cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2518
Views
10
Helpful
3
Replies

SMTP relaying fails and strange logs in the PSN node at ISE 2.6

Mats Nilson
Level 1
Level 1

Good evening.

 

I have an installation running ISE version 2.6 patch 1 and 2 where smtp realying doesn't work and the guest logging seems to indicate that internal process might be the culprit.

The log messages contains lines like this:

"2019-09-09 15:56:18,766 INFO [https-jsse-nio-172.20.128.30-8445-exec-2][] cpm.guestaccess.flowmanager.step.StepExecutor -:SD_Admin:- Radius Session ID is not set, assuming in dry-run mode
2019-09-09 15:57:01,431 INFO [https-jsse-nio-192.168.2.98-8443-exec-6][] cisco.ise.portalwebaction.controller.PortalFlowInterceptor -::- Portal Session is NULL, Hence skipping RateLimit Check ..!
2019-09-09 15:58:18,938 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Sending Mail Message ............
2019-09-09 15:58:18,948 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Submitting Mail Job............
2019-09-09 15:58:18,948 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- submitMailMsgJob: SMTP server FQDN ==> smtprelay.sll.se
2019-09-09 15:58:18,949 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Time taken for Submitting mail job is 11 Milli seconds.
2019-09-09 15:58:18,949 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Calling Future.get....
2019-09-09 15:58:18,949 INFO [GUEST_ACCESS_SMTP_RETRY_THREAD][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- submitMailMsgJob: Creating transport object...
2019-09-09 15:58:18,977 ERROR [GUEST_ACCESS_SMTP_RETRY_THREAD][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- An exception occurred while sending email :
javax.mail.SendFailedException: Invalid Addresses;
nested exception is:
com.sun.mail.smtp.SMTPAddressFailedException: 550 5.7.1 <mats.nilson@telia.com>... Relaying denied

at com.sun.mail.smtp.SMTPTransport.rcptTo(SMTPTransport.java:1196)
at com.sun.mail.smtp.SMTPTransport.sendMessage(SMTPTransport.java:584)
at com.cisco.cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil$1.call(SmtpMsgRetryThreadUtil.java:220)
at com.cisco.cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil$1.call(SmtpMsgRetryThreadUtil.java:211)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)
Caused by: com.sun.mail.smtp.SMTPAddressFailedException: 550 5.7.1 <mats.nilson@telia.com>... Relaying denied

at com.sun.mail.smtp.SMTPTransport.rcptTo(SMTPTransport.java:1047)
... 7 more
2019-09-09 15:58:18,978 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Time taken for Future.get method call is 29 Milliseconds."

The logging in the firewalls indicate that the email are passing freely and another ISE installation on the same subnet are not subject to these email failures. The email address i valid as well as the SMTP realy server entry.

What is this smtp.mail.sun.com comming from? There is not a configured line anywere in this installation unless contained in the code itself...

Anyone who can explain these log lines?

2 Accepted Solutions

Accepted Solutions

Colby LeMaire
VIP Alumni
VIP Alumni

com.sun.mail.smtp is the Java object where the events are being generated from.  That appears to be normal.  Your issue looks to be an SMTP problem with your mail server.  Looks like mail relay is being denied.  Make sure your SMTP server is configured to allow your new ISE IP address to relay mail through it.

View solution in original post

Thanks, I suspected as such, but it's a bit weird to have a process named like a vaild server name..

I was misinformed that the access list within the server was accepting any internal server from this specific subnet.

Not so simple... ;-)

 

Sincere Regards

View solution in original post

3 Replies 3

Colby LeMaire
VIP Alumni
VIP Alumni

com.sun.mail.smtp is the Java object where the events are being generated from.  That appears to be normal.  Your issue looks to be an SMTP problem with your mail server.  Looks like mail relay is being denied.  Make sure your SMTP server is configured to allow your new ISE IP address to relay mail through it.

Thanks, I suspected as such, but it's a bit weird to have a process named like a vaild server name..

I was misinformed that the access list within the server was accepting any internal server from this specific subnet.

Not so simple... ;-)

 

Sincere Regards

Trust, but verify!  Trust your server admins but have them show you just to make sure.  ;-)

Please mark my previous answer as the accepted solution.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: