Hi, thanks for the tip about checking SELINUX. Sadly no change when testing openssl command with SELINUX off. :-(
Not sure if this is a hint but this works on the server openssl s_client -connect mail6.its.uconn.edu:465 so I think the SSL cert files are all good, as 465 and 587 use same files. I have to "control-C" to get back to prompt [root@mail6 postfix]# openssl s_client -starttls smtp -connect mail6.its.uconn.edu:587 CONNECTED(00000003) ^C I tried even adding "- v" to this line in master.cf with a restart and logs went up for port 465 but nothing changed for 587 submission inet n - n - - smtpd -v thanks. -ANGELO FAZZINA ang...@uconn.edu University of Connecticut, ITS, SSG, Server Systems 860-486-9075 -----Original Message----- From: owner-postfix-us...@postfix.org <owner-postfix-us...@postfix.org> On Behalf Of Wietse Venema Sent: Friday, October 11, 2019 11:55 AM To: Postfix users <postfix-users@postfix.org> Subject: Re: Trying to understand error message in logs Fazzina, Angelo: > Hi, thank you for trying to help. > I hope this answers your question. > > [root@mail6 pid]# pwd > /var/spool/postfix/pid > [root@mail6 pid]# ll > total 4 > -rw-------. 1 root root 0 Oct 6 22:14 inet.smtp ...and so on... Postfix daemons open lockfiles while running as root. If they can't do that, then check out - NFS server configuration (disable the root->nobody mapping) - Selinux or AppArmor configuration Wietse