MM V5.2 / After a longer network failure now I can’t edit any User.

[mmpit]

Modular Messaging V5.2 (9.2.723.15000)
2x MAS on Windows Server 2003
1x MSS on RedHead Linux

I have a MM with 2 MAS and more than 5000 mailboxes in use.
After a longer network failure now I can’t edit any User.
I have searched at 1027 events and find a lot of “MSS failure (SMTP) - critical problem delivering outgoing messages to the MSS. [Reason :RCPT command failed.]” Errors.
The “C:\Avaya_Support\Tools\FEDBQueryGUI “ tell me deviations between MAS1 and MAS2. Now I hope with stop The MM and FEDB-Sync the System is already running.
(C:\Avaya_Support\Tools\FEDBSync\FEDBSync.exe)

Now my questions:
With more than 5000 mailboxes how many time run the FEDB-Sync?
Must the FEDB-Sync run on MAS1 and MAS2 ore only on one MAS?
How can tell me a step by step list?
If this doesn’t work what’s the next step?


Sorry for my bad English and best regards

 

[KenMeans]

You should only run it one time. This sounds like the Network is not connected or working between the MAS and the MSS.

Ken Means

http://www.tel-is.com

"I find that the harder I work, the more luck I seem to have."
- Thomas Jefferson (1743-1826)

 

[mmpit]

Hello "KenMeans" thanks for the quick reply!
I've checked the network connection in the private LAN via ping and in the corporate LAN via ping and DNS name. The connections are OK.

The FEDB sync I run after "Stop Messaging" in MM Administration GUI so only on MAS1 by?

In the "Web Server Error Log" are those entries:

"[Mon Jan 06 12:01:01 2014] [warn] RSA server certificate CommonName (CN) `<host.domain> does NOT match server name!?"

"[Tue Jan 07 10:36:05 2014] [error] [client <IP>] web_util : 21 : could not load session file: /var/tmp/ecs_web_session/gwHkBPynM.sOfuF3YnS-M.dat"

"[Wed Jan 08 18:04:50 2014] [error] [client <IP>] web_util : 21 : could not load session file: /var/tmp/ecs_web_session/dR1kwecPAPXsrzFk6J_8.dat"

"[Wed Jan 15 14:18:31 2014] [error] [client <IP>] enter_pwd: connect2proxy failed -- attempt 1, referer:

https://<host.domain>/cgi-bin/login"

thank you in advance and greetings

 

[KenMeans]

what errors are you getting in the app log of the MAS ? after you run the fedb sync do you see a 1027 ?

What is the WebLM showing ? is it running ok ?



The errors below seem to be some other system or client trying to connect to the MSS not sure if it is the MAS or not as i cant see the logs.


In the "Web Server Error Log" are those entries:

"[Mon Jan 06 12:01:01 2014] [warn] RSA server certificate CommonName (CN) `<host.domain> does NOT match server name!?"

"[Tue Jan 07 10:36:05 2014] [error] [client <IP>] web_util : 21 : could not load session file: /var/tmp/ecs_web_session/gwHkBPynM.sOfuF3YnS-M.dat"

"[Wed Jan 08 18:04:50 2014] [error] [client <IP>] web_util : 21 : could not load session file: /var/tmp/ecs_web_session/dR1kwecPAPXsrzFk6J_8.dat"

"[Wed Jan 15 14:18:31 2014] [error] [client <IP>] enter_pwd: connect2proxy failed -- attempt 1, referer:

https://<host.domain>/cgi-bin/login"

Ken Means

http://www.tel-is.com

"I find that the harder I work, the more luck I seem to have."
- Thomas Jefferson (1743-1826)

 

[KenMeans]

Also when you say you cant edit any users what error are you getting ? And are you using the MSS direct or something else to do this with ?


Ken Means

http://www.tel-is.com

"I find that the harder I work, the more luck I seem to have."
- Thomas Jefferson (1743-1826)

 

[mmpit]

I work "remote desktop" on MAS1 with the "Messaging Administration" web frontend. All changes will be accepted in the GUI, but not executed.
Password Reset is not performed
New mailbox> invalid registration (TUI announcement)

 

[KenMeans]

You must be getting errors in the app log on the MAS what are you seeing ?


Ken Means

http://www.tel-is.com

"I find that the harder I work, the more luck I seem to have."
- Thomas Jefferson (1743-1826)

 

[mmpit]

many there
Event Type: Error
Event Source: gv_vserver
Event Category: Messaging
Event ID: 1621
Date: 23.01.2014
Time: 16:26:48
User: NT AUTHORITY\SYSTEM
Computer: <hostname>
Description:
MSS failure (SMTP) - critical problem delivering outgoing message to the MSS. [Reason : RCPT command failed.]
Sender : postmaster@<domain>
MSS Error: 550 User unknown
---
Event Type: Error
Event Source: gv_vserver
Event Category: MWI Internal
Event ID: 1766
Date: 22.01.2014
Time: 04:36:33
User: NT AUTHORITY\SYSTEM
Computer: <hostname>
Description:
MWI operation: Reset failed for extension 835594 due to Unknown error
---
Event Type: Error
Event Source: gv_vserver
Event Category: MWI Internal
Event ID: 1766
Date: 22.01.2014
Time: 04:15:52
User: NT AUTHORITY\SYSTEM
Computer: <hostname>
Description:
MWI operation: Reset failed for extension 823308 due to Request send failure
---
one
Event Type: Error
Event Source: gv_vserver
Event Category: Call Management
Event ID: 1711
Date: 20.01.2014
Time: 16:05:15
User: NT AUTHORITY\SYSTEM
Computer: <hostname>
Description:
Line device call disconnect event, failed on Channel 2, Error:- Error reason = 266 - Recovery on timer expire.
---
Event Type: Error
Event Source: gv_vserver
Event Category: Call Management
Event ID: 1711
Date: 20.01.2014
Time: 10:58:57
User: NT AUTHORITY\SYSTEM
Computer: <hostname>
Description:
Line device call disconnect event, failed on Channel 6, Error:- Error reason = 266 - Recovery on timer expire.
---

 

[KenMeans]

Are you sure that the postmaster is still in the MSS ?

Ken Means

http://www.tel-is.com

"I find that the harder I work, the more luck I seem to have."
- Thomas Jefferson (1743-1826)

 

[mmpit]

It is used not send e-mail via Excange. It is only used MWI.
Is that mean?

 

[KenMeans]

No the postmaster on the MSS

Ken Means

http://www.tel-is.com

"I find that the harder I work, the more luck I seem to have."
- Thomas Jefferson (1743-1826)

 

[mmpit]

I can check the service until tomorrow via SSH / Telnet :-(
SORRY

 

[mmpit]

I wish a very nice day!
To the Postmaster I can later say something because of our firewall.
Can I safely to the MSS the Redhat GUI install (fals not exist)?

 

[mmpit]

Unfortunately I am still not connecting via telnet / SSH possible.
I got an e-mail to the MSS (postmaster @ <hostname> <domain>) sent and get no error message.

 

[mmpit]

Hello, last weekend, the FEDB synchronization was performed.
Mailboxes can now edit again and reset passwords.
Thank you for the support!

Can anyone help with this certificate error?
"[Mon Jan 06 12:01:01 2014] [warn] RSA server certificate CommonName (CN) `<host.domain> does NOT match server name!?

 

[KenMeans]

Are you still getting the error or was this a one tine thing as i see it was almost 3 weeks ago.

Ken Means

http://www.tel-is.com

"I find that the harder I work, the more luck I seem to have."
- Thomas Jefferson (1743-1826)

 

[mmpit]

The last entries are actually from Friday and the work was performed on Saturday.

 

[KenMeans]

Are you using a RSA server for authentication for users on the MSS or is it complaining about the MAS ?

Ken Means

http://www.tel-is.com

"I find that the harder I work, the more luck I seem to have."
- Thomas Jefferson (1743-1826)

 

[mmpit]

Nice good morning, entries are now available again.
[Mon Jan 27 16:33:12 2014] [error] [client <IP>] [Mon Jan 27 16:33:12 2014] Messaging.pm: /html/mcwebadm/cgi-bin/menu.pl: get_sf_info: zero cookie is missing or blank., referer:

https://<host><domain>/cswebadm/global/cgi-bin/buildMenu.pl

[Mon Jan 27 17:01:02 2014] [warn] RSA server certificate CommonName (CN) `<host><domain>' does NOT match server name!?
[Tue Jan 28 09:10:41 2014] [error] [client <IP>] login_util : 02 : could not connect to login_proxy: No such file or directory, referer:

https://<host><domain>/cgi-bin/login

[Tue Jan 28 09:10:41 2014] [error] [client <IP>] enter_pwd: connect2proxy failed -- attempt 1, referer:

https://<host><domain>/cgi-bin/login

 

[mmpit]

Am I correct in this assumption:
The domain name has changed. The hostname in the certificate that is no longer true with the FQDN match ...
The changed hostname in the certificate or a new certificate resolve this error?