[SOLVED] Postfix: Unable to Bind: 49 invalid credentials.

[ecologist09]

Hello all. I am experiencing the following error:

May  7 11:40:51 zimbra postfix/pickup[30622]: 1908AD6825A: uid=1002 from= orig_id=8D55AD68252
May  7 11:40:51 zimbra postfix/cleanup[30625]: warning: dict_ldap_connect: Unable to bind to server ldap://zimbra.server:389 as uid=zmpostfix,cn=appaccts,cn=zimbra: 49 (Invalid credentials)
May  7 11:40:51 zimbra postfix/cleanup[30625]: warning: 1908AD6825A: sender_canonical_maps map lookup problem for user@external.domain

I've change the server names for privacy reasons.

Until late yesterday the server was working fine. We were starting to train the spam filters. Late in the afternoon though it just stopped delivering mail. There were errors about the postfix service losing connection when composing the "RCPT TO". I followed some threads and it turned out that when i turned off antispam and antivirus the mail when through fine. Looking further into the logs it ~seemed~ as though perhaps there were some bind errors in terms of connecting so i took it upon myself to reset all of the ldap passwords using zmldappasswd. That leaves me where i am now (see error above).

Facts:
1. slapd is in fact listening on port 389.
2. everything was working properly until antispam and antivirus caused the messages to stop flowing though i am still not sure why.
3. dns and /etc/hosts are not an issue as all of the lookups, forward and reverse are working.

Any suggestions - how can i get postfix to start binding properly again?

[uxbod]

Welcome to the forums

Have you tried

su - zimbra
zmmtactl stop ; zmmtactl start

after changing the LDAP passwords ?

[ecologist09]

Originally Posted by uxbod

Welcome to the forums

Have you tried

su - zimbra
zmmtactl stop ; zmmtactl start

after changing the LDAP passwords ?

Yes i did. I even rebooted. No luck.

[ecologist09]

I tried this also:

[SOLVED] Can't send Mails after restore on centos6 x64

ldapmodify -h -x -D 'cn=config' -W
(use the zimbra_ldap_password here)
then type this:
dn: uid=zmpostfix,cn=appaccts,cn=zimbra
changetype: modify
replace: userPassword
userPassword:
^D

ldapmodify -h -x -D 'cn=config' -W
dn: uid=zmamavis,cn=appaccts,cn=zimbra
changetype: modify
replace: userPassword
userPassword:
^D

^D = CTRL + D

...but still getting the error above.

[uxbod]

su - zimbra
zmlocalconfig -s | grep ldap_postfix_password

is that the correct password ? If not you can set it with

su - zimbra
zmlocalconfig -e ldap_postfix_passwd=**yourpassword**

and then restart the MTA service.

[ecologist09]

Originally Posted by uxbod

su - zimbra
zmlocalconfig -s | grep ldap_postfix_password

is that the correct password ? If not you can set it with

su - zimbra
zmlocalconfig -e ldap_postfix_passwd=**yourpassword**

and then restart the MTA service.

I tried what you said and it still will not bind. I also tried:

[SOLVED] Can't send Mails after restore on centos6 x64

ldapmodify -h -x -D 'cn=config' -W
(use the zimbra_ldap_password here)
then type this:
dn: uid=zmpostfix,cn=appaccts,cn=zimbra
changetype: modify
replace: userPassword
userPassword:
^D

ldapmodify -h -x -D 'cn=config' -W
dn: uid=zmamavis,cn=appaccts,cn=zimbra
changetype: modify
replace: userPassword
userPassword:
^D

^D = CTRL + D

But that did not help either

I don't know what the original postfix ldap password was from the install. According to the documentation it is automatically generated. As such, i don't know what is currently stored in the LDAP database though i do know what is stored in zmlocalconfig.


***Sorry for the double post.

[uxbod]

What version of ZCS and what OS are you running it on ?

[ecologist09]

Originally Posted by uxbod

What version of ZCS and what OS are you running it on ?

zcs-5.0.5_GA_2201.UBUNTU6.20080417012045

Ubuntu-Server 6.06.1 _Dapper Drake_ - Release i386 (20060807.1)

[uxbod]

Hmm, okay so how about

su - zimbra
zmlocalconfig -e ldap_postfix_password=**yourpassword**
zmldappasswd -p **yourpassword**
zmmtactl stop ; zmmtactl start

[ecologist09]

root@zimbra:~# su - zimbra
zimbra@zimbra:~$ zmlocalconfig -e ldap_postfix_password=mypassword
zimbra@zimbra:~$ zmldappasswd -p mypassword
Updating local config and directory
zimbra@zimbra:~$ zmmtactl stop; zmmtactl start
postfix/postfix-script: stopping the Postfix mail system

..many messages...all seem to be just confirmations...

zimbra@zimbra:~$ tail -f /var/log/zimbra.log
May  7 12:26:56 zimbra postfix/postfix-script[8677]: warning: not owned by root: /opt/zimbra/postfix-2.4.7.5z/conf/main.cf
May  7 12:26:56 zimbra postfix/postfix-script[8690]: starting the Postfix mail system
May  7 12:26:56 zimbra postfix/master[8691]: daemon started -- version 2.4.7, configuration /opt/zimbra/postfix-2.4.7.5z/conf
May  7 12:26:57 zimbra saslauthd[8731]: detach_tty      : master pid is: 8731
May  7 12:26:57 zimbra saslauthd[8731]: ipc_init        : listening on socket: /opt/zimbra/cyrus-sasl-2.1.22.3z/state/mux
May  7 12:26:57 zimbra postfix/pickup[8697]: E973BD6825A: uid=1002 from= orig_id=8D55AD68252
May  7 12:26:57 zimbra postfix/trivial-rewrite[8762]: warning: dict_ldap_connect: Unable to bind to server ldap://zimbra.server:389 as uid=zmpostfix,cn=appaccts,cn=zimbra: 49 (Invalid credentials)
May  7 12:26:57 zimbra postfix/trivial-rewrite[8762]: warning: dict_ldap_connect: Unable to bind to server ldap://zimbra.server:389 as uid=zmpostfix,cn=appaccts,cn=zimbra: 49 (Invalid credentials)
May  7 12:26:58 zimbra postfix/cleanup[8701]: warning: dict_ldap_connect: Unable to bind to server ldap://zimbra.server:389 as uid=zmpostfix,cn=appaccts,cn=zimbra: 49 (Invalid credentials)
May  7 12:26:58 zimbra postfix/cleanup[8701]: warning: E973BD6825A: sender_canonical_maps map lookup problem for user@external.domain