none
Exchange 2010 454 4.7.0 Temporary authentication failure. RRS feed

  • 问题

  • Exchange 2010 SP3 父域10封邮件从HUB(有2台,mail02+mail03)丢到子域HUB(有2台,mail04+mail05),过去了6封,另外的4封邮件卡在父域的队列中,提示:

    LastError : 451 4.4.0 Primary target IP address responded with: "454 4.7.0 Temporary authentication failure.
                     " Attempted failover to alternate host, but that did not succeed. Either there are no alternate
                     hosts, or delivery failed to all alternate hosts.
    查看了这个KB:
    https://support.microsoft.com/en-us/kb/979174

    这个步骤执行正确,有这么四笔在:
    SetSPN -L <ExchangeServerName>
    SMTP/<ExchangeServerName>
    SMTP/<ExchangeServerName>.example.com
    SMTPSVC/<ExchangeServerName>
    SMTPSVC/<ExchangeServerName>.example.com
    然后:

    删除之后还有一个重复的SPN,但是我用看SetSPN -L看里面和SMTP有关的4个就剩3个了;

    但是4封邮件还是卡在队列里,所以不敢再删剩下重复的那个SPN

    看了一下过去的那6封的信头,都是从mail03 (hub)过去的;所以问题应该肯定在mail02上

    不知道接下来该如何处理


    Ann.Shen


    • 已编辑 Ann.Shen 2016年11月9日 8:17
    2016年11月9日 7:59

全部回复

  • 你好!

    根据您的分析,问题定位在mail02 server上面,我建议从以下方面分析:

    1. 参考kb979174检查是否存在时间同步问题,关于重复的SPN,我建议你根据文档删除重复的spn,而且即使有问题,我们也是可以重新添加spn的

    2. 重启mail02服务器上邮件传输服务测试

    3. 开启mail02服务器上connector的协议日志,也在事件查看器检查是否有相关的 Application log报错

    https://technet.microsoft.com/zh-cn/library/bb124531(v=exchg.141).aspx



    Best Regards,
    David Wang
    TechNet Community Support


    Please remember to mark the replies as answers if they helped.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    2016年11月10日 9:41
  • 1.检查时间没有问题;删除重复spn,setspn -x目前显示是0重复,现在无法传送提示(和之前确实不一样):

    451 4.4.0 Primary target IP address responded with: "235 00000820YIIGEgYJKoZIhvcSAQICAQBuggYBMII
    F/aADAgEFoQMCAQ6iBwMFAAAAAACjggSAYYIEfDCCBHigAwIBBaELGwlHQ0VDTi5DT02iJjAkoAMCAQKhHTAbGwdTTVRQU1Z
    DGxBNQUlMMDIuZ2NlY24uY29to4IEOjCCBDagAwIBF6EDAgFtooIEKASCBCTI2RnaeahE908JIhz2x1bxpPd8qb/E2AnBeNS
    vzQ/e/QgAjQn74SoTl6QMTCdnhlreplaN7z0ZDjFTmqP0jYF4J4H4hm4VNYCbDMBdvC7HQ0F+zuwBHcUiBK1FUEfcw/KqwVx
    JIvWuHzwhCNpRStWerqI8BvjGIFDNNWkFYyN7f9ZkYxHTAnBv9OqfiopT85fx5bvVZoYgswmzCHPt+28mt2ndy+liODFq0ZC
    Pfm1iYypiYLy9LB3AXnYhX4jvI3JBADW2PURec9xd/7K0SKO0uK3O5teqpqWQV4WIGbLt5wFAm1bfrLywDYaVBRf8wZBMfCz
    gnt7IkUQpmeTvgHoUKv7XLWVuLBS8YQUOC5BuMkloG84MP1piYLxjfnwPXf2MYgoTH2BixBBzkAu/lgMLhUjhkEOCwBC7Mqh
    /kZs/vOUs3cmDqGa/Jv0xjE+AAlXb0Slg9htxkLlZeqo9iAKrKpA0KSGFu4+AQxYmLtf3PwRE8fMBQi8MWEaehJKP65GkhXE
    Byk5qE+6z97vAcqarsiDtcCqjuBJ2zjJRI1XqkZVlySilktlMbND4nV02tKoPUMZ4khnpaleN6x+PpvYvqiCqI1wzm46xLch
    WfZ/hG/sQoNT+667DDDWGE1JQROiwAm54vqZVxI7yeTxNL1LOFP4kK81WHnFamxZpzYa83z9VEtAJPkQRK43WH1Lsid/XMwW
    COx78017GHmtFP+ahiYThhf5sc4vcNAmitPcdP/mo2PW9dnqD741icq5X1FgPL3OYEe/zngs0euYjwgKi395GcBk8KuBRQ1u
    iqIxNHlKZQZeSFH0hfN77oOm4pn/9vELfFCiMldh8QunCKXVtVrU2vF61lZeK7rZght99vc7b1S6rvdmfTbKOjq2xiz6gmb9
    yWeT3Z8YflVsjGtC8+Q8E3pszTv6VfxJwBqVgk405CHyrQbGGB0eky4lqmALJBvgzbVc3Kg2DacE1cdifd4gfja3QBjuwGVC
    +4okPPwKcniyKsZa+Tv7rzv9+Is0Lo+VD3fY2g/S4J853CxB2ClNqt7JxwQFrq2lt4yYsqUa4tMkQkl3gMVFrIpzO8AAKqFI
    D5yfrPp/yatxeky2RQPnkw2B/CpMMgLp8Uv1cYjF2SASDzu5VshRldqYoGZaUu3O2U8SVNhN1b1UoMmJzTEVNBtznPg6/CAQ
    H6Sj4gjYly42z6DHx6wDJ1Bwz4GyjlOz5HPZlSeWSJIN7hJWfDJW3zzaNiICYng4PXT9EOmT1+UOkJxiFNvuvh6uEcPBFQHw
    miWLQ2GsEYAa4PjDhDD2AkAgz/SBm1dYTeZjgp8wxzYZPrwPUH95yiC8UluiM4rBOd1oax4UBDUzRBFiOTHXF3yCthhSPlOl
    pkBCLJlBJ7cpBLR2BT/wLFf/Vl4Fp1EQ6pIIBYjCCAV6gAwIBF6KCAVUEggFRDaL4d1g3oEZIIGkD2sxRRUQb/pRrKXLaakn
    0use55CPwvsLwhI8lDNNHZWUCQQYGWj1lL+bMpoCbAP62b2FkXNuQ2S/XRvaxT5CZ+MWbDYFE3+6c91JEQT2N3iifE3CFljV
    2ZtrG6vWdLPzOAmQs73YFK0+nP0t25o/tIqX1ZnANE0+2k1UAybbt9qC5iIfcLUARU/QmHkJIgGTbD1HpomE3LOQQrgCDoQY
    LneSXFs7GfktASiKQNEEbykwZZTeAc4ojCS6bHe+gnV0NkjOGxrUNBuS5IS4HoLVse6uuC8SfIvQe813Nc6xn34BmwoIsBN9
    pN2lISSiSZ/DEBzGft18ehctLain4XUlIn7WfvjPVtj04xDco2Aytj+lImgR6THMJXdEj1HrM8fs7RFlUEom4SSMVV7F7XBK
    HQvwZGNf1XymVD2QO0pUsQzVPtyfs/g==0000002CnWaaU2qXIET6xRLE70PDtsmYXMYJ8a/ImN3j6djaZ5Q=." Attempte
    d failover to alternate host, but that did not succeed. Either there are no alternate hosts, or
    delivery failed to all alternate hosts.

    2.重启服务器无效

    3.日志,hgce是站台名,192.168.201.11/192.168.201.25是HUB(同时也是cas和mailbox)

    644,192.168.201.25:25,<,"220 HGCEMAIL02.hgce.gcecn.com Microsoft ESMTP MAIL Service ready at Fri, 11 Nov 2016 13:07:14 +0800",
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,3,10.10.1.25:25644,192.168.201.25:25,>,EHLO MAIL02.gcecn.com,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,4,10.10.1.25:25644,192.168.201.25:25,<,250-HGCEMAIL02.hgce.gcecn.com Hello [10.10.1.25],
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,5,10.10.1.25:25644,192.168.201.25:25,<,250-SIZE,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,6,10.10.1.25:25644,192.168.201.25:25,<,250-PIPELINING,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,7,10.10.1.25:25644,192.168.201.25:25,<,250-DSN,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,8,10.10.1.25:25644,192.168.201.25:25,<,250-ENHANCEDSTATUSCODES,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,9,10.10.1.25:25644,192.168.201.25:25,<,250-STARTTLS,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,10,10.10.1.25:25644,192.168.201.25:25,<,250-X-ANONYMOUSTLS,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,11,10.10.1.25:25644,192.168.201.25:25,<,250-AUTH NTLM,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,12,10.10.1.25:25644,192.168.201.25:25,<,250-X-EXPS GSSAPI NTLM,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,13,10.10.1.25:25644,192.168.201.25:25,<,250-8BITMIME,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,14,10.10.1.25:25644,192.168.201.25:25,<,250-BINARYMIME,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,15,10.10.1.25:25644,192.168.201.25:25,<,250-CHUNKING,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,16,10.10.1.25:25644,192.168.201.25:25,<,250-XEXCH50,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,17,10.10.1.25:25644,192.168.201.25:25,<,250-XRDST,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,18,10.10.1.25:25644,192.168.201.25:25,<,250 XSHADOW,
    2016-11-11T05:07:14.261Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,19,10.10.1.25:25644,192.168.201.25:25,>,X-ANONYMOUSTLS,
    2016-11-11T05:07:14.276Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,20,10.10.1.25:25644,192.168.201.25:25,<,220 2.0.0 SMTP server ready,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,21,10.10.1.25:25644,192.168.201.25:25,*,,Remote certificate
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,22,10.10.1.25:25644,192.168.201.25:25,*,CN=HGCEMAIL02,Certificate subject
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,23,10.10.1.25:25644,192.168.201.25:25,*,CN=HGCEMAIL02,Certificate issuer name
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,24,10.10.1.25:25644,192.168.201.25:25,*,73950AF239C9B5BF469CF7BB28FD5158,Certificate serial number
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,25,10.10.1.25:25644,192.168.201.25:25,*,42B8009D4095000195FBA2C1B17F6714992CAB7C,Certificate thumbprint
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,26,10.10.1.25:25644,192.168.201.25:25,*,HGCEMAIL02;HGCEMAIL02.hgce.gcecn.com,Certificate alternate names
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,27,10.10.1.25:25644,192.168.201.25:25,*,,"TLS protocol SP_PROT_TLS1_0_CLIENT negotiation succeeded using bulk encryption algorithm CALG_AES_128 with strength 128 bits, MAC hash algorithm CALG_SHA1 with strength 160 bits and key exchange algorithm CALG_RSA_KEYX with strength 2048 bits"
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,28,10.10.1.25:25644,192.168.201.25:25,*,,Received certificate
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,29,10.10.1.25:25644,192.168.201.25:25,*,42B8009D4095000195FBA2C1B17F6714992CAB7C,Certificate thumbprint
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,30,10.10.1.25:25644,192.168.201.25:25,>,EHLO MAIL02.gcecn.com,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,31,10.10.1.25:25644,192.168.201.25:25,<,250-HGCEMAIL02.hgce.gcecn.com Hello [10.10.1.25],
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,32,10.10.1.25:25644,192.168.201.25:25,<,250-SIZE,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,33,10.10.1.25:25644,192.168.201.25:25,<,250-PIPELINING,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,34,10.10.1.25:25644,192.168.201.25:25,<,250-DSN,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,35,10.10.1.25:25644,192.168.201.25:25,<,250-ENHANCEDSTATUSCODES,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,36,10.10.1.25:25644,192.168.201.25:25,<,250-AUTH NTLM,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,37,10.10.1.25:25644,192.168.201.25:25,<,250-X-EXPS EXCHANGEAUTH GSSAPI NTLM,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,38,10.10.1.25:25644,192.168.201.25:25,<,250-X-EXCHANGEAUTH SHA256,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,39,10.10.1.25:25644,192.168.201.25:25,<,250-8BITMIME,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,40,10.10.1.25:25644,192.168.201.25:25,<,250-BINARYMIME,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,41,10.10.1.25:25644,192.168.201.25:25,<,250-CHUNKING,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,42,10.10.1.25:25644,192.168.201.25:25,<,250-XEXCH50,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,43,10.10.1.25:25644,192.168.201.25:25,<,250-XRDST,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,44,10.10.1.25:25644,192.168.201.25:25,<,250 XSHADOW,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,45,10.10.1.25:25644,192.168.201.25:25,>,X-EXPS EXCHANGEAUTH SHA256 ,
    2016-11-11T05:07:14.307Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,46,10.10.1.25:25644,192.168.201.25:25,>,<Binary Data>,
    2016-11-11T05:07:14.323Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,47,10.10.1.25:25644,192.168.201.25:25,<,235 <authentication information>,
    2016-11-11T05:07:14.323Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,48,10.10.1.25:25644,192.168.201.25:25,*,,Outbound Exchange Authentication failed with UnexpectedExchangeAuthBlob
    2016-11-11T05:07:14.323Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,49,10.10.1.25:25644,192.168.201.25:25,>,QUIT,
    2016-11-11T05:07:14.323Z,組織內的 SMTP 傳送連接器,08D409EB776F97DB,50,10.10.1.25:25644,192.168.201.25:25,<,221 2.0.0 Service closing transmission channel,


    Ann.Shen



    • 已编辑 Ann.Shen 2016年11月11日 5:17
    2016年11月11日 4:39
  • 又对了一遍服务器的时间,没有差异

    这是对端的Log:

    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,0,192.168.201.11:25,10.10.1.25:12909,+,,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,1,192.168.201.11:25,10.10.1.25:12909,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,2,192.168.201.11:25,10.10.1.25:12909,>,"220 HGCEMAIL01.hgce.gcecn.com Microsoft ESMTP MAIL Service ready at Fri, 11 Nov 2016 13:45:37 +0800",
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,3,192.168.201.11:25,10.10.1.25:12909,<,EHLO MAIL02.gcecn.com,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,4,192.168.201.11:25,10.10.1.25:12909,>,250-HGCEMAIL01.hgce.gcecn.com Hello [10.10.1.25],
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,5,192.168.201.11:25,10.10.1.25:12909,>,250-SIZE,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,6,192.168.201.11:25,10.10.1.25:12909,>,250-PIPELINING,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,7,192.168.201.11:25,10.10.1.25:12909,>,250-DSN,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,8,192.168.201.11:25,10.10.1.25:12909,>,250-ENHANCEDSTATUSCODES,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,9,192.168.201.11:25,10.10.1.25:12909,>,250-STARTTLS,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,10,192.168.201.11:25,10.10.1.25:12909,>,250-X-ANONYMOUSTLS,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,11,192.168.201.11:25,10.10.1.25:12909,>,250-AUTH NTLM,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,12,192.168.201.11:25,10.10.1.25:12909,>,250-X-EXPS GSSAPI NTLM,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,13,192.168.201.11:25,10.10.1.25:12909,>,250-8BITMIME,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,14,192.168.201.11:25,10.10.1.25:12909,>,250-BINARYMIME,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,15,192.168.201.11:25,10.10.1.25:12909,>,250-CHUNKING,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,16,192.168.201.11:25,10.10.1.25:12909,>,250-XEXCH50,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,17,192.168.201.11:25,10.10.1.25:12909,>,250-XRDST,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,18,192.168.201.11:25,10.10.1.25:12909,>,250 XSHADOW,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,19,192.168.201.11:25,10.10.1.25:12909,<,X-ANONYMOUSTLS,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,20,192.168.201.11:25,10.10.1.25:12909,>,220 2.0.0 SMTP server ready,
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,21,192.168.201.11:25,10.10.1.25:12909,*,,Sending certificate
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,22,192.168.201.11:25,10.10.1.25:12909,*,CN=HGCEMAIL01,Certificate subject
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,23,192.168.201.11:25,10.10.1.25:12909,*,CN=HGCEMAIL01,Certificate issuer name
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,24,192.168.201.11:25,10.10.1.25:12909,*,35253BB89A4928A044C9F1365FC95707,Certificate serial number
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,25,192.168.201.11:25,10.10.1.25:12909,*,D6E5264DC5A32F0861200797A8D345E8636E245C,Certificate thumbprint
    2016-11-11T05:45:38.036Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,26,192.168.201.11:25,10.10.1.25:12909,*,HGCEMAIL01;HGCEMAIL01.hgce.gcecn.com,Certificate alternate names
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,27,192.168.201.11:25,10.10.1.25:12909,*,,"TLS protocol SP_PROT_TLS1_0_SERVER negotiation succeeded using bulk encryption algorithm CALG_AES_128 with strength 128 bits, MAC hash algorithm CALG_SHA1 with strength 160 bits and key exchange algorithm CALG_RSA_KEYX with strength 2048 bits"
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,28,192.168.201.11:25,10.10.1.25:12909,<,EHLO MAIL02.gcecn.com,
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,29,192.168.201.11:25,10.10.1.25:12909,>,250-HGCEMAIL01.hgce.gcecn.com Hello [10.10.1.25],
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,30,192.168.201.11:25,10.10.1.25:12909,>,250-SIZE,
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,31,192.168.201.11:25,10.10.1.25:12909,>,250-PIPELINING,
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,32,192.168.201.11:25,10.10.1.25:12909,>,250-DSN,
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,33,192.168.201.11:25,10.10.1.25:12909,>,250-ENHANCEDSTATUSCODES,
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,34,192.168.201.11:25,10.10.1.25:12909,>,250-AUTH NTLM,
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,35,192.168.201.11:25,10.10.1.25:12909,>,250-X-EXPS EXCHANGEAUTH GSSAPI NTLM,
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,36,192.168.201.11:25,10.10.1.25:12909,>,250-X-EXCHANGEAUTH SHA256,
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,37,192.168.201.11:25,10.10.1.25:12909,>,250-8BITMIME,
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,38,192.168.201.11:25,10.10.1.25:12909,>,250-BINARYMIME,
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,39,192.168.201.11:25,10.10.1.25:12909,>,250-CHUNKING,
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,40,192.168.201.11:25,10.10.1.25:12909,>,250-XEXCH50,
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,41,192.168.201.11:25,10.10.1.25:12909,>,250-XRDST,
    2016-11-11T05:45:38.067Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,42,192.168.201.11:25,10.10.1.25:12909,>,250 XSHADOW,
    2016-11-11T05:45:38.082Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,43,192.168.201.11:25,10.10.1.25:12909,<,X-EXPS EXCHANGEAUTH,
    2016-11-11T05:45:38.082Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,44,192.168.201.11:25,10.10.1.25:12909,*,SMTPSubmit SMTPSubmitForMLS SMTPAcceptAnyRecipient SMTPAcceptAuthenticationFlag SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender BypassAntiSpam BypassMessageSizeLimit SMTPSendEXCH50 SMTPAcceptEXCH50 AcceptRoutingHeaders AcceptForestHeaders AcceptOrganizationHeaders SendRoutingHeaders SendForestHeaders SendOrganizationHeaders SendAs SMTPSendXShadow SMTPAcceptXShadow,Set Session Permissions
    2016-11-11T05:45:38.082Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,45,192.168.201.11:25,10.10.1.25:12909,*,GCECN\MAIL02$,authenticated
    2016-11-11T05:45:38.082Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,46,192.168.201.11:25,10.10.1.25:12909,>,235 <authentication response>,
    2016-11-11T05:45:38.082Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,47,192.168.201.11:25,10.10.1.25:12909,<,QUIT,
    2016-11-11T05:45:38.082Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,48,192.168.201.11:25,10.10.1.25:12909,>,221 2.0.0 Service closing transmission channel,
    2016-11-11T05:45:38.082Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B5C,49,192.168.201.11:25,10.10.1.25:12909,-,,Local

    ===================================================

    这是正常能发过去的LOG:

    2016-11-11T05:54:36.317Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B7C,45,192.168.201.11:25,10.10.1.26:51236,*,GCECN\MAIL03$,authenticated
    2016-11-11T05:54:36.317Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B7C,46,192.168.201.11:25,10.10.1.26:51236,>,235 <authentication response>,
    2016-11-11T05:54:36.333Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B7C,47,192.168.201.11:25,10.10.1.26:51236,<,XSHADOW ZWFlMWIyM2QtM2E0YS00N2IxLTk1NWQtMTM5MWM4MTI4YzE3QG1haWwwMy5nY2Vjbi5jb21A,
    2016-11-11T05:54:36.333Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B7C,48,192.168.201.11:25,10.10.1.26:51236,>,250 R7/aCvOh/kyoDABdfycZvQ==,
    2016-11-11T05:54:36.333Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B7C,49,192.168.201.11:25,10.10.1.26:51236,<,XQDISCARD 50,
    2016-11-11T05:54:36.333Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B7C,50,192.168.201.11:25,10.10.1.26:51236,>,"251 OK, no discard events",
    2016-11-11T05:54:36.348Z,HGCEMAIL01\Default HGCEMAIL01,08D409D7BEA38B7C,51,192.168.201.11:25,10.10.1.26:51236,<,QUIT,


    Ann.Shen



    • 已编辑 Ann.Shen 2016年11月11日 6:02
    2016年11月11日 5:40
  • 你好!

    经过我的搜索和分析,我认为问题可能与Kerberos和网络问题有关。

    建议你参考一下步骤有关:
    1. 检查是否你的exchange服务器都是部署在虚拟机上,如果是的话,检查所有vm 上的系统时间是否正常。
    2. 在所有的发送和接收邮件服务器运行下面的命令来清楚Kerberos缓存,然后重启源服务器目标服务器上的transport services (建议在非工作时间操作)。
    3. 如果问题继续,运行 NLTEST /sc_query:<domain name> 和 NLTEST /SC_verify: <domain name>检查secure channel ,也检查事件日志,发现是否有Kerberos相关的报错。 
    4. 也检查mail02服务器是否存在性能问题,如过高的cpu和内存使用率。
    5. 最后如果方便的话,也请更新升级传输服务器之间使用的网络设备(路由器交换机等)来测试。



    Best Regards,
    David Wang
    TechNet Community Support


    Please remember to mark the replies as answers if they helped.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • 已建议为答案 David Wang_ 2016年11月29日 6:21
    2016年11月17日 8:38