Cannot access zimbra web admin

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
enetcs
Posts: 1
Joined: Tue Apr 23, 2019 3:55 pm

Cannot access zimbra web admin

Postby enetcs » Tue Apr 23, 2019 4:13 pm

Hi
After a patch install on zimbra 8.6 to p14 I cannot login as administrator on zimbra server, I thought I can fix it changing the zimbraCsrfTokenCheckEnabled but after set it to FALSE still getting the following error in log/mailbox.log

Soapengine - no valid authtoken present.
That only happen with the admin account.

I checked web interface as developer and Authtoken & getinforequest is giving error 500, that doesn't happen with the old version after a few hours of looking for the problem I have no clue what is the problem, if you can point me in the right direction will be very helpful.

Thanks in advance


RO


bwest
Posts: 4
Joined: Tue May 28, 2019 9:41 am

Re: Cannot access zimbra web admin

Postby bwest » Wed May 29, 2019 1:06 pm

We have exactly the same problem. Have you found any solution?

Best
Bernhard
jholder
Zimbra Employee
Zimbra Employee
Posts: 4686
Joined: Fri Sep 12, 2014 10:00 pm

Re: Cannot access zimbra web admin

Postby jholder » Thu May 30, 2019 4:45 am

enetcs wrote:Hi
Soapengine - no valid authtoken present.

Need more info than that. That message will appear a lot and doesn't fundamentally have to do with the login failure. You wan to look for auth failed, not no valid token present.
bwest
Posts: 4
Joined: Tue May 28, 2019 9:41 am

Re: Cannot access zimbra web admin

Postby bwest » Fri May 31, 2019 6:33 am

The error occurs already before a username or password is entered. On loading the login page the console of the browser shows:

Code: Select all

Failed to load resource: the server responded with a status of 500 (Server Error) :7071/service/admin/soap/AuthRequest

Accessing the link directly shows an errorpage:

Code: Select all

HTTP ERROR 405
Problem accessing /service/admin/soap/AuthRequest. Reason:

    HTTP method GET is not supported by this URL
Powered by Jetty://

And the json response from

Code: Select all

Request URL: https://XXXXX:7071/service/admin/soap/AuthRequest
Request Method: POST
Status Code: 500 Server Error
Remote Address: XXXXX:7071
Referrer Policy: no-referrer-when-downgrade

shows following json response:

Code: Select all

{Header: {context: {_jsns: "urn:zimbra"}},…}
Body: {Fault: {Code: {Value: "soap:Sender"}, Reason: {Text: "no valid authtoken present"},…}}
Fault: {Code: {Value: "soap:Sender"}, Reason: {Text: "no valid authtoken present"},…}
Code: {Value: "soap:Sender"}
Value: "soap:Sender"
Detail: {Error: {Code: "service.AUTH_REQUIRED",…}}
Error: {Code: "service.AUTH_REQUIRED",…}
Code: "service.AUTH_REQUIRED"
Trace: "qtp509886383-17835:https://XXXXX:7071/service/admin/soap/AuthRequest:1559284015401:fc31372d0a8053e1"
_jsns: "urn:zimbra"
Reason: {Text: "no valid authtoken present"}
Text: "no valid authtoken present"
Header: {context: {_jsns: "urn:zimbra"}}
context: {_jsns: "urn:zimbra"}
_jsns: "urn:zimbra"
_jsns: "urn:zimbraSoap"

so it does not seem to be an authentication problem.
trace_log shows on loading of login page:

Code: Select all

09:49:38.196:qtp509886383-2449:https://<serverip>:7071/service/admin/soap/GetInfoRequest REQUEST <clientip> POST ZM_TEST=true; ZM_LOGIN_CSRF=a473b432-...; ZM_ADMIN_AUTH_TOKEN=0_feeb1a2a115ee ...; Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
09:49:38.205:qtp509886383-2449:https://<serverip>:7071/service/admin/soap/GetInfoRequest RESPONSE 500 text/xml; charset=UTF-8

and on login attempt:

Code: Select all

09:50:28.517:qtp509886383-2453:https://<serverip>:7071/service/admin/soap/GetInfoRequest REQUEST <clientip> POST ZM_TEST=true; ZM_LOGIN_CSRF=a473b432-...; ZM_ADMIN_AUTH_TOKEN=0_59f253adba5cb ...; Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
09:50:28.519:qtp509886383-2453:https://<serverip>:7071/service/admin/soap/GetInfoRequest RESPONSE 500 text/xml; charset=UTF-8



Again, any help appreciated.
cavp
Posts: 3
Joined: Thu Jul 11, 2019 12:56 pm

Re: Cannot access zimbra web admin

Postby cavp » Thu Jul 11, 2019 4:59 pm

Hi:

I have the exact same problem; after patch installation, it worked for a few days and then it was impossible to login to the admin console. The error comes always at the AuthRequest:

Code: Select all

Request URL: https://mail.domain.com:7071/service/admin/soap/AuthRequest
Request Method: POST
Status Code: 500 Server Error
Remote Address: <mail_ip>:7071
Referrer Policy: no-referrer-when-downgrade


and the JSON response:

Code: Select all

{"Header":{"context":{"_jsns":"urn:zimbra"}},
"Body":{"Fault":{"Code":{"Value":"soap:Sender"},
"Reason":{"Text":"no valid authtoken present"},"Detail":{"Error":{"Code":"service.AUTH_REQUIRED","Trace":
"qtp509886383-4448:https://<mail_ip>:7071/service/admin/soap/AuthRequest:1562863498180:8edcaec7800fd75d","_jsns":
"urn:zimbra"}}}},"_jsns":"urn:zimbraSoap"}


I have tried reapplying the patch, also fixing permissions with zmfixperms to no avail... I need to fix this before trying to move this installation to a newer version. Thanks in advance.
cavp
Posts: 3
Joined: Thu Jul 11, 2019 12:56 pm

Re: Cannot access zimbra web admin

Postby cavp » Mon Jul 15, 2019 12:53 pm

cavp wrote:Hi:

I have the exact same problem; after patch installation, it worked for a few days and then it was impossible to login to the admin console. The error comes always at the AuthRequest:

Code: Select all

Request URL: https://mail.domain.com:7071/service/admin/soap/AuthRequest
Request Method: POST
Status Code: 500 Server Error
Remote Address: <mail_ip>:7071
Referrer Policy: no-referrer-when-downgrade


and the JSON response:

Code: Select all

{"Header":{"context":{"_jsns":"urn:zimbra"}},
"Body":{"Fault":{"Code":{"Value":"soap:Sender"},
"Reason":{"Text":"no valid authtoken present"},"Detail":{"Error":{"Code":"service.AUTH_REQUIRED","Trace":
"qtp509886383-4448:https://<mail_ip>:7071/service/admin/soap/AuthRequest:1562863498180:8edcaec7800fd75d","_jsns":
"urn:zimbra"}}}},"_jsns":"urn:zimbraSoap"}


I have tried reapplying the patch, also fixing permissions with zmfixperms to no avail... I need to fix this before trying to move this installation to a newer version. Thanks in advance.


Anybody? I'm sure there are more cases like these... Please help.

Zimbra version: Release 8.6.0_GA_1153.RHEL6_64_20141215151155 RHEL6_64 FOSS edition, Patch 8.6.0_P14
cavp
Posts: 3
Joined: Thu Jul 11, 2019 12:56 pm

Re: Cannot access zimbra web admin

Postby cavp » Mon Aug 19, 2019 12:45 pm

After a while, finally got it working...

In the zimbra.log file there was a recurrence of these errors:

Code: Select all

Aug 15 03:22:55 mail zmconfigd[2161]:   File "/opt/zimbra/zimbramon/pylibs/state.py", line 741, in rewriteConfig     os.unlink(to)
Aug 15 03:22:55 mail zmconfigd[2161]: Rewrite failed: [Errno 1] Operation not permitted: '/opt/zimbra/mailboxd/webapps/service/WEB-INF/web.xml' ([Errno 1] Operation not permitted: '/opt/zimbra/mailboxd/webapps/service/WEB-INF/web.xml')
Aug 15 03:22:55 mail zmconfigd[2161]:   File "/opt/zimbra/zimbramon/pylibs/state.py", line 741, in rewriteConfig     os.unlink(to)
Aug 15 03:22:55 mail zmconfigd[2161]: Rewrite failed: [Errno 1] Operation not permitted: '/opt/zimbra/mailboxd/webapps/zimbraAdmin/WEB-INF/jetty-env.xml' ([Errno 1] Operation not permitted: '/opt/zimbra/mailboxd/webapps/zimbraAdmin/WEB-INF/jetty-env.xml')
Aug 15 03:22:55 mail zmconfigd[2161]:   File "/opt/zimbra/zimbramon/pylibs/state.py", line 741, in rewriteConfig     os.unlink(to)
Aug 15 03:22:55 mail zmconfigd[2161]: Rewrite failed: [Errno 1] Operation not permitted: '/opt/zimbra/mailboxd/webapps/zimbra/WEB-INF/jetty-env.xml' ([Errno 1] Operation not permitted: '/opt/zimbra/mailboxd/webapps/zimbra/WEB-INF/jetty-env.xml')
Aug 15 03:22:55 mail zmconfigd[2161]:   File "/opt/zimbra/zimbramon/pylibs/state.py", line 741, in rewriteConfig     os.unlink(to)
Aug 15 03:22:55 mail zmconfigd[2161]: Rewrite failed: [Errno 1] Operation not permitted: '/opt/zimbra/mailboxd/webapps/zimbraAdmin/WEB-INF/web.xml' ([Errno 1] Operation not permitted: '/opt/zimbra/mailboxd/webapps/zimbraAdmin/WEB-INF/web.xml')
Aug 15 03:22:55 mail zmconfigd[2161]:   File "/opt/zimbra/zimbramon/pylibs/state.py", line 741, in rewriteConfig     os.unlink(to)
Aug 15 03:22:55 mail zmconfigd[2161]: Rewrite failed: [Errno 1] Operation not permitted: '/opt/zimbra/mailboxd/webapps/zimbra/WEB-INF/web.xml' ([Errno 1] Operation not permitted: '/opt/zimbra/mailboxd/webapps/zimbra/WEB-INF/web.xml')


Analyzing that state.py (and another logmsg.py) python script referenced in the error, it was logical to conclude that it was a permissions problem... Running zmfixperms didn't fix it, so the only thing left was to assign permissions manually as root (from another post):

Code: Select all

[root@mail ~]# cd mailboxd/
[root@mail ~]# find webapps -type d -exec chmod 0755 {} \;
[root@mail ~]# find webapps -type f -exec chmod 0644 {} \;
[root@mail ~]# su - zimbra
[zimbra@mail ~]$ zmcontrol restart


For whoever else that has this problem, I hope this may help.

Return to “Administrators”

Who is online

Users browsing this forum: Google [Bot] and 11 guests