1 Topic by Falmic (edited by Falmic 2015-03-30 17:45:54)

  • Falmic
  • Member
  • Offline
  • Registered: 2015-03-25
  • Posts: 9

Topic: Can't login to cluebringer & awstats

==== Required information ====
- iRedMail version: 0.9.0
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache
- Linux/BSD distribution name and version: Debian Wheezy 7.8
- Related log if you're reporting an issue:
====
Hello, today i put on my mashine fresh debian, install iredmail and got a problem.
postmaster works on iredadmin and roundcube, but i cant login to awstats and cluebringer due error with bad credentials (same on apache error.log).
[Mon Mar 30 05:23:31 2015] [error] [client XX.XX.XX.XX] user postmaster@host: authentication failure for "/cluebringer/": Password Mismatch
[Mon Mar 30 11:12:50 2015] [error] [client XX.XX.XX.XX] user postmaster@host: authentication failure for "/awstats/awstats.pl": Password Mismatch
Im not a idiot, and write my 16 digs password isnt hard (i even try copy & paste but doesent work).
I try change password for postmaster on iredadmin, but i got still same error.
i even try add another global admin but less digs password, but still same! this is really strange hmm
Any solution?

@edit
my awstats.conf
DBDriver mysql
# Important note: use 'pass=' for MySQL, 'password=' for PostgreSQL.
DBDParams "host=127.0.0.1 port=3306 dbname=vmail user=vmail pass=xx"

<Directory /usr/lib/cgi-bin>
    DirectoryIndex awstats.pl
    Options ExecCGI

    AuthType Basic
    AuthName "Authentication required"
    AuthBasicProvider dbd
    AuthDBDUserPWQuery "SELECT password FROM mailbox WHERE username = %s AND isglobaladmin=1 LIMIT 1"

    Require valid-user
</Directory>

My cluebringer.conf
DBDriver mysql
# Important note: use 'pass=' for MySQL, 'password=' for PostgreSQL.
DBDParams "host=127.0.0.1 port=3306 dbname=vmail user=vmail pass=xx"

<Directory /usr/share/postfix-cluebringer-webui/webui>
    DirectoryIndex index.php

    AuthType Basic
    AuthName "Authentication required"
    AuthBasicProvider dbd
    AuthDBDUserPWQuery "SELECT password FROM mailbox WHERE username = %s AND isglobaladmin=1 LIMIT 1"

    Require valid-user
</Directory>

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Can't login to cluebringer & awstats

Please reset password to a MD5 hash by following this tutorial:
http://www.iredmail.org/docs/reset.user.password.html

3 Reply by Falmic (edited by Falmic 2015-03-30 22:53:48)

  • Falmic
  • Member
  • Offline
  • Registered: 2015-03-25
  • Posts: 9

Re: Can't login to cluebringer & awstats

ZhangHuangbin wrote:

Please reset password to a MD5 hash by following this tutorial:
http://www.iredmail.org/docs/reset.user.password.html

it doesent change anything
i can login on roundcube or iredadmin with new password, but still cant on awstats or cluebringer

how can i disable password verification on them? i can put manualy simple htaccess to protect and will be work ;]

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Can't login to cluebringer & awstats

Falmic wrote:

how can i disable password verification on them? i can put manualy simple htaccess to protect and will be work ;]

You can replace default /etc/apache2/conf.d/awstats.conf (and/or cluebringer.conf) by the content you should used in .htaccess file.

5 Reply by Falmic (edited by Falmic 2015-03-31 00:28:58)

  • Falmic
  • Member
  • Offline
  • Registered: 2015-03-25
  • Posts: 9

Re: Can't login to cluebringer & awstats

ZhangHuangbin wrote:
Falmic wrote:

how can i disable password verification on them? i can put manualy simple htaccess to protect and will be work ;]

You can replace default /etc/apache2/conf.d/awstats.conf (and/or cluebringer.conf) by the content you should used in .htaccess file.

ok il test that, but still main problem isnt resolve. why this isnt work corect? sad

@edit
when im disable lines from awstats.conf and cluebringer.conf i got 403 with error
[Mon Mar 30 18:25:02 2015] [error] [client xx.xx.xx.xx] attempt to invoke directory as script: /usr/lib/cgi-bin/

so like i see, there is more work to do than fix failed auth ;p

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Can't login to cluebringer & awstats

You should add one more directive: DirectoryIndex. It's used in config file generated by iRedMail.

7 Reply by Falmic (edited by Falmic 2015-03-31 18:59:00)

  • Falmic
  • Member
  • Offline
  • Registered: 2015-03-25
  • Posts: 9

Re: Can't login to cluebringer & awstats

ZhangHuangbin wrote:

You should add one more directive: DirectoryIndex. It's used in config file generated by iRedMail.

my awstats.conf looks like that. i was think this will be enought to disable pass auth, but like i write before i got 403 with error

#DBDriver mysql
# Important note: use 'pass=' for MySQL, 'password=' for PostgreSQL.
#DBDParams "host=127.0.0.1 port=3306 dbname=vmail user=vmail pass=xxx"

<Directory /usr/lib/cgi-bin>
    DirectoryIndex awstats.pl
    Options ExecCGI

#    AuthType Basic
#    AuthName "Authentication required"
#    AuthBasicProvider dbd
#    AuthDBDUserPWQuery "SELECT password FROM mailbox WHERE username = %s AND isglobaladmin=1 LIMIT 1"

#    Require valid-user
</Directory>

any clue why this pass verification not work correct?

8 Reply by roberto.estupinan

  • roberto.estupinan
  • Member
  • Offline
  • Registered: 2015-01-14
  • Posts: 2

Re: Can't login to cluebringer & awstats

#DBDriver mysql
Hi:
I did this:
# Important note: use 'pass=' for MySQL, 'password=' for PostgreSQL.
#DBDParams "host=127.0.0.1 port=3306 dbname=vmail user=vmail pass=xxx"

<Directory /usr/lib/cgi-bin>
    DirectoryIndex awstats.pl
    Options ExecCGI

#    AuthType Basic
#    AuthName "Authentication required"
#    AuthBasicProvider dbd
#    AuthDBDUserPWQuery "SELECT password FROM mailbox WHERE username = %s AND isglobaladmin=1 LIMIT 1"

#    Require valid-user
</Directory>

the result:

Forbidden

You don't have permission to access /awstats/awstats.pl=config=web on this server.

any idea???
thks.

9 Reply by avenger_msoft

  • avenger_msoft
  • Member
  • Offline
  • Registered: 2014-08-07
  • Posts: 21

Re: Can't login to cluebringer & awstats

roberto.estupinan wrote:

<Directory /usr/lib/cgi-bin>
    DirectoryIndex awstats.pl
    Options ExecCGI

#    AuthType Basic
#    AuthName "Authentication required"
#    AuthBasicProvider dbd
#    AuthDBDUserPWQuery "SELECT password FROM mailbox WHERE username = %s AND isglobaladmin=1 LIMIT 1"

#    Require valid-user
</Directory>

Add 

         Require all granted

?

10 Reply by Falmic (edited by Falmic 2015-04-01 15:40:49)

  • Falmic
  • Member
  • Offline
  • Registered: 2015-03-25
  • Posts: 9

Re: Can't login to cluebringer & awstats

avenger_msoft wrote:
roberto.estupinan wrote:

<Directory /usr/lib/cgi-bin>
    DirectoryIndex awstats.pl
    Options ExecCGI

#    AuthType Basic
#    AuthName "Authentication required"
#    AuthBasicProvider dbd
#    AuthDBDUserPWQuery "SELECT password FROM mailbox WHERE username = %s AND isglobaladmin=1 LIMIT 1"

#    Require valid-user
</Directory>

Add 

         Require all granted

?

Error 500 with message on error.log
[Wed Apr 01 09:37:09 2015] [crit] [client xx.xx.xx.xx] configuration error:  couldn't perform authentication. AuthType not set!: /awstats

what the.... i comment all lines with auth...  ech... any idea with this stupid auth? i wonder.... this is not a problem with DBD driver? maybe he have problem with correct read of database?

11 Reply by avenger_msoft

  • avenger_msoft
  • Member
  • Offline
  • Registered: 2014-08-07
  • Posts: 21

Re: Can't login to cluebringer & awstats

Falmic wrote:

Require all granted

<Directory /usr/lib/cgi-bin/>
    DirectoryIndex awstats.pl
    Options ExecCGI FollowSymLinks SymLinksIfOwnerMatch
    AllowOverride None
    Order allow,deny
    allow from all
    Require all granted
</Directory>

?

<Directory /usr/lib/cgi-bin/>
    DirectoryIndex awstats.pl
    Options ExecCGI FollowSymLinks SymLinksIfOwnerMatch
    AllowOverride None
    Order allow,deny
    allow from all
    #Require all granted
</Directory>

?

12 Reply by Falmic

  • Falmic
  • Member
  • Offline
  • Registered: 2015-03-25
  • Posts: 9

Re: Can't login to cluebringer & awstats

Its doesent work. asking for password and still password isnt match for this auth

13 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Can't login to cluebringer & awstats

Does it work if you remove /etc/apache2/conf.d/awstats.conf? I tested it and it works for me.

14 Reply by Falmic (edited by Falmic 2015-04-03 21:58:40)

  • Falmic
  • Member
  • Offline
  • Registered: 2015-03-25
  • Posts: 9

Re: Can't login to cluebringer & awstats

ZhangHuangbin wrote:

Does it work if you remove /etc/apache2/conf.d/awstats.conf? I tested it and it works for me.

error 403 and msg on error.log
[Fri Apr 03 15:56:59 2015] [error] [client xx.xx.xx.xx] attempt to invoke directory as script: /usr/lib/cgi-bin/

i write about this error before.

15 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Can't login to cluebringer & awstats

Please access Awstats with index file name like this:

https://[your_server]/awstats/awstats.pl
https://[your_server]/awstats/awstats.pl?config=web
https://[your_server]/awstats/awstats.pl?config=smtp

16 Reply by Falmic

  • Falmic
  • Member
  • Offline
  • Registered: 2015-03-25
  • Posts: 9

Re: Can't login to cluebringer & awstats

ZhangHuangbin wrote:

Please access Awstats with index file name like this:

https://[your_server]/awstats/awstats.pl
https://[your_server]/awstats/awstats.pl?config=web
https://[your_server]/awstats/awstats.pl?config=smtp

yes i forgot about go that way (i mean put awstats.pl on my browser)
but do you have any clue why this auth not work?

17 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Can't login to cluebringer & awstats

Falmic wrote:

but do you have any clue why this auth not work?

It works for me if i reset password to salted MD5 (generated with command 'openssl passwd -1').

18 Reply by battossai

  • battossai
  • Member
  • Offline
  • Registered: 2015-04-10
  • Posts: 1

Re: Can't login to cluebringer & awstats

I have this issue too ... any update how to able login to awstats page ?
Thanks

19 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Can't login to cluebringer & awstats

battossai wrote:

I have this issue too ... any update how to able login to awstats page ?

Please reset you admin account password to a MD5 password:
http://www.iredmail.org/docs/reset.user.password.html

20 Reply by smozgur (edited by smozgur 2015-09-05 06:13:58)

  • smozgur
  • Member
  • Offline
  • Registered: 2015-09-05
  • Posts: 8

Re: Can't login to cluebringer & awstats

ZhangHuangbin wrote:
battossai wrote:

I have this issue too ... any update how to able login to awstats page ?

Please reset you admin account password to a MD5 password:
http://www.iredmail.org/docs/reset.user.password.html

"generated with command 'openssl passwd -1'" is the key.
It doesn't work with the hash created by doveadm but openssl.

Just wanted to make sure any future reader wouldn't miss that.

Thanks for the iRedMail!

21 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Can't login to cluebringer & awstats

The document mentions "Please remove '{MD5}' prefix" for md5 hash generated with 'doveadm'.

22 Reply by Anton.Kolganov

  • Anton.Kolganov
  • Member
  • Offline
  • Registered: 2015-12-09
  • Posts: 1

Re: Can't login to cluebringer & awstats

==== Required information ====
- iRedMail version: 0.9.2
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache
- Linux/BSD distribution name and version: Ubuntu 14.04.3 LTS
- Related log if you're reporting an issue:
====
Hello, I have this issue too at all my servers (virtual or real). I try reset password admin account password to a MD5, and it`s did not help.
Fresh install, and this does not work. Could you help with the issue?

23 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Can't login to cluebringer & awstats

Dear Anton.Kolganov,

This topic already answers your question, please just take some seconds to read it.

The short answer is: please reset your admin's password to a MD5 password. Here's tutorial:
http://www.iredmail.org/docs/reset.user.password.html

24 Reply by ambot777

  • ambot777
  • Member
  • Offline
  • Registered: 2015-12-04
  • Posts: 19

Re: Can't login to cluebringer & awstats

I've changed my password to MD5 but still can't access cluebringer as well. sad Would it be fine to provide a more detailed instruction please? Thanks!

25 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Can't login to cluebringer & awstats

*) Does your new MD5 password contain '{MD5}' prefix?
*) How did you generate a MD5 password?