Postfix Relay to Mandrill: Sends some email, others queued but disappears - postfix-mta

We set up Mandrill about 6 months ago to run thru postfix on the server and ensure all applications sending email relays to Mandrill.
It seems recently that we've been starting to hear from our clients that they aren't getting some emails that they have been expecting sent (like email notifications of store purchases, etc). I've experienced this happening as well, but seemingly randomly. It's not just ONE specific application, as we've seen the issue across Perl, PHP, Ruby. So it is something with Postfix.
We see the attempted queue of the "missing" emails in the maillogs, and have been able to see different looking status between ones we see that come thru vs. the ones that don't. However, we're not able to determine WHAT is happening to the email at that point.
I have confirmed in Mandrill's report interface, no record of the identified emails coming to it. So it's even being passed on to Mandrill either.
Here are mail logs of some specific transactions, all from the same application sending out a sales transaction email. The first one shows an email I did receive (as one of the recipients). And the other two are ones I still have yet to receive (along with other recipients):
Received Email:
Sep 4 14:52:29 serverABC sendmail[18143]: s84IqSaq018143: from=apache, size=10054, class=0, nrcpts=4, msgid=<201409041852.s84IqSaq018143#serverABC.mydomain.com>, relay=apache#localhost
Sep 4 14:52:29 serverABC postfix/smtpd[14952]: connect from localhost[127.0.0.1]
Sep 4 14:52:29 serverABC postfix/smtpd[14952]: 09AB632CE053: client=localhost[127.0.0.1]
Sep 4 14:52:29 serverABC postfix/cleanup[14959]: 09AB632CE053: message-id=<201409041852.s84IqSaq018143#serverABC.mydomain.com>
Sep 4 14:52:29 serverABC postfix/qmgr[1713]: 09AB632CE053: from=<apache#serverABC.mydomain.com>, size=10475, nrcpt=4 (queue active)
Sep 4 14:52:29 serverABC sendmail[18143]: s84IqSaq018143: to=Flmt#clientcompany.com,store#thestore.com,rich#mydomain.com,=?utf-8?B?S2FyZW4gQ29sYXZpdG8=?= <karen#redacted.com>, ctladdr=apache (48/48), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=130054, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (Ok: queued as 09AB632CE053)
Sep 4 14:52:29 serverABC postfix/smtpd[14952]: disconnect from localhost[127.0.0.1]
Sep 4 14:52:29 serverABC postfix/smtp[15569]: 09AB632CE053: to=<rich#mydomain.com>, relay=smtp.mandrillapp.com[54.205.6.2]:25, delay=0.49, delays=0.11/0/0.27/0.1, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 677011C0A00)
Sep 4 14:52:29 serverABC postfix/smtp[15569]: 09AB632CE053: to=<karen#redacted.com>, relay=smtp.mandrillapp.com[54.205.6.2]:25, delay=0.49, delays=0.11/0/0.27/0.1, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 677011C0A00)
Sep 4 14:52:29 serverABC postfix/smtp[15569]: 09AB632CE053: to=<store#thestore.com>, relay=smtp.mandrillapp.com[54.205.6.2]:25, delay=0.49, delays=0.11/0/0.27/0.1, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 677011C0A00)
Sep 4 14:52:29 serverABC postfix/smtp[15569]: 09AB632CE053: to=<Flmt#clientcompany.com>, relay=smtp.mandrillapp.com[54.205.6.2]:25, delay=0.49, delays=0.11/0/0.27/0.1, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 677011C0A00)
Sep 4 14:52:29 serverABC postfix/qmgr[1713]: 09AB632CE053: removed
Email not received, same type of transaction:
Sep 4 15:01:05 serverABC sendmail[24776]: s84J13UJ024776: from=apache, size=10308, class=0, nrcpts=4, msgid=<201409041901.s84J13UJ024776#serverABC.mydomain.com>, relay=apache#localhost
Sep 4 15:01:05 serverABC sendmail[24776]: s84J13UJ024776: to==?utf-8?B?VGFuYSBDbGFyaw==?= <clarktana#poppermail.com>, delay=00:00:02, mailer=relay, pri=130308, stat=queued
Sep 4 15:01:05 serverABC sendmail[24776]: s84J13UJ024776: to=rich#mydomain.com, delay=00:00:02, mailer=relay, pri=130308, stat=queued
Sep 4 15:01:05 serverABC sendmail[24776]: s84J13UJ024776: to=store#thestore.com, delay=00:00:02, mailer=relay, pri=130308, stat=queued
Sep 4 15:01:05 serverABC sendmail[24776]: s84J13UJ024776: to=Flmt#clientcompany.com, delay=00:00:02, mailer=relay, pri=130308, stat=queued
Another One Not Received:
Sep 4 15:23:25 serverABC sendmail[9756]: s84JNM7c009756: from=apache, size=10289, class=0, nrcpts=4, msgid=<201409041923.s84JNM7c009756#serverABC.mydomain.com>, relay=apache#localhost
Sep 4 15:23:25 serverABC sendmail[9756]: s84JNM7c009756: to==?utf-8?B?R2FyeSBHcmF2ZXM=?= <joesdjj#sod.com>, delay=00:00:03, mailer=relay, pri=130289, stat=queued
Sep 4 15:23:25 serverABC sendmail[9756]: s84JNM7c009756: to=rich#mydomain.com, delay=00:00:03, mailer=relay, pri=130289, stat=queued
Sep 4 15:23:25 serverABC sendmail[9756]: s84JNM7c009756: to=store#thestore.com, delay=00:00:03, mailer=relay, pri=130289, stat=queued
Sep 4 15:23:25 serverABC sendmail[9756]: s84JNM7c009756: to=Flmt#clientcompany.com, delay=00:00:03, mailer=relay, pri=130289, stat=queued
You can see the obvious difference in the two sets of logs. One shows the relay to smtp.mandrill.com. The other shows queued, but never makes it to mandrill, or anywhere else.
Mailq is always showing empty, so not getting stuck, unless there's another queue I can't see (deferred, maildrop, hold, etc)?

Related

The ClassNotFoundException when running a jar from command line

I am not sure what is missing from this jar file but when I try to run the jar from the command line, it cannot load the main entry point:
This is the directory that contains the classes and the resources for my application.
C:\Users\hrh74\Documents\ABack up\NetBeansProjects\mavenfxedittableview\target\classes\org\openjfx\mavenfxedittableview
09/04/2020 08:48 PM <DIR> .
09/04/2020 08:48 PM <DIR> ..
09/03/2020 04:24 PM 2,502 addressBookData.xml
09/02/2020 05:52 PM 9,562 Address_Book.png
09/02/2020 05:52 PM 859 birthdaystatistic.fxml
09/02/2020 05:52 PM 3,274 BirthdaystatisticController.class
09/02/2020 05:52 PM 3,224 DarkTheme.css
09/02/2020 05:52 PM 2,072 DateUtil.class
09/02/2020 05:52 PM 1,214 LocalDateAdapter.class
09/02/2020 05:52 PM 3,523 Person.class
09/02/2020 05:52 PM 4,535 personeditdialog.fxml
09/02/2020 05:52 PM 5,128 PersoneditdialogController.class
09/02/2020 05:52 PM 1,029 PersonListWrapper.class
09/02/2020 05:52 PM 6,412 personoverview.fxml
09/02/2020 05:52 PM 1,904 rootlayout.fxml
09/02/2020 05:52 PM 4,490 RootlayoutController.class
09/02/2020 05:52 PM 9,060 TableEditApp.class
09/02/2020 05:52 PM 6,812 TableVieweditController.class
16 File(s) 65,600 bytes
2 Dir(s) 57,686,331,392 bytes free
I created an app.jar for my application and specified the application's main entry class.
C:\Users\hrh74\Documents\ABack up\NetBeansProjects\mavenfxedittableview\target
\classes\org\openjfx>jar cvfe app.jar TableEditApp.class -C mavenfxedittableview .
added manifest
adding: addressBookData.xml(in = 2502) (out= 376)(deflated 84%)
adding: Address_Book.png(in = 9562) (out= 9567)(deflated 0%)
adding: birthdaystatistic.fxml(in = 859) (out= 372)(deflated 56%)
adding: BirthdaystatisticController.class(in = 3274) (out= 1544)(deflated 52%)
adding: DarkTheme.css(in = 3224) (out= 826)(deflated 74%)
adding: DateUtil.class(in = 2072) (out= 941)(deflated 54%)
adding: LocalDateAdapter.class(in = 1214) (out= 537)(deflated 55%)
adding: Person.class(in = 3523) (out= 1277)(deflated 63%)
adding: personeditdialog.fxml(in = 4535) (out= 872)(deflated 80%)
adding: PersoneditdialogController.class(in = 5128) (out= 2418)(deflated 52%)
adding: PersonListWrapper.class(in = 1029) (out= 485)(deflated 52%)
adding: personoverview.fxml(in = 6412) (out= 1149)(deflated 82%)
adding: rootlayout.fxml(in = 1904) (out= 542)(deflated 71%)
adding: RootlayoutController.class(in = 4490) (out= 2097)(deflated 53%)
adding: TableVieweditController.class(in = 6812) (out= 2835)(deflated 58%)
The app.jar created successfully. Here is the content of META-INF/MANIFEST.MF file.
Manifest-Version: 1.0
Created-By: 14.0.2 (Oracle Corporation)
Main-Class: TableEditApp.class
Here is my classpath having the current directory '.' in the beginning.
.;C:\Users\hrh74\Documents\ABack up\NetBeansProjects\javalearning\build\classes;C:\Program Files\Java\jdk-14.0.2;C:\Program Files\Java\jdk-14.0.2\bin;C:\Program Files (x86)\Java\jre1.8.0_251\bin;C:\Program Files\Java\jdk-14.0.2\lib;
When I list the content of the jar file, all the classes are properly packaged in the jar.
C:\Users\hrh74\Documents\ABack up\NetBeansProjects\mavenfxedittableview\target\classes\org\openjfx>jar tvf app.jar
0 Fri Sep 04 23:22:18 IRDT 2020 META-INF/
98 Fri Sep 04 23:22:18 IRDT 2020 META-INF/MANIFEST.MF
2502 Thu Sep 03 16:24:22 IRDT 2020 addressBookData.xml
9562 Wed Sep 02 17:52:36 IRDT 2020 Address_Book.png
859 Wed Sep 02 17:52:36 IRDT 2020 birthdaystatistic.fxml
3274 Wed Sep 02 17:52:40 IRDT 2020 BirthdaystatisticController.class
3224 Wed Sep 02 17:52:36 IRDT 2020 DarkTheme.css
2072 Wed Sep 02 17:52:40 IRDT 2020 DateUtil.class
1214 Wed Sep 02 17:52:38 IRDT 2020 LocalDateAdapter.class
3523 Wed Sep 02 17:52:38 IRDT 2020 Person.class
4535 Wed Sep 02 17:52:36 IRDT 2020 personeditdialog.fxml
5128 Wed Sep 02 17:52:40 IRDT 2020 PersoneditdialogController.class
1029 Wed Sep 02 17:52:40 IRDT 2020 PersonListWrapper.class
6412 Wed Sep 02 17:52:36 IRDT 2020 personoverview.fxml
1904 Wed Sep 02 17:52:36 IRDT 2020 rootlayout.fxml
4490 Wed Sep 02 17:52:38 IRDT 2020 RootlayoutController.class
9060 Wed Sep 02 17:52:38 IRDT 2020 TableEditApp.class
6812 Wed Sep 02 17:52:38 IRDT 2020 TableVieweditController.class
Finally, when I run the application from the command line using java –jar app.jar, I get the ClassNotFoundException.
C:\Users\hrh74\Documents\ABack up\NetBeansProjects\mavenfxedittableview\target\classes\org\openjfx>java -jar app.jar
Error: Could not find or load main class TableEditApp.class
Caused by: java.lang.ClassNotFoundException: TableEditApp.class
I tried to adhere to the spec to the best of my knowledge, so I am not sure why this is not working. Any idea, what might be causing this exception?
Thanks in advance.
I discovered something interesting in respect to the HelloWorld.java that I mentioned in my last comment. I abandoned using the "jar cvfe" and instead created a file name mymanifest.txt and placed the name of the class with the main entry as "Main-Class: org.me.HelloWorld" followed by two blank lines (per specification). I packaged the jar using the "jar cvmf" instead of "jar cvfe" and it WORKED FINE. I then applied the same method to my application jar creation, and now I am getting a Linkage Error instead of ClassNotFoundException. Perhaps, it has something to do with the JavaFX library that I have to investigate deeper. In summary, I suspect that the "jar cvfe" switch might not be working as described in the Java tutorial. I have had found errors in the tutorial in the past and this MIGHT be another one.
Anyway, thank you all for your comments.

Error ldap_sasl_bind_s failed (49) on Multi-Master

The error that appears is this:
Dec 30 18:07:24 openldap03 slapd[16460]: slap_client_connect: URI=ldap://openldap02 DN="cn=config" ldap_sasl_bind_s failed (49)
Dec 30 18:07:24 openldap03 slapd[16460]: do_syncrepl: rid=002 rc 49 retrying (1 retries left)
Dec 30 18:07:24 openldap03 slapd[16460]: slap_client_connect: URI=ldap://openldap01 DN="cn=config" ldap_sasl_bind_s failed (49)
Dec 30 18:07:24 openldap03 slapd[16460]: do_syncrepl: rid=001 rc 49 retrying (1 retries left)
...
Dec 30 18:09:54 openldap03 slapd[16460]: slap_client_connect: URI=ldap://openldap02 DN="cn=ldapadm,dc=domain,dc=local" ldap_sasl_bind_s failed (49)
Dec 30 18:09:54 openldap03 slapd[16460]: do_syncrepl: rid=005 rc 49 retrying (1 retries left)
Dec 30 18:09:54 openldap03 slapd[16460]: slap_client_connect: URI=ldap://openldap01 DN="cn=ldapadm,dc=domain,dc=local" ldap_sasl_bind_s failed (49)
Dec 30 18:09:54 openldap03 slapd[16460]: do_syncrepl: rid=004 rc 49 retrying (1 retries left)
Connection is fine:
[root#openldap03 ~]# telnet openldap01 389
Trying 172.16.11.203...
Connected to openldap01.
Escape character is '^]'.
^]
[root#openldap03 ~]# telnet openldap02 389
Trying 172.16.11.205...
Connected to openldap02.
Escape character is '^]'.
^]
I can add the configuration if they ask me what command to execute
How can I troubleshoot this error?
thanks!
The return code 49 stands for "Invalid credential". You do not have connectivity problem, but the credential you set are not the right one.

ORA-12505 + "network adapter could not establish the connection" on Oracle11g/VirtualBox

I have Oracle 11g installed locally on each of my virtualbox machines (working under Windows 7 64bit). Suddenty, after a simple reboot, the database on one of the 5 virtual machines doesn't want to connect anymore.
With SID connection I obtain ORA-12505 error, and with service name : "Network adapter could not establish the connection", in SqlDeveloper with both cases. If I try a connection with SqlPlus as sysdba, I obtain the connection but with "connected to an idle instance". Hence if I try to see, for example, the list of sessions and processes working, I have the error 01034 ("ORACLE not available"). I tried a lot of tricks but nothing works. Could it be a specific problem with virtual machines ?
Here what I tried :
the services (of my base and of the listener) are working (and I wait enough between relaunch and connection retry) ;
the files tnsnames.ora, listener.ora and sqlnet.ora seem correct (see below) ;
If I force localhost to be 127.0.0.1 in hosts file, I have the 12514 error ;
ORACLE_HOME and ORACLE_SID are correctly set ;
It can't a priori be a memory problem (I even try to allow more memory to the specific VM which doesn't work) ;
If I force "startup" on sysdba session, the next requests obtain : ORA-03114 : not connected to ORACLE ;
It's not a priori a problem of system files size. In all cases, the not working database is not my biggest database among all my databases (and any file in oradata are bigger than in others VMs which have exactly the same configurations).
# tnsnames.ora Network Configuration File: C:\oracle_32\product\11.2.0\dbhome_2\network\admin\tnsnames.ora
# Generated by Oracle configuration tools.
LISTENER_ORCL =
(ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
ORACLR_CONNECTION_DATA =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
)
(CONNECT_DATA =
(SID = CLRExtProc)
(PRESENTATION = RO)
)
)
ORCL =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = orcl)
)
)
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
# listener.ora Network Configuration File: C:\oracle_32\product\11.2.0\dbhome_2\network\admin\listener.ora
# Generated by Oracle configuration tools.
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = CLRExtProc)
(ORACLE_HOME = C:\oracle_32\product\11.2.0\dbhome_2)
(PROGRAM = extproc)
(ENVS = "EXTPROC_DLLS=ONLY:C:\oracle_32\product\11.2.0\dbhome_2\bin\oraclr11.dll")
)
)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
(ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
)
)
ADR_BASE_LISTENER = C:\oracle_32
Thank you to read !
Here the alert log for the first connection of this morning :
Fri Jun 23 11:08:13 2017
Starting ORACLE instance (normal)
LICENSE_MAX_SESSION = 0
LICENSE_SESSIONS_WARNING = 0
Picked latch-free SCN scheme 2
Using LOG_ARCHIVE_DEST_1 parameter default value as USE_DB_RECOVERY_FILE_DEST
Autotune of undo retention is turned on.
IMODE=BR
ILAT =167
LICENSE_MAX_USERS = 0
SYS auditing is disabled
Starting up:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options.
Using parameter settings in server-side spfile C:\ORACLE_32\PRODUCT\11.2.0\DBHOME_2\DATABASE\SPFILEORCL.ORA
System parameters with non-default values:
processes = 1000
sessions = 1524
memory_target = 1232M
control_files = "C:\ORACLE_32\ORADATA\ORCL\CONTROL01.CTL"
control_files = "C:\ORACLE_32\FLASH_RECOVERY_AREA\ORCL\CONTROL02.CTL"
db_block_size = 8192
compatible = "11.2.0.0.0"
db_recovery_file_dest = "C:\oracle_32\flash_recovery_area"
db_recovery_file_dest_size= 3852M
undo_tablespace = "UNDOTBS1"
remote_login_passwordfile= "EXCLUSIVE"
db_domain = ""
dispatchers = "(PROTOCOL=TCP) (SERVICE=orclXDB)"
local_listener = "LISTENER_ORCL"
audit_file_dest = "C:\ORACLE_32\ADMIN\ORCL\ADUMP"
audit_trail = "DB"
db_name = "orcl"
open_cursors = 300
diagnostic_dest = "C:\ORACLE_32"
Fri Jun 23 11:08:20 2017
PMON started with pid=2, OS id=2160
Fri Jun 23 11:08:20 2017
VKTM started with pid=3, OS id=2164 at elevated priority
VKTM running at (10)millisec precision with DBRM quantum (100)ms
Fri Jun 23 11:08:21 2017
GEN0 started with pid=4, OS id=2168
Fri Jun 23 11:08:21 2017
DIAG started with pid=5, OS id=2172
Fri Jun 23 11:08:21 2017
DBRM started with pid=6, OS id=2176
OER 7451 in Load Indicator : Error Code = OSD-04500: option indiquée interdite !
Fri Jun 23 11:08:21 2017
PSP0 started with pid=7, OS id=2180
Fri Jun 23 11:08:21 2017
DIA0 started with pid=8, OS id=2184
Fri Jun 23 11:08:21 2017
MMAN started with pid=9, OS id=2188
Fri Jun 23 11:08:21 2017
DBW0 started with pid=10, OS id=2192
Fri Jun 23 11:08:21 2017
LGWR started with pid=11, OS id=2196
Fri Jun 23 11:08:21 2017
CKPT started with pid=12, OS id=2200
Fri Jun 23 11:08:21 2017
SMON started with pid=13, OS id=2204
Fri Jun 23 11:08:21 2017
RECO started with pid=14, OS id=2208
Fri Jun 23 11:08:21 2017
MMON started with pid=15, OS id=2212
starting up 1 dispatcher(s) for network address '(ADDRESS=(PARTIAL=YES)(PROTOCOL=TCP))'...
Fri Jun 23 11:08:21 2017
MMNL started with pid=16, OS id=2216
starting up 1 shared server(s) ...
ORACLE_BASE from environment = C:\oracle_32
Fri Jun 23 11:08:22 2017
alter database mount exclusive
Successful mount of redo thread 1, with mount id 1475182246
Database mounted in Exclusive Mode
Lost write protection disabled
Completed: alter database mount exclusive
alter database open
Fri Jun 23 11:08:31 2017
Errors in file c:\oracle_32\diag\rdbms\orcl\orcl\trace\orcl_lgwr_2196.trc:
ORA-00338: log 3 of thread 1 is more recent than control file
ORA-00312: online log 3 thread 1: 'C:\ORACLE_32\ORADATA\ORCL\REDO03.LOG'
Errors in file c:\oracle_32\diag\rdbms\orcl\orcl\trace\orcl_lgwr_2196.trc:
ORA-00338: log 3 of thread 1 is more recent than control file
ORA-00312: online log 3 thread 1: 'C:\ORACLE_32\ORADATA\ORCL\REDO03.LOG'
Errors in file c:\oracle_32\diag\rdbms\orcl\orcl\trace\orcl_ora_2232.trc:
ORA-00338: fichier journal 1 du thread plus recent que le fichier de controle
ORA-00312: journal en ligne 3 thread 1 : 'C:\ORACLE_32\ORADATA\ORCL\REDO03.LOG'
USER (ospid: 2232): terminating the instance due to error 338
Fri Jun 23 11:08:34 2017
Instance terminated by USER, pid = 2232`
Did you check the alert log of the database? that could be a good place to start looking.
Also when logged as sysdba, did you try to start the database: startup ?
If yes, what is the error message if any?

postfix disable bounce for transport

I have postfix with different transport. For one of these transports I want to disable message bounce.
master.cf
smtp inet n - n - - smtpd
pickup fifo n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr fifo n - n 300 1 qmgr
tlsmgr unix - - n 1000? 1 tlsmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - n - - smtp
relay unix - - n - - smtp
-o smtp_fallback_relay=
showq unix n - n - - showq
error unix - - n - - error
retry unix - - n - - error
discard unix - - n - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
scache unix - - n - 1 scache
dovecot unix - n n - - pipe
flags=DRhu user=vmail:mail argv=/usr/libexec/dovecot/deliver -d $(recipient)
emailtransport unix - n n - - pipe
flags=X user=transpostfix argv=/media/raid1m/mailparse/emailtransport.php
#****** other options ************
other2emailtransport unix - n n - - pipe
flags=X user=other2transpostfix argv=/media/raid1m/mailparse/other2emailtransport.php
log output:
Mar 26 15:35:14 machin1 postfix/smtpd[12110]: connect from client=68.ip-11-11-10.eu[11.12.13.14]
Mar 26 15:35:14 machin1 postfix/smtpd[12125]: connect from client=68.ip-11-11-10.eu[11.12.13.14]
Mar 26 15:35:14 machin1 postfix/pipe[3893]: 0738C180997: to=<transpostfix#localhost.localhost>, orig_to=<zauri.t#ass.exemple.com.domain>, relay=emailtransport, delay=0.5, delays=0.07/0/0/0.42, dsn=2.0.0, status=sent (delivered via emailtransport service)
Mar 26 15:35:14 machin1 postfix/qmgr[12106]: 0738C180997: removed
Mar 26 15:35:14 machin1 postfix/smtpd[12110]: setting up TLS connection from client=68.ip-11-11-10.eu[11.12.13.14]
Mar 26 15:35:14 machin1 postfix/smtpd[12125]: CC0FF180996: client=client=68.ip-11-11-10.eu[11.12.13.14]
Mar 26 15:35:14 machin1 postfix/smtpd[21657]: disconnect from client=68.ip-11-11-10.eu[11.12.13.14]
Mar 26 15:35:14 machin1 postfix/smtpd[12110]: Anonymous TLS connection established from client=68.ip-11-11-10.eu[11.12.13.14]: TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)
Mar 26 15:35:15 machin1 postfix/smtpd[12224]: 1662E180997: client=client=68.ip-11-11-10.eu[11.12.13.14]
Mar 26 15:35:15 machin1 postfix/cleanup[20853]: CC0FF180996: message-id=<a779c13adb0ff35fc576b6a9a3a779c7#async.clubggff.com>
Mar 26 15:35:15 machin1 postfix/qmgr[12106]: CC0FF180996: from=<notification+kjdkjivh3i_d#example-mail.com>, size=16051, nrcpt=1 (queue active)
Mar 26 15:35:15 machin1 postfix/smtpd[12110]: 6873F180998: client=client=68.ip-11-11-10.eu[11.12.13.14]
Mar 26 15:35:15 machin1 postfix/cleanup[21196]: 1662E180997: message-id=<cb01d448de2987547cd69fcab1e92f92#async.clubggff.com>
Mar 26 15:35:15 machin1 postfix/pipe[6928]: CC0FF180996: to=<transpostfix#localhost.localhost>, orig_to=<s01064154705#add3000.exemple.com.domain>, relay=emailtransport, delay=0.97, delays=0.55/0/0/0.42, dsn=2.0.0, status=sent (delivered via emailtransport service)
Mar 26 15:35:15 machin1 postfix/qmgr[12106]: CC0FF180996: removed
Mar 26 15:35:15 machin1 postfix/cleanup[21201]: 6873F180998: message-id=<1729890133889801-1540059429539540#groups.clubggff.com>
Mar 26 15:35:15 machin1 postfix/qmgr[12106]: 1662E180997: from=<notification+kjdkj5wd1k3_#example-mail.com>, size=18421, nrcpt=1 (queue active)
Mar 26 15:35:15 machin1 postfix/qmgr[12106]: 6873F180998: from=<notification+kjdkpj3hdv5d#example-mail.com>, size=24947, nrcpt=1 (queue active)
Mar 26 15:35:16 machin1 postfix/pipe[6941]: 1662E180997: to=<transpostfix#localhost.localhost>, orig_to=<margaretgarza#add3000.exemple.com.domain>, relay=emailtransport, delay=1.4, delays=0.95/0/0/0.41, dsn=2.0.0, status=sent (delivered via emailtransport service)
Mar 26 15:35:16 machin1 postfix/qmgr[12106]: 1662E180997: removed
Mar 26 15:35:16 machin1 postfix/smtpd[12154]: NOQUEUE: reject: RCPT from client=68.ip-11-11-10.eu[11.12.13.14]: 504 5.5.2 <164.132.109.68>: Helo command rejected: need fully-qualified hostname; from=<mbeuwen#sfilc.com> to=<t120304677#yahoo.com.tw> proto=SMTP helo=<164.132.109.68>
Mar 26 15:35:16 machin1 postfix/smtpd[12130]: disconnect from client=68.ip-11-11-10.eu[11.12.13.14]
Mar 26 15:35:16 machin1 postfix/smtpd[12157]: connect from client=68.ip-11-11-10.eu[11.12.13.14]
Mar 26 15:35:16 machin1 postfix/pipe[6938]: 6873F180998: to=<transpostfix#localhost.localhost>, orig_to=<fgbdfscxw#my-dom.exemple.com.domain>, relay=emailtransport, delay=1, delays=0.58/0/0/0.47, dsn=5.3.0, status=bounced (Command died with status 255: "/media/raid1m/mailparse/emailtransport.php")
Mar 26 15:35:16 machin1 postfix/cleanup[22236]: 4FFE918099A: message-id=<20160326133516.4FFE918099A#1.444.exemple.com.domain>
Mar 26 15:35:16 machin1 postfix/bounce[10936]: 6873F180998: sender non-delivery notification: 4FFE918099A
Mar 26 15:35:16 machin1 postfix/qmgr[12106]: 4FFE918099A: from=<>, size=27004, nrcpt=1 (queue active)
Mar 26 15:35:16 machin1 postfix/qmgr[12106]: 6873F180998: removed
Mar 26 15:35:16 machin1 postfix/error[10938]: 4FFE918099A: to=<notification+kjdkpj3hdv5d#example-mail.com>, relay=none, delay=0.03, delays=0.01/0.01/0/0.01, dsn=4.3.5, status=deferred (delivery temporarily suspended: Host or domain name not found. Name service error for name=delete-lev.exemple.com.domain type=A: Host not found)
I need disable bounce for emailtransport. Some time emailtransport.php give a mistake, but it's exactly does the job I want.
How to turn off any that bounce message to emailtransport and so that it did not affect the work or other transports such as other2emailtransport
I don't need this:
Mar 26 15:35:16 machin1 postfix/pipe[6938]: 6873F180998: to=<transpostfix#localhost.localhost>, orig_to=<fgbdfscxw#my-dom.exemple.com.domain>, relay=emailtransport, delay=1, delays=0.58/0/0/0.47, dsn=5.3.0, status=bounced (Command died with status 255: "/media/raid1m/mailparse/emailtransport.php")
Mar 26 15:35:16 machin1 postfix/cleanup[22236]: 4FFE918099A: message-id=<20160326133516.4FFE918099A#1.444.exemple.com.domain>
Mar 26 15:35:16 machin1 postfix/bounce[10936]: 6873F180998: sender non-delivery notification: 4FFE918099A
After Command died with status 255 I need delete message 6873F180998. And don't send bound message 4FFE918099A.
I solved my problem but it does not quite answer my question.
In the documentation is written: http://www.postfix.org/pipe.8.html
DIAGNOSTICS
Command exit status codes are expected to follow the conventions
defined in <sysexits.h>. Exit status 0 means normal successful comple-
tion.
In the case of a non-zero exit status, a limited amount of command out-
put is logged, and reported in a delivery status notification. When
the output begins with a 4.X.X or 5.X.X enhanced status code, the sta-
tus code takes precedence over the non-zero exit status (Postfix ver-
sion 2.3 and later).
This means I need to have my PHP script gave out EXIT(0); I turned on the reporting of errors ini_set('error_reporting', -1); and found a problem in script. when I repaired this script error disappeared and the issue resolved.
Other theoretical options to think how to solve the problem (but I'm unsure if this is possible):
Disable for special postfix transport use bounce
Always rewrite error status PHP script to 0
edit something in sysexits.h

FreeRADIUS Google Dual Factor Authenticator, Pam

Hi I've been following this article to setup FreeRADIUS Google Dual Factor Authenticator
http://www.supertechguy.com/help/security/freeradius-google-auth
Hours of testing I still can't get it to work. If my /etc/pam.d/radiusd looks like the following it works well with
the following command
radtest test test localhost 18120 testing123
#
# /etc/pam.d/radiusd - PAM configuration for FreeRADIUS
#
# We fall back to the system default in /etc/pam.d/common-*
#
#include common-auth
#include common-account
#include common-password
#include common-session
However if it looks like the following
#
# /etc/pam.d/radiusd - PAM configuration for FreeRADIUS
#
# We fall back to the system default in /etc/pam.d/common-*
#
##include common-auth
##include common-account
##include common-password
##include common-session
auth requisite pam_google_authenticator.so forward_pass
auth required pam_unix.so use_first_pass
my log file says the following and auth fails.
rad_recv: Access-Request packet from host 127.0.0.1 port 43185, id=111, length=56
User-Name = "test"
User-Password = "test"
NAS-IP-Address = 127.0.1.1
NAS-Port = 18120
Thu Sep 26 16:38:19 2013 : Info: # Executing section authorize from file /etc/freeradius/sites-enabled/default
Thu Sep 26 16:38:19 2013 : Info: +- entering group authorize {...}
Thu Sep 26 16:38:19 2013 : Info: ++[preprocess] returns ok
Thu Sep 26 16:38:19 2013 : Info: ++[chap] returns noop
Thu Sep 26 16:38:19 2013 : Info: ++[mschap] returns noop
Thu Sep 26 16:38:19 2013 : Info: ++[digest] returns noop
Thu Sep 26 16:38:19 2013 : Info: [suffix] No '#' in User-Name = "test", looking up realm NULL
Thu Sep 26 16:38:19 2013 : Info: [suffix] No such realm "NULL"
Thu Sep 26 16:38:19 2013 : Info: ++[suffix] returns noop
Thu Sep 26 16:38:19 2013 : Info: [eap] No EAP-Message, not doing EAP
Thu Sep 26 16:38:19 2013 : Info: ++[eap] returns noop
Thu Sep 26 16:38:19 2013 : Info: [files] users: Matched entry DEFAULT at line 74
Thu Sep 26 16:38:19 2013 : Info: ++[files] returns ok
Thu Sep 26 16:38:19 2013 : Info: ++[expiration] returns noop
Thu Sep 26 16:38:19 2013 : Info: ++[logintime] returns noop
Thu Sep 26 16:38:19 2013 : Info: [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.
Thu Sep 26 16:38:19 2013 : Info: ++[pap] returns noop
Thu Sep 26 16:38:19 2013 : Info: Found Auth-Type = PAM
Thu Sep 26 16:38:19 2013 : Info: # Executing group from file /etc/freeradius/sites-enabled/default
Thu Sep 26 16:38:19 2013 : Info: +- entering group authenticate {...}
Thu Sep 26 16:38:19 2013 : Debug: pam_pass: using pamauth string <radiusd> for pam.conf lookup
Thu Sep 26 16:38:19 2013 : Debug: pam_pass: function pam_authenticate FAILED for <test>. Reason: Cannot make/remove an entry for the specified session
Thu Sep 26 16:38:19 2013 : Info: ++[pam] returns reject
Thu Sep 26 16:38:19 2013 : Info: Failed to authenticate the user.
Thu Sep 26 16:38:19 2013 : Info: Using Post-Auth-Type Reject
Thu Sep 26 16:38:19 2013 : Info: # Executing group from file /etc/freeradius/sites-enabled/default
Thu Sep 26 16:38:19 2013 : Info: +- entering group REJECT {...}
Thu Sep 26 16:38:19 2013 : Info: [attr_filter.access_reject] expand: %{User-Name} -> test
Thu Sep 26 16:38:19 2013 : Debug: attr_filter: Matched entry DEFAULT at line 11
Thu Sep 26 16:38:19 2013 : Info: ++[attr_filter.access_reject] returns updated
Thu Sep 26 16:38:19 2013 : Info: Delaying reject of request 0 for 1 seconds
Thu Sep 26 16:38:19 2013 : Debug: Going to the next request
Thu Sep 26 16:38:19 2013 : Debug: Waking up in 0.9 seconds.
Thu Sep 26 16:38:20 2013 : Info: Sending delayed reject for request 0
Sending Access-Reject of id 111 to 127.0.0.1 port 43185
Thu Sep 26 16:38:20 2013 : Debug: Waking up in 4.9 seconds.
Thu Sep 26 16:38:25 2013 : Info: Cleaning up request 0 ID 111 with timestamp +3
Thu Sep 26 16:38:25 2013 : Info: Ready to process requests.
I'm using Ubuntu latest
Does anyone know what the issue here?
Many Thanks
After so much internet surfing and forum hunting I manage to fix this problem. If anyone else having this issue this might help them :)
Thu Sep 26 16:38:19 2013 : Debug: pam_pass: using pamauth string <radiusd> for pam.conf lookup
Thu Sep 26 16:38:19 2013 : Debug: pam_pass: function pam_authenticate FAILED for <test>. Reason: Cannot make/remove an entry for the specified session
The above line actually means a auth fail, even though it doesn't sound like it, also it could mean that .google_authenticator file in the user's home directory isn't accessible.
FreeRadius log file not help you much with this issue, but have a look through /var/log/secure on CentOS and /var/log/auth.log in Ubuntu. This will explain which is the issue.
Issue with my system was my time was out and my random generated number by Google Dual Factor Authenticator application on my iPhone wasn't valid. I had to install NTP and change my servers time to the correct time which fixed the issue!!!!
hope this help someone else :)
The how-to on Super Tech Guy's page (http://www.supertechguy.com/help/security/freeradius-google-auth) has a typo.
DEFAULT Auth-Type := PAM
should be
DEFAULT Auth-Type = PAM
I don't know why he put a colon in there, but removing it fixed my issue.
This was after I made sure the server had the correct time (and timezone), which it didn't. So thanks for that suggestion too!

Resources