Page 1 of 2 12 LastLast
Results 1 to 10 of 17

Thread: auth credentials have expired

  1. #1
    Join Date
    Jul 2006
    Location
    Milwaukee, WI
    Posts
    63
    Rep Power
    9

    Default auth credentials have expired

    Many of our users are receiving emails stating "auth credentials have expired". I assume their connection to Zimbra is timing out after x hours. Also, with others, they don't receive this message, but they stop receiving email. With a restart of Outlook this is solved.

    I see the session timeout in the admin console, but I assume that is for the web interface.

    Software:
    Outlook 2010, 32bit.
    Zimbra Enterprise 7.1.4

    Thanks,

    Spencer
    Last edited by Spencer; 02-08-2012 at 01:20 PM. Reason: Running 7.1.4 instead of 7.1.3

  2. #2
    Join Date
    Jun 2009
    Posts
    31
    Rep Power
    6

    Default

    This started happening to us after upgrading the server to 7.1.4. It's driving the users crazy, as they have to restart Outlook when it happens (every 2 days, I guess).

    As an attempt at minimizing the problem, I've set everyone's zimbraAuthTokenLifetime to 30 days via their COS.

    The symptom is local and/or server error reports in the users' Outlook inbox when they try to sync or to send an email, and also tons of "SoapEngine - auth credentials have expired: unable to construct SOAP context" errors in mailbox.log

    Prior to upgrading to 7.1.4, there were some of those errors in mailbox.log, but it was transparent to users -- i.e. somehow their auth tokens got renewed without their getting an error message.

    FWIW we use Kerberos on the backend for authentication.

  3. #3
    Join Date
    Jul 2006
    Location
    Milwaukee, WI
    Posts
    63
    Rep Power
    9

    Default

    I contacted support and they suggested the same thing and referenced this bug:

    https://bugzilla.zimbra.com/show_bug.cgi?id=69536

  4. #4
    Join Date
    Aug 2008
    Location
    NL
    Posts
    68
    Rep Power
    7

    Default

    I'm running ZCS 7.1.4 and we have the exact same thing. It is VERY annoying having to restart outlook whenever this problem pops up.

  5. #5
    Join Date
    Dec 2009
    Location
    Michigan
    Posts
    454
    Rep Power
    5

    Default

    You'll find, that those that are complaining are the ones that are leaving Outlook running for 2 days which is the Auth token lifetime.

    Doug
    Ben Franklin quote:

    "Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety."

  6. #6
    Join Date
    Aug 2008
    Location
    NL
    Posts
    68
    Rep Power
    7

    Default

    No doubt that is true, but that doesn't relieve Zimbra of fixing this bug, as they don't decide how long someone can have outlook.exe running.

  7. #7
    Join Date
    Aug 2008
    Location
    NL
    Posts
    68
    Rep Power
    7

    Default

    So, the outlook connector generating an "auth expired" error xml report after which outlook's ability to communicate with zimbra silently dies without any sort of clear visual representation that this has happened is not a bug, and is working as intended?

    It might not be a bug in the literal sense, but it is most definately bad design.

  8. #8
    Join Date
    Dec 2009
    Location
    Michigan
    Posts
    454
    Rep Power
    5

    Default

    Quote Originally Posted by jwilke View Post
    No doubt that is true, but that doesn't relieve Zimbra of fixing this bug, as they don't decide how long someone can have outlook.exe running.

    This will be fixed in the next release, I have an open ticket on it. The response from a Zimbra rep is:

    Hello Doug,

    Thanks for providing the log files requested. Looks like the issue at hand is reported also in the following bug:

    https://bugzilla.zimbra.com/show_bug.cgi?id=69536.
    ZCO does not prompt with re-authentication on auth_expired

    The above bug is targeted to be fixed in ZCO 7.2. For now the workaround will be to restart Outlook when the issue is expired.
    Also, let us know if increasing the 'Auth Token Time' also helps?
    Doug
    Ben Franklin quote:

    "Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety."

  9. #9
    Join Date
    Aug 2006
    Location
    Atlanta
    Posts
    16
    Rep Power
    9

    Default

    Found a 7.1.5 Pre-Release on the support page that is reported to resolve this issue. Why didn't the QA process find it?

  10. #10
    Join Date
    Dec 2009
    Location
    Michigan
    Posts
    454
    Rep Power
    5

    Default

    Quote Originally Posted by pambuffington View Post
    Found a 7.1.5 Pre-Release on the support page that is reported to resolve this issue. Why didn't the QA process find it?

    And after looking, I note that there is a 7.14 patch available here:

    Code:
    http://files2.zimbra.com/downloads/7.1.4_GA/zcs-patch-7.1.4_GA_2567.tgz
    It's stated to fix the following:
    Patch 7.1.4 P1 patch fixes the following bugs:
    • 52190 CAC Authentication for ZWC
    • 66550 GetInfoRequest RPC sometimes hangs
    • 68402 TNEF parsing OOME
    • 68556 Reject IMAP FETCH requests that span a large range and include BODY
    • 68640 ArchiveFormatter induced deadlock
    • 68786 DoS through hash table multi-collisions in Jetty
    • 69132 com.zimbra.cs.mime.MimeHandlerException occurred while sending appointment invite message to the attendees
    • 69155 View mail from admin console does not work for Global admin
    • 69832 Forwarding multiple videos from Apple Mail app does not display from mobile device
    Doug
    Ben Franklin quote:

    "Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety."

Similar Threads

  1. Replies: 3
    Last Post: 05-17-2012, 05:36 PM
  2. Replies: 6
    Last Post: 12-09-2010, 08:19 AM
  3. [SOLVED] NE Migration: SMTP AUTH Failure
    By markpr in forum Installation
    Replies: 14
    Last Post: 10-03-2007, 12:51 PM
  4. Your server's license has expired - open source version
    By sergiumartin in forum Installation
    Replies: 17
    Last Post: 06-08-2007, 11:41 AM
  5. tls auth only?
    By rmvg in forum Administrators
    Replies: 16
    Last Post: 10-23-2005, 08:50 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •