cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

1204
Views
10
Helpful
3
Replies
Highlighted
Beginner

SMTP relaying fails and strange logs in the PSN node at ISE 2.6

Good evening.

 

I have an installation running ISE version 2.6 patch 1 and 2 where smtp realying doesn't work and the guest logging seems to indicate that internal process might be the culprit.

The log messages contains lines like this:

"2019-09-09 15:56:18,766 INFO [https-jsse-nio-172.20.128.30-8445-exec-2][] cpm.guestaccess.flowmanager.step.StepExecutor -:SD_Admin:- Radius Session ID is not set, assuming in dry-run mode
2019-09-09 15:57:01,431 INFO [https-jsse-nio-192.168.2.98-8443-exec-6][] cisco.ise.portalwebaction.controller.PortalFlowInterceptor -::- Portal Session is NULL, Hence skipping RateLimit Check ..!
2019-09-09 15:58:18,938 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Sending Mail Message ............
2019-09-09 15:58:18,948 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Submitting Mail Job............
2019-09-09 15:58:18,948 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- submitMailMsgJob: SMTP server FQDN ==> smtprelay.sll.se
2019-09-09 15:58:18,949 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Time taken for Submitting mail job is 11 Milli seconds.
2019-09-09 15:58:18,949 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Calling Future.get....
2019-09-09 15:58:18,949 INFO [GUEST_ACCESS_SMTP_RETRY_THREAD][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- submitMailMsgJob: Creating transport object...
2019-09-09 15:58:18,977 ERROR [GUEST_ACCESS_SMTP_RETRY_THREAD][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- An exception occurred while sending email :
javax.mail.SendFailedException: Invalid Addresses;
nested exception is:
com.sun.mail.smtp.SMTPAddressFailedException: 550 5.7.1 <mats.nilson@telia.com>... Relaying denied

at com.sun.mail.smtp.SMTPTransport.rcptTo(SMTPTransport.java:1196)
at com.sun.mail.smtp.SMTPTransport.sendMessage(SMTPTransport.java:584)
at com.cisco.cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil$1.call(SmtpMsgRetryThreadUtil.java:220)
at com.cisco.cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil$1.call(SmtpMsgRetryThreadUtil.java:211)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)
Caused by: com.sun.mail.smtp.SMTPAddressFailedException: 550 5.7.1 <mats.nilson@telia.com>... Relaying denied

at com.sun.mail.smtp.SMTPTransport.rcptTo(SMTPTransport.java:1047)
... 7 more
2019-09-09 15:58:18,978 INFO [https-jsse-nio-172.20.128.30-8445-exec-7][] cpm.guestaccess.apiservices.util.SmtpMsgRetryThreadUtil -:SD_Admin:- sendMailMessage: Time taken for Future.get method call is 29 Milliseconds."

The logging in the firewalls indicate that the email are passing freely and another ISE installation on the same subnet are not subject to these email failures. The email address i valid as well as the SMTP realy server entry.

What is this smtp.mail.sun.com comming from? There is not a configured line anywere in this installation unless contained in the code itself...

Anyone who can explain these log lines?

2 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
Collaborator

com.sun.mail.smtp is the Java object where the events are being generated from.  That appears to be normal.  Your issue looks to be an SMTP problem with your mail server.  Looks like mail relay is being denied.  Make sure your SMTP server is configured to allow your new ISE IP address to relay mail through it.

View solution in original post

Highlighted

Thanks, I suspected as such, but it's a bit weird to have a process named like a vaild server name..

I was misinformed that the access list within the server was accepting any internal server from this specific subnet.

Not so simple... ;-)

 

Sincere Regards

View solution in original post

3 REPLIES 3
Highlighted
Collaborator

com.sun.mail.smtp is the Java object where the events are being generated from.  That appears to be normal.  Your issue looks to be an SMTP problem with your mail server.  Looks like mail relay is being denied.  Make sure your SMTP server is configured to allow your new ISE IP address to relay mail through it.

View solution in original post

Highlighted

Thanks, I suspected as such, but it's a bit weird to have a process named like a vaild server name..

I was misinformed that the access list within the server was accepting any internal server from this specific subnet.

Not so simple... ;-)

 

Sincere Regards

View solution in original post

Highlighted

Trust, but verify!  Trust your server admins but have them show you just to make sure.  ;-)

Please mark my previous answer as the accepted solution.