[SOLVED] ZCS 7.1.1 broken SMTP Auth

[quanah]

Hm, actually it is the smtpd_ ones that come from LDAP, not the smtp_ ones.

Regardless of what was written in the wiki, which seems to be user contributed, those are not supported LC keys.

[flsimbeck]

You can create, and set, whatever keys in the world you want, in localconfig.xml via zmlocalconfig. It doesn't mean they are supported or necessarily processed. I'm looking at the actual code for zmlocalconfig (LC.java), and these keys do not exist in them.

You can also look at the zmmta.cf file to find out where things get pulled from. Anything starting with VAR gets pulled from LDAP. Anything starting with LOCAL comes from zmlocalconfig.

These values get pulled from LDAP. So I stand by what I said. These do not, and never have, come from zmlocalconfig. So, there may be issues with zmconfigd getting values from LDAP, but the problem has nothing to do with zmlocalconfig.

I am understanding your point-of-view (I am a programmer, a .Net one though). My concern, as a Zimbra admin, is just that posfix is not getting configured correctlly for SMTP Auth, something untill this version, worked flawlessly.

A note, because I do have it setup, I searched through LDAP and did not find any of the settings anywhere.

I just took a look at this:

http://www.zimbra.com/docs/ne/6.0.6administration_guide/zmlocalconfig.html

A bit dated on the version I noticed, but for postfix it just states "postfix_" and refers you to a url on postfix configurations parameters. This is implying that any postfix parameter can be set with zmlocalconfig and it's dumped to main.cf

Is this the case or am I misinterpreting this.

[quanah]

Actually, smtpd_ values get pulled from ldap. smtpd_ values have never been supported. Setting them in zmlocalconfig has never had any effect, either. If it worked across upgrades, it was probably because there was no change in the postfix version between the releases.

I have also confirmed that this did *not* work with 7.1.0. In addition I confirmed with the original author of zmtmaconfig that this never would have worked in 6.0. Whoever wrote the wiki was simply wrong.

zimbra@zre-ldap003:~$ zmconfigdctl stop
Stopping zmconfigdctl...failed
Stopping zmconfigd...done.
zimbra@zre-ldap003:~$ ps -eaf | grep zmconfigd
zimbra 20669 20608 0 16:22 pts/0 00:00:00 grep zmconfigd
zimbra@zre-ldap003:~$ zmcontrol status
Host zre-ldap003.eng.vmware.com
antispam Running
antivirus Running
convertd Running
ldap Running
logger Running
mailbox Running
mta Running
snmp Running
spell Running
stats Running
zmconfigd Stopped
zmconfigd is not running.
zimbra@zre-ldap003:~$ postconf smtp_sasl_security_options
smtp_sasl_security_options = noplaintext, noanonymous
zimbra@zre-ldap003:~$ zmlocalconfig -e postfix_smtp_sasl_security_options="nonanonymous"
zimbra@zre-ldap003:~$ zmconfigdctl start
Starting zmconfigd...done.
Starting zmconfigdctl...success
zimbra@zre-ldap003:~$ postconf smtp_sasl_security_options
smtp_sasl_security_options = noplaintext, noanonymous
zimbra@zre-ldap003:~$ zmcontrol -v
Release 7.1.0_GA_3140.UBUNTU10_64 UBUNTU10_64 NETWORK edition.
zimbra@zre-ldap003:~$

[quanah]

A bit dated on the version I noticed, but for postfix it just states "postfix_" and refers you to a url on postfix configurations parameters. This is implying that any postfix parameter can be set with zmlocalconfig and it's dumped to main.cf

Is this the case or am I misinterpreting this.

You are misinterpreting this. That only applies to supported postfix_ keys. postfix_smtp_* are not, and never have been supported, and setting them has never done anything.

[flsimbeck]

You are misinterpreting this. That only applies to supported postfix_ keys. postfix_smtp_* are not, and never have been supported, and setting them has never done anything.

Ok, so then what would be the proper way to setup outbound SMTP auth? Or does this have to be re-configured when ever an update is applied? If so, will zmconfigd remove any manual settings applied to main.cf?

Although this server does have a static internet IP, this is a small rural community and the only ISP does not offer reverse DNS at any cost, so an external relay is the only option, many email server preform the revers DNS check and reject the server, this is why a relay is used.

And I thank all at Zimbra for your time and effort.

[flsimbeck]

You can disregaurd my previous post, I reset the postfix options to their defauls, and installed the MS SMTP server on a Windows server on the same network, and pointed zimbra to it. Amazingly enough, that took less than ten minutes, problem solved.

[quanah]

I've filed a bug for Zimbra to officially support this in a future release.

https://bugzilla.zimbra.com/show_bug.cgi?id=60735

[flsimbeck]

Thank you. My soultion of an internal Windows SMTP server to handle the outbound SMTP Auth, although working fine, adds an aditional hop (and its headers), and one more place things can go wrong. Its a Win 2k8 x64 server, and I've already run into some issues, like the lack of any logging, and having to use the IIS6 consle because the SMTP server is handled by the Exchange group, not the ISS7 group. It's a good thing everybody dosen't run as smoth as MS.

[BarBaar]

I've filed a bug for Zimbra to officially support this in a future release.

https://bugzilla.zimbra.com/show_bug.cgi?id=60735

Thank you!

Linking this thread to another one: http://www.zimbra.com/forums/adminis...t-running.html

Partial overlap, but I suggest we continue there..