CA Service Management

 View Only
  • 1.  javax.mail.AuthenticationFailedException: 535 5.7.3 Authentication unsuccessful

    Posted Apr 13, 2020 09:42 AM
    Edited by asim Shah Apr 13, 2020 09:45 AM
    Hi Folks

    From past 10 days, CA sdm stopped sending notifications and all the mail are going in Mail_Undelivered folder.

    we are getting below error in mail_nxd log file (Check the snapshot below)

    javax.mail.AuthenticationFailedException: 535 5.7.3 Authentication unsuccessful

    I found below related article for this issue but not specifically for "Authentication unsuccessful". 

    i also involved Exchange team to confirm if credentials has been changed or if the IP's are in whitelist  but they are saying nothing has been changed at exchange side.

    Can anyone advise why 'authentication unsuccessful' is coming? i also tried to reinstall the services in option manager and recycle services but the issue is still same. i still believe the issue is from Exchange side and not from SDM but is there anything to cross check more from SDM side?

    The nxd mail daemon is already in running mode

    please advise

    https://knowledge.broadcom.com/external/article/141278/error-failed-to-send-mail-reason-javaxma.html
    https://knowledge.broadcom.com/external/article/118908/how-to-fix-no-authentication-mechanisms.html
    https://knowledge.broadcom.com/external/article/186989/email-integration-with-exchange-2016.html
    https://knowledge.broadcom.com/external/article/101452/email-notifications-fail-with-the-error.html

    ​​​​​​​


  • 2.  RE: javax.mail.AuthenticationFailedException: 535 5.7.3 Authentication unsuccessful
    Best Answer

    Broadcom Employee
    Posted Apr 13, 2020 12:08 PM
    Might be useful to enable debug on pdm_mail_nxd to see if any further information is logged

    https://knowledge.broadcom.com/external/article/98428/how-to-enable-the-debug-or-trace-mode-fo.html

    ------------------------------
    Paul Coccimiglio
    Principal Support Engineer
    Broadcom Inc.
    ------------------------------



  • 3.  RE: javax.mail.AuthenticationFailedException: 535 5.7.3 Authentication unsuccessful

    Posted Apr 13, 2020 02:34 PM
    Hi Paul

    Thanks for sharing the technical doc to enable the trace , ill enable this and check again.

    just want to know with your experience, what could be the most likely cause for this issue? 

    Many Thanks


  • 4.  RE: javax.mail.AuthenticationFailedException: 535 5.7.3 Authentication unsuccessful

    Posted Apr 19, 2020 12:39 PM

    HI Paul
    i have enabled trace in logback.xml file and also put parameter in nx file "@NX_MAIL_INITIAL_TRACING=Yes " and below error we are getting in logs which shows authentication issue.

    i engaged SMTP team but they are saying from our side  there is no issue because with the same smtp credentials old ca sdm 12.9 is running already and notification are firing and we are using same credentials in 17.2 and it was working fine before 2 weeks.

    Is there anything to check more on sdm side? i still believe that this is not application issue otherwise why would log says "Authentication Unsuccessful"

    How can we tackle this at the moment?










  • 5.  RE: javax.mail.AuthenticationFailedException: 535 5.7.3 Authentication unsuccessful

    Posted Apr 20, 2020 01:16 AM
    The log shows the mail server telling you the authentication is wrong. I would suggest you try the following, in this order, to eliminate any mistakes.
    1. Communicate with the SMTP server by hand and attempt the authentication with the credentials you think you are using. You can follow these instructions to the letter, just replace "perl" with "pdm_perl", all the required modules are shipped with SDM: https://www.ndchost.com/wiki/mail/test-smtp-auth-telnet
    2. Snoop the network traffic from the SDM server to the mail server to verify the server is really sending the same credentials that you used on test 1. You can use Wireshark for this, but be aware that most security admins will balk at the idea of even suggesting the use of Wireshark.
    3. Compare the results of tests 1 and 2 and, if the results differ, compare the encoded username and password to ensure they're exactly the same. Wouldn't be the first time when I see a trailing space/line feed from copy-pasting values messing up the auth.

    One of those tests should reveal the root cause, good luck.


  • 6.  RE: javax.mail.AuthenticationFailedException: 535 5.7.3 Authentication unsuccessful

    Posted Apr 20, 2020 04:03 AM
    Hi,

    You may also try uninstall mail_login_password.  Recycle the services and test.

    Regards,
    Yogan