SMTP Auth Failing?

[mikea]

I am unable to auth against the zimbra smtp server to send email.. here is the message I get:

Oct 17 13:44:04 nucular saslauthd[14226]: auth_zimbra: mike.adams auth failed: curl_easy_perform: error(7): couldn't connect to host
Oct 17 13:44:04 nucular saslauthd[14226]: do_auth : auth failure: [user=mike.adams] [service=smtp] [realm=unix-security.net] [mech=zimbra] [reason=Unknown]


saslauthd is running...

[root@nucular ~]# ps -ef | grep sasl
zimbra 14225 1 0 13:42 ? 00:00:00 /opt/zimbra/cyrus-sasl-2.1.21.ZIMBRA/sbin/saslauthd -a zimbra
zimbra 14226 14225 0 13:42 ? 00:00:00 /opt/zimbra/cyrus-sasl-2.1.21.ZIMBRA/sbin/saslauthd -a zimbra
zimbra 14228 14225 0 13:42 ? 00:00:00 /opt/zimbra/cyrus-sasl-2.1.21.ZIMBRA/sbin/saslauthd -a zimbra
zimbra 14229 14225 0 13:42 ? 00:00:00 /opt/zimbra/cyrus-sasl-2.1.21.ZIMBRA/sbin/saslauthd -a zimbra
zimbra 14230 14225 0 13:42 ? 00:00:00 /opt/zimbra/cyrus-sasl-2.1.21.ZIMBRA/sbin/saslauthd -a zimbra
root 16628 5850 0 13:45 pts/2 00:00:00 grep sasl
[root@nucular ~]#


Any clues? What is it trying to connect to?

[anand]

$ cat /opt/zimbra/cyrus-sasl/etc/saslauthd.conf

Is zimbra_url there look right?

(URL should have "/service/soap/" for the filename part of it)

[mikea]

[root@nucular docs]# cat /opt/zimbra/cyrus-sasl/etc/saslauthd.conf
zimbra_url: http://nucular.unix-security.net/service/soap/
zimbra_cert_file: /opt/zimbra/conf/smtpd.crt
zimbra_cert_check: off
[root@nucular docs]#

Is this correct?

I also notice that sasl isn't listening on any ports..

[root@nucular docs]# lsof -i | grep -i sasl
[root@nucular docs]#

[anand]

don't worry about not listening on INET socket.

In your case, the error message was clearly that libcurl could not establish the HTTP connection. The URL does look sane. Can you connect to that URL from the command line with curl or wget?

[mikea]

Originally Posted by anand

don't worry about not listening on INET socket.

In your case, the error message was clearly that libcurl could not establish the HTTP connection. The URL does look sane. Can you connect to that URL from the command line with curl or wget?

no, because I am running in https mode! Should I change the url to https?

[anand]

change to https in saslauthd.conf and try to run zmsaslauthdctl restart.

(One disclaimer though - check the config file again after you do this - we do some config file rewrite/publish on service start that might trash your change!)

There is definitely a bug here - that you select https mode and we don't publish that change to the sasl config file. I'll open a bugzilla for this.

[anand]

bugzilla #4244.

[mikea]

Originally Posted by anand

change to https in saslauthd.conf and try to run zmsaslauthdctl restart.

(One disclaimer though - check the config file again after you do this - we do some config file rewrite/publish on service start that might trash your change!)

There is definitely a bug here - that you select https mode and we don't publish that change to the sasl config file. I'll open a bugzilla for this.

The change does get clobbered.. Where do I change it for good?

[marcmac]

Change saslauthd.conf.in in the same directory, then restart sasl.

[mikea]

This fixed my problem, thanks!