Results 1 to 5 of 5

Thread: Curl problem after upgrade ZCS 8.0.7 (Path not help)

  1. #1
    aum
    aum is offline New Member
    Join Date
    May 2014
    Posts
    3
    Rep Power
    1

    Default Curl problem after upgrade ZCS 8.0.7 (Path not help)

    After the upgrade there were problems with SMTP authorization.

    Code:
    May 14 08:51:48 mx postfix/smtps/smtpd[19782]: connect from unknown[194.186.154.108]
    May 14 08:51:48 mx saslauthd[9286]: zmauth: authenticating against elected url 'https://myserver.ru:7071/service/admin/soap/' ...
    May 14 08:51:48 mx saslauthd[9286]: authentication against url 'https://myserver.ru:7071/service/admin/soap/' caused error 'curl_easy_perform: error(35): Unknown SSL protocol error in connection to myserver.ru:7071 '
    May 14 08:51:48 mx saslauthd[9286]: url 'https://myserver.ru:7071/service/admin/soap/' will not be used for (at least) 600 seconds
    May 14 08:51:48 mx saslauthd[9286]: Authentication cycle re-elected url https:/myserver.ru:7071/service/admin/soap/, giving up ...
    May 14 08:51:48 mx saslauthd[9286]: auth_zimbra: oleg auth failed: curl_easy_perform: error(35): Unknown SSL protocol error in connection to myserver.ru:7071 
    May 14 08:51:48 mx saslauthd[9286]: do_auth         : auth failure: [user=oleg] [service=smtp] [realm=] [mech=zimbra] [reason=Unknown]
    May 14 08:51:48 mx postfix/smtps/smtpd[19782]: warning: SASL authentication failure: Password verification failed
    May 14 08:51:48 mx postfix/smtps/smtpd[19782]: warning: unknown[194.186.154.108]: SASL PLAIN authentication failed: authentication failure
    May 14 08:51:48 mx saslauthd[9290]: zmauth: authenticating against elected url 'https://myserver.ru:7071/service/admin/soap/' ...
    I installed the patch according to this instruction:
    Curl patch for ZCS 8.0.7

    Code:
    /opt/zimbra/curl/bin/curl -V
    curl 7.36.0 (x86_64-unknown-linux-gnu) libcurl/7.36.0 OpenSSL/1.0.1f zlib/1.2.3.4
    Protocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s rtsp smtp smtps telnet tftp 
    Features: GSS-Negotiate IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP
    The patch does not help.
    Any ideas?

  2. #2
    alnet is offline Junior Member
    Join Date
    Apr 2014
    Posts
    5
    Rep Power
    1

    Default

    Sweet Jebus,

    I was worried I was alone on this one. I upgraded my system to 8.0.7, too - even applied the patch from the announcements section, but nada.
    Same Errors/ Version as you.

    Luckily the Server is a virtual machine, So i just rolled it back to 8.0.6 for now while running a 8.0.7 testserver.

    Anyone? Zimbra?
    Cheers!

    -Christian.

  3. #3
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,491
    Rep Power
    56

    Default

    Quote Originally Posted by alnet View Post
    I was worried I was alone on this one. I upgraded my system to 8.0.7, too - even applied the patch from the announcements section, but nada.
    Same Errors/ Version as you.
    I guess you're going to file a bug report for this with complete diagnostic information?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  4. #4
    aum
    aum is offline New Member
    Join Date
    May 2014
    Posts
    3
    Rep Power
    1

  5. #5
    aum
    aum is offline New Member
    Join Date
    May 2014
    Posts
    3
    Rep Power
    1

    Default

    The problem was solved. (not a good solution)
    as zimbra user

    zmprov mcf zimbraSSLExcludeCipherSuites ""
    zmprov modifyConfig zimbraReverseProxySSLCiphers 'RC4:HIGH:!aNULL:!MD5:!kEDH:!AD:!SSLv2'

    reinstall ZCS 8.0.7

    as root
    cd cd zcs-8.0.7_GA_6021.UBUNTU12_64.20140408123908/
    ./install.sh
    ...

    install curl path

    wget http://files.zimbra.com/downloads/se...807-updater.sh
    chmod 755 zmcurl807-updater.sh
    ./zmcurl807-updater.sh
    su - zimbra
    zmmtactl stop; zmmtactl start
    ..
    restore zimbraSSLExcludeCipherSuites

    zmprov mcf +zimbraSSLExcludeCipherSuites TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
    zmprov mcf +zimbraSSLExcludeCipherSuites TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
    ..

    Very easy.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Path for upgrade from 6.x
    By Solt in forum Administrators
    Replies: 1
    Last Post: 02-14-2012, 01:25 AM
  2. SMTP authentication failed, curl problem ?
    By iX in forum Installation
    Replies: 4
    Last Post: 10-23-2009, 02:24 AM
  3. Upgrade path from 4.5.7
    By plan9 in forum Administrators
    Replies: 1
    Last Post: 07-30-2008, 05:06 AM
  4. Upgrade path from OS to ISP ?
    By oliverm in forum Administrators
    Replies: 1
    Last Post: 09-29-2007, 10:14 AM
  5. Upgrade path to 4.0GA
    By tonyawbrey in forum Installation
    Replies: 2
    Last Post: 09-05-2006, 06:53 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •