We’re running 3.7.1 (had been running 3.6.4.) on Solaris 10 - we’re also a Google Apps domain with chat enabled.
However I’m almost positive we weren’t having the issue until after the upgrade to 3.7.1.
404: Remote Server Not Found appears in Adium, Pidgin, and iChat clients for Google contacts.
Our DNS: _xmpp-client._tcp.im. / _xmpp-client._tcp. still point to our Jive instance.
The upgrade also involved switching machines but the hostname and IP address were moved to the new machine.
During the upgrade I got rid of gateway plugin and switched to kraken 1.1.3b as 3.7.1 wouldn’t work with gateway (we only enable irc).
Additionally I updated several other plugins (monitoring, presence, and search, among possible others) that reported being updateable.
Chat within our server works, but it seems, to gmail (and possible other external XMPP servers) it does not.
Googling around I found reference to this possibly being a server-to-server and / or dialback issue?
One post from 2009 mentioned adding a new system property which specified:
“dnsutil.dnsOverride” with the value “{gmail.com,xmpp-server.l.google.com:5269}”
I didn’t bother to try since it was from 2009 and it didn’t seem immediately applicable.
here is some log:
warn: 2011.10.29 11:34:53 org.jivesoftware.openfire.server.ServerDialback - ServerDialback: OS - Ignoring unexpected answer in validation from: jabber.org id: 6734533ae624f1ed for domain: xyz.com answer:<stream:features xmlns:stream="http://etherx.jabber.org/streams"><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/><dialback xmlns="urn:xmpp:features:dialback"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></stream:features>
2011.10.29 11:34:54 org.jivesoftware.util.cache.DefaultCache - Cache Roster was full, shrinked to 90% in 0ms.
2011.10.29 11:34:55 org.jivesoftware.util.cache.DefaultCache - Cache Roster was full, shrinked to 90% in 0ms.
2011.10.29 11:35:13 org.jivesoftware.util.cache.DefaultCache - Cache Roster was full, shrinked to 90% in 0ms.
2011.10.29 11:35:13 org.jivesoftware.openfire.IQRouter - Error or result packet could not be delivered <iq from="proxy.eu.jabber.org" to="spacegoose@xyz.com/dab0a045" type="error" id="purple79e870f9"><error code="503" type="cancel"><service-unavailable xmlns="urn:ietf:params:xml:ns:xmpp-stanzas"/></error></iq>
2011.10.29 11:35:13 org.jivesoftware.openfire.server.ServerDialback - ServerDialback: OS - Ignoring unexpected answer in validation from: appirio.com id: 37F55972009E6296 for domain: xyz.com answer:<stream:error xmlns:stream="http://etherx.jabber.org/streams"><undefined-condition xmlns="urn:ietf:params:xml:ns:xmpp-streams"/><str:text xmlns:str="urn:ietf:params:xml:ns:xmpp-streams">xyz.com is a Google Apps Domain with Talk service enabled.</str:text></stream:error>
2011.10.29 11:35:13 org.jivesoftware.util.cache.DefaultCache - Cache Roster was full, shrinked to 90% in 0ms.
2011.10.29 11:35:14 org.jivesoftware.openfire.server.ServerDialback - ServerDialback: OS - Ignoring unexpected answer in validation from: gmail.com id: E02A5FD3012DEBE4 for domain: xyz.com answer:<stream:error xmlns:stream="http://etherx.jabber.org/streams"><undefined-condition xmlns="urn:ietf:params:xml:ns:xmpp-streams"/><str:text xmlns:str="urn:ietf:params:xml:ns:xmpp-streams">xyz.com is a Google Apps Domain with Talk service enabled.</str:text></stream:error>
2011.10.29 11:35:14 org.jivesoftware.openfire.server.ServerDialback - ServerDialback: OS - Ignoring unexpected answer in validation from: doit.wisc.edu id: 2018443738 for domain: xyz.com answer:<stream:features xmlns:stream="http://etherx.jabber.org/streams"><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/></stream:features>
2011.10.29 11:35:14 org.jivesoftware.openfire.server.ServerDialback - ServerDialback: OS - Ignoring unexpected answer in validation from: wisc.edu id: 2554253717 for domain: xyz.com answer:<stream:features xmlns:stream="http://etherx.jabber.org/streams"><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/></stream:features>
2011.10.29 11:37:33 org.jivesoftware.openfire.server.ServerDialback - ServerDialback: OS - Ignoring unexpected answer in validation from: appirio.com id: EC744C3B445AEF83 for domain: xyz.com answer:<stream:error xmlns:stream="http://etherx.jabber.org/streams"><undefined-condition xmlns="urn:ietf:params:xml:ns:xmpp-streams"/><str:text xmlns:str="urn:ietf:params:xml:ns:xmpp-streams">xyz.com is a Google Apps Domain with Talk service enabled.</str:text></stream:error>
2011.10.29 11:37:33 org.jivesoftware.openfire.server.ServerDialback - ServerDialback: OS - Ignoring unexpected answer in validation from: gmail.com id: 879AC826439AB8C8 for domain: xyz.com answer:<stream:error xmlns:stream="http://etherx.jabber.org/streams"><undefined-condition xmlns="urn:ietf:params:xml:ns:xmpp-streams"/><str:text xmlns:str="urn:ietf:params:xml:ns:xmpp-streams">xyz.com is a Google Apps Domain with Talk service enabled.</str:text></stream:error>
2011.10.29 11:37:42 org.jivesoftware.openfire.IQRouter - Error or result packet could not be delivered <iq from="proxy.eu.jabber.org" to="spacegoose@xyz.com/ebb06e17" type="error" id="purpled864120d"><error code="503" type="cancel"><service-unavailable xmlns="urn:ietf:params:xml:ns:xmpp-stanzas"/></error></iq>
2011.10.29 11:38:11 org.jivesoftware.util.log.util.JettyLog - SSL renegotiate denied: java.nio.channels.SocketChannel[connected local=/218.212.18.167:9091 remote=/218.122.17.135:65020]
2011.10.29 11:38:11 org.jivesoftware.util.log.util.JettyLog - SSL renegotiate denied: java.nio.channels.SocketChannel[connected local=/218.212.18.167:9091 remote=/218.122.17.135:65021]
2011.10.29 11:38:11 org.jivesoftware.util.log.util.JettyLog - SSL renegotiate denied: java.nio.channels.SocketChannel[connected local=/218.212.18.167:9091 remote=/218.122.17.135:65019]
2011.10.29 11:38:11 org.jivesoftware.util.log.util.JettyLog - SSL renegotiate denied: java.nio.channels.SocketChannel[connected local=/218.212.18.167:9091 remote=/218.122.17.135:65018]
2011.10.29 11:38:27 org.jivesoftware.util.cache.DefaultCache - Cache Roster was full, shrinked to 90% in 0ms.
Also found this: http://web.archiveorange.com/archive/v/ryFao46bGoJs8Ae6COHu which mentions the issue re: xyz.com is a Google Apps Domain with Talk service enabled
debug: 2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/192.168.128.83:54827] unwrap()
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/192.168.128.83:54827] inNetBuffer: java.nio.DirectByteBuffer[pos=0 lim=128 cap=16665]
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/192.168.128.83:54827] appBuffer: java.nio.DirectByteBuffer[pos=0 lim=33330 cap=33330]
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/192.168.128.83:54827] Unwrap res:Status = BUFFER_UNDERFLOW HandshakeStatus = NOT_HANDSHAKING
bytesConsumed = 0 bytesProduced = 0
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/192.168.128.83:54827] Data Read: org.apache.mina.filter.support.SSLHandler@18e5d82 (HeapBuffer[pos=0 lim=69 cap=256: 51 9C 14 6C DF 0C B5 DD 9D 8D 6A A2 B4 F6 F5 E1 02 39 A8 C7 18 15 B1 8F 2F 06 C3 9A BA 82 DE CF F0 86 44 51 9A 88 86 CF 7A 1D CB CE 1E 7F AD 4D D4 3D D7 B9 92 98 22 52 7E 27 56 0E 26 67 CF 0C B9 54 3C 54 11])
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/192.168.128.83:54827] unwrap()
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/192.168.128.83:54827] inNetBuffer: java.nio.DirectByteBuffer[pos=0 lim=197 cap=16665]
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/192.168.128.83:54827] appBuffer: java.nio.DirectByteBuffer[pos=0 lim=33330 cap=33330]
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/192.168.128.83:54827] Unwrap res:Status = OK HandshakeStatus = NOT_HANDSHAKING
bytesConsumed = 197 bytesProduced = 170
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/192.168.128.83:54827] inNetBuffer: java.nio.DirectByteBuffer[pos=197 lim=197 cap=16665]
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/192.168.128.83:54827] appBuffer: java.nio.DirectByteBuffer[pos=170 lim=33330 cap=33330]
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/192.168.128.83:54827] Unwrap res:Status = BUFFER_UNDERFLOW HandshakeStatus = NOT_HANDSHAKING
bytesConsumed = 0 bytesProduced = 0
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/192.168.128.83:54827] appBuffer: java.nio.DirectByteBuffer[pos=0 lim=170 cap=33330]
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/192.168.128.83:54827] app data read: HeapBuffer[pos=0 lim=170 cap=170: 3C 69 71 20 74 79 70 65 3D 27 72 65 73 75 6C 74 27 20 69 64 3D 27 70 75 72 70 6C 65 35 32 31 65 36 37 63 62 27 20 74 6F 3D 27 77 63 6D 32 33 36 40 6E 79 75 2E 65 64 75 2F 34 64 64 33 33 61 38 61 27 3E 3C 71 75 65 72 79 20 78 6D 6C 6E 73 3D 27 68 74 74 70 3A 2F 2F 6A 61 62 62 65 72 2E 6F 72 67 2F 70 72 6F 74 6F 63 6F 6C 2F 64 69 73 63 6F 23 69 74 65 6D 73 27 20 6E 6F 64 65 3D 27 68 74 74 70 3A 2F 2F 6A 61 62 62 65 72 2E 6F 72 67 2F 70 72 6F 74 6F 63 6F 6C 2F 63 6F 6D 6D 61 6E 64 73 27 2F 3E 3C 2F 69 71 3E] (3C 69 71 20 74 79 70 65 3D 27 72 65 73 75 6C 74 27 20 69 64 3D 27 70 75 72 70 6C 65 35 32 31 65 36 37 63 62 27 20 74 6F 3D 27 77 63 6D 32 33 36 40 6E 79 75 2E 65 64 75 2F 34 64 64 33 33 61 38 61 27 3E 3C 71 75 65 72 79 20 78 6D 6C 6E 73 3D 27 68 74 74 70 3A 2F 2F 6A 61 62 62 65 72 2E 6F 72 67 2F 70 72 6F 74 6F 63 6F 6C 2F 64 69 73 63 6F 23 69 74 65 6D 73 27 20 6E 6F 64 65 3D 27 68 74 74 70 3A 2F 2F 6A 61 62 62 65 72 2E 6F 72 67 2F 70 72 6F 74 6F 63 6F 6C 2F 63 6F 6D 6D 61 6E 64 73 27 2F 3E 3C 2F 69 71 3E)
2011.10.29 11:53:29 org.apache.mina.filter.executor.ExecutorFilter - Launching thread for /192.168.128.83:54827
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/120.250.111.158:56800] Filtered Write: org.apache.mina.filter.support.SSLHandler@c35868
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/120.250.111.158:56800] encrypt: HeapBuffer[pos=0 lim=216 cap=4096: 3C 69 71 20 74 79 70 65 3D 22 72 65 73 75 6C 74 22 20 69 64 3D 22 70 75 72 70 6C 65 35 32 31 65 36 37 63 62 22 20 74 6F 3D 22 77 63 6D 32 33 36 40 6E 79 75 2E 65 64 75 2F 34 64 64 33 33 61 38 61 22 20 66 72 6F 6D 3D 22 61 66 73 35 40 6E 79 75 2E 65 64 75 2F 61 6E 64 72 65 77 2D 73 65 61 72 73 73 2D 6D 61 63 62 6F 6F 6B 2D 70 72 6F 22 3E 3C 71 75 65 72 79 20 78 6D 6C 6E 73 3D 22 68 74 74 70 3A 2F 2F 6A 61 62 62 65 72 2E 6F 72 67 2F 70 72 6F 74 6F 63 6F 6C 2F 64 69 73 63 6F 23 69 74 65 6D 73 22 20 6E 6F 64 65 3D 22 68 74 74 70 3A 2F 2F 6A 61 62 62 65 72 2E 6F 72 67 2F 70 72 6F 74 6F 63 6F 6C 2F 63 6F 6D 6D 61 6E 64 73 22 2F 3E 3C 2F 69 71 3E]
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/120.250.111.158:56800] Wrap res:Status = OK HandshakeStatus = NOT_HANDSHAKING
bytesConsumed = 216 bytesProduced = 245
2011.10.29 11:53:29 org.jivesoftware.openfire.nio.ClientConnectionHandler - [/120.250.111.158:56800] encrypted buf: HeapBuffer[pos=0 lim=245 cap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
2011.10.29 11:53:29 org.apache.mina.filter.executor.ExecutorFilter - Exiting since queue is empty for /192.168.128.83:54827
2011.10.29 11:53:29 org.apache.mina.filter.executor.ExecutorFilter - Launching thread for /120.250.111.158:56800
2011.10.29 11:53:29 org.apache.mina.filter.executor.ExecutorFilter - Exiting since queue is empty for /120.250.111.158:56800
2011.10.29 11:53:29 org.jivesoftware.util.log.util.JettyLog - JettyLog: servlet holder=
2011.10.29 11:53:29 org.jivesoftware.util.log.util.JettyLog - JettyLog: chain=
2011.10.29 11:53:42 org.jivesoftware.openfire.reporting.stats.StatsEngine - Stat: muc_traffic. Last sample: 1319903520. New sample: 1319903580
2011.10.29 11:53:42 org.jivesoftware.openfire.reporting.stats.StatsEngine - Stat: server_sessions. Last sample: 1319903520. New sample: 1319903580
2011.10.29 11:53:43 org.jivesoftware.openfire.reporting.stats.StatsEngine - Stat: muc_rooms. Last sample: 1319903520. New sample: 1319903580
2011.10.29 11:53:43 org.jivesoftware.openfire.reporting.stats.StatsEngine - Stat: conversations. Last sample: 1319903520. New sample: 1319903580
2011.10.29 11:53:43 org.jivesoftware.openfire.reporting.stats.StatsEngine - Stat: server_bytes. Last sample: 1319903520. New sample: 1319903580
2011.10.29 11:53:43 org.jivesoftware.openfire.reporting.stats.StatsEngine - Stat: muc_users. Last sample: 1319903520. New sample: 1319903580
2011.10.29 11:53:43 org.jivesoftware.openfire.reporting.stats.StatsEngine - Stat: packet_count. Last sample: 1319903520. New sample: 1319903580
2011.10.29 11:53:43 org.jivesoftware.openfire.reporting.stats.StatsEngine - Stat: sessions. Last sample: 1319903520. New sample: 1319903580
2011.10.29 11:53:43 org.jivesoftware.openfire.reporting.stats.StatsEngine - Stat: proxyTransferRate. Last sample: 1319903520. New sample: 1319903580
2011.10.29 11:53:43 org.jivesoftware.openfire.reporting.stats.StatsEngine - Stat: muc_occupants. Last sample: 1319903520. New sample: 1319903580
2011.10.29 11:53:44 org.jivesoftware.util.log.util.JettyLog - JettyLog: servlet holder=
2011.10.29 11:53:44 org.jivesoftware.util.log.util.JettyLog - JettyLog: chain=
Are the SSL and handshake mentions an issue?
stderror: Exception in thread "Thread-1257" java.security.ProviderException: update() failed
at sun.security.pkcs11.P11Cipher.implUpdate(P11Cipher.java:565)
at sun.security.pkcs11.P11Cipher.engineUpdate(P11Cipher.java:464)
at javax.crypto.Cipher.update(DashoA13*..)
at com.sun.net.ssl.internal.ssl.CipherBox.encrypt(CipherBox.java:141)
at com.sun.net.ssl.internal.ssl.OutputRecord.encrypt(OutputRecord.java:199)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecordInternal(SSLSocketImpl.java:742)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:731)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.sendAlert(SSLSocketImpl.java:1758)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1644)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1612)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1576)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1521)
at com.sun.net.ssl.internal.ssl.AppInputStream.read(AppInputStream.java:86)
at java.io.BufferedInputStream.fill(BufferedInputStream.java:218)
at java.io.BufferedInputStream.read1(BufferedInputStream.java:258)
at java.io.BufferedInputStream.read(BufferedInputStream.java:317)
at com.sun.jndi.ldap.Connection.run(Connection.java:808)
at java.lang.Thread.run(Thread.java:662)
Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_OPERATION_NOT_INITIALIZED
at sun.security.pkcs11.wrapper.PKCS11.C_EncryptUpdate(Native Method)
at sun.security.pkcs11.P11Cipher.implUpdate(P11Cipher.java:517)
... 17 more
It’s possible this was an issue in 3.6.4 or since going to Google Apps - however as said - I thought it wasn’t an issue until after the upgrade (e.g. I thought I used to be able to see my Google Chat contacts in my Jive buddies group).
I did revert to a 3.6.4 copy, on the new machine, and had the same “404: Remote Server Not Found” issue, though I think without the “xyz.com is a Google Apps Domain with Talk service enabled” error.
Thanks for any help - and for the solid system!
Bill
P.S. Spoke to some folks on conference.jabber.org (jabber channel) and they suspect gmail users cannot locate our openfire server - even though DNS points to our server, since we’re on Google Apps w/ Chat enabled, Google thinks it already knows what to do for our domain