Mail Queue ssh error

[peterro]

Hello:

I am running on RH C5.

I have installed the open source version of Zimbra, it works great minus one item in the adminstator console. The Mail Queues do not display. I get the following error:

Message: system failure: exception during auth {RemoteManager: mail1.etherzimbra.com->zimbra@mail1.etherzimbra.com:22}
Error code: service.FAILURE
Method: ZmCsfeCommand.prototype.invoke
Details:soap:Receiver

I have followed the instructions on the wiki to regenerate the ssh keys, which did not produce any errors. However, when I try to verify the keys it prompts me for my password.

Here is my /etc/hosts file:
127.0.0.1 localhost.localdomain localhost
172.16.32.8 mail1.etherzimbra.com zimbra

When I look at the messages file I see the following error when I attempt to view the mail queues:
Mar 15 11:05:09 mail1 sshd[5545]: User zimbra not allowed because account is locked
Mar 15 11:05:09 mail1 sshd[5545]: Failed none for invalid user zimbra from 172.16.32.8 port 39941 ssh2

Here is my zimbra_identity.pub file:
[don't list your pub. . .that's just a bad idea.-jholder]
Any help would be greatly appreciated. Thanks.

[peterro]

I have found the solution to my problem in another thread. It seems the zimbra account was locked in the shadow file, this is represented by !! in the password field. The below link suggested to replace !! with *, which resolved my issue.

Any ideas if this is a security problem? Thanks.

http://www.ncsa.uiuc.edu/UserInfo/Re...enssh_3.8.html

[phoenix]

Your hosts file is also incorrect, this:

172.16.32.8 mail1.etherzimbra.com zimbra

should read:

172.16.32.8 mail1.etherzimbra.com mail1

[Zach]

Originally Posted by peterro

When I look at the messages file I see the following error when I attempt to view the mail queues:
Mar 15 11:05:09 mail1 sshd[5545]: User zimbra not allowed because account is locked
Mar 15 11:05:09 mail1 sshd[5545]: Failed none for invalid user zimbra from 172.16.32.8 port 39941 ssh2.

User zimbra not allowed because account is locked..

To verify this, as root check /etc/shadow. Locate the zimbra account. If the account has one or more*! in the line then the account is locked. zimbra:!!:13634:0:99999:7:::
Use this command to unlock the zimbra account (or you can edit the shadow file directly and remove them).
usermod -U zimbra

Then check /etc/shadow again, there should be no*! for the zimbra account. You may need to do this multiple times to remove the*! and unlock the account.
Once the account is unlocked, this command should work (it did for us!).

ssh -i .ssh/zimbra_identity -o strictHostKeyChecking=no zimbra@MAIL.DOMAIN.COM


Mail Queue Monitoring - Zimbra :: Wiki