Results 1 to 4 of 4

Thread: Mail Queue ssh error

  1. #1
    Join Date
    Mar 2007
    Posts
    23
    Rep Power
    8

    Default Mail Queue ssh error

    Hello:

    I am running on RH C5.

    I have installed the open source version of Zimbra, it works great minus one item in the adminstator console. The Mail Queues do not display. I get the following error:

    Message: system failure: exception during auth {RemoteManager: mail1.etherzimbra.com->zimbra@mail1.etherzimbra.com:22}
    Error code: service.FAILURE
    Method: ZmCsfeCommand.prototype.invoke
    Details:soap:Receiver

    I have followed the instructions on the wiki to regenerate the ssh keys, which did not produce any errors. However, when I try to verify the keys it prompts me for my password.

    Here is my /etc/hosts file:
    127.0.0.1 localhost.localdomain localhost
    172.16.32.8 mail1.etherzimbra.com zimbra

    When I look at the messages file I see the following error when I attempt to view the mail queues:
    Mar 15 11:05:09 mail1 sshd[5545]: User zimbra not allowed because account is locked
    Mar 15 11:05:09 mail1 sshd[5545]: Failed none for invalid user zimbra from 172.16.32.8 port 39941 ssh2

    Here is my zimbra_identity.pub file:
    [don't list your pub. . .that's just a bad idea.-jholder]
    Any help would be greatly appreciated. Thanks.
    Last edited by jholder; 03-15-2007 at 04:57 PM. Reason: Security.

  2. #2
    Join Date
    Mar 2007
    Posts
    23
    Rep Power
    8

    Default Found the solution

    I have found the solution to my problem in another thread. It seems the zimbra account was locked in the shadow file, this is represented by !! in the password field. The below link suggested to replace !! with *, which resolved my issue.

    Any ideas if this is a security problem? Thanks.

    http://www.ncsa.uiuc.edu/UserInfo/Re...enssh_3.8.html

  3. #3
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Your hosts file is also incorrect, this:
    172.16.32.8 mail1.etherzimbra.com zimbra
    should read:
    Code:
    172.16.32.8 mail1.etherzimbra.com mail1
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  4. #4
    Join Date
    Jul 2009
    Posts
    4
    Rep Power
    6

    Default

    Quote Originally Posted by peterro View Post
    When I look at the messages file I see the following error when I attempt to view the mail queues:
    Mar 15 11:05:09 mail1 sshd[5545]: User zimbra not allowed because account is locked
    Mar 15 11:05:09 mail1 sshd[5545]: Failed none for invalid user zimbra from 172.16.32.8 port 39941 ssh2.
    User zimbra not allowed because account is locked..

    To verify this, as root check /etc/shadow. Locate the zimbra account. If the account has one or more*! in the line then the account is locked. zimbra:!!:13634:0:99999:7:::
    Use this command to unlock the zimbra account (or you can edit the shadow file directly and remove them).
    usermod -U zimbra

    Then check /etc/shadow again, there should be no*! for the zimbra account. You may need to do this multiple times to remove the*! and unlock the account.
    Once the account is unlocked, this command should work (it did for us!).

    ssh -i .ssh/zimbra_identity -o strictHostKeyChecking=no zimbra@MAIL.DOMAIN.COM


    Mail Queue Monitoring - Zimbra :: Wiki

Similar Threads

  1. Problems with port 25
    By yogiman in forum Installation
    Replies: 57
    Last Post: 06-13-2011, 02:55 PM
  2. Replies: 7
    Last Post: 02-03-2011, 07:01 AM
  3. Zimbra fails after working for 2 weeks
    By Linsys in forum Administrators
    Replies: 10
    Last Post: 10-07-2008, 01:42 AM
  4. fresh install down may be due to tomcat
    By gon in forum Installation
    Replies: 10
    Last Post: 07-25-2007, 09:09 AM
  5. receiveing mail
    By maybethistime in forum Administrators
    Replies: 15
    Last Post: 12-09-2005, 04:55 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •