View Single Post
  #19 (permalink)  
Old 11-29-2005, 08:58 AM
kevindods kevindods is offline
Special Member
 
Posts: 166
Default that now allows tls

That has moved on to allow us to attempt to log on with tls but the authentication fails - although webclient now works fine.

Zimbra.log contains the info bellow, some errors on the cert still showing:-

Nov 29 16:45:48 zimbra postfix/smtpd[11426]: 0000 16 03 01 00 30 ....0
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: read from 0910EEB8 [0911B34D] (48 bytes => -1 (0xFFFFFFFF))
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: SSL_accept:error in SSLv3 read certificate verify A
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: read from 0910EEB8 [0911B34D] (48 bytes => 48 (0x30))
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: 0000 60 c1 22 40 1d c5 ab 25|8d 87 fb 93 0c ac 64 58 `."@...% ......dX
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: 0010 20 96 b3 22 31 53 5c 5e|bb 6b 81 a9 e6 1f 72 cd .."1S\^ .k....r.
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: 0020 3e 63 23 a6 34 38 4f 16|22 df 8e d2 6f b8 df 9b >c#.48O. "...o...
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: SSL_accept:SSLv3 read finished A
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: SSL_accept:SSLv3 write change cipher spec A
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: SSL_accept:SSLv3 write finished A
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: write to 0910EEB8 [09129510] (59 bytes => 59 (0x3B))
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: 0000 14 03 01 00 01 01 16 03|01 00 30 c6 25 9b d4 fa ........ ..0.%...
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: 0010 b1 f8 83 f8 46 b0 fe 45|02 f2 ce 91 34 71 a7 5e ....F..E ....4q.^
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: 0020 1b 2e 49 1a 83 07 cb 7d|1d 46 87 af b6 84 2c 3a ..I....} .F....,:
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: 0030 10 4c 46 d7 09 c6 84 0a|25 91 11 .LF..... %..
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: SSL_accept:SSLv3 flush data
Nov 29 16:45:48 zimbra postfix/smtpd[11426]: TLS connection established from unknown[85.133.120.65]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
Nov 29 16:45:52 zimbra postfix/smtpd[11426]: warning: SASL authentication failure: Password verification failed
Nov 29 16:45:52 zimbra postfix/smtpd[11426]: warning: unknown[85.133.120.65]: SASL PLAIN authentication failed
Nov 29 16:45:52 zimbra postfix/smtpd[11426]: warning: unknown[85.133.120.65]: SASL LOGIN authentication failed
Nov 29 16:45:54 zimbra postfix/smtpd[11426]: lost connection after AUTH from unknown[85.133.120.65]
Nov 29 16:45:54 zimbra postfix/smtpd[11426]: disconnect from unknown[85.133.120.65]

Password is correct, using the web the user authenticates.

Other thing happening is the logger and snmp services wont now start, or if they do appear to start by the time you do a status check they are stopped. Could be unrelated to the certs issue.

Cant see anything in the zimbra.log relating to errors on those services. Is there somewhere I can look to get details on the service errors?

Thanks for the help, seems some movement forward. What I dont yet see is what we have been doing wrong on the install, perhaps when we see what is wrong we can work backwards!

Cheers!
Reply With Quote