SMTP Authenication after 5.06 Update (from 5.02)

[gmsmith]

We did a 5.06 upgrade on an Multi-Server (RHEL) over the weekend and ran into an interesting issue. Everything worked fine except for smtp authentication.

Looking at: /opt/zimbra/cyrus-sasl/etc/saslauthd.conf we saw that the zimbra_url was pointing to: https://mta:7071/service/soap https://mta2:7071/service/soap

We checked our zimbraMtaAuth and that was properly set in LDAP.

To get it working again, we just did a quick edit of /opt/zimbra/cyrus-sasl/etc/saslauthd.conf.in and put one of our mailstores in the zimbra_url and restarted zmsaslauthdctl

But any idea what would have happened? Or why it wasn't listneing to the the zimbraMtaAuth url?

[spirit]

i'have the same problem in multi server install

zimbra 5.0.5 -> 5.0.6, multi-server, sasl auth broken

saslauth use getAllMtaAuthURLs and not zimbraMtaAuth.

i don't know how to change the getAllMtaAuthURLs value......

[morgan]

We just upgraded to 5.0.6 and have the same problem and are using the same workaround.

What I don't understand is why the default would be to point to the mtas. The mtas don't run a web server at all and couldn't respond to a soap request.

I downgraded our dev mta to 5.0.5 to test and the sasauthd settings are identical to what they are in 5.0.6. I have not downgraded our dev store yet mostly because I have a few customizations I *really* rather not repeat.

Zimbra: any ideas what's going on?

[spirit]

i have submit a bug:

Bug 28694 - zimbra 5.0.6: multi-server install: sasl auth broken.

please vote for it

[phoenix]

please vote for it

Don't forget to vote for it yourself.

[spirit]

damn,i forget to vote thanks

[brian]

The quick fix is to set zimbraMtaAuthTarget to TRUE on zimbra-store nodes and FALSE on other nodes.

zmprov ms [server]  zimbraMtaAuthTarget TRUE|FALSE

[spirit]

indeed, this was the problem.

I hope that will not reproduce in the next upgrade

thanks for your fast response.