users cannot login

[McDade, Andy]

Just for information, I had changed the 'Directory Manager' password
using these instructions
(http://redlegoman.blogspot.co.uk/2015/07/change-kolab-directory-manager-password.html
[2]) but didn't change the password held in /etc/kolab/kolab.conf, which
meant passwords in ldap couldn't be looked up by kolab. I changed the
kolab.conf and everything (it seems) is happy again. 

---

from kolab 

On 2015/07/14 14:07, Mateusz Kijowski wrote: 

> Hmm, I think that roundcube uses ldap (via kolab_auth plugin) to authenticate users, so it's nothing wrong with the user missing from roundcube database. 
> 
> 2015-07-14 13:35 GMT+02:00 McDade, Andy <andy at 117net.co.uk>:
> After some digging, it seems the user has been added in ldap, but not in the roundcube mysql db. What mechanism connects the two, and why might it be broken?
> 
> ---
> from kolab 
> 
> On 2015/07/13 13:46, McDade, Andy wrote:
> I need some help tracking down an issue where my first setup user can
> log in to roundcube, but any new users I set up cannot.
> I get a login denied error can the following in the maillog (this is a
> Centos 7 system with the latest Kolab 3.4).
> 
> Jul 13 13:34:34 kolab imap[20634]: starttls: TLSv1 with cipher
> ECDHE-RSA-AES256-SHA (256/256 bits new) no authentication
> Jul 13 13:34:34 kolab imap[20634]: SASL Password verification failed
> Jul 13 13:34:34 kolab imap[20634]: badlogin: localhost [::1] PLAIN
> [SASL(-13): authentication failure: Password verification failed]
> 
> and this in the roundcube logs:
> 
> [13-Jul-2015 13:34:37,000000 +0100]: <8eo5e7v4> Failed login for
> user at domain.co.uk from X.x.x.x(X-Real-IP: x.x.x.x,X-Forwarded-For:
> x.x.x.x) in session 8eo5e7v42vu7h78qi3o3ulrkn4 (error: 0)
> 
> [13-Jul-2015 13:34:37,000000 +0100]: <8eo5e7v4> IMAP Error: Login
> failed for user at domain.co.uk from x.x.x.x(X-Real-IP:
> x.x.x.x,X-Forwarded-For: x.x.x.x). AUTHENTICATE PLAIN: authentication
> failure in
> /usr/share/roundcubemail/program/lib/Roundcube/rcube_imap.php on line
> 198 (POST
> /roundcubemail/4651062b87170bb3/?_task=login?_task=login&_action=login)
> 
> Where do I start? The ldap contains an SSHA encrypted password, and
> checking this using Apache Studio seems to confirm it correct. I have
> tried changing the password in the Kolab web admin and directly in
> ldap, to no avail.
> 
> I see there was a problem with kolab 3.2 that had these symptoms, but
> It was fixed in that version and shouldn't be in 3.4, at least that's
> how I read it.
> 
> Any help appreciated,
> Andy
> 
> --
> from kolab
> _______________________________________________
> users mailing list
> users at lists.kolab.org
> https://lists.kolab.org/mailman/listinfo/users [1] _______________________________________________
> users mailing list
> users at lists.kolab.org
> https://lists.kolab.org/mailman/listinfo/users [1]

_______________________________________________
users mailing list
users at lists.kolab.org
https://lists.kolab.org/mailman/listinfo/users [1] 

Links:
------
[1] https://lists.kolab.org/mailman/listinfo/users
[2]
http://redlegoman.blogspot.co.uk/2015/07/change-kolab-directory-manager-password.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kolab.org/pipermail/users/attachments/20150715/8b034fba/attachment.html>