Hi phoenix
currently Zimbra is working and output as per your request are as per below
Code:
[root@emailz ~]# netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
192.168.5.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
172.16.32.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth1
0.0.0.0 172.16.32.13 0.0.0.0 UG 0 0 0 eth0
Code:
[root@emailz ~]# cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1 localhost.localdomain localhost emailz
::1 localhost6.localdomain6 localhost6
Code:
[root@emailz ~]# cat /etc/resolv.conf
search internal.mitacademy
nameserver 172.16.32.2
nameserver 172.16.32.3
nameserver 172.16.56.2
nameserver 172.16.56.3
Code:
[root@emailz ~]# host `hostname`
emailz.internal.mitacademy has address 172.16.32.21
emailz.internal.mitacademy mail is handled by 10 emailz.internal.mitacademy.
Code:
[root@emailz ~]# dig internal.mitacademy mx
; <<>> DiG 9.3.3rc2 <<>> internal.mitacademy mx
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6427
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;internal.mitacademy. IN MX
;; AUTHORITY SECTION:
internal.mitacademy. 3600 IN SOA pokhara.internal.mitacademy. hostmaster.internal.mitacademy. 17737 900 600 86400 3600
;; Query time: 0 msec
;; SERVER: 172.16.32.2#53(172.16.32.2)
;; WHEN: Mon Nov 17 09:20:26 2008
;; MSG SIZE rcvd: 92
Code:
[root@emailz ~]# dig internal.mitacademy any
; <<>> DiG 9.3.3rc2 <<>> internal.mitacademy any
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21597
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 8, AUTHORITY: 0, ADDITIONAL: 4
;; QUESTION SECTION:
;internal.mitacademy. IN ANY
;; ANSWER SECTION:
internal.mitacademy. 600 IN A 172.16.32.7
internal.mitacademy. 600 IN A 172.16.32.3
internal.mitacademy. 600 IN A 172.16.32.2
internal.mitacademy. 3600 IN NS s-academic-1.syd.internal.mitaca
demy.
internal.mitacademy. 3600 IN NS s-academic2.syd.internal.mitacad
emy.
internal.mitacademy. 3600 IN NS l-pokhara.internal.mitacademy.
internal.mitacademy. 3600 IN NS pokhara.internal.mitacademy.
internal.mitacademy. 3600 IN SOA pokhara.internal.mitacademy. hos
tmaster.internal.mitacademy. 17737 900 600 86400 3600
;; ADDITIONAL SECTION:
s-academic-1.syd.internal.mitacademy. 3600 IN A 172.16.56.2
s-academic2.syd.internal.mitacademy. 3600 IN A 172.16.56.3
l-pokhara.internal.mitacademy. 3600 IN A 172.16.32.3
pokhara.internal.mitacademy. 3600 IN A 172.16.32.2
;; Query time: 1 msec
;; SERVER: 172.16.32.2#53(172.16.32.2)
;; WHEN: Mon Nov 17 09:20:57 2008
;; MSG SIZE rcvd: 299
Code:
[root@emailz ~]# dig syd.internal.mitacademy mx
; <<>> DiG 9.3.3rc2 <<>> syd.internal.mitacademy mx
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17675
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;syd.internal.mitacademy. IN MX
;; AUTHORITY SECTION:
internal.mitacademy. 3600 IN SOA pokhara.internal.mitacademy. hostmaster.internal.mitacademy. 17737 900 600 86400 3600
;; Query time: 0 msec
;; SERVER: 172.16.32.2#53(172.16.32.2)
;; WHEN: Mon Nov 17 09:21:38 2008
;; MSG SIZE rcvd: 96
Code:
[root@emailz ~]# dig syd.internal.mitacademy any
; <<>> DiG 9.3.3rc2 <<>> syd.internal.mitacademy any
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48064
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;syd.internal.mitacademy. IN ANY
;; ANSWER SECTION:
syd.internal.mitacademy. 600 IN A 172.16.56.50
syd.internal.mitacademy. 600 IN A 172.16.56.2
syd.internal.mitacademy. 600 IN A 172.16.56.3
;; Query time: 0 msec
;; SERVER: 172.16.32.2#53(172.16.32.2)
;; WHEN: Mon Nov 17 09:21:59 2008
;; MSG SIZE rcvd: 89
Code:
[zimbra@emailz ~]$ zmcontrol -v
Release 5.0.10_GA_2638.RHEL5_20081003052615 CentOS5 FOSS edition
we tried running ldapsearch with different options and we are receiving few error such as below (we can only run ldapsearch after loging in as a zimbra user). so we were wondering if you want us to run specific command and we will appreciate if you could advise us.
[zimbra@emailz ~]$ ldapsearch -h pokhara
SASL/GSSAPI authentication started
ldap_sasl_interactive_bind_s: Local error (-2)
additional info: SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (see text) (open(/tmp/krb5cc_500): No such file or directory)
--------------------------------------------------------------------------
there is no problem accessing dcs for Sub domain from zimbra server(linux) box at the time of zimbra authenication problem i.e. we can ping, we can trace route with FQDN and with ip address.
Firewll and selinux is all disabled on this server.
Ok here is how our email server is configured.
we have internet address "academic.mit.edu.au" and email address for all users are
username@academic.mit.edu.au. we do not have two domains names at this stage. zimbra server uses LDAP to connect to DCS(Windows AD) and we have two internal Domain where zimbra need to search user from.
we are trying to get our head around in implementing authentication fallback as all of us here is from windows background not linux.
we also found that IPV6 is disabled. hopefully this will help you to understand the problem better
Thank you
Bugzilla
Wiki
Source
Linear Mode
