Suddenly cannot login as admin

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
zim_mike
Outstanding Member
Outstanding Member
Posts: 217
Joined: Sat Sep 13, 2014 3:26 am

Suddenly cannot login as admin

Postby zim_mike » Fri Jun 12, 2020 7:50 pm

I have two administrator accounts on zimbra 8.8.11 and suddenly, I cannot get into either one, keep getting authentication failed on port 7071.
I've changed the passwords from the CLI and even re-set them both as full administrators but keep getting the same.

Server was rebooted, no difference.

What's going on?


User avatar
L. Mark Stone
Elite member
Elite member
Posts: 2198
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 8.8.15 Network Edition
Contact:

Re: Suddenly cannot login as admin

Postby L. Mark Stone » Fri Jun 12, 2020 9:14 pm

zim_mike wrote:I have two administrator accounts on zimbra 8.8.11 and suddenly, I cannot get into either one, keep getting authentication failed on port 7071.
I've changed the passwords from the CLI and even re-set them both as full administrators but keep getting the same.

Server was rebooted, no difference.

What's going on?


What do you get from the following:

Code: Select all

zmprov ga admin@yourdomain.com zimbraAccountStatus


Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
Zeta Alliance http://www.zetalliance.org/
zim_mike
Outstanding Member
Outstanding Member
Posts: 217
Joined: Sat Sep 13, 2014 3:26 am

Re: Suddenly cannot login as admin

Postby zim_mike » Fri Jun 12, 2020 9:22 pm

Oddly, I get 'lockout' for the main one and 'active' for the secondary but still cannot log in with either.
User avatar
L. Mark Stone
Elite member
Elite member
Posts: 2198
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 8.8.15 Network Edition
Contact:

Re: Suddenly cannot login as admin

Postby L. Mark Stone » Fri Jun 12, 2020 9:26 pm

zim_mike wrote:Oddly, I get 'lockout' for the main one and 'active' for the secondary but still cannot log in with either.


Any DoSFilter entries in mailbox.log?
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
Zeta Alliance http://www.zetalliance.org/
zim_mike
Outstanding Member
Outstanding Member
Posts: 217
Joined: Sat Sep 13, 2014 3:26 am

Re: Suddenly cannot login as admin

Postby zim_mike » Fri Jun 12, 2020 9:38 pm

Seems not.

# grep "DoSFilter" /var/log/maillog
#
zim_mike
Outstanding Member
Outstanding Member
Posts: 217
Joined: Sat Sep 13, 2014 3:26 am

Re: Suddenly cannot login as admin

Postby zim_mike » Fri Jun 12, 2020 9:39 pm

BTW, both of those accounts, I cannot get their mail either. I can get all other accounts email but those two.
I've tried changing their passwords and nothing, no access. I only have CLI access, nothing else.
User avatar
L. Mark Stone
Elite member
Elite member
Posts: 2198
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 8.8.15 Network Edition
Contact:

Re: Suddenly cannot login as admin

Postby L. Mark Stone » Fri Jun 12, 2020 9:51 pm

zim_mike wrote:Seems not.

# grep "DoSFilter" /var/log/maillog
#


Please instead try:

Code: Select all

cat ~/log/mailbox.log | grep "suspended, for repeated failed login."


and if you get any hits, then run:

Code: Select all

cat ~/log/mailbox.log | grep "authentication failed"


to see who caused the failure.
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
Zeta Alliance http://www.zetalliance.org/
zim_mike
Outstanding Member
Outstanding Member
Posts: 217
Joined: Sat Sep 13, 2014 3:26 am

Re: Suddenly cannot login as admin

Postby zim_mike » Fri Jun 12, 2020 10:00 pm

# cat /opt/zimbra/log/mailbox.log | grep "suspended, for repeated failed login."
#
zim_mike
Outstanding Member
Outstanding Member
Posts: 217
Joined: Sat Sep 13, 2014 3:26 am

Re: Suddenly cannot login as admin

Postby zim_mike » Fri Jun 12, 2020 10:25 pm

Changing the password has no effect. The log still shows wrong password.

# su - zimbra
$ zmprov sp xxx@xxx.com xxxxxxxxxxxxxxxxxxxxxxxxx
$ exit
logout

# tail -f /opt/zimbra/log/mailbox.log | grep "xxx@xxx.com"

2020-06-12 15:20:13,525 INFO [qtp1225197672-526:https://mx.xxx.com:7071/service/admin/soap/AuthRequest] [name=xxx@xxx.com;ip=x.x.x.x;port=58116;ua=ZimbraWebClient - FF68 (Win);soapId=2f42b9ef;] SoapEngine - handler exception: authentication failed for [xxx@xxx.com], invalid password
2020-06-12 15:20:13,525 INFO [qtp1225197672-526:https://mx.xxx.com:7071/service/admin/soap/AuthRequest] [name=xxx@xxx.com;ip=x.x.x.x;port=58116;ua=ZimbraWebClient - FF68 (Win);soapId=2f42b9ef;] soap - AuthRequest elapsed=1
zim_mike
Outstanding Member
Outstanding Member
Posts: 217
Joined: Sat Sep 13, 2014 3:26 am

Re: Suddenly cannot login as admin

Postby zim_mike » Fri Jun 12, 2020 10:34 pm

I recently made policy changes to the passwords requirements and forced a 90 day change.
I have access to all email accounts but not the administrator ones. Is it possible it's something to do with the passwords?

Return to “Administrators”

Who is online

Users browsing this forum: Baidu [Spider] and 29 guests