.tgz
Uma Shankar
Zimbra Employee
Zimbra Employee
Posts: 40
Joined: Wed Jun 01, 2016 5:01 am

Re: Error: 503. Service unavailable.

Postby Uma Shankar » Fri Jun 03, 2016 2:54 am

Hi skflone,

The link to download is https://s3.amazonaws.com/files.zimbra.c ... 2.17.2.tgz

Can you please download and re-crosscheck.

You can find the installation wiki here https://wiki.zimbra.com/wiki/How_to_Install_Zimbra_Talk

Best Regards,
Uma Shankar
mrgus
Posts: 6
Joined: Fri Jun 13, 2014 11:22 am

Re: Error: 503. Service unavailable.

Postby mrgus » Thu Jun 16, 2016 10:22 pm

After switching to the new installer, I was having inconsistent luck making a successful installation. We already had an xmpp.ourdomain.com, and the old installer would have that be one of the subdomains by default, so I thought I had to change the name. The server itself was z85test4.ourdomain.com. If I picked the option to select custom hostnames, the installer died before completing the install. Not sure if that part of the installer is bugged.

Anyhow, it seems like it's defaulting to the hostname you give at the start of installation and not actually using xmpp as a subdomain by default anymore, so that ended up not mattering. Once it was installed... back to the same 503 error. :(

I was, however, finally able to figure out how to get it to work after this point:

In the nginx config (/etc/nginx/sites-enabled/zimbra-talk), all the sections that proxy to prosody and such had the "Host" variable hardcoded to our base domain for some reason (ourdomain.com), even though prosody (at least) was set to answer to z85test4.ourdomain.com. I removed all references to our base domain, restarted nginx, and now Zimbra Talk appears to be functional.

So for example, this was the http-bind section (which proxies to prosody), as created by the installer:

Code: Select all

    location ~ /http-bind(.*)$ {
                proxy_pass http://localhost:5280;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $remote_addr;
                proxy_set_header Host ourdomain.com;


I changed it (along with other similar references in the file) to:

Code: Select all

    location ~ /http-bind(.*)$ {
                proxy_pass http://localhost:5280;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $remote_addr;
                proxy_set_header Host z85test4.ourdomain.com;



And this fixed the problem. I'm pretty certain I never gave the installer the base domain as an answer to anything, always either z85test4.ourdomain.com to refer to the talk server or z85test1.ourdomain.com to refer to our Zimbra test server, though I know it defaults to the base domain shortly after asking about the Zimbra server the first time. I changed this to z85test4 and continued.

Anyhow, this was the fix for me. It wasn't a multi-tenant install from the start, but I can see how the issue was related--it was erroring because it was getting the wrong domain (ourdomain.com instead of z85test4.ourdomain.com), which is a similar circumstance. Making a config in prosody for ourdomain.com also could have fixed it, I suppose.
User avatar
jorgedlcruz
Zimbra Alumni
Zimbra Alumni
Posts: 2773
Joined: Thu May 22, 2014 4:47 pm

Re: Error: 503. Service unavailable.

Postby jorgedlcruz » Fri Jun 17, 2016 1:53 pm

Glad to hear mrgus,
Let us know how the testing goes.

Best regards
Jorge de la Cruz https://jorgedelacruz.es
Systems Engineer at Veeam Software https://www.veeam.com/
mrgus
Posts: 6
Joined: Fri Jun 13, 2014 11:22 am

Re: Error: 503. Service unavailable.

Postby mrgus » Fri Jun 17, 2016 4:55 pm

Despite not being configured to do anything with xmpp.ourdomain.com, prosody on the talk server seems to be trying to connect to it:

Code: Select all

syslog:Jun 17 09:10:47 z85test4 prosody[2769]: mod_s2s: Best record found, will connect to xmpp.ourdomain.com.:5269
syslog:Jun 17 09:10:47 z85test4 prosody[2769]: adns: Records for xmpp.ourdomain.com. not in cache, sending query (thread: 0x1005370)...
syslog:Jun 17 09:10:47 z85test4 prosody[2769]: adns: Records for xmpp.ourdomain.com. not in cache, sending query (thread: 0x171bb80)...
syslog:Jun 17 09:10:47 z85test4 prosody[2769]: adns: Reply for xmpp.ourdomain.com. (thread: 0x1005370)
syslog:Jun 17 09:10:47 z85test4 prosody[2769]: mod_s2s: DNS reply for xmpp.ourdomain.com. gives us 192.0.2.35
syslog:Jun 17 09:10:47 z85test4 prosody[2769]: adns: Reply for xmpp.ourdomain.com. (thread: 0x171bb80)


xmpp.ourdomain.com is our pre-existing xmpp server (NOT zimbra talk). It seemed like it hadn't used it in the config (and to be honest, I can't find any mention of it anywhere), and talk even appears to be working :), but the talk server trying to connect to our existing xmpp server over and over caused the logs on the xmpp server to grow to about 17GB overnight. Debug logging was on on our server, but not 100% sure why they're talking to each other. I can't find any evidence that xmpp.xmission.com got configured for anything on the zimbra talk server, but I think maybe this happened because prosody's s2s module looks automatically looks up the base domain of whatever it's configured for (and we do have SRV records for our xmpp server).

Is it safe to disable s2s on the zimbra talk server? Or will this break functionality with some of the other components?


Here's some of the data about our pre-existing, non-zimbra talk XMPP server. It also runs prosody and there are quite a few logs, a lot of it is unique, making posting examples in a forum possibly not the easiest thing, but here are a few.

It started off like this:

Code: Select all

Jun 16 15:18:41 socket  debug   server.lua: accepted new client connection from 192.0.2.194:45827 to 5269
Jun 16 15:18:41 s2sin101a9d0    debug   Incoming s2s received <stream:stream to='ourdomain.com' from='auth.ourdomain.com' xml:lang='en' xmlns='http://etherx
.jabber.org/streams' version='1.0'>
Jun 16 15:18:41 mod_s2s debug   sending: <stream:stream xmlns:db='jabber:server:dialback' xmlns:stream='http://etherx.jabber.org/streams' version='1.0'
from='ourdomain.com' id='99372c04-e03f-4f4d-a9d4-e936615df4d2' to='auth.ourdomain.com' xml:lang='en' xmlns='jabber:server'>
Jun 16 15:18:42 s2sin101a9d0    debug   Incoming s2s received <stream:stream to='ourdomain.com' from='auth.ourdomain.com' xml:lang='en' xmlns='http://etherx
.jabber.org/streams' version='1.0'>
Jun 16 15:18:42 mod_s2s debug   sending: <stream:stream xmlns:db='jabber:server:dialback' xmlns:stream='http://etherx.jabber.org/streams' version='1.0'
from='ourdomain.com' id='1f1cc7af-8691-4634-84f6-998ada0a6e6e' to='auth.ourdomain.com' xml:lang='en' xmlns='jabber:server'>
Jun 16 15:18:42 ourdomain.com:saslauth    info    Accepting SASL EXTERNAL identity from auth.ourdomain.com
Jun 16 15:18:42 s2sin101a9d0    debug   connection auth.ourdomain.com->ourdomain.com is now authenticated for auth.ourdomain.com
Jun 16 15:18:42 s2sin101a9d0    info    incoming s2s connection auth.ourdomain.com->ourdomain.com complete
Jun 16 15:18:42 s2sin101a9d0    debug   Incoming s2s received <stream:stream to='ourdomain.com' from='auth.ourdomain.com' xml:lang='en' xmlns='http://etherx
.jabber.org/streams' version='1.0'>
Jun 16 15:18:42 mod_s2s debug   sending: <stream:stream xmlns:db='jabber:server:dialback' xmlns:stream='http://etherx.jabber.org/streams' version='1.0'
from='ourdomain.com' id='98a71555-059d-4e95-92d0-6b915e2beb9c' to='auth.ourdomain.com' xml:lang='en' xmlns='jabber:server'>
Jun 16 15:18:42 s2sin101a9d0    debug   Received[s2sin]: <iq id='Ktjp8-4' type='get' to='ourdomain.com' from='focus@auth.ourdomain.com/focus12738059367'>
Jun 16 15:18:42 mod_s2s debug   First attempt to connect to auth.ourdomain.com, starting with SRV lookup...
Jun 16 15:18:42 adns    debug   Records for _xmpp-server._tcp.auth.ourdomain.com. not in cache, sending query (thread: 0xf0d7d0)...
Jun 16 15:18:42 adns    debug   Reply for _xmpp-server._tcp.auth.ourdomain.com. (thread: 0xf0d7d0)
Jun 16 15:18:42 mod_s2s debug   auth.ourdomain.com has SRV records, handling...
Jun 16 15:18:42 mod_s2s debug   DNS reply for z85test4.ourdomain.com. gives us 192.0.2.194
Jun 16 15:18:42 s2sout118d200   info    Beginning new connection attempt to auth.ourdomain.com ([192.0.2.194]:5269)
Jun 16 15:18:51 socket  debug   server.lua: accepted new client connection from 192.0.2.194:45830 to 5269
Jun 16 15:18:51 s2sin1052060    debug   Incoming s2s received <stream:stream to='ourdomain.com' from='focus.ourdomain.com' xml:lang='en' xmlns='http://ether
x.jabber.org/streams' version='1.0'>
Jun 16 15:18:51 mod_s2s debug   sending: <stream:stream xmlns:db='jabber:server:dialback' xmlns:stream='http://etherx.jabber.org/streams' version='1.0'
from='ourdomain.com' id='6c452abc-8da6-4f19-890b-4fdbf6822bca' to='focus.ourdomain.com' xml:lang='en' xmlns='jabber:server'>
Jun 16 15:18:51 s2sin1052060    debug   Incoming s2s received <stream:stream to='ourdomain.com' from='focus.ourdomain.com' xml:lang='en' xmlns='http://ether
x.jabber.org/streams' version='1.0'>
Jun 16 15:18:51 mod_s2s debug   sending: <stream:stream xmlns:db='jabber:server:dialback' xmlns:stream='http://etherx.jabber.org/streams' version='1.0'
from='ourdomain.com' id='f39fd3c9-3530-4192-85e9-b95db7e888bc' to='focus.ourdomain.com' xml:lang='en' xmlns='jabber:server'>
Jun 16 15:18:51 ourdomain.com:saslauth    info    Accepting SASL EXTERNAL identity from focus.ourdomain.com
Jun 16 15:18:51 s2sin1052060    debug   connection focus.ourdomain.com->ourdomain.com is now authenticated for focus.ourdomain.com
Jun 16 15:18:51 s2sin1052060    info    incoming s2s connection focus.ourdomain.com->ourdomain.com complete
Jun 16 15:18:51 s2sin1052060    debug   Incoming s2s received <stream:stream to='ourdomain.com' from='focus.ourdomain.com' xml:lang='en' xmlns='http://ether
x.jabber.org/streams' version='1.0'>
Jun 16 15:18:51 mod_s2s debug   sending: <stream:stream xmlns:db='jabber:server:dialback' xmlns:stream='http://etherx.jabber.org/streams' version='1.0'
from='ourdomain.com' id='6b9c4cde-ff09-410b-bca1-03b79f14c087' to='focus.ourdomain.com' xml:lang='en' xmlns='jabber:server'>
Jun 16 15:18:51 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-5' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:18:51 mod_s2s debug   First attempt to connect to focus.ourdomain.com, starting with SRV lookup...
Jun 16 15:18:51 adns    debug   Records for _xmpp-server._tcp.focus.ourdomain.com. not in cache, sending query (thread: 0x1090e70)...
Jun 16 15:18:51 adns    debug   Reply for _xmpp-server._tcp.focus.ourdomain.com. (thread: 0x1090e70)
Jun 16 15:18:51 mod_s2s debug   focus.ourdomain.com has SRV records, handling...
Jun 16 15:18:51 mod_s2s debug   DNS reply for z85test4.ourdomain.com. gives us 192.0.2.194


Tries to connect to jitsi-videobridge as well:

Code: Select all

Jun 16 15:18:52 mod_s2s debug   First attempt to connect to jitsi-videobridge.ourdomain.com, starting with SRV lookup...
Jun 16 15:18:52 adns    debug   Records for _xmpp-server._tcp.jitsi-videobridge.ourdomain.com. not in cache, sending query (thread: 0x110de00)...
Jun 16 15:18:52 adns    debug   Reply for _xmpp-server._tcp.jitsi-videobridge.ourdomain.com. (thread: 0x110de00)
Jun 16 15:18:52 mod_s2s debug   jitsi-videobridge.ourdomain.com has SRV records, handling...
Jun 16 15:18:52 mod_s2s debug   DNS reply for z85test4.ourdomain.com. gives us 192.0.2.194
Jun 16 15:18:52 s2sout1030e30   info    Beginning new connection attempt to jitsi-videobridge.ourdomain.com ([192.0.2.194]:5269)
Jun 16 15:19:01 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-7' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:19:01 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:19:01 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-8' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:19:01 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:19:02 s2sin107d130    debug   Received[s2sin]: <iq id='3cjPv-1' type='get' to='ourdomain.com' from='jitsi-videobridge.ourdomain.com'>
Jun 16 15:19:02 s2sout1030e30   debug   trying to send over unauthed s2sout to jitsi-videobridge.ourdomain.com
Jun 16 15:19:11 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-9' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:19:11 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:19:11 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-10' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:19:11 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:19:12 s2sin107d130    debug   Received[s2sin]: <iq id='3cjPv-2' type='get' to='ourdomain.com' from='jitsi-videobridge.ourdomain.com'>
Jun 16 15:19:12 s2sout1030e30   debug   trying to send over unauthed s2sout to jitsi-videobridge.ourdomain.com
Jun 16 15:19:16 s2sin101a9d0    debug   Received[s2sin]: <iq id='Ktjp8-11' type='get' to='ourdomain.com' from='focus@auth.ourdomain.com/focus12738059367'>
Jun 16 15:19:16 s2sout118d200   debug   trying to send over unauthed s2sout to auth.ourdomain.com
Jun 16 15:19:21 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-12' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:19:21 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:19:21 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-13' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:19:21 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:19:22 s2sin107d130    debug   Received[s2sin]: <iq id='3cjPv-3' type='get' to='ourdomain.com' from='jitsi-videobridge.ourdomain.com'>
Jun 16 15:19:22 s2sout1030e30   debug   trying to send over unauthed s2sout to jitsi-videobridge.ourdomain.com
Jun 16 15:19:31 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-14' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:19:31 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:19:31 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-15' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:19:31 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:19:32 s2sin107d130    debug   Received[s2sin]: <iq id='3cjPv-4' type='get' to='ourdomain.com' from='jitsi-videobridge.ourdomain.com'>
Jun 16 15:19:32 s2sout1030e30   debug   trying to send over unauthed s2sout to jitsi-videobridge.ourdomain.com
Jun 16 15:19:41 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-16' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:19:41 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:19:41 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-17' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:19:41 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:19:42 s2sin107d130    debug   Received[s2sin]: <iq id='3cjPv-5' type='get' to='ourdomain.com' from='jitsi-videobridge.ourdomain.com'>
Jun 16 15:19:42 s2sout1030e30   debug   trying to send over unauthed s2sout to jitsi-videobridge.ourdomain.com
Jun 16 15:19:46 s2sin101a9d0    debug   Received[s2sin]: <iq id='Ktjp8-18' type='get' to='ourdomain.com' from='focus@auth.ourdomain.com/focus12738059367'>
Jun 16 15:19:46 s2sout118d200   debug   trying to send over unauthed s2sout to auth.ourdomain.com
Jun 16 15:19:51 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-19' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:19:51 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:19:51 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-20' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:19:51 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:19:52 s2sin107d130    debug   Received[s2sin]: <iq id='3cjPv-6' type='get' to='ourdomain.com' from='jitsi-videobridge.ourdomain.com'>
Jun 16 15:19:52 s2sout1030e30   debug   trying to send over unauthed s2sout to jitsi-videobridge.ourdomain.com
Jun 16 15:20:01 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-21' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:20:01 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:20:01 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-22' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:20:01 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:20:02 s2sin107d130    debug   Received[s2sin]: <iq id='3cjPv-7' type='get' to='ourdomain.com' from='jitsi-videobridge.ourdomain.com'>
Jun 16 15:20:02 s2sout1030e30   debug   trying to send over unauthed s2sout to jitsi-videobridge.ourdomain.com
Jun 16 15:20:11 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-23' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:20:11 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:20:11 s2sin1052060    debug   Received[s2sin]: <iq id='Ktjp8-24' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 16 15:20:11 s2soutfadda0    debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 16 15:20:12 s2sout118d200   debug   Destroying incomplete session ourdomain.com->auth.ourdomain.com due to inactivity
Jun 16 15:20:12 s2sout118d200   debug   sending: <stream:stream xmlns:db='jabber:server:dialback' xmlns:stream='http://etherx.jabber.org/streams' version='1.0' from='ourdomain.com' to='auth.ourdomain.com' xml:lang='en' xmlns='jabber:server'>
Jun 16 15:20:12 s2sout118d200   info    outgoing s2s stream ourdomain.com->auth.ourdomain.com closed: connection-timeout
Jun 16 15:20:12 s2sout118d200   debug   Destroying outgoing session ourdomain.com->auth.ourdomain.com: connection-timeout
Jun 16 15:20:12 s2sout118d200   info    sending error replies for 3 queued stanzas because of failed outgoing connection to auth.ourdomain.com
Jun 16 15:20:12 s2sin107d130    debug   Received[s2sin]: <iq id='3cjPv-8' type='get' to='ourdomain.com' from='jitsi-videobridge.ourdomain.com'>
Jun 16 15:20:12 s2sout1030e30   debug   trying to send over unauthed s2sout to jitsi-videobridge.ourdomain.com


Does a lot of that for a long time, apparently leaving connections open until it used up all the file descriptors:

Code: Select all

Jun 17 00:42:42 s2sout2c90ea0   debug   Destroying outgoing session ourdomain.com->jitsi-videobridge.ourdomain.com: DNS resolution failed: Too many open fil
es
Jun 17 00:42:42 s2sout2c90ea0   info    sending error replies for 1 queued stanzas because of failed outgoing connection to jitsi-videobridge.ourdomain.co
m
Jun 17 00:42:42 mod_s2s warn    Connection to jitsi-videobridge.ourdomain.com failed already, destroying session...
Jun 17 00:42:47 s2sinf71350     debug   Received[s2sin]: <iq id='Ktjp8-11320' type='get' to='ourdomain.com' from='focus@auth.ourdomain.com/focus12738059367'
>
Jun 17 00:42:47 s2sout2e6c440   debug   trying to send over unauthed s2sout to auth.ourdomain.com
Jun 17 00:42:47 s2sout2e6c440   debug   Destroying incomplete session ourdomain.com->auth.ourdomain.com due to inactivity
Jun 17 00:42:47 s2sout2e6c440   debug   sending: <stream:stream xmlns:db='jabber:server:dialback' xmlns:stream='http://etherx.jabber.org/streams' versio
n='1.0' from='ourdomain.com' to='auth.ourdomain.com' xml:lang='en' xmlns='jabber:server'>
Jun 17 00:42:47 s2sout2e6c440   info    outgoing s2s stream ourdomain.com->auth.ourdomain.com closed: connection-timeout
Jun 17 00:42:47 s2sout2e6c440   debug   Destroying outgoing session ourdomain.com->auth.ourdomain.com: connection-timeout
Jun 17 00:42:47 s2sout2e6c440   info    sending error replies for 4 queued stanzas because of failed outgoing connection to auth.ourdomain.com
Jun 17 00:42:52 s2sin11b3f40    debug   Received[s2sin]: <iq id='Ktjp8-11321' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 17 00:42:52 s2sout26537e0   debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 17 00:42:52 s2sin11b3f40    debug   Received[s2sin]: <iq id='Ktjp8-11322' type='get' to='ourdomain.com' from='focus.ourdomain.com'>
Jun 17 00:42:52 s2sout26537e0   debug   trying to send over unauthed s2sout to focus.ourdomain.com
Jun 17 00:42:52 s2sout26537e0   debug   Destroying incomplete session ourdomain.com->focus.ourdomain.com due to inactivity
Jun 17 00:42:52 s2sout26537e0   debug   sending: <stream:stream xmlns:db='jabber:server:dialback' xmlns:stream='http://etherx.jabber.org/streams' versio
n='1.0' from='ourdomain.com' to='focus.ourdomain.com' xml:lang='en' xmlns='jabber:server'>
Jun 17 00:42:52 s2sout26537e0   info    outgoing s2s stream ourdomain.com->focus.ourdomain.com closed: connection-timeout
Jun 17 00:42:52 s2sout26537e0   debug   Destroying outgoing session ourdomain.com->focus.ourdomain.com: connection-timeout
Jun 17 00:42:52 s2sout26537e0   info    sending error replies for 19 queued stanzas because of failed outgoing connection to focus.ourdomain.com
Jun 17 00:42:52 s2sin11e9cb0    debug   Received[s2sin]: <iq id='3cjPv-3388' type='get' to='ourdomain.com' from='jitsi-videobridge.ourdomain.com'>
Jun 17 00:42:52 mod_s2s debug   First attempt to connect to jitsi-videobridge.ourdomain.com, starting with SRV lookup...
Jun 17 00:42:52 adns    debug   Records for _xmpp-server._tcp.jitsi-videobridge.ourdomain.com. not in cache, sending query (thread: 0x1e23140)...
Jun 17 00:42:52 mod_s2s debug   jitsi-videobridge.ourdomain.com has no SRV records, falling back to A/AAAA
Jun 17 00:42:52 adns    debug   Records for jitsi-videobridge.ourdomain.com not in cache, sending query (thread: 0x23d5970)...
Jun 17 00:42:52 adns    debug   Records for jitsi-videobridge.ourdomain.com not in cache, sending query (thread: 0x28b7c30)...
Jun 17 00:42:52 mod_s2s debug   DNS lookup failed to get a response for jitsi-videobridge.ourdomain.com
Jun 17 00:42:52 s2sout17f5460   info    Out of connection options, can't connect to jitsi-videobridge.ourdomain.com
Jun 17 00:42:52 mod_s2s debug   No other records to try for jitsi-videobridge.ourdomain.com - destroying


At this point it mostly repeated.

We turned debug logging off on our pre-existing xmpp server and restarted it. I've also blocked it from the zimbra talk server via iptables for now.

After looking into it, I believe s2s autodiscovering the domain was the culprit, so whether it's safe to disable in Zimbra talk is my primary question at this point.

Return to “Zimbra Talk”

Who is online

Users browsing this forum: No registered users and 3 guests