question Re: Ambari-Alerts configuration error- Not able to receive alert email. Below is the output of ambari-server.log. "telnet smtp.gmail.com 587" is getting connected. in Archives of Support Questions (Read Only)

Ambari-Alerts configuration error- Not able to receive alert email. Below is the output of ambari-server.log. "telnet smtp.gmail.com 587" is getting connected.

mohitvarshney — Fri, 30 Jun 2017 07:42:44 GMT

30 Jun 2017 06:03:26,478 ERROR [alert-dispatch-1] EmailDispatcher:172 - Unable to dispatch notification via Email javax.mail.MessagingException: Could not connect to SMTP host: smtp.gmail.com, port: 587; nested exception is: javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection? at com.sun.mail.smtp.SMTPTransport.openServer(SMTPTransport.java:2055) at com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:697) at javax.mail.Service.connect(Service.java:386) at javax.mail.Service.connect(Service.java:245) at javax.mail.Service.connect(Service.java:194) at javax.mail.Transport.send0(Transport.java:253) at javax.mail.Transport.send(Transport.java:124) at org.apache.ambari.server.notifications.dispatchers.EmailDispatcher.dispatch(EmailDispatcher.java:160) at org.apache.ambari.server.notifications.DispatchRunnable.run(DispatchRunnable.java:58) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at java.lang.Thread.run(Thread.java:745) Caused by: javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection? at sun.security.ssl.InputRecord.handleUnknownRecord(InputRecord.java:710) at sun.security.ssl.InputRecord.read(InputRecord.java:527) at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:973) at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387) at com.sun.mail.util.SocketFetcher.configureSSLSocket(SocketFetcher.java:543) at com.sun.mail.util.SocketFetcher.createSocket(SocketFetcher.java:348) at com.sun.mail.util.SocketFetcher.getSocket(SocketFetcher.java:236) at com.sun.mail.smtp.SMTPTransport.openServer(SMTPTransport.java:2019)

Re: Ambari-Alerts configuration error- Not able to receive alert email. Below is the output of ambari-server.log. "telnet smtp.gmail.com 587" is getting connected.

mohitvarshney — Fri, 30 Jun 2017 07:46:36 GMT

have already set mail.smtp.ssl.enable= true

Re: Ambari-Alerts configuration error- Not able to receive alert email. Below is the output of ambari-server.log. "telnet smtp.gmail.com 587" is getting connected.

jsensharma — Sun, 18 Aug 2019 02:44:00 GMT

@Mohit Varshney

While configuring SMTP notifications from ambari UI did you select the following checkbox?

Start TLS

Re: Ambari-Alerts configuration error- Not able to receive alert email. Below is the output of ambari-server.log. "telnet smtp.gmail.com 587" is getting connected.

mohitvarshney — Fri, 30 Jun 2017 08:18:29 GMT

@Jay SenSharma

Yes I did. screenshot attachedambari-email.png

Re: Ambari-Alerts configuration error- Not able to receive alert email. Below is the output of ambari-server.log. "telnet smtp.gmail.com 587" is getting connected.

jsensharma — Fri, 30 Jun 2017 11:17:00 GMT

@Mohit Varshney

I just noticed that you added ["mail.smtp.ssl.enable":true] parameter in your SMTP protocol which is actually causing the issue.

Please remove that property and then it should not cause the following error any more. For smtp.gmail.com that property is not at all needed.

Caused by: javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?
    at sun.security.ssl.InputRecord.handleUnknownRecord(InputRecord.java:710)
    at sun.security.ssl.InputRecord.read(InputRecord.java:527)

Re: Ambari-Alerts configuration error- Not able to receive alert email. Below is the output of ambari-server.log. "telnet smtp.gmail.com 587" is getting connected.

mohitvarshney — Fri, 30 Jun 2017 15:33:15 GMT

@Jay SenSharma

the error changes after removing ["mail.smtp.ssl.enable":true]. see the screenshot. ambari-alert2.png

Re: Ambari-Alerts configuration error- Not able to receive alert email. Below is the output of ambari-server.log. "telnet smtp.gmail.com 587" is getting connected.

jsensharma — Fri, 30 Jun 2017 15:46:41 GMT

@Mohit Varshney

This error indicates that you have not configured TrustStore for Ambari. Also you will need to store the "smtp.gmail.com" certificate in that truststore.

Please try this:

1). Create Ambari TrustStore File.

# export AMBARI_SERVER_HOSTNAME=erie1.example.com
# cd /etc/ambari-server/conf/
# $JAVA_HOME/bin/keytool -genkeypair -alias ambari -keyalg RSA -validity 365 -keystore /etc/ambari-server/conf/$AMBARI_SERVER_HOSTNAME.jks -dname 'CN=$AMBARI_SERVER_HOSTNAME, OU=MiddlewareMagic, O=test, L=Bangalore, S=Karnataka, C=IN' -keypass ambari -storepass ambari

**NOTE** Please replace the "MBARI_SERVER_HOSTNAME" with your actual ambari server FQDN/hostname.

2) . Retrieve the "smtp.gmail.com" certificate in Ambari Trust Store.

# cd /etc/ambari-server/conf/

# openssl s_client -connect  smtp.gmail.com:587  -starttls smtp <<< '' | openssl x509 -out gmail-smtp.cer

3). Import the smtp.gmail.com certificate to Ambari Truststore.

# $JAVA_HOME/bin/keytool -import -alias $AMBARI_SERVER_HOSTNAME -file /etc/ambari-server/conf/gmail-smtp.cer -keystore /etc/ambari-server/conf/$AMBARI_SERVER_HOSTNAME.jks

4). Configure Ambari TrustStore.

[root@erie1 conf]# ambari-server setup-security
Using python  /usr/bin/python
Security setup options...
===========================================================================
Choose one of the following options: 
  [1] Enable HTTPS for Ambari server.
  [2] Encrypt passwords stored in ambari.properties file.
  [3] Setup Ambari kerberos JAAS configuration.
  [4] Setup truststore.
  [5] Import certificate to truststore.
===========================================================================
Enter choice, (1-5): 4
Do you want to configure a truststore [y/n] (y)? 
The truststore is already configured. Do you want to re-configure the truststore [y/n] (y)? 
TrustStore type [jks/jceks/pkcs12] (jks):jks
Path to TrustStore file :/etc/ambari-server/conf/erie1.example.com.jks
Password for TrustStore: ambari
Re-enter password: ambari
Ambari Server 'setup-security' completed successfully.
+++++++++++

5). Restart Ambari Server.

Re: Ambari-Alerts configuration error- Not able to receive alert email. Below is the output of ambari-server.log. "telnet smtp.gmail.com 587" is getting connected.

mohitvarshney — Fri, 30 Jun 2017 17:57:20 GMT

@Jay SenSharma worked after creating truststore. Thanks a lot.