1 Topic by lauris.neimanis (edited by lauris.neimanis 2021-11-05 17:09:23)

  • lauris.neimanis
  • Member
  • Offline
  • Registered: 2018-02-10
  • Posts: 13

Topic: SOGo webmail password change

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.4.2
- Deployed with iRedMail Easy or the downloadable installer? downloadable installer
- Linux/BSD distribution name and version: Ubuntu 18.04
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

After changing the password in SOGo webmail client can no longer log in. Attached SOGo log file.

Post's attachments

sogo.log 5.62 kb, 2 downloads since 2021-11-05 

You don't have the permssions to download the attachments of this post.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,082

Re: SOGo webmail password change

Does restarting memcached service fix this issue?

3 Reply by lauris.neimanis

  • lauris.neimanis
  • Member
  • Offline
  • Registered: 2018-02-10
  • Posts: 13

Re: SOGo webmail password change

No, it does not solve the problem.

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,082

Re: SOGo webmail password change

Could you use "doveadm pw" command to verify the changed password? Is it matched?

5 Reply by lauris.neimanis (edited by lauris.neimanis 2021-11-11 16:57:20)

  • lauris.neimanis
  • Member
  • Offline
  • Registered: 2018-02-10
  • Posts: 13

Re: SOGo webmail password change

ZhangHuangbin wrote:

Could you use "doveadm pw" command to verify the changed password? Is it matched?

If I use SOGO webmail to change my password, it is stored in plain text

+------------+
| password   |
+------------+
| TX6v3[2677 |
+------------+

If I useiRedAdmin-Pro to change my password, it is stored in SSHA512

+-----------------------------------------------------------------------------------------------------------+
| password                                                                                                  |
+-----------------------------------------------------------------------------------------------------------+
| {SSHA512}hslCzryKY6y7Nrrtg504YFRc/oo3KGSKuSe1dqYu9LJXQyrgnzMEDuxTfrLlHpla5ebr/Kfx1e1g3s4Pi8fGgVhFK0x3UGwW |
+-----------------------------------------------------------------------------------------------------------+

doveadm pw

From doveadm pw I get the following password

{CRAM-MD5}4b60623aea80ae7b9c78e4db35a2abe31d37b7addb13cf6bd1ad4e52711213ec

If I use SOGO webmail to change my password, I can't log in anymore. After changing the password with iRedAdmin-Pro I can log in again. Specify not to be able to log in from SOGO webmail, but cannot find email. It looks like this in the attached picture.

Post's attachments

1.jpg 71.47 kb, file has never been downloaded. 

You don't have the permssions to download the attachments of this post.

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,082

Re: SOGo webmail password change

Seems something wrong in your /etc/sogo/sogo.conf.
What're the values of parameter "userPasswordAlgorithm" and "prependPasswordScheme" in your /etc/sogo/sogo.conf?

SOGoUserSources = (
        {
            type = sql;
            id = users;
            ...
            userPasswordAlgorithm = ssha512;
            prependPasswordScheme = YES;

7 Reply by lauris.neimanis

  • lauris.neimanis
  • Member
  • Offline
  • Registered: 2018-02-10
  • Posts: 13

Re: SOGo webmail password change

Both of these options were commented out. I commented, restarted SOGO and everything was fine with the password change.