1 Topic by rinze

  • rinze
  • Member
  • Offline
  • From: Netherlands
  • Registered: 2018-12-16
  • Posts: 21

Topic: No access to iredadmin anymore

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.9 MARIADB edition.
- Deployed with iRedMail Easy or the downloadable installer? Downloaded from bitbucket
- Linux/BSD distribution name and version: CentOS Linux release 7.6.1810 (Core)
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? no
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Hi,

I've a mailserver with 3 global admins on it.
All 3 admins are not able to login into iredadmin anymore.
I get the message that the credentials aren't correct, so I followed the procedure (https://docs.iredmail.org/reset.user.password.html) to reset the password of one of the accounts, but I still cannot login.
I've removed the ip from fail2ban, because after a while it got blocked by the many login attempts.
The user I resetted also has a mailaccount and also logging in into roundcube doesn't work.

Line from imap.log
Jun  4 09:35:14 systemname dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<email>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<fmVjhXqKPKJ/AAAB>

Could you advice me on where to look or what to do/test?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,091

Re: No access to iredadmin anymore

rinze wrote:

I've a mailserver with 3 global admins on it.
All 3 admins are not able to login into iredadmin anymore.

Did you do anything which caused the login failure?

3 Reply by rinze (edited by rinze 2019-06-06 14:53:18)

  • rinze
  • Member
  • Offline
  • From: Netherlands
  • Registered: 2018-12-16
  • Posts: 21

Re: No access to iredadmin anymore

ZhangHuangbin wrote:
rinze wrote:

I've a mailserver with 3 global admins on it.
All 3 admins are not able to login into iredadmin anymore.

Did you do anything which caused the login failure?

Last action I did in iredadmin was creating a normal account in one of the domains.
On the server regularly yum updates are installed.
I didn't change anything related to databases or whatever.
'Normal users' seem to have no problem using the mail server (They don't use roundcube webmail, so can't check that).
Any clue on where to start digging into this issue?

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,091

Re: No access to iredadmin anymore

I don't understand why the login worked but not anymore suddenly without any changes. sad

I suggest try to reset password again.

5 Reply by rinze

  • rinze
  • Member
  • Offline
  • From: Netherlands
  • Registered: 2018-12-16
  • Posts: 21

Re: No access to iredadmin anymore

# doveadm pw -s 'ssha512' -p 't0ps3cre3t!'
{SSHA512}Bd/KSPQ+KOQ3mM2HgNb9f8dkKwlLgh+SCakeLu2K3OO2CgWiKTcMPKT71RPecpRPIkGLJB29XYiKfrixpkadr4wzeng=
# mysql
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 4182
Server version: 5.5.60-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> use vmail;
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Database changed
MariaDB [vmail]> UPDATE mailbox SET password='{SSHA512}Bd/KSPQ+KOQ3mM2HgNb9f8dkKwlLgh+SCakeLu2K3OO2CgWiKTcMPKT71RPecpRPIkGLJB29XYiKfrixpkadr4wzeng=' WHERE username='<private>';
Query OK, 1 row affected (0.00 sec)
Rows matched: 1  Changed: 1  Warnings: 0

MariaDB [vmail]> quit
Bye
#

Logging into iredadmin fails with the message "Error: Username or password is incorrect."

Any clue?

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,091

Re: No access to iredadmin anymore

rinze wrote:

Logging into iredadmin fails with the message "Error: Username or password is incorrect."

- Is this user active? (SQL column: mailbox.active=1)
- Does this user have sql column "mailbox.isadmin=1" and "mailbox.isglobaladmin=1"?
- Do you have a record for this user in "domain_admins" table with "domain=ALL"?

7 Reply by rinze (edited by rinze 2019-07-03 18:33:19)

  • rinze
  • Member
  • Offline
  • From: Netherlands
  • Registered: 2018-12-16
  • Posts: 21

Re: No access to iredadmin anymore

ZhangHuangbin wrote:
rinze wrote:

Logging into iredadmin fails with the message "Error: Username or password is incorrect."

- Is this user active? (SQL column: mailbox.active=1)
- Does this user have sql column "mailbox.isadmin=1" and "mailbox.isglobaladmin=1"?
- Do you have a record for this user in "domain_admins" table with "domain=ALL"?

Hi, that was it. Apparently the user had active=0.
Thanks a lot, ZhangHuangbin! I just bought you another coffee wink

8 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,091

Re: No access to iredadmin anymore

Thanks for the coffee. smile