authentication problem - AD

[medvedolos]

Hi all,
during last several weeks we face a problem with authentication. Our Zimbra (NE 6.0.10) authenticates users against AD 2008. It used to work without any troubles until now. I've upgraded Zimbra from 6.0.8 to 6.0.10 yesterday, no error messages given, problem remains.

When user tries to login he needs to wait for a couple of minutes and then gets a message "???remote.TIMEOUT???" when coming from inside of our network or PROXY ERROR when coming from outside. Which is strange because proxy is not enabled (see enabled services list below). Command "zmcontrol restart" helps.

This problem appears approximately once per two days. But from time to time it happens several times a day. Load is not high, neither IO operations.

Does anybody have a clue how can something like this happen? It would be very helpful.

Thanks,
Jan

Enabled services:
zimbraServiceEnabled: antivirus
zimbraServiceEnabled: antispam
zimbraServiceEnabled: logger
zimbraServiceEnabled: mailbox
zimbraServiceEnabled: memcached
zimbraServiceEnabled: mta
zimbraServiceEnabled: convertd
zimbraServiceEnabled: stats
zimbraServiceEnabled: snmp
zimbraServiceEnabled: ldap
zimbraServiceEnabled: spell

Error message in mailbox.log:
2011-01-19 08:20:20,015 INFO [btpool0-11://OURSERVER/service/soap/ImportDataRequest] [name=CLIENTEMAIL;mid=856;ip=SERVERIP;ua=ZimbraWebC lient - IE7 (Win)/6.0.10_GA_2692;ds=OURDS;] SoapEngine - handler exception
com.zimbra.common.service.ServiceException: system failure: Unable to connect to IMAP server: DataSource: { id=03d4791a-7bcb-406b-8099-1ea7988bd705, type=imap, isEnabled=true, name=Studijni, host=OURSERVER, port=993, connectionType=ssl, username=USERNAME, folderId=391 }
ExceptionId:btpool0-11://OURSERVER/service/soap/ImportDataRequest:1295421619964:211837f126527f94
Code:service.FAILURE
at com.zimbra.common.service.ServiceException.FAILURE (ServiceException.java:248)
at com.zimbra.cs.datasource.imap.ConnectionManager.ne wConnection(ConnectionManager.java:161)
...
at org.mortbay.io.nio.SelectChannelEndPoint.run(Selec tChannelEndPoint.java:413)
at org.mortbay.thread.BoundedThreadPool$PoolThread.ru n(BoundedThreadPool.java:451)
Caused by: javax.security.auth.login.LoginException: Timeout waiting for response
at com.zimbra.cs.datasource.imap.ConnectionManager.ne wConnection(ConnectionManager.java:150)

[phoenix]

Please update your forum profile with the output of the following command (do not post the output in this thread):

zmcontrol -v

Originally Posted by medvedolos

Enabled services:
zimbraServiceEnabled: antivirus
zimbraServiceEnabled: antispam
zimbraServiceEnabled: logger
zimbraServiceEnabled: mailbox
zimbraServiceEnabled: memcached
zimbraServiceEnabled: mta
zimbraServiceEnabled: convertd
zimbraServiceEnabled: stats
zimbraServiceEnabled: snmp
zimbraServiceEnabled: ldap
zimbraServiceEnabled: spell

If this is a single server, why do you have the proxy (memcached) installed. You should not have that on a single server as it can cause problems, that's what's throwing the error according to your message above. Search the forums for details on how to remove and disable it. If you have a multi-server then you should confirm the status of the services with the following:

zmcontrol status

[medvedolos]

Bill, thanks for a quick reply. I'll remove it and get back with result.

Probably it is relic of previous configurations.

Best regards

[medvedolos]

Hi, unfortunatelly removing memcached from enabled services did not help. Would you have any other idea?