LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 06-15-2016, 09:24 AM   #1
josep68
LQ Newbie
 
Registered: Jun 2016
Posts: 7

Rep: Reputation: Disabled
Post zimbra sasl authentication rejected


Hello,
I recently installed zimbra Release 8.6.0_GA_1153.RHEL7_64_20141215151110 RHEL7_64 on Centos 7
Zimbra smtp is working perfectly fine without nay authentication. But the moment i put on the authentication it doesnt work. Error:

<info@grandistechnology.it>: SASL authentication failed; server smtp.monzambano.gov.it [62.149.128.202] said: 535 5.7.0 ... authentication rejected

For the external smtp configuration i do in this way:








echo smtp.dominio.it utenteassword > /opt/zimbra/conf/relay_password
postmap hash:/opt/zimbra/conf/relay_password
zmlocalconfig -e postfix_smtp_sasl_password_maps=hash:/opt/zimbra/conf/relay_password
zmlocalconfig -e postfix_smtp_sasl_auth_enable=yes
zmlocalconfig -e postfix_smtp_cname_overrides_servername=no
zmlocalconfig -e postfix_smtp_sasl_security_options=noanonymous
zmprov ms nomeserver.dominio.it zimbraMtaRelayHost smtp.dominio.it:25

Or in this way:

echo mailrelay.example.com relay@example.com:RelayExample > /opt/zimbra/conf/relay_password
postmap /opt/zimbra/conf/relay_password
postmap -q mailrelay.example.com /opt/zimbra/conf/relay_password
zmprov ms `zmhostname` zimbraMtaSmtpSaslPasswordMaps lmdb:/opt/zimbra/conf/relay_password
zmprov ms `zmhostname` zimbraMtaSmtpSaslAuthEnable yes
zmprov ms `zmhostname` zimbraMtaSmtpCnameOverridesServername no
zmprov ms `zmhostname` zimbraMtaSmtpSaslSecurityOptions noanonymous
zmprov ms `zmhostname` zimbraMtaRelayHost mailrelay.example.com:25





Can someone help me?
 
Old 06-15-2016, 09:44 AM   #2
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Did you do a
Code:
zmcontrol restart
as the zimbra user after editing?

Edit. Restart service. Test.

Oh Yeah, Welcome to LQ!
 
Old 06-15-2016, 10:04 AM   #3
josep68
LQ Newbie
 
Registered: Jun 2016
Posts: 7

Original Poster
Rep: Reputation: Disabled
Post sasl authentication rejected

I have already done this but it does not work anyway...

Through /opt/zimbra/libexec/zmmsgtrace i see that the message was sent :

Message ID '331988261.1.1465982577218.JavaMail.zim ... ano.gov.it'
ut-renzo.dallavalle@monzambano.gov.it -->
info@grandistechnology.it
Recipient info@grandistechnology.it
Jun 15 11:22:58 - mail.monzambano.local (192.168.0.13) --> 127.0.0.1:10026 (127.0.0.1:10026) status sent
Jun 15 11:22:58 - mail --> 127.0.0.1:10032 (127.0.0.1:10032) status sent

After a few days the message comes back with this error:

<info@grandistechnology.it>: SASL authentication failed; server smtp.monzambano.gov.it [62.149.128.202] said: 535 5.7.0 ... authentication rejected
 
Old 06-15-2016, 10:37 AM   #4
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Quote:
Originally Posted by josep68 View Post
I have already done this but it does not work anyway...

Through /opt/zimbra/libexec/zmmsgtrace i see that the message was sent :

Message ID '331988261.1.1465982577218.JavaMail.zim ... ano.gov.it'
ut-renzo.dallavalle@monzambano.gov.it -->
info@grandistechnology.it
Recipient info@grandistechnology.it
Jun 15 11:22:58 - mail.monzambano.local (192.168.0.13) --> 127.0.0.1:10026 (127.0.0.1:10026) status sent
Jun 15 11:22:58 - mail --> 127.0.0.1:10032 (127.0.0.1:10032) status sent

After a few days the message comes back with this error:

<info@grandistechnology.it>: SASL authentication failed; server smtp.monzambano.gov.it [62.149.128.202] said: 535 5.7.0 ... authentication rejected
I see these messages on my zimbra host as well.
I attributed it to some knucklehead trying to break into my server, not a SASL failure. I could be wrong.

smtp.monzambano.gov.it has several IPs associated with it. Are they all in mynetworks?
 
Old 06-15-2016, 10:55 AM   #5
josep68
LQ Newbie
 
Registered: Jun 2016
Posts: 7

Original Poster
Rep: Reputation: Disabled
sasl authentication rejected

Hi, IPs associated with smtp.monzambano.gov.it are all in mynetworks.





I could leave the dispatch of messages with the smtp zimbra , I saw that it works properly , I just went back No. 2 messages sent to the same domain and any messages sent to gmail.com or msn.com addresses it ends in junk mail
 
Old 06-15-2016, 11:43 AM   #6
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Is info@grandistechnology.it a valid and expected sender?
 
Old 06-15-2016, 12:09 PM   #7
josep68
LQ Newbie
 
Registered: Jun 2016
Posts: 7

Original Poster
Rep: Reputation: Disabled
Post sasl authentication rejected

Hi, grandistechnology.it is my domain ,is recorded on ARUBA in Italy is a major isp provider
 
Old 06-15-2016, 01:00 PM   #8
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
and all the A Records for mx.grandistechnology.it in mynetworks?
 
Old 06-15-2016, 01:49 PM   #9
josep68
LQ Newbie
 
Registered: Jun 2016
Posts: 7

Original Poster
Rep: Reputation: Disabled
Post sasl autenthication failed

Hi , sorry but I am unable to answer your question ...

info@grandistechnology was one email that I have tried to send a message from the server where I installed zimbra , the problem is also out with other recipients for example josep68@msn.com






if I remove the external SMTP authentication and leave the SMTP zimbra works also dispatched to info@grandistechnology.it
 
Old 06-15-2016, 02:38 PM   #10
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Quote:
Originally Posted by josep68 View Post
Hi , sorry but I am unable to answer your question ...

info@grandistechnology was one email that I have tried to send a message from the server where I installed zimbra , the problem is also out with other recipients for example josep68@msn.com
Tried to send how?
You sent from admin@grandistechnology.it to info@grandistechnology.it?

Have you checked the zimbra community portal at https://www.zimbra.com/documentation/ for clues or outright solutions?
 
Old 06-16-2016, 03:40 AM   #11
josep68
LQ Newbie
 
Registered: Jun 2016
Posts: 7

Original Poster
Rep: Reputation: Disabled
Post sasl authentication rejected

Hi, I send regularly from admin... to info...
 
Old 06-16-2016, 07:02 AM   #12
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Quote:
Originally Posted by josep68 View Post
Hi, I send regularly from admin... to info...
I don't know.
You've got an excess of A Records in my opinion, on every thing it seems.
I can't make hide-nor-hair of it. Sorry.
 
Old 06-16-2016, 07:10 AM   #13
josep68
LQ Newbie
 
Registered: Jun 2016
Posts: 7

Original Poster
Rep: Reputation: Disabled
Post sasl authentication rejected

Hi, thanks for your time and for your answers
 
Old 06-16-2016, 07:57 AM   #14
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
You are very welcome.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Wheezy/Postfix/Dovecot/SASL 554 5.7.1 Client host rejected: Access Denied RedSquirl Linux - Server 3 07-27-2014 12:14 PM
Postfix+Dovecot+MySQL+SASL/TLS : Client host rejected: Access denied CopalFreak Slackware 2 05-05-2011 06:41 PM
Postfix/SASL/MySQL "SASL LOGIN authentication failed" Temujin_12 Linux - Server 8 10-04-2008 10:37 PM
Authentication Rejected Gary L. Roach Linux - Security 2 04-28-2007 03:14 PM
Postfix configured SASL auth OK, but Outlook login kept rejected randy_liu_tw Linux - Software 2 01-14-2005 02:56 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 08:56 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration