[SOLVED] queue status problem

[jayam]

Hi i'm having problem with my zimbra install. first it was working, now im experiencing this problem:

Message: system failure: exception during auth {RemoteManager: mail.example.com->zimbra@mail.example.com:22}
Error code: service.FAILURE
Method: ZmCsfeCommand.prototype.invoke
Details:soap:Receiver

Does this concerns with my ssh daemon running on my system?

Thanks,

-Jayam-

[phoenix]

Originally Posted by jayam

Does this concerns with my ssh daemon running on my system?

Yes, it does. What have you changed/

[jayam]

I have change my sshd_config.

#ListenAddress 0.0.0.0
ListenAddress 192.168.100.21


Does zimbra uses ssh port for queue status?

Thanks

[phoenix]

Originally Posted by jayam

Does zimbra uses ssh port for queue status?

Yes, port 22.

[jayam]

thanks i have to change the ports in which ssh listen by default and give the 22 to zimbra.

So how about the security issue about zimbra using port 22 to the used by the queue.

Thanks

[phoenix]

In a properly secured system behind a firewall there is no security issue with Zimbra using port 22. You should never have port 22 on your mail server open to the internet. I don't really understand what you're asking.

[mmorse]

If you want to change it to like port 23:
1. edit /etc/sshd_config and set the port to 23

port 23

2. stop/start/restart sshd

/etc/init.d/ssh restart

3. su - zimbra
4. change zimbra's ssh port to 23

zmprov ms server.domain.com zimbraRemoteManagementPort 23

5. generate new ssh keys

cd /opt/zimbra/bin/
./zmsshkeygen

6. deploy the keys

./zmupdateauthkeys

all done, to test this, you can run the following command

ssh -i .ssh/zimbra_identity -o strictHostKeyChecking=no zimbra@server.domain.com -p 23

-should not prompt you for a password
If you continue to get errors please see this doc Mail Queue Monitoring - Zimbra :: Wiki

[jayam]

Thanks Mike, it works.

[mmorse]

Anytime, & welcome to the forums!