1 Topic by gpapaiko (edited by gpapaiko 2020-12-17 09:32:36)

  • gpapaiko
  • Member
  • Offline
  • Registered: 2020-11-06
  • Posts: 40

Topic: Domain Admins cannot login domains?msg=PERMISSION_DENIED

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):  1.3.2
- Deployed with iRedMail Easy or the downloadable installer? downloable installer
- Linux/BSD distribution name and version:  Ubuntu 20.04 lts
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):  MySql
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi

I have been testing the domain admins and they cannot log in to the iredadmin control panel.
They can however log into their email clients using Sogo.
Global Admins can login no issue with them.

This issue seems to only be affecting the domain admins.

the error is ;

https:// mail.xx.info/iredadmin/domains?msg=PERMISSION_DENIED


An the web page is stating :

This page isn’t working right now
mail.xx.info redirected you too many times.
To fix this issue, try clearing your cookies.
ERR_TOO_MANY_REDIRECTS

Clearing the cookies does not work.

All the nginx access log file has is this:

192.168.168.202 - - [16/Dec/2020:20:27:25 +1100] "GET /iredadmin/static/favicon.ico HTTP/1.1" 200 1150 "https://mail.xx.info/iredadmin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 Edg/87.0.664.60"
192.168.168.202 - - [16/Dec/2020:20:27:42 +1100] "POST /iredadmin/login HTTP/1.1" 303 5 "https://mail.xx.info/iredadmin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 Edg/87.0.664.60"
192.168.168.202 - - [16/Dec/2020:20:27:42 +1100] "GET /iredadmin/login?msg=INVALID_CREDENTIALS HTTP/1.1" 303 5 "https://mail.xx.info/iredadmin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 Edg/87.0.664.60"
192.168.168.202 - - [16/Dec/2020:20:27:42 +1100] "GET /iredadmin/dashboard HTTP/1.1" 303 5 "https://mail.xx.info/iredadmin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 Edg/87.0.664.60"
192.168.168.202 - - [16/Dec/2020:20:27:42 +1100] "GET /iredadmin/domains?msg=PERMISSION_DENIED HTTP/1.1" 303 5 "https://mail.xx.info/iredadmin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 Edg/87.0.664.60"


Any help is appreciated.

Thanks
George

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,788

Re: Domain Admins cannot login domains?msg=PERMISSION_DENIED

iRedAdmin open source edition doesn't support domain admin, only global admin is supported.
if you need per-domain admin, please consider purchasing an iRedAdmin-Pro license:
https://www.iredmail.org/admin_panel.html

3 Reply by gpapaiko

  • gpapaiko
  • Member
  • Offline
  • Registered: 2020-11-06
  • Posts: 40

Re: Domain Admins cannot login domains?msg=PERMISSION_DENIED

ZhangHuangbin wrote:

iRedAdmin open source edition doesn't support domain admin, only global admin is supported.
if you need per-domain admin, please consider purchasing an iRedAdmin-Pro license:
https://www.iredmail.org/admin_panel.html


Hi Ok thanks for the update, I will consider that.

4 Reply by gpapaiko

  • gpapaiko
  • Member
  • Offline
  • Registered: 2020-11-06
  • Posts: 40

Re: Domain Admins cannot login domains?msg=PERMISSION_DENIED

Hi,

I am experimenting with a login page, can you tell me the logic that you use to validate a users password when they login to iRedadmmin as a global user.

I know that you are using the user id and password that is stored in then "vmail' db (I am using MySQL).
I might be able o create my own domain users site using php, so I just need to be able to validate the users.