1 (edited by s.sari 2022-10-18 18:27:47)

Topic: No update after password change

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):  v 1.6.1
- Deployed with iRedMail Easy or the downloadable installer? downloadable installer
- Linux/BSD distribution name and version:  Ubuntu 20.04.3 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): PGSQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi,
My issue is that when users change their password on sogo there is no update, it just works with iredadmin. here is some logs i get on sogo.log when changing password

Oct 17 11:38:01 sogod [460107]: [ERROR] <0x0x55b03c2fb3b0[NGImap4ConnectionManager]> IMAP4 login failed:
  host=localhost, user=s.sari@domain.dz, pwd=yes
  url=imap://s.sari%40domain.dz@localhost/?tls=NO&tlsVerifyMode=default
  base=(null)
  base-class=(null))
  = <0x0x55b03d31a140[NGImap4Client]: login=s.sari@domain.dz(pwd) socket=<NGActiveSocket[0x0x55b03cf7dac0]: mode=rw address=<0x0x55b03cf7db30[NGInternetSocketAddress]: host=localhost port=40828> connectedTo=<0x0x55b03cb356d0[NGInternetSocketAddress]: host=localhost port=143>>>
Oct 17 11:38:01 sogod [460107]: <0x55b03ceab5a0[SOGoMailAccount]:0> renewing imap4 password
Oct 17 11:38:07 sogod [460107]: [ERROR] <0x0x55b03c2fb3b0[NGImap4ConnectionManager]> IMAP4 login failed:
  host=localhost, user=s.sari@domain.dz, pwd=yes
  url=imap://s.sari%40domain.dz@localhost/?tls=NO&tlsVerifyMode=default
  base=(null)
  base-class=(null))
  = <0x0x55b03cdf9cf0[NGImap4Client]: login=s.sari@domain.dz(pwd) socket=<NGActiveSocket[0x0x55b03d1c0f90]: mode=rw address=<0x0x55b03d1c1000[NGInternetSocketAddress]: host=localhost port=55510> connectedTo=<0x0x55b03ce35450[NGInternetSocketAddress]: host=localhost port=143>>>
Oct 17 11:38:07 sogod [460107]: [ERROR] <0x55b03ceab5a0[SOGoMailAccount]:0> Could not connect IMAP4
Oct 17 11:38:07 sogod [460107]: 193.194.91.134 "POST /SOGo/so/s.sari@domain.dz/Mail/0/folderINBOX/changes HTTP/1.0" 200 19/150 8.080 - - 0 - 41

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: No update after password change

- Did you upgrade server from an old iRedMail release?
- Try to turn on debug mode in Dovecot to check which plain password it actually sends. FYI https://docs.iredmail.org/debug.dovecot.html

3 (edited by s.sari 2022-10-18 18:29:17)

Re: No update after password change

ZhangHuangbin wrote:

- Did you upgrade server from an old iRedMail release?  yes
- Try to turn on debug mode in Dovecot to check which plain password it actually sends. FYI

this is dovecot.log after turning on debug mode

Oct 17 22:16:27 mail dovecot: auth: Debug: sql(s.sari@domain.dz,127.0.0.1,<VYoPfUHrUIx/AAAB>): Performing passdb lookup
Oct 17 22:16:27 mail dovecot: auth: Debug: sql(s.sari@domain.dz,127.0.0.1,<VYoPfUHrUIx/AAAB>): query: SELECT mailbox.password, mailbox.allow_nets FROM mailbox,domain WHERE mailbox.username='s.sari@domain.dz' AND mailbox."enableimaptls"=1 AND mailbox.active=1 AND mailbox.domain=domain.domain AND domain.backupmx=0 AND domain.active=1
Oct 17 22:16:27 mail dovecot: auth: sql(s.sari@domain.dz,127.0.0.1,<VYoPfUHrUIx/AAAB>): Password mismatch (given password: Sdf966**)
Oct 17 22:16:27 mail dovecot: auth: Debug: sql(s.sari@domain.dz,127.0.0.1,<VYoPfUHrUIx/AAAB>): SSHA512(Sdf966**) != 'lnGOjyeyuJqB+vqurcfdo6ZbwSXqMh8Hn0zUXWI/ataNqZtyhdNWAR1p5TYp8Bf/z+H2WfSGoDfdnezSoky/7Li2ySmCXJH'
Oct 17 22:16:27 mail dovecot: auth: Debug: sql(s.sari@domain.dz,127.0.0.1,<VYoPfUHrUIx/AAAB>): Finished passdb lookup
Oct 17 22:16:27 mail dovecot: auth: Debug: auth(s.sari@domain.dz,127.0.0.1,<VYoPfUHrUIx/AAAB>): Auth request finished
Oct 17 22:16:29 mail dovecot: auth: Debug: client passdb out: FAIL#0111#011user=s.sari@domain.dz
Oct 17 22:16:29 mail dovecot: auth: Debug: auth client connected (pid=46074)
Oct 17 22:16:29 mail dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured=tls#011session=PksufUHrUox/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=35922#011local_name=127.0.0.1#011ssl_cipher=TLS_AES_256_GCM_SHA384#011ssl_cipher_bits=256#011ssl_pfs=KxANY#011ssl_protocol=TLSv1.3#011resp=AHMuc2FyaUBjZXJpc3QuZHoAU2RmOTY2Kio= (previous base64 data may contain sensitive data)
Oct 17 22:16:33 mail dovecot: auth: Debug: sql(s.sari@domain.dz,127.0.0.1,<PksufUHrUox/AAAB>): Performing passdb lookup
Oct 17 22:16:33 mail dovecot: auth: Debug: sql(s.sari@domain.dz,127.0.0.1,<PksufUHrUox/AAAB>): query: SELECT mailbox.password, mailbox.allow_nets FROM mailbox,domain WHERE mailbox.username='s.sari@domain.dz' AND mailbox."enableimaptls"=1 AND mailbox.active=1 AND mailbox.domain=domain.domain AND domain.backupmx=0 AND domain.active=1
Oct 17 22:16:33 mail dovecot: auth: sql(s.sari@domain.dz,127.0.0.1,<PksufUHrUox/AAAB>): Password mismatch (given password: Sdf966**)
Oct 17 22:16:33 mail dovecot: auth: Debug: sql(s.sari@domain.dz,127.0.0.1,<PksufUHrUox/AAAB>): SSHA512(Sdf966**) != 'lnGOjyeyuJqB+vqurcfdo6ZbwSXqMh8Hn0zUXWI/ataNqZtyhdNWAR1p5TYp8Bf/z+H2WfSGoDfdnezSoky/7Li2ySmCXJH'
Oct 17 22:16:33 mail dovecot: auth: Debug: sql(s.sari@domain.dz,127.0.0.1,<PksufUHrUox/AAAB>): Finished passdb lookup
Oct 17 22:16:33 mail dovecot: auth: Debug: auth(s.sari@domain.dz,127.0.0.1,<PksufUHrUox/AAAB>): Auth request finished
Oct 17 22:16:35 mail dovecot: auth: Debug: client passdb out: FAIL#0111#011user=s.sari@domain.dz
Oct 17 22:16:44 mail dovecot: auth: Debug: auth client connected (pid=46083)
Oct 17 22:16:44 mail dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured=tls#011session=3ScSfkHr4M3BwluG#011lip=193.194.91.217#011rip=193.194.91.134#011lport=993#011rport=52704#011local_name=mail.domain.dz#011ssl_cipher=TLS_AES_256_GCM_SHA384#011ssl_cipher_bits=256#011ssl_pfs=KxANY#011ssl_protocol=TLSv1.3
Oct 17 22:16:44 mail dovecot: auth: Debug: client passdb out: CONT#0111#011
Oct 17 22:16:44 mail dovecot: auth: Debug: client in: CONT#0111#011AGFtaXJhQGNlcmlzdC5kegAjMjQjMDYjODEj (previous base64 data may contain sensitive data)

Ps: the new password i tried is Sdf966** and the encrypted one is my current password
i didn't understand why is doing comparison between them!

4

Re: No update after password change

Restart "memcached" service then try again.