09-09-2019 02:51 PM
Good evening.
I have an installation running ISE version 2.6 patch 1 and 2 where smtp realying doesn't work and the guest logging seems to indicate that internal process might be the culprit.
The log messages contains lines like this:
"2019-09-09 15:56:18,766 INFO [https-jsse-nio-172.20.128.30-8445-exec-2][] cpm.guestaccess.flowmanager.step.StepExecutor -:SD_Admin:- Radius Session ID is not set, assuming in dry-run mode
2019-09-09 15:57:01,431 INFO [https-jsse-nio-192.168.2.98-8443-exec-6][] cisco.ise.portalwebaction.controller.PortalFlowInterceptor -::- Portal Session is NULL, Hence skipping RateLimit Check ..!
2019-09-09 15:58:18,938 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Sending Mail Message ............
2019-09-09 15:58:18,948 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Submitting Mail Job............
2019-09-09 15:58:18,948 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- submitMailMsgJob: SMTP server FQDN ==> smtprelay.sll.se
2019-09-09 15:58:18,949 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Time taken for Submitting mail job is 11 Milli seconds.
2019-09-09 15:58:18,949 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Calling Future.get....
2019-09-09 15:58:18,949 INFO [GUEST_ACCESS_SMTP_RETRY_THREAD][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- submitMailMsgJob: Creating transport object...
2019-09-09 15:58:18,977 ERROR [GUEST_ACCESS_SMTP_RETRY_THREAD][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- An exception occurred while sending email :
javax.mail.SendFailedException: Invalid Addresses;
nested exception is:
com.sun.mail.smtp.SMTPAddressFailedException: 550 5.7.1 <mats.nilson@telia.com>... Relaying denied
at com.sun.mail.smtp.SMTPTransport.rcptTo(SMTPTransport.java:1196)
at com.sun.mail.smtp.SMTPTransport.sendMessage(SMTPTransport.java:584)
at com.cisco.cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil$1.call(SmtpMsgRetryThreadUtil.java:220)
at com.cisco.cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil$1.call(SmtpMsgRetryThreadUtil.java:211)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)
Caused by: com.sun.mail.smtp.SMTPAddressFailedException: 550 5.7.1 <mats.nilson@telia.com>... Relaying denied
at com.sun.mail.smtp.SMTPTransport.rcptTo(SMTPTransport.java:1047)
... 7 more
2019-09-09 15:58:18,978 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Time taken for Future.get method call is 29 Milliseconds."
The logging in the firewalls indicate that the email are passing freely and another ISE installation on the same subnet are not subject to these email failures. The email address i valid as well as the SMTP realy server entry.
What is this smtp.mail.sun.com comming from? There is not a configured line anywere in this installation unless contained in the code itself...
Anyone who can explain these log lines?
Solved! Go to Solution.
09-09-2019 05:00 PM
com.sun.mail.smtp is the Java object where the events are being generated from. That appears to be normal. Your issue looks to be an SMTP problem with your mail server. Looks like mail relay is being denied. Make sure your SMTP server is configured to allow your new ISE IP address to relay mail through it.
09-10-2019 01:28 AM
Thanks, I suspected as such, but it's a bit weird to have a process named like a vaild server name..
I was misinformed that the access list within the server was accepting any internal server from this specific subnet.
Not so simple... ;-)
Sincere Regards
09-09-2019 05:00 PM
com.sun.mail.smtp is the Java object where the events are being generated from. That appears to be normal. Your issue looks to be an SMTP problem with your mail server. Looks like mail relay is being denied. Make sure your SMTP server is configured to allow your new ISE IP address to relay mail through it.
09-10-2019 01:28 AM
Thanks, I suspected as such, but it's a bit weird to have a process named like a vaild server name..
I was misinformed that the access list within the server was accepting any internal server from this specific subnet.
Not so simple... ;-)
Sincere Regards
09-10-2019 06:54 AM
Trust, but verify! Trust your server admins but have them show you just to make sure. ;-)
Please mark my previous answer as the accepted solution.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide