Topic: Login succeeds, then subsequent login fails for same account
======== Required information ====
- iRedMail version: iRedMail-0.9.2
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache v2.2.15
- Linux/BSD distribution name and version: Red Hat Enterprise Linux Server release 6.6 (Santiago) (x86_64)
- Related log if you're reporting an issue: /var/log/dovecot.log
====
This was a new install a few days ago. Everything is working as expected. The following 5 test accounts have been created and tested for send/receive.
mysql> select user_id, username, created from roundcubemail.users order by created;
+---------+-----------------------------------+---------------------+
| user_id | username | created |
+---------+-----------------------------------+---------------------+
| 1 | postmaster@ma.securimate.com | 2015-06-20 00:55:15 |
| 2 | subscriber@ma.securimate.com | 2015-06-20 11:08:40 |
| 3 | somesubscriber@ma.securimate.com | 2015-06-20 11:12:46 |
| 4 | with_underscore@ma.securimate.com | 2015-06-20 11:48:19 |
| 5 | with.dot@ma.securimate.com | 2015-06-21 16:53:43 |
+---------+-----------------------------------+---------------------+
5 rows in set (0.00 sec)
mysql> select address, created, active from vmail.alias order by created;
+-----------------------------------+---------------------+--------+
| address | created | active |
+-----------------------------------+---------------------+--------+
| postmaster@ma.securimate.com | 2015-06-18 23:00:57 | 1 |
| subscriber@ma.securimate.com | 2015-06-20 16:08:14 | 1 |
| somesubscriber@ma.securimate.com | 2015-06-20 16:12:16 | 1 |
| with_underscore@ma.securimate.com | 2015-06-20 16:34:25 | 1 |
| with.dot@ma.securimate.com | 2015-06-21 21:51:00 | 1 |
+-----------------------------------+---------------------+--------+
5 rows in set (0.00 sec)They all work, however, sometimes after a successful login, subsequent attempts to login fail unexpectedly and repeatedly. Changing the password does not help. Clearing the session cookie and reloading the page does not help. It simply won't log into the same account that was previously authenticated.
Entries like this appear in /var/log/dovecot.log
Jun 22 03:40:21 auth-worker(18673): Info: mysql(127.0.0.1): Connected to database vmail
Jun 22 03:40:23 imap-login: Info: Disconnected (auth failed, 1 attempts in 2 secs): user=<suscriber@ma.securimate.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=</E6DCBMZXQB/AAAB>
Jun 22 03:45:16 auth-worker(18736): Info: mysql(127.0.0.1): Connected to database vmail
Jun 22 03:45:18 imap-login: Info: Disconnected (auth failed, 1 attempts in 2 secs): user=<suscriber@ma.securimate.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<qR8XGhMZbwB/AAAB>I've added my IP to fail2ban to keep from getting banned from the site.
I know beyond doubt that the "Login failed." message are occurring with the correct account credentials.
It happened yesterday, then they all started working again today. Now 2 of the 5 accounts are resulting in "Login failed." for no apparent reason.
Any ideas?
Thanks in advance for any helpful feedback you may provide.
----
Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.