Problem on mail and webmail with new centos 7 + plesk12

[zzz]

I install a new server with centos 7 and plesk 12.
After a migration of one domain from a plesk 11.5, I create a new address mail on this domain on plesk 12.
The result : Impossible to connect to this mail by Webmail : login fail or by outlook.
Do you have ever seen this issue before ?

 

[IgorG]

Have you tried troubleshoot it? Have you checked error messages in logs? Any details?

 

[zzz]

Thank you for your reply :
in psa-horde.log :
ERR: HORDE [horde] FAILED LOGIN for test@xxx (test@xxx) [] to horde [pid 8925 on line 216 of "/usr/share/psa-horde/login.php"]
in maillog :
Aug 11 13:47:45 courier-imapd: Connection, ip=[::ffff:127.0.0.1]
Aug 11 13:47:45 courier-imapd: Disconnected, ip=[::ffff:127.0.0.1], time=0
Aug 11 13:47:50 postfix/master[30638]: warning: master_wakeup_timer_event: service pickup(public/pickup): Connection refused

ERR: HORDE [horde] FAILED LOGIN for test@xxx (test@xxx) [] to horde [pid 8925 on line 216 of "/usr/share/psa-horde/login.php"]

Aug 11 13:47:45 courier-imapd: Connection, ip=[::ffff:127.0.0.1]
Aug 11 13:47:45 courier-imapd: Disconnected, ip=[::ffff:127.0.0.1], time=0
Aug 11 13:47:50 postfix/master[30638]: warning: master_wakeup_timer_event: service pickup(public/pickup): Connection refused


on port 110


Aug 11 14:01:34 courier-pop3d: Connection, ip=
Aug 11 14:01:34 courier-pop3d: Disconnected, ip=

but with correct email et password i have the following result : problem with login or password

on port 995


Aug 11 13:59:23 postfix/smtpd[9000]: connect from
Aug 11 13:59:23 courier-pop3s: couriertls: connect: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher
Aug 11 13:59:23 postfix/smtpd[9000]: improper command pipelining after EHLO from ]: QUIT\r\n
Aug 11 13:59:23 postfix/smtpd[9000]: disconnect from

 

[UFHH01]

Aug 11 13:47:50 postfix/master[30638]: warning: master_wakeup_timer_event: service pickup(public/pickup): Connection refused

Please see this solution:

depending on your system configuration, you could try to change to FIFO instead of UNIX ( interfaces ) at /etc/postfix/master.cf :

Search for :

pickup unix  n - n 60 1 pickup
...
qmgr unix n - n 300 1 qmgr

Replace with :

pickup fifo n - n 60 1 pickup
...
qmgr fifo n - n 1 1 qmgr

 

[zzz]

plesk_virtual unix - n n - - pipe flags=DORhu user=popuseropuser argv=/usr/lib64/plesk-9.0/postfix-local -f ${sender} -d ${recipient} -p /var/qmail/mailnames
mailman unix - n n - - pipe flags=R user=mailman:mailman argv=/usr/lib64/plesk-9.0/postfix-mailman ${nexthop} ${user} ${recipient}
pickup fifo n - n 60 1 pickup
plesk_saslauthd unix y y n - 1 plesk_saslauthd status=5 listen=6 dbpath=/var/spool/postfix/plesk/passwd.db
qmgr fifo n - n 1 1 qmgr
smtps inet n - n - - smtpd -o smtpd_tls_wrappermode=yes


submission inet n - n - - smtpd -o smtpd_enforce_tls=yes -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination


plesk-xxx.XX-xx- unix - n n - - smtp -o smtp_bind_address=xxx -o smtp_bind_address6= -o smtp_address_preference=ipv4 -o smtp_helo_name=xxx

It's already done

I change in the begining of the file like you say.

pickup unix n - n 60 1 pickup
...
qmgr unix n - n 300 1 qmgr

I reaload the postfix conf:
/usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: tls_ssl_options=NO_COMPRESSION
postfix/postfix-script: refreshing the Postfix mail system

But i have the same result :-(

 

[zzz]

i install qmail server to test :
Aug 12 11:32:06 qmail: 1439371926.462418 status: local 0/10 remote 0/20
Aug 12 11:32:07 qmail: 1439371927.473565 status: local 0/10 remote 0/20
Aug 12 11:32:10 /usr/lib64/plesk-9.0/psa-pc-remote[30719]: PleskFilter: mi_stop=1
Aug 12 11:32:20 courier-authdaemon: stopping authdaemond children
Aug 12 11:32:20 courier-authdaemon: modules="authpsa ", daemons=5
Aug 12 11:32:20 courier-authdaemon: Installing libauthpsa
Aug 12 11:32:20 courier-authdaemon: Installation complete: authpsa
Aug 12 11:32:20 courier-authdaemon: stopping authdaemond children
Aug 12 11:32:20 courier-authdaemon: modules="authpsa ", daemons=5
Aug 12 11:32:20 courier-authdaemon: Installing libauthpsa
Aug 12 11:32:20 courier-authdaemon: Installation complete: authpsa
Aug 12 11:32:24 spamd[16064]: spamd: server killed by SIGTERM, shutting down
Aug 12 11:32:24 spamd[21204]: logger: removing stderr method
Aug 12 11:32:26 spamd[21206]: spamd: server started on IO::Socket::IP [127.0.0.1]:783, IO::Socket::IP [::1]:783 (running version 3.4.0)
Aug 12 11:32:26 spamd[21206]: spamd: server pid: 21206
Aug 12 11:32:26 spamd[21206]: spamd: server successfully spawned child process, pid 21207
Aug 12 11:32:26 spamd[21206]: spamd: server successfully spawned child process, pid 21208
Aug 12 11:32:26 spamd[21206]: prefork: child states: IS
Aug 12 11:32:26 spamd[21206]: prefork: child states: II
Aug 12 11:32:26 qmail: 1439371946.570327 status: local 0/10 remote 0/20
Aug 12 11:32:27 courier-authdaemon: stopping authdaemond children
Aug 12 11:32:27 courier-authdaemon: modules="authpsa ", daemons=5
Aug 12 11:32:27 courier-authdaemon: Installing libauthpsa
Aug 12 11:32:27 courier-authdaemon: Installation complete: authpsa
Aug 12 11:32:27 courier-authdaemon: stopping authdaemond children
Aug 12 11:32:27 courier-authdaemon: modules="authpsa ", daemons=5
Aug 12 11:32:27 courier-authdaemon: Installing libauthpsa
Aug 12 11:32:27 courier-authdaemon: Installation complete: authpsa
Aug 12 11:32:35 qmail: 1439371955.800433 status: local 0/10 remote 0/20

Aug 12 11:34:17 courier-imapd: Connection, ip=[::ffff:127.0.0.1]
Aug 12 11:34:17 courier-imapd: Disconnected, ip=[::ffff:127.0.0.1], time=0

on port 995

Aug 12 11:40:37 courier-pop3s: couriertls: accept: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher

result on psa-horde.log
ERR: HORDE [horde] FAILED LOGIN for test@xxx (test@xxx) [xxx] to horde [pid 22344 on line 216 of "/usr/share/psa-horde/login.php"]

Same result :-(

 

[UFHH01]

Hi zzz,

please post the actual used openssl - package(s) installed on your server. I think, that you might have installed openssl_dev - package, instead or in addition to the "normal "openssl - version.

 

[zzz]

openssl version -a
OpenSSL 1.0.1e-fips 11 Feb 2013
built on: Mon Jun 29 12:45:07 UTC 2015
platform: linux-x86_64
options: bn(64,64) md2(int) rc4(16x,int) des(idx,cisc,16,int) idea(int) blowfish(idx)
compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DKRB5_MIT -m64 -DL_ENDIAN -DTERMIO -Wall -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -Wa,--noexecstack -DPURIFY -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
OPENSSLDIR: "/etc/pki/tls"
engines: rdrand dynamic


I have install the defaut ovh.com package centos 7 plesk 12

Could you explain me the process to upgrade ?

 

[UFHH01]

Hi zzz,

please use the command "yum list installed openssl" for a detailed output of the installed packages ( can include more than just 1 package! ).


The following commands will update your openssl - version to the most recent one from your used repositories:

sudo yum clean all
sudo yum update
sudo yum update openssl​

 

[zzz]

yum list installed openssl
Loaded plugins: fastestmirror
base | 3.6 kB 00:00
extras | 3.4 kB 00:00
plesk-php-5.2 | 2.9 kB 00:00
plesk-php-5.3 | 2.9 kB 00:00
plesk-php-5.4 | 2.9 kB 00:00
plesk-php-5.5 | 2.9 kB 00:00
plesk-php-5.6 | 2.9 kB 00:00
updates | 3.4 kB 00:00
(1/9): extras/7/x86_64/primary_db | 74 kB 00:00
(2/9): base/7/x86_64/group_gz | 154 kB 00:00
(3/9): base/7/x86_64/primary_db | 5.1 MB 00:00
(4/9): plesk-php-5.3/primary_db | 13 kB 00:00
(5/9): plesk-php-5.2/primary_db | 13 kB 00:00
(6/9): updates/7/x86_64/primary_db | 3.2 MB 00:00
(7/9): plesk-php-5.4/primary_db | 13 kB 00:00
(8/9): plesk-php-5.5/primary_db | 13 kB 00:00
(9/9): plesk-php-5.6/primary_db | 13 kB 00:00
Determining fastest mirrors
* base: mirrors.coreix.net
* extras: mirrors.coreix.net
* updates: mirrors.coreix.net
Installed Packages
openssl.x86_64 1:1.0.1e-42.el7.9 @updates

sudo yum clean all : ok
sudo yum update : Complete !
sudo yum update openssl :
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: mirrors.coreix.net
* extras: mirrors.coreix.net
* updates: mirrors.coreix.net
No Match for argument: openssl
No packages marked for update


yum list installed openssl
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: mirrors.coreix.net
* extras: mirrors.coreix.net
* updates: mirrors.coreix.net
Installed Packages
openssl.x86_64 1:1.0.1e-42.el7.9 @updates


Could you explain me the process to upgrade ?
Thank you.

PS : Same result :-(

 

[UFHH01]

Hi zzz,

to list all possible openssl versions, you can use:

yum --showduplicates list openssl​

In addition, what you can do with yum as well, please consider using the "--help" string ( works with most commands over the command line! )

yum --help
​

Sometimes, the latest installed packages may lead to incompatibility to other installed packages. In your case, I think that you upgraded to the latest openssl - version of CentOS and your mail-server and the depending configuration doesn't seem to work with that. Consider using a lower version and test then, if this might resolve your issue. A simple yum-downgrade command would be for example:

yum downgrade openssl-1.0.1e-42.el7_XX
​

Please replace the XX with a lower number, than already installed on your server. The list will point you to possible packages.

 

[zzz]

yum --showduplicates list openssl
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: mirrors.coreix.net
* extras: mirrors.coreix.net
* updates: mirrors.coreix.net
Error: No matching Packages to list


yum downgrade openssl-1.0.1e-42.el7.8
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: mirrors.coreix.net
* extras: mirrors.coreix.net
* updates: mirrors.coreix.net
Resolving Dependencies
--> Running transaction check
---> Package openssl.x86_64 1:1.0.1e-42.el7.8 will be a downgrade
--> Processing Dependency: openssl-libs(x86-64) = 1:1.0.1e-42.el7.8 for package: 1penssl-1.0.1e-42.el7.8.x86_64
---> Package openssl.x86_64 1:1.0.1e-42.el7.9 will be erased
--> Finished Dependency Resolution
Error: Package: 1penssl-1.0.1e-42.el7.8.x86_64 (updates)
Requires: openssl-libs(x86-64) = 1:1.0.1e-42.el7.8
Installed: 1penssl-libs-1.0.1e-42.el7.9.x86_64 (@updates)
openssl-libs(x86-64) = 1:1.0.1e-42.el7.9
Available: 1penssl-libs-1.0.1e-42.el7.x86_64 (base)
openssl-libs(x86-64) = 1:1.0.1e-42.el7
Available: 1penssl-libs-1.0.1e-42.el7_1.5.x86_64 (updates)
openssl-libs(x86-64) = 1:1.0.1e-42.el7_1.5
Available: 1penssl-libs-1.0.1e-42.el7.4.x86_64 (updates)
openssl-libs(x86-64) = 1:1.0.1e-42.el7.4
Available: 1penssl-libs-1.0.1e-42.el7.6.x86_64 (updates)
openssl-libs(x86-64) = 1:1.0.1e-42.el7.6
Available: 1penssl-libs-1.0.1e-42.el7.8.x86_64 (updates)
openssl-libs(x86-64) = 1:1.0.1e-42.el7.8
You could try using --skip-broken to work around the problem
You could try running: rpm -Va --nofiles --nodigest

My configuration is a new install centos 7 plesk 12
Do you have a compatible version to give me ?

 

[UFHH01]

.... please consider to add some usefull repositories:

For CentOS 7 you could EPEL for example:

wget http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-2.noarch.rpm
rpm -ivh epel-release-7-2.noarch.rpm​

In some cases, repositories are disabled. Please have a look at "/etc/yum.repos.d/XXX.repo" and watch for the line "enabled=" which should be defined as "1" for being enabled.


Please inform yourself about the different repositories and decide for yourself, if you would like to add them. Please google the sentence: "CentOS 7" "usefull" "repo" "add" ( or something similar )