Cthulhu wrote:check journal why iredapd stopped working, my guess is that it gets OOM terminated
Thanks, you pointed me in right direction...
So, my Mailserver VM started/rebooted (due to proxmox maintenance) and iRedAPD runs into 'LDAP bind failed: SERVER_DOWN' following error messages at any email handling, but no issue at mail transfer.
Then at some point I tried to send via alias name and observe the error message at roundcube. Restart iRedAPD manually solved the issue...
...
Feb 26 12:04:49 mail iredapd LDAP bind failed: SERVER_DOWN({'desc': "Can't contact LDAP server", 'errno': 107, 'info': 'Transport endpoint is not connected'})
Feb 26 12:04:49 mail iredapd Starting iRedAPD (version: 5.3.3, backend: ldap), listening on 127.0.0.1:7777.
Feb 26 12:04:49 mail iredapd Loading plugin (priority: 100): reject_null_sender
Feb 26 12:04:49 mail iredapd Loading plugin (priority: 99): wblist_rdns
Feb 26 12:04:49 mail iredapd Loading plugin (priority: 90): reject_sender_login_mismatch
Feb 26 12:04:49 mail iredapd Loading plugin (priority: 80): greylisting
Feb 26 12:04:49 mail iredapd Loading plugin (priority: 60): throttle
Feb 26 12:04:49 mail iredapd Loading plugin (priority: 50): ldap_maillist_access_policy
Feb 26 12:04:49 mail iredapd Loading plugin (priority: 40): amavisd_wblist
Feb 26 12:04:49 mail iredapd Starting SRS sender rewriting channel, listening on 127.0.0.1:7778
Feb 26 12:04:49 mail iredapd Starting SRS recipient rewriting channel, listening on 127.0.0.1:7779
Feb 26 12:21:47 mail iredapd <!> Error while querying local domain: INSUFFICIENT_ACCESS({'desc': 'Insufficient access'})
Feb 26 12:21:47 mail iredapd <!> Error while querying alias domain: INSUFFICIENT_ACCESS({'desc': 'Insufficient access'})
...
Feb 26 12:21:47 mail iredapd <!> Error while querying alias domain: INSUFFICIENT_ACCESS({'desc': 'Insufficient access'})
Feb 26 12:21:47 mail iredapd <!> Error while querying alias domain: INSUFFICIENT_ACCESS({'desc': 'Insufficient access'})
...
Feb 26 12:21:47 mail iredapd <!> Error while querying alias domain: INSUFFICIENT_ACCESS({'desc': 'Insufficient access'})
Feb 26 12:21:47 mail iredapd <!> Error while querying alias domain: INSUFFICIENT_ACCESS({'desc': 'Insufficient access'})
...
Feb 26 12:27:38 mail iredapd <!> Error while querying local domain: INSUFFICIENT_ACCESS({'desc': 'Insufficient access'})
Feb 26 12:27:38 mail iredapd <!> Error while querying alias domain: INSUFFICIENT_ACCESS({'desc': 'Insufficient access'})
...
Feb 27 15:20:36 mail iredapd <!> Error while querying alias domain: INSUFFICIENT_ACCESS({'desc': 'Insufficient access'})
Feb 27 15:20:36 mail iredapd <!> Error while querying alias domain: INSUFFICIENT_ACCESS({'desc': 'Insufficient access'})
Feb 27 15:41:09 mail iredapd [127.0.0.1] RCPT, me@mydomain.com => alias.me@mydomain.com -> user@anydomain.com, REJECT Sender is not same as SMTP authenticate username [sasl_username=me@mydomain.com, sender=alias.me@mydomain.com, client_name=mail.server.local, reverse_client_name=mail.server.local, helo=localhost, encryption_protocol=TLSv1.3, encryption_cipher=TLS_AES_256_GCM_SHA384, server_port=587, process_time=0.0010s]
systemctl restart iredapd.service
Feb 27 15:41:16 mail iredapd Starting iRedAPD (version: 5.3.3, backend: ldap), listening on 127.0.0.1:7777.
Feb 27 15:41:16 mail iredapd Loading plugin (priority: 100): reject_null_sender
Feb 27 15:41:16 mail iredapd Loading plugin (priority: 99): wblist_rdns
Feb 27 15:41:16 mail iredapd Loading plugin (priority: 90): reject_sender_login_mismatch
Feb 27 15:41:16 mail iredapd Loading plugin (priority: 80): greylisting
Feb 27 15:41:16 mail iredapd Loading plugin (priority: 60): throttle
Feb 27 15:41:16 mail iredapd Loading plugin (priority: 50): ldap_maillist_access_policy
Feb 27 15:41:16 mail iredapd Loading plugin (priority: 40): amavisd_wblist
Feb 27 15:41:16 mail iredapd Starting SRS sender rewriting channel, listening on 127.0.0.1:7778
Feb 27 15:41:16 mail iredapd Starting SRS recipient rewriting channel, listening on 127.0.0.1:7779
Feb 27 15:41:21 mail iredapd [127.0.0.1] RCPT, me@mydomain.com => alias.me@mydomain.com -> user@anydomain.com, DUNNO [sasl_username=me@mydomain.com, sender=alias.me@mydomain.com, client_name=mail.server.local, reverse_client_name=mail.server.local, helo=localhost, encryption_protocol=TLSv1.3, encryption_cipher=TLS_AES_256_GCM_SHA384, server_port=587, process_time=0.0056s]
Feb 27 15:41:21 mail iredapd [127.0.0.1] END-OF-MESSAGE, me@mydomain.com => alias.me@mydomain.com -> user@anydomain.com, DUNNO [recipient_count=1, size=2618, process_time=0.0025s]
... = normal email handling as send and delivery
Checked another reboot and it runs into same failure... ( beside 'Error while querying alias domain' messages doesn't appear yet)
Any hints?
