mta not running in OSX multi-server installation

[Britt]

OK, was making notes as I went - got everything up and running except mta (which is a little important for a mail server I figure)

I have Three XServes (2.0GHz, 1GB RAM, 80GB HD, 10.4.5)

1. Installed OSX Server 10.4.2 from installation DVD on each XServe.
2. Entered user information and IP address in basic startup configuration.
a. ldap.domain.com
b. mta.domain.com
c. mail.domain.com
3. Ran Software Update. Installed OS, security, and Java updates only.
4. Set current java version to 1.5.0 on each server.
su
cd /System/Library/Frameworks/JavaVM.framework/Versions/
rm -R CurrentJDK
ln -s 1.5.0 CurrentJDK

5. Downloaded and installed Zimbra Open Source Edition 3.01 for OS X on ldap.domain.com. Custom installation- ldap and snmp only.
6. Opened terminal. Edited ldaps:// from /opt/zimbra/bin/ldap. Removed last four lines from /opt/zimbra/openldap/etc/openldap/slapd.conf.
7. Ran /opt/zimbra/libexec/zmsetup.pl. Entered ldap password in number 4. Applied settings.
8. Ran zmcontrol status as zimbra user. Verified LDAP and SNMP running.

9. Installed Zimbra.dmg on mta.domain.com. Custom installation- mta and snmp only.
10. Ran /opt/zimbra/libexec/zmsetup.pl. Entered ldap server name in 2, ldap password in number 4. Entered mail.rcps.info in 5/2. Applied settings. Very long wait at “Starting Servers...” but finally “Done.”
11. Ran su - zimbra and then zmcontrol status to verify services - antivirus running, antispam running, mta stopped(!!), snmp running. Will attempt to finish installation and then configure mta again, maybe the mail.rcps.info as MTA Auth Host stopped the server from starting.

12. Installed zimbra.dmg on mail.domain.com. Custom installation- mailstore, spell, snmp, logger.
13. Ran /opt/zimbra/libexec/zmsetup.pl. Entered ldap server name in 2, ldap password in number 4. Entered admin password in 5/4, mta.domain.com in 5/5. Applied changes.
14. Ran zmcontrol status as zimbra user. logger,mailbox, snmp, and spell all running.

15. Back to mta.domain.com. Ran zmmtactl start as zimbra user. Everything looks good until:
dyld: Library not loaded: /opt/zimbra/openlda-2.2.28/lib/libldap-2.2.7.dylib
Referenced from: /opt/zimbra/postfix-2.2.5/sbin/postlog
Reason: image not found
/opt/zimbra/postfix-2.2.5/conf/postfix-script: line 283: 3744 Trace/BPT trap
$FATAL the Postfix mail system is already running
saslauthd[4338] :set_auth_mech : failed to initialize mechanism zimbra

What to try now?

Thanks in advance for the help.

[marcmac]

15. Back to mta.domain.com. Ran zmmtactl start as zimbra user. Everything looks good until:
dyld: Library not loaded: /opt/zimbra/openlda-2.2.28/lib/libldap-2.2.7.dylib
Referenced from: /opt/zimbra/postfix-2.2.5/sbin/postlog
Reason: image not found
/opt/zimbra/postfix-2.2.5/conf/postfix-script: line 283: 3744 Trace/BPT trap
$FATAL the Postfix mail system is already running
saslauthd[4338] :set_auth_mech : failed to initialize mechanism zimbra

What to try now?

Thanks in advance for the help.

Ok, first off - this is the best forum post I've ever seen. I have no follow up questions - I know the version you installed, the OS you installed on, and the problem you're having. That's a very welcome change

This looks like a bug in the way I compile postfix - the mach linker seems to remember where it found a library when it was built, and doesn't like it when they're moved. (In fact, otool -l on a dylib file will show the original install path of that library).

So, a fix for your problem:
su -
mkdir -p /opt/zimbra/openldap-2.2.28
ln -s /opt/zimbra/openldap-2.2.28 /opt/zimbra/openldap
ln -s /opt/zimbra/lib /opt/zimbra/openldap-2.2.28/lib

It's possible that it won't like the symlinks - if that's the case, you can make ldap/lib a regular dir, and copy the dylibs from /opt/zimbra/lib

I'll try to get that fixed in the next build.

[Britt]

Glad my post was informative - working in IT service I know how it is to get not enough information, and I was trying to write out a step by step guide for a friend so I had it all written out anyway.

That said....

I created the symlinks, re-ran su - zimbra and zmmtactl start. Got a different dylib not loading now:

dyld: Library not loaded: /opt/zimbra/mysql-standard-4.1.16-apple-darwin8.2.0-powerpc//lib/mysql/libmysqlclient.14.dylib
Referenced from: /opt/zimbra/postfix-2.2.5/sbin/postlog
Reason: image not found
/opt/zimbra/postfix-2.2.5/conf/postfix-script: line 283: 20803 Trace/BPT trap $FATAL the Postfix mail system is already running
saslauthd[20816] :set_auth_mech : failed to initialize mechanism zimbra

Thanks again.

[marcmac]

Grrr. Looks like the same problem, different libs. Try the symlink trick with /opt/zimbra/mysql-standard-etc...

[Britt]

OK, that dylib problem is resolved as well.

Entered the following commands:
mkdir -p /opt/zimbra/mysql-standard-4.1.16-apple-darwin8.2.0-powerpc
mkdir -p /opt/zimbra/mysql-standard-4.1.16-apple-darwin8.2.0-powerpc//
mkdir -p /opt/zimbra/mysql-standard-4.1.16-apple-darwin8.2.0-powerpc//lib/
mkdir -p /opt/zimbra/mysql-standard-4.1.16-apple-darwin8.2.0-powerpc//lib/mysql/
ln -s /opt/zimbra/lib/libmysqlclient.14.dylib /opt/zimbra/mysql-standard-4.1.16-apple-darwin8.2.0-powerpc//lib/mysql/libmysqlclient.14.dylib

Logged back in as zimbra, zmttactl start, a different error this time...

mta-rcps-info:~ zimbra$ zmmtactl start
getService: sasl
getService: webxml
getService: mailbox
getService: perdition
DO: /opt/zimbra/postfix/sbin/postconf -e content_filter='smtp-amavis:[127.0.0.1]:10024'
DO: /opt/zimbra/postfix/sbin/postconf -e myhostname='mta.rcps.info'
DO: /opt/zimbra/postfix/sbin/postconf -e recipient_delimiter=''
DO: /opt/zimbra/postfix/sbin/postconf -e smtpd_sasl_auth_enable='yes'
DO: /opt/zimbra/postfix/sbin/postconf -e smtpd_tls_auth_only='yes'
DO: /opt/zimbra/postfix/sbin/postconf -e disable_dns_lookups='no'
DO: /opt/zimbra/postfix/sbin/postconf -e message_size_limit='10240000'
DO: /opt/zimbra/postfix/sbin/postconf -e relayhost=''
DO: /opt/zimbra/postfix/sbin/postconf -e smtpd_recipient_restrictions='reject_non_fqdn_reci pient, permit_sasl_authenticated, permit_mynetworks, reject_invalid_hostname, reject_non_fqdn_sender, reject_unauth_destination, permit'
postfix/postfix-script: warning: not owned by root: /opt/zimbra/postfix-2.2.5/conf/main.cf
postfix/postfix-script: starting the Postfix mail system
saslauthd[23794] :set_auth_mech : failed to initialize mechanism zimbra

I also tried chown root /opt/zimbra/postfix-2.2.5/conf/main.cf, then back to zimbra and zmmtactl start, but it looks as if this is re-generated each time from default because it came up with the same message and reverted the owner.

So what do I need to do to get saslauthd to work now....

Oh yeah, and thanks again for the great support - I've never had this prompt and this helpful support from anyone I've ever dealt with before.

Britt

[marcmac]

Make sure that zimbraMtaAuthHost is set for the mta server (zmprog gs SERVER | grep -i mtaauth)

If it's not, set it to the hostname of the mailbox store server.

[Britt]

OK....

Ran zmprov gs SERVER | grep -i mtaauth and got a return of ERROR: account.NO_SUCH_SERVER (no such server: SERVER)

Ran zmsetup.pl again to add the MTAAuthServer, and it was unset, although I know that I've set it before. Set the server address in 5/2, applied, and get Starting Servers...Done, Operations logged...., Configuration complete.

If I open that log file though I can see that mta is still coming up with the same issues:
Host mta.rcps.info
Starting antispam...Done.
Starting antivirus...Done.
Starting mta...FAILED
getService: sasl
getService: webxml
getService: mailbox
getService: perdition
DO: /opt/zimbra/postfix/sbin/postconf -e content_filter='smtp-amavis:[127.0.0.1]:10024'
DO: /opt/zimbra/postfix/sbin/postconf -e myhostname='mta.rcps.info'
DO: /opt/zimbra/postfix/sbin/postconf -e recipient_delimiter=''
DO: /opt/zimbra/postfix/sbin/postconf -e smtpd_sasl_auth_enable='yes'
DO: /opt/zimbra/postfix/sbin/postconf -e smtpd_tls_auth_only='yes'
DO: /opt/zimbra/postfix/sbin/postconf -e disable_dns_lookups='no'
DO: /opt/zimbra/postfix/sbin/postconf -e message_size_limit='10240000'
DO: /opt/zimbra/postfix/sbin/postconf -e relayhost=''
DO: /opt/zimbra/postfix/sbin/postconf -e smtpd_recipient_restrictions='reject_non_fqdn_reci $
saslauthd[1175] :set_auth_mech : failed to initialize mechanism zimbra


Starting snmp...Done.

I opened the config file from zmsetup.pl as well:
AVUSER=admin@rcps.info
CREATEADMIN=admin@rcps.info
CREATEDOMAIN=rcps.info
DOCREATEADMIN=no
DOCREATEDOMAIN=yes
EXPANDMENU=no
HOSTNAME=mta.rcps.info
HTTPPORT=80
HTTPSPORT=443
IMAPPORT=143
IMAPSSLPORT=993
LDAPHOST=ldap.rcps.info
LDAPPORT=389
MODE=http
MTAAUTHHOST=mail.rcps.info
POPPORT=110
POPSSLPORT=995
REMOVE=no
RUNAV=yes
RUNSA=yes
SMTPDEST=admin@rcps.info
SMTPHOST=mta.rcps.info
SMTPNOTIFY=yes
SMTPSOURCE=admin@rcps.info
SNMPNOTIFY=yes
SNMPTRAPHOST=mta-rcps-info.local
SPELLURL=
STARTSERVERS=yes
UPGRADE=yes
USESPELL=no
INSTALL_PACKAGES="zimbra-core zimbra-mta zimbra-snmp "

MTAAuth host is listed in the config output, but each time I re-open zmsetup.pl it's marked as UNSET again. Is there another place I should be making this change?

[marcmac]

You were supposed to substitute your servername for "SERVER".

If mta auth host is set, it could be another library problem.

Is sasl running?

otool -l /opt/zimbra/postfix/libexec/master - where's it finding the sasl library?

[Britt]

Fixed the zmprov gs SERVER ref.... wasn't sure if I should run it as my mta server or as the mailstore server, so I tried it for both....

mta-rcps-info:~ zimbra$ zmprov gs mta.rcps.info | grep -i mtaauth
zimbraMtaAuthEnabled: TRUE
mta-rcps-info:~ zimbra$ zmprov gs mail.rcps.info | grep -i mtaauth
zimbraMtaAuthEnabled: TRUE

Running otool -l /opt/zimbra/postfix/libexec/master I get a huge set of data, and the only thing which seems to reference sasl is:

Load command 11
cmd LC_LOAD_DYLIB
cmdsize 84
name /opt/zimbra/cyrus-sasl-2.1.21.ZIMBRA/lib/libsasl2.2.dylib (offset 24)
time stamp 1133549883 Fri Dec 2 13:58:03 2005
current version 3.21.0
compatibility version 3.0.0

This dylib is right where it's pointing.

sasl does not seem to be running.... at least checking with ps -A I'm not seeing anything. If there's another way to check it I'm all ears.

Thanks again for all your help

[marcmac]

For the mta server:
zmprov ms SERVER zimbraMtaAuthHost MAILBOXSERVER

where SERVER is the mta server and MAILBOXSERVER is the mailbox server (running tomcat)

Then restart everything on the mta server.