邮件服务器-邮件系统-邮件技术论坛(BBS)

标题: kerio 7.02 p1异常求助 [打印本页]
作者: brent_xy    时间: 2011-12-14 09:43
标题: kerio 7.02 p1异常求助
kerio经常会无法使用，等上服务器查看发现服务死机，然后提示将提交给kerio，重启之后就好了，但是比较频繁
warning日志里面：一直显示User Guest performed NTLM authentication in NT domain CH-MAILSERVER, this domain is not valid
error日志里面：显示php_utils.cpp: Webmail mailAttach.php: Session expired

版本7.02p1，环境启动了macfee杀毒和操作系统的诺顿10
作者: cnpsx    时间: 2011-12-15 10:25
  1. I think some things needs a clarification. First, you don't have to enter username/password in Outlook when sending every email. The password is stored in the Outlook account and is entered only once when the account is created. Of course, Outlook will ask the user for new password if it was changed on the server.

  3. Second, there is an option in Outlook called SPA (Secure Password Authentication). This type of authentication use NTLM and does not need to know username/password because it takes it from the user currently logged to the Windows workstation.

  5. KMS supports NTLM in Windows domain. Following requirements must be fulfilled:
  6. * KMS must run on Windows
  7. * Outlook must run on Windows computer added to the Windows domain
  8. * User must be logged to Windows domain
  9. * KMS must be properly configured: user account is authenticated against NT domain or Kerberos, Windows NT domain in Domain Settings must contain correct NT Windows domain name

  11. According to the error message, the user is trying to login to some NT domain but KMS is not configured properly. I would suggest to enable Authentication module in the debug log and open a ticket on our technical support.
复制代码




  1. 我觉得有些事情需要澄清。首先，你不必在Outlook中输入用户名/密码发送每封电子邮件时。密码存储在Outlook帐户，只有一次进入帐户时创建。当然，Outlook会询问用户的新密码，如果它是在服务器上更改。

  3. 二是有SPA（安全密码验证）在Outlook选项。这种类型的身份验证使用NTLM和不需要知道用户名/密码，因为它需要从当前登录的Windows工作站用户。

  5. KMS支持Windows域的NTLM身份。必须满足以下要求：
  6. * KMS必须运行在Windows
  7. * Outlook必须运行Windows计算机加入到Windows域
  8. *用户必须登录到Windows域
  9. * KMS，必须正确配置：用户帐户是对NT域或Kerberos，Windows NT域中的域设置必须包含正确的NT Windows域名认证

  11. 根据错误信息，用户试图登录到NT域，但KMS一些配置不正确。我会建议在调试日志中启用身份验证模块和开放我们的技术支持的一票。
复制代码




抄的别人的答案，大意应该是这样的，你客户端用了OUTLOOK之类的，可能会自动尝试使用GUEST用户密码空来访问服务器，或者把KEIRO当成EXHCANGE了吧。。。 但实际上它无法提供这种功能，


你可以尝试关掉NTLM登录吧。反正我的域经常都会报这样的错误，我也没有理会它，我一般一个月重启一下服务器，也不会崩溃。
我用的是 7.0.0 patch2. vityan的crack


  1. [15/Dec/2011 08:34:36] Failed IMAP login from 192.168.1.81, authentication method NTLM
  2. [15/Dec/2011 08:34:39] Failed IMAP login from 192.168.1.81, authentication method NTLM
  3. [15/Dec/2011 08:35:47] Failed IMAP login from 192.168.1.81, authentication method NTLM
  4. [15/Dec/2011 08:35:51] Failed IMAP login from 192.168.1.81, authentication method NTLM
  5. [15/Dec/2011 08:49:02] Failed IMAP login from 192.168.1.81, authentication method NTLM
  6. [15/Dec/2011 08:49:05] Failed IMAP login from 192.168.1.81, authentication method NTLM
  7. [15/Dec/2011 08:49:05] Failed IMAP login from 192.168.1.81, authentication method NTLM
  8. [15/Dec/2011 08:49:08] Failed IMAP login from 192.168.1.81, authentication method NTLM
  9. [15/Dec/2011 08:52:41] Failed IMAP login from 192.168.1.83, authentication method NTLM
  10. [15/Dec/2011 08:52:46] Failed IMAP login from 192.168.1.83, authentication method NTLM
  11. [15/Dec/2011 08:52:49] Failed IMAP login from 192.168.1.83, authentication method NTLM
  12. [15/Dec/2011 08:58:35] Failed IMAP login from 192.168.1.81, authentication method NTLM
复制代码




outlook 2010和2007都会这样 outlook2003就不会
作者: brent_xy    时间: 2011-12-15 10:39
感谢答复，公司内部确实都是用的outlook2007和2010来收发邮件，我在kerio里面尝试关闭NTLM登陆之后，warning就没有了， 不过不知道会不会有什么影响。



欢迎光临 邮件服务器-邮件系统-邮件技术论坛(BBS) (http://bbs.5dmail.cn/) Powered by Discuz! X3.2