Page 1 of 2

Suddenly cannot login as admin

Posted: Fri Jun 12, 2020 7:50 pm
by zim_mike
I have two administrator accounts on zimbra 8.8.11 and suddenly, I cannot get into either one, keep getting authentication failed on port 7071.
I've changed the passwords from the CLI and even re-set them both as full administrators but keep getting the same.

Server was rebooted, no difference.

What's going on?

Re: Suddenly cannot login as admin

Posted: Fri Jun 12, 2020 9:14 pm
by L. Mark Stone
zim_mike wrote:I have two administrator accounts on zimbra 8.8.11 and suddenly, I cannot get into either one, keep getting authentication failed on port 7071.
I've changed the passwords from the CLI and even re-set them both as full administrators but keep getting the same.

Server was rebooted, no difference.

What's going on?


What do you get from the following:

Code: Select all

zmprov ga admin@yourdomain.com zimbraAccountStatus


Mark

Re: Suddenly cannot login as admin

Posted: Fri Jun 12, 2020 9:22 pm
by zim_mike
Oddly, I get 'lockout' for the main one and 'active' for the secondary but still cannot log in with either.

Re: Suddenly cannot login as admin

Posted: Fri Jun 12, 2020 9:26 pm
by L. Mark Stone
zim_mike wrote:Oddly, I get 'lockout' for the main one and 'active' for the secondary but still cannot log in with either.


Any DoSFilter entries in mailbox.log?

Re: Suddenly cannot login as admin

Posted: Fri Jun 12, 2020 9:38 pm
by zim_mike
Seems not.

# grep "DoSFilter" /var/log/maillog
#

Re: Suddenly cannot login as admin

Posted: Fri Jun 12, 2020 9:39 pm
by zim_mike
BTW, both of those accounts, I cannot get their mail either. I can get all other accounts email but those two.
I've tried changing their passwords and nothing, no access. I only have CLI access, nothing else.

Re: Suddenly cannot login as admin

Posted: Fri Jun 12, 2020 9:51 pm
by L. Mark Stone
zim_mike wrote:Seems not.

# grep "DoSFilter" /var/log/maillog
#


Please instead try:

Code: Select all

cat ~/log/mailbox.log | grep "suspended, for repeated failed login."


and if you get any hits, then run:

Code: Select all

cat ~/log/mailbox.log | grep "authentication failed"


to see who caused the failure.

Re: Suddenly cannot login as admin

Posted: Fri Jun 12, 2020 10:00 pm
by zim_mike
# cat /opt/zimbra/log/mailbox.log | grep "suspended, for repeated failed login."
#

Re: Suddenly cannot login as admin

Posted: Fri Jun 12, 2020 10:25 pm
by zim_mike
Changing the password has no effect. The log still shows wrong password.

# su - zimbra
$ zmprov sp xxx@xxx.com xxxxxxxxxxxxxxxxxxxxxxxxx
$ exit
logout

# tail -f /opt/zimbra/log/mailbox.log | grep "xxx@xxx.com"

2020-06-12 15:20:13,525 INFO [qtp1225197672-526:https://mx.xxx.com:7071/service/admin/soap/AuthRequest] [name=xxx@xxx.com;ip=x.x.x.x;port=58116;ua=ZimbraWebClient - FF68 (Win);soapId=2f42b9ef;] SoapEngine - handler exception: authentication failed for [xxx@xxx.com], invalid password
2020-06-12 15:20:13,525 INFO [qtp1225197672-526:https://mx.xxx.com:7071/service/admin/soap/AuthRequest] [name=xxx@xxx.com;ip=x.x.x.x;port=58116;ua=ZimbraWebClient - FF68 (Win);soapId=2f42b9ef;] soap - AuthRequest elapsed=1

Re: Suddenly cannot login as admin

Posted: Fri Jun 12, 2020 10:34 pm
by zim_mike
I recently made policy changes to the passwords requirements and forced a 90 day change.
I have access to all email accounts but not the administrator ones. Is it possible it's something to do with the passwords?