Postfix errors after upgrade to 8.8.15

Ask questions about your setup or get help installing ZCS server (ZD section below).
Post Reply
sigtrap
Posts: 22
Joined: Sat Sep 13, 2014 1:35 am

Postfix errors after upgrade to 8.8.15

Post by sigtrap »

I am running a very small Zimbra instance on a Ubuntu 16.04.7 LTS (GNU/Linux 4.4.0-92-generic x86_64).
I have just upgraded a 8.7.11 to Release 8.8.15.GA.3869.UBUNTU16.64 UBUNTU16_64 FOSS edition, Patch 8.8.15_P32.

I have a problem with web interface viewtopic.php?f=13&t=70877 but when I looked in the logs I see other problems too.

Code: Select all

Jun 20 01:07:41 master postfix/pickup[8514]: CA3BB3221CF9: uid=999 from=<zimbra>
Jun 20 01:07:41 master postfix/proxymap[8519]: warning: ldap:/opt/zimbra/conf/ldap-canonical.cf is unavailable. open /opt/zimbra/conf/ldap-canonical.cf: Permission denied
Jun 20 01:07:41 master postfix/cleanup[12285]: warning: proxy:ldap:/opt/zimbra/conf/ldap-canonical.cf lookup error for "zimbra@master.sigtrap.org"
Jun 20 01:07:41 master postfix/cleanup[12285]: warning: CA3BB3221CF9: canonical_maps map lookup problem for zimbra@master.sigtrap.org -- message not accepted, try again later
Jun 20 01:07:41 master postfix/pickup[8514]: warning: maildrop/47B2F3224984: error writing CA3BB3221CF9: queue file write error
Jun 20 01:07:41 master postfix/pickup[8514]: CB3A23221CF9: uid=1002 from=<zimbra>
Jun 20 01:07:41 master postfix/proxymap[8519]: warning: ldap:/opt/zimbra/conf/ldap-canonical.cf is unavailable. open /opt/zimbra/conf/ldap-canonical.cf: Permission denied
Jun 20 01:07:41 master postfix/cleanup[12282]: warning: proxy:ldap:/opt/zimbra/conf/ldap-canonical.cf lookup error for "zimbra@master.sigtrap.org"
Jun 20 01:07:41 master postfix/cleanup[12282]: warning: CB3A23221CF9: canonical_maps map lookup problem for zimbra@master.sigtrap.org -- message not accepted, try again later
Jun 20 01:07:41 master postfix/pickup[8514]: warning: maildrop/6707B3223360: error writing CB3A23221CF9: queue file write error
UID 999 is zimbra in passwd but UID 1002 is postfix.

I have as root run
/opt/zimbra/libexec/zmfixperms -extended

In desperation I have set 644 on ldap-canonical.cf to see if it helps. My permissions:

Code: Select all

-rw-r-----  1 zimbra postfix    361 Jun 20 00:50 ldap-vmm.cf
-rw-r-----  1 zimbra postfix    367 Jun 20 00:50 ldap-vmd.cf
-rw-r-----  1 zimbra postfix    569 Jun 20 00:50 ldap-vam.cf
-rw-r-----  1 zimbra postfix    367 Jun 20 00:50 ldap-vad.cf
-rw-r--r--  1 zimbra postfix    451 Jun 20 00:50 ldap-canonical.cf
-rw-r-----  1 zimbra postfix    379 Jun 20 00:50 ldap-transport.cf
-rw-r-----  1 zimbra postfix    611 Jun 20 00:50 ldap-slm.cf
-rw-r--r--  1 zimbra postfix    493 Jun 20 00:50 ldap-splitdomain.cf
The bind_pw for bind_dn=zmpostfix is not the same in ldap-slm.cf as for the rest of the ldap-files.

Upgrade to 8.8.15 was reported ok but I can't send email and receiving email gets errors to.

Code: Select all

Jun 20 01:13:40 master postfix/proxymap[8519]: warning: ldap:/opt/zimbra/conf/ldap-vad.cf is unavailable. open /opt/zimbra/conf/ldap-vad.cf: Permission denied
Jun 20 01:13:40 master postfix/trivial-rewrite[8521]: warning: virtual_alias_domains: proxy:ldap:/opt/zimbra/conf/ldap-vad.cf: table lookup problem
Jun 20 01:13:40 master postfix/trivial-rewrite[8521]: warning: virtual_alias_domains lookup failure
Jun 20 01:13:40 master postfix/proxymap[8519]: warning: ldap:/opt/zimbra/conf/ldap-vad.cf is unavailable. open /opt/zimbra/conf/ldap-vad.cf: Permission denied
Jun 20 01:13:40 master postfix/trivial-rewrite[8521]: warning: virtual_alias_domains: proxy:ldap:/opt/zimbra/conf/ldap-vad.cf: table lookup problem
Jun 20 01:13:40 master postfix/trivial-rewrite[8521]: warning: virtual_alias_domains lookup failure
Jun 20 01:13:40 master postfix/proxymap[8519]: warning: ldap:/opt/zimbra/conf/ldap-vad.cf is unavailable. open /opt/zimbra/conf/ldap-vad.cf: Permission denied
Jun 20 01:13:40 master postfix/trivial-rewrite[8521]: warning: virtual_alias_domains: proxy:ldap:/opt/zimbra/conf/ldap-vad.cf: table lookup problem
Jun 20 01:13:40 master postfix/trivial-rewrite[8521]: warning: virtual_alias_domains lookup failure
Jun 20 01:13:40 master postfix/smtpd[15403]: NOQUEUE: reject: RCPT from xxx[xxx]: 451 4.3.0 <xxx>: Temporary lookup failure; from=<xxx> to=<ian@sigtrap.org> proto=ESMTP helo=<xxx>

Code: Select all

Jun 20 01:14:11 master postfix/proxymap[8519]: warning: ldap:/opt/zimbra/conf/ldap-vad.cf is unavailable. open /opt/zimbra/conf/ldap-vad.cf: Permission denied
Jun 20 01:14:11 master postfix/trivial-rewrite[8521]: warning: virtual_alias_domains: proxy:ldap:/opt/zimbra/conf/ldap-vad.cf: table lookup problem
Jun 20 01:14:11 master postfix/trivial-rewrite[8521]: warning: virtual_alias_domains lookup failure
Jun 20 01:14:11 master postfix/proxymap[8519]: warning: ldap:/opt/zimbra/conf/ldap-vad.cf is unavailable. open /opt/zimbra/conf/ldap-vad.cf: Permission denied
Jun 20 01:14:11 master postfix/trivial-rewrite[8521]: warning: virtual_alias_domains: proxy:ldap:/opt/zimbra/conf/ldap-vad.cf: table lookup problem
Jun 20 01:14:11 master postfix/trivial-rewrite[8521]: warning: virtual_alias_domains lookup failure
Jun 20 01:14:11 master postfix/proxymap[8519]: warning: ldap:/opt/zimbra/conf/ldap-vad.cf is unavailable. open /opt/zimbra/conf/ldap-vad.cf: Permission denied
Jun 20 01:14:11 master postfix/trivial-rewrite[8521]: warning: virtual_alias_domains: proxy:ldap:/opt/zimbra/conf/ldap-vad.cf: table lookup problem
Jun 20 01:14:11 master postfix/trivial-rewrite[8521]: warning: virtual_alias_domains lookup failure
Jun 20 01:14:11 master postfix/smtps/smtpd[15531]: NOQUEUE: reject: RCPT from unknown[192.168.0.1]: 451 4.3.0 <sigtrap@xxx>: Temporary lookup failure; from=<sigtrap@xxx> to=<xxx> proto=ESMTP helo=<[192.168.0.165]>
I need help, thanks
//Sigtrap
Top
sigtrap
Posts: 22
Joined: Sat Sep 13, 2014 1:35 am

Re: Postfix errors after upgrade to 8.8.15

Post by sigtrap »

Add the logs of the start of postfix:

Code: Select all

Jun 20 08:21:12 master /postfix-script[28447]: starting the Postfix mail system
Jun 20 08:21:12 master postfix/master[28449]: daemon started -- version 3.6.1, configuration /opt/zimbra/common/conf
Jun 20 08:21:12 master zimbramon[24271]: 24271:info: Starting stats via zmcontrol
Jun 20 08:21:12 master postfix/proxymap[28457]: error: open /opt/zimbra/conf/ldap-vam.cf: Permission denied
Jun 20 08:21:12 master postfix/pickup[28452]: 63DF93224B45: uid=999 from=<zimbra>
Jun 20 08:21:12 master postfix/proxymap[28457]: error: open /opt/zimbra/conf/ldap-vad.cf: Permission denied
Jun 20 08:21:12 master postfix/proxymap[28457]: error: open /opt/zimbra/conf/ldap-vmd.cf: Permission denied
Jun 20 08:21:12 master postfix/proxymap[28457]: error: open /opt/zimbra/conf/ldap-transport.cf: Permission denied
Jun 20 08:21:12 master postfix/proxymap[28457]: warning: ldap:/opt/zimbra/conf/ldap-transport.cf is unavailable. open /opt/zimbra/conf/ldap-transport.cf: Permission denied
Jun 20 08:21:12 master postfix/trivial-rewrite[28458]: warning: proxy:ldap:/opt/zimbra/conf/ldap-transport.cf lookup error for "*"
Jun 20 08:21:12 master postfix/proxymap[28457]: warning: ldap:/opt/zimbra/conf/ldap-transport.cf is unavailable. open /opt/zimbra/conf/ldap-transport.cf: Permission denied
Jun 20 08:21:12 master postfix/trivial-rewrite[28458]: warning: proxy:ldap:/opt/zimbra/conf/ldap-transport.cf lookup error for "*"
Jun 20 08:21:12 master postfix/proxymap[28457]: warning: ldap:/opt/zimbra/conf/ldap-vam.cf is unavailable. open /opt/zimbra/conf/ldap-vam.cf: Permission denied
Jun 20 08:21:12 master postfix/cleanup[28456]: warning: proxy:ldap:/opt/zimbra/conf/ldap-vam.cf lookup error for "zimbra@master.sigtrap.org"
Jun 20 08:21:12 master postfix/cleanup[28456]: warning: 63DF93224B45: virtual_alias_maps map lookup problem for zimbra@master.sigtrap.org -- message not accepted, try again later
Jun 20 08:21:12 master postfix/pickup[28452]: 94B893224B45: uid=1002 from=<zimbra>
Jun 20 08:21:12 master postfix/cleanup[28456]: 94B893224B45: message-id=<20220620062112.94B893224B45@master.sigtrap.org>
Jun 20 08:21:12 master postfix/proxymap[28457]: warning: ldap:/opt/zimbra/conf/ldap-vam.cf is unavailable. open /opt/zimbra/conf/ldap-vam.cf: Permission denied
Jun 20 08:21:12 master postfix/cleanup[28456]: warning: proxy:ldap:/opt/zimbra/conf/ldap-vam.cf lookup error for "root@master.sigtrap.org"
Jun 20 08:21:12 master postfix/cleanup[28456]: warning: 94B893224B45: virtual_alias_maps map lookup problem for root@master.sigtrap.org -- message not accepted, try again later
Jun 20 08:21:12 master postfix/pickup[28452]: A291A3224B45: uid=999 from=<zimbra>
Jun 20 08:21:12 master postfix/proxymap[28457]: warning: ldap:/opt/zimbra/conf/ldap-vam.cf is unavailable. open /opt/zimbra/conf/ldap-vam.cf: Permission denied
Jun 20 08:21:12 master postfix/cleanup[28456]: warning: proxy:ldap:/opt/zimbra/conf/ldap-vam.cf lookup error for "zimbra@master.sigtrap.org"
Jun 20 08:21:12 master postfix/cleanup[28456]: warning: A291A3224B45: virtual_alias_maps map lookup problem for zimbra@master.sigtrap.org -- message not accepted, try again later
Top
phoenix
Ambassador
Ambassador
Posts: 27278
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Postfix errors after upgrade to 8.8.15

Post by phoenix »

Shutdown your ZCS server and run the following then restart the server:

Code: Select all

/opt/zimbra/libexec/zmfixperms -verbose -extended
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
Top
sigtrap
Posts: 22
Joined: Sat Sep 13, 2014 1:35 am

Re: Postfix errors after upgrade to 8.8.15

Post by sigtrap »

phoenix wrote:Shutdown your ZCS server and run the following then restart the server:

Code: Select all

/opt/zimbra/libexec/zmfixperms -verbose -extended
I have tried this before and did it now again. Took down Zimbra.

Code: Select all

Fixing ownership and permissions on /opt/zimbra/conf
Fixing permissions on /opt/zimbra/conf/ca
Fixing permissions on /opt/zimbra/conf/ca/commercial_ca_1.crt
Fixing permissions on /opt/zimbra/conf/ca/commercial_ca_2.crt
Fixing permissions on /opt/zimbra/conf/ca/ca.pem
Fixing ownership and permissions on /opt/zimbra/conf/ldap-canonical.cf
Fixing ownership and permissions on /opt/zimbra/conf/ldap-slm.cf
Fixing ownership and permissions on /opt/zimbra/conf/ldap-transport.cf
Fixing ownership and permissions on /opt/zimbra/conf/ldap-vad.cf
Fixing ownership and permissions on /opt/zimbra/conf/ldap-vam.cf
Fixing ownership and permissions on /opt/zimbra/conf/ldap-vmd.cf
Fixing ownership and permissions on /opt/zimbra/conf/ldap-vmm.cf
Fixing permissions and ownership on /opt/zimbra/conf/nginx.crt
Fixing permissions and ownership on /opt/zimbra/conf/slapd.crt
Fixing permissions and ownership on /opt/zimbra/conf/smtpd.crt
Fixing permissions and ownership on /opt/zimbra/conf/nginx.key
Fixing permissions and ownership on /opt/zimbra/conf/slapd.key
Fixing permissions and ownership on /opt/zimbra/conf/smtpd.key
Fixing permissions and ownership on /opt/zimbra/conf/zmssl.cnf
Fixing ownership and permissions on /var/log/zimbra.log
Fixing ownership and permissions on /opt/zimbra/conf/crontabs
Fixing ownership and permissions on /opt/zimbra/common/lib/jylibs
Fixing ownership and permissions on /opt/zimbra/lib
Fixing ownership and permissions on /opt/zimbra/db
Fixing ownership and permissions on /opt/zimbra/data/sasl2/state
Fixing ownership and permissions on /opt/zimbra/data/amavisd
Fixing ownership and permissions on /opt/zimbra/jetty
Fixing ownership and permissions on /opt/zimbra/ssl
Fixing ownership and permissions on /opt/zimbra/data/ldap
Fixing ownership and permissions on /opt/zimbra/logger/db
Fixing ownership and permissions on /opt/zimbra/zmstat
Fixing postfix related permissions
Fixing ownership and permissions on /opt/zimbra/data/postfix
Fixing ownership of /opt/zimbra/index
Fixing ownership of /opt/zimbra/backup
Fixing ownership of /opt/zimbra/redolog
Fixing ownership of /opt/zimbra/store
Log from restarted Ubuntu. Same error:

Code: Select all

Jun 20 19:35:02 master /postfix-script[5260]: starting the Postfix mail system
Jun 20 19:35:02 master postfix/master[5263]: daemon started -- version 3.6.1, configuration /opt/zimbra/common/conf
Jun 20 19:35:02 master zimbramon[1339]: 1339:info: Starting stats via zmcontrol
Jun 20 19:35:02 master postfix/proxymap[5270]: error: open /opt/zimbra/conf/ldap-canonical.cf: Permission denied
Jun 20 19:35:02 master postfix/proxymap[5270]: error: open /opt/zimbra/conf/ldap-vam.cf: Permission denied
Jun 20 19:35:02 master postfix/pickup[5264]: A47063224BE4: uid=1002 from=<zimbra>
Jun 20 19:35:02 master postfix/proxymap[5270]: error: open /opt/zimbra/conf/ldap-vad.cf: Permission denied
Jun 20 19:35:02 master postfix/proxymap[5270]: error: open /opt/zimbra/conf/ldap-vmd.cf: Permission denied
Jun 20 19:35:02 master postfix/proxymap[5270]: error: open /opt/zimbra/conf/ldap-transport.cf: Permission denied
Jun 20 19:35:02 master postfix/proxymap[5270]: warning: ldap:/opt/zimbra/conf/ldap-transport.cf is unavailable. open /opt/zimbra/conf/ldap-transport.cf: Permission denied
Jun 20 19:35:02 master postfix/trivial-rewrite[5278]: warning: proxy:ldap:/opt/zimbra/conf/ldap-transport.cf lookup error for "*"
Jun 20 19:35:02 master postfix/proxymap[5270]: warning: ldap:/opt/zimbra/conf/ldap-transport.cf is unavailable. open /opt/zimbra/conf/ldap-transport.cf: Permission denied
Jun 20 19:35:02 master postfix/trivial-rewrite[5278]: warning: proxy:ldap:/opt/zimbra/conf/ldap-transport.cf lookup error for "*"
Jun 20 19:35:02 master postfix/proxymap[5270]: warning: ldap:/opt/zimbra/conf/ldap-canonical.cf is unavailable. open /opt/zimbra/conf/ldap-canonical.cf: Permission denied
Jun 20 19:35:02 master postfix/cleanup[5268]: warning: proxy:ldap:/opt/zimbra/conf/ldap-canonical.cf lookup error for "zimbra@master.sigtrap.org"
Jun 20 19:35:02 master postfix/cleanup[5268]: warning: A47063224BE4: canonical_maps map lookup problem for zimbra@master.sigtrap.org -- message not accepted, try again later
Jun 20 19:35:02 master postfix/pickup[5264]: warning: maildrop/47B2F3224984: error writing A47063224BE4: queue file write error
Jun 20 19:35:02 master postfix/pickup[5264]: B79373224BE4: uid=1002 from=<zimbra>
Permissions:

Code: Select all

-rw-r----- 1 zimbra postfix 451 Jun 20 19:34 ldap-canonical.cf
-rw-r--r-- 1 zimbra postfix 443 Feb 11  2017 ldap-scm.cf
-rw-r----- 1 zimbra postfix 611 Jun 20 19:34 ldap-slm.cf
-rw-r--r-- 1 zimbra postfix 493 Jun 20 19:34 ldap-splitdomain.cf
-rw-r----- 1 zimbra postfix 379 Jun 20 19:34 ldap-transport.cf
-rw-r----- 1 zimbra postfix 367 Jun 20 19:34 ldap-vad.cf
-rw-r----- 1 zimbra postfix 569 Jun 20 19:34 ldap-vam.cf
-rw-r----- 1 zimbra postfix 367 Jun 20 19:34 ldap-vmd.cf
-rw-r----- 1 zimbra postfix 361 Jun 20 19:34 ldap-vmm.cf
(I also did a 'zmprov md zploit.com zimbraVirtualHostName master.sigtrap.org' accordingly https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P32 but I only has zploit.com as an alias and don't use SSO. Nothing changed.)

Tanks anyway. This problem is so strange. How hard can it be to make Zimbra to read the files...
//Sigtrap
Top
User avatar
JDunphy
Outstanding Member
Outstanding Member
Posts: 901
Joined: Fri Sep 12, 2014 11:18 pm
Location: Victoria, BC
ZCS/ZD Version: 9.0.0_P39 NETWORK Edition

Re: Postfix errors after upgrade to 8.8.15

Post by JDunphy »

sigtrap wrote: Jun 20 19:35:02 master postfix/proxymap[5270]: error: open /opt/zimbra/conf/ldap-canonical.cf: Permission denied
Jun 20 19:35:02 master postfix/proxymap[5270]: error: open /opt/zimbra/conf/ldap-vam.cf: Permission denied
What uid,gid is process 5270 above running as?

Code: Select all

% su -
# cat /proc/5270/status | egrep -i '^(uid|gid)'
or
#  ps -eo euser,ruser,suser,fuser,f,comm,label,pid | grep 5270
Does that match up with what you expect for /opt/zimbra/conf/ldap-canonical.cf and it's permissions.

Also verify this.

Code: Select all

% cat /etc/sudoers.d/02_zimbra-mta
%zimbra ALL=NOPASSWD:/opt/zimbra/common/sbin/postfix
%zimbra ALL=NOPASSWD:/opt/zimbra/common/sbin/postalias
%zimbra ALL=NOPASSWD:/opt/zimbra/common/sbin/qshape.pl
%zimbra ALL=NOPASSWD:/opt/zimbra/common/sbin/postconf
%zimbra ALL=NOPASSWD:/opt/zimbra/common/sbin/postsuper
%zimbra ALL=NOPASSWD:/opt/zimbra/common/sbin/postcat
%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmqstat
%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmmtastatus
I'll read your posts some more to see if anything else jumps out.

Jim
Top
sigtrap
Posts: 22
Joined: Sat Sep 13, 2014 1:35 am

Re: Postfix errors after upgrade to 8.8.15

Post by sigtrap »

Instead of trying to fix the server I bought a new server and installed Ubuntu 20.04 on it following the normal guides:
https://habibza.in/install-zimbra-8-8-1 ... ion-part1/
https://habibza.in/install-zimbra-8-8-1 ... -04-part2/

Then I just moved over the accounts using this guide:
https://habibza.in/zimbra-server-migrat ... ct-method/

So instead of solving the issue I migrated from Zimbra 8.8.15 on Ubuntu 16.04 to Zimbra 8.8.15 on Ubuntu 20.04.

Have some settings and tweaks to do but I am sure I will get it to work.
Thanks for the help
//Sigtrap
Top
Post Reply

Return to “Installation and Upgrade”