空间行走错误:jabberd/c2 s[4642]：非现有主机的SASL回调: a.b.c.d

Question

我正在运行CentOS Linux7.4.1708版(Core)上的空间行走2.6

从太空行走开始-服务启动

我观察到：

jabberd.service - Jabber Server
   Loaded: loaded (/usr/lib/systemd/system/jabberd.service; enabled; vendor preset: disabled)
   Active: active (exited) since Wed 2018-02-28 16:24:06 UTC; 7h ago
  Process: 4644 ExecStart=/bin/true (code=exited, status=0/SUCCESS)
 Main PID: 4644 (code=exited, status=0/SUCCESS)
   Memory: 0B
   CGroup: /system.slice/jabberd.service

经进一步调查，并搜索

#journalctl -xe
Mar 01 00:21:58 gss-spacewalk-1-prod.aws.a.b.c jabberd/c2s[4642]: SASL callback for non-existing host: spacewalk.a.b.c
Mar 01 00:23:13 gss-spacewalk-1-prod.aws.a.b.c jabberd/c2s[4642]: [25] [::ffff:1x.1xx.1xx.82, port=46909] connect
Mar 01 00:23:13 gss-spacewalk-1-prod.aws.a.b.c. jabberd/c2s[4642]: [25] [::ffff:1x.1xx.1xx.82, port=46909] disconnect jid=unbound, pac
Mar 01 00:23:13 gss-spacewalk-1-prod.aws.a.b.c. jabberd/c2s[4642]: SASL callback for non-existing host: spacewalk.a.b.c.

现在，空间行走.a.b.c似乎是一个aws负载平衡器：

$nslookup spacewalk.a.b.c
Server:         1x.xx.xxx.80
Address:        1x.xx.1xx.80#53

spacewalk.a.b.c canonical name = internal-GSS-Spacewalk-123456789.us-east-1.elb.amazonaws.com.
Name:   internal-GSS-Spacewalk-123456789.us-east-1.elb.amazonaws.com
Address: 1x.1xx.1xx.55
Name:   internal-GSS-Spacewalk-123456789.us-east-1.elb.amazonaws.com
Address: 1x.1xx.1xx.82

我已经搜索过论坛和博客，但是找不到解决这个问题的办法。

当jabberd启动时，实际上有6个程序运行。它们的可执行文件位于以下位置：

1. /usr/bin/c2s 
2. /usr/bin/jabberd 
3. /usr/bin/resolver 
4. /usr/bin/router 
5. /usr/bin/s2s 
6. /usr/bin/sm

jabberd configuration:

1. /usr/bin/c2s -c /etc/jabberd/c2s.xml        https://pastebin.com/A1Qp44qp
2. /usr/bin/jabberd itself does not have a config ??
3. /usr/bin/sm -c /etc/jabberd/sm.xml          https://pastebin.com/4gi4MR3g
4. /usr/bin/router -c /etc/jabberd/router.xml  https://pastebin.com/cdRZqk5D
5. /usr/bin/s2s -c /etc/jabberd/s2s.xml        https://pastebin.com/nPsMsde3
6. /usr/bin/sm -c /etc/jabberd/sm.xml          https://pastebin.com/s7vQu3VE

c2s and sm are configured to encrypt information that passes through them. The cert and key used to do this are located in the /etc/jabberd/server.pem file.

ports:
[root@gss-spacewalk-1-prod jabberd]# nmap -sT -p 5200-5400 localhost

Starting Nmap 6.40 ( http://nmap.org ) at 2018-03-09 19:11 UTC
Nmap scan report for localhost (127.0.0.1)
Host is up (0.00022s latency).
Other addresses for localhost (not scanned): 127.0.0.1
Not shown: 198 closed ports
PORT     STATE SERVICE
5222/tcp open  xmpp-client
5269/tcp open  xmpp-server
5347/tcp open  unknown

Nmap done: 1 IP address (1 host up) scanned in 0.03 seconds
[root@gss-spacewalk-1-prod jabberd]#  netstat -nl | head
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:20048           0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:5432          0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:36536           0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:25151         0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:32000         0.0.0.0:*               LISTEN

# service iptables status
iptables: Firewall is not running.
# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /selinux
Current mode:                   enforcing
Mode from config file:          enforcing
Policy version:                 24
Policy from config file:        targeted

Answer 1

谢谢你的配置。在我看来你的配置很好。配置文件中只有小写。

我认为你可能还在使用大写的主机名：

internal-GSS-Spacewalk-123456789.us-east

因为你的nslookup以你的名字给你大写字母

服务器: 1x.xx.xxx.80地址: internal-GSS-Spacewalk-123456789.us-east-1.elb.amazonaws.com. 1x.xx.1xx.80#53名称: internal-GSS-Spacewalk-123456789.us-east-1.elb.amazonaws.com地址:1x.1x.1x.55名称: internal-GSS-Spacewalk-123456789.us-east-1.elb.amazonaws.com地址:1x.1x.1x.82

尝试它，您的FQDN所有小写，它应该开始工作。我现在在手机上写字，以后我会在笔记本上填写参考资料。

如您所承诺的编辑如下所示：

如果主机名包含大小写，jabberd和osad/osa-调度员之间的通信将失败。

引用如下：

“不要在卫星主机名中使用大写字母，事情就是不能用！”

在CentOS7 7上安装太空行走的问题(全新安装)

虽然听起来很奇怪，但你不应该在你的主机名中使用大写！