SMTP authentication fails

[whitekitten]

Hi All,

I am facing issues with SMTP authentication on 3.0.1 server.

My settings are as below;

SMTP server = smtp.zoho.com
SMTP server port = 465
SMTP helo = zoho.com
SMTP email = [email protected]
Connection security = SSL/TLS
SSL verify peer = unchecked
SSL verify host = unchecked
authentication = normal password

===============

Debug logs = 4

20691:20160723:110409.184 query [txnlev:0] [update alerts set status=2,retries=3,error='Login denied: Authentication failed: 535' where alertid=10185]
20691:20160723:110409.186 In execute_action(): alertid [10189] mediatype [0]
20691:20160723:110409.186 In send_email() smtp_server:'smtp.zoho.com' smtp_port:465 smtp_security:2 smtp_authentication:1

20691:20160723:110411.194 Login denied: Authentication failed: 535
20691:20160723:110411.194 End of send_email():FAIL
20691:20160723:110411.194 End of execute_action():FAIL
20691:20160723:110411.194 error sending alert ID [10189]
20691:20160723:110411.194 query without transaction detected
20691:20160723:110411.195 query [txnlev:0] [update alerts set retries=1,error='Login denied: Authentication failed: 535' where alertid=10189]

=============

Provider settings

Outgoing Server Settings:

Outgoing Server Name: smtp.zoho.com
Port: 465 with SSL or
Port: 587 with TLS
Require Authentication: Yes

======

When STARTTLS is used we get error "SSL connect error: error:140770FC:SSL
> routines:SSL23_GET_SERVER_HELLO:unknown protocol"

Please advise what else troubleshooting can be done to fix this.

We have another domain on another provider which doesn't use SSL/TLS where zabbix email sending works fine.

Thanks in advance
H

[Hubby2004]

Check if your Zabbix server has been compiled with SMTP authentication support. (Go to /var/log/zabbis_server/zabbis_server.log)

Starting Zabbix Server. Zabbix 3.0.2 (revision 59540).
****** Enabled features ******
SNMP monitoring: YES
IPMI monitoring: NO
Web monitoring: YES
VMware monitoring: YES
SMTP authentication: NO
Jabber notifications: NO
Ez Texting notifications: YES
ODBC: YES
SSH2 support: YES
IPv6 support: YES
TLS support: NO

[whitekitten]

Thanks for the tip.
The server is compiled with SMTP Auth

28035:20160727:112658.259 Starting Zabbix Server. Zabbix 3.0.1 (revision 58734).
28035:20160727:112658.259 ****** Enabled features ******
28035:20160727:112658.259 SNMP monitoring: YES
28035:20160727:112658.259 IPMI monitoring: YES
28035:20160727:112658.259 Web monitoring: YES
28035:20160727:112658.259 VMware monitoring: YES
28035:20160727:112658.259 SMTP authentication: YES
28035:20160727:112658.259 Jabber notifications: YES
28035:20160727:112658.259 Ez Texting notifications: YES
28035:20160727:112658.259 ODBC: YES
28035:20160727:112658.259 SSH2 support: YES
28035:20160727:112658.259 IPv6 support: YES
28035:20160727:112658.259 TLS support: YES
28035:20160727:112658.259 ******************************


Any other pointers?

Thanks in advance
Whitekitten

[bjhzxs]

Three points you need to do, I Think

1. SMTP helo = zoho.com -----> SMTP helo = smtp.zoho.com
2. SSL verify host = unchecked -----> SSL verify host = checked
3. Your zoho.com email password should be set in your settings

My settings do work successfully like this picture shown in the attachment.

[whitekitten]

1. SMTP helo = zoho.com -----> SMTP helo = smtp.zoho.com
2. SSL verify host = unchecked -----> SSL verify host = checked
3. Your zoho.com email password should be set in your settings

My settings do work successfully like this picture shown in the attachment.

This is resolved by bypassing Zoho using SMTP relay e.g. Postfix.

The mail alerts are much faster now..!

[rafdouglas]

Port 587

you might want to try setting port 587, so that zoho SMTP knows you are using TLS (and not SSL, which is on port 465)


from https://www.zoho.com/mail/help/imap-access.html :
Outgoing Server Settings:

Outgoing Server Name: smtp.zoho.com
Port: 465 with SSL or
Port: 587 with TLS
Require Authentication: Yes

[voctavianus]

I am using gmail. It said this error: SSL connect error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number