fr-all fails with error 451
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• bbogaert
	Mar 7 2016, 10:12 PM

Description

Hi,

When we take off fr-all from exim aliases, mail delivery fails permanently.

Delivery to the following recipient failed permanently:

     fr-all@wikimedia.org

Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the server for the recipient domain wikimedia.org by mx1001.wikimedia.org. [2620:0:861:3:208:80:154:76].

The error that the other server returned was:
451 Temporary local problem - please try later

Through investigation @Dzahn found the following error in the log:

2016-03-07 20:43:16 H=mail-vk0-x22d.google.com [2607:f8b0:400c:c05::22d]:33283 I=[2620:0:861:3:208:80:154:76]:25 X=TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128 F=<ppena@wikimedia.org> temporarily rejected RCPT <fr-all@wikimedia.org>: LDAP search: more than one entry (2) was returned (filter not specific enough?)

Please message me for assistance from OIT.

Thanks,
Byron

Related Objects

Mentioned In: T128647: move fundraising group aliases to OIT

Event Timeline

• bbogaert created this task.Mar 7 2016, 10:12 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 7 2016, 10:12 PM

• bbogaert mentioned this in T128647: move fundraising group aliases to OIT.Mar 7 2016, 10:18 PM

I would say the 2 entries are because of the 2 different DNs that exist under ou=groups with businessCagetory=fr-all@wikimedia.org

ldapsearch -LLL -x businessCategory=fr-all@wikimedia.org dn businesscategory
dn: cn=fr-all,ou=groups,dc=corp,dc=wikimedia,dc=org
businessCategory: fr-all@wikimedia.org

dn: cn=fundraising_vmail,ou=groups,dc=corp,dc=wikimedia,dc=org
businessCategory: fr-all@wikimedia.org

Hi Alex,

I believe that might be it. This would make sense if the MX server queries against the businessCategory. I changed the businessCategory for cn=fundraising_vmail to businessCategory=fundraising_vmail@wikimedia.org

Hi @Dzahn,

Let's try moving this alias again when you have time?

Thanks,
Byron

Hey,

we just removed that again and sent a test mail and i could confirm in logs on mx1001 the error is gone and mail to fr-all@ was handled normally and given to Google.

Daniel

Dzahn closed this task as Resolved.Mar 8 2016, 7:20 PM

fr-all fails with error 451Closed, ResolvedPublicActions

Description

Related Objects

Event Timeline

fr-all fails with error 451
Closed, ResolvedPublic
Actions