[SOLVED] Admin Password Not Working!

Suddenly this morning, I cannot log into my account. I *know* my password, but it says "authentication failed".

So, I attempted to login to the admin console to look at what is going on. Again, on the admin console it says "authentication failed".

I am concerned that someone else has access?

Or is it common for Zimbra to corrupt the password for an account?

Is there a way for me to change my password via the command line?

I have tried to stop and start Zimbra via zmcontrol stop, zmcontrol start. But I still have the same problem.

Any suggestions?

I recently had an instance whereby some outside source sent SPAM through my Zimbra server, so I am very concerned about this issue.

Thanks,
-Marc

su zimbra

zmprov sp admin@domain.com newpassword

zmprov gaaa will show you all the current admin users

To set another admin:
zmprov ma futureadmin@domain.com zimbraIsAdminAccount TRUE
or
zmprov ma futureadmin@domain.com zimbraIsDomainAdminAccount TRUE

and if it got 'lockedout' after x tries:
zmprov ma user@domain.com zimbraAccountStatus active

Ok, two things...

(1) Prior to your post, I was reading other posts and I ran:

zmmypasswd password

Which I have since learned changed the MySQL Password - Oops. Should I change that back to something? I really have no idea what the default was.


(2) I also ran:

zmprov sp <email-address> password

Then I tried to login with <email-address> and "password" and I still get an authentication failed.

Looking at the syntax for the zmprov command, it shows the usage as:

usage: setPassword(sp) {name@domain|id} {password}

Did I not run the command properly?

I also, again, attempted a zmcontrol stop/zmcontrol start after changing the password - I still cannot log in.

Quote:

---

Originally Posted by msf004

I am concerned that someone else has access?

---

Check your /opt/zimbra/log/audit.log fo more information.

Quote:

---

Originally Posted by msf004

Or is it common for Zimbra to corrupt the password for an account?

---

No. To my knowledge, it's never happened. .

Quote:

---

Originally Posted by msf004

I recently had an instance whereby some outside source sent SPAM through my Zimbra server, so I am very concerned about this issue.

---

You should be. Check your audit.log Look for failed login attempts, and you'll see which IP they're coming from, and ban them at your firewall.

JHolder,

Thanks! The key was in the audit log. I am still becoming acquainted with Zimbra as we have only been a customer for one month - I forgot about the Audit Log.

It appears someone at IP Address: 72.51.159.68

Has been attempted to login to my account all morning. Thus it locked the account. The odd part is that when I attempted to login via the web-client, it stated authentication failed, not account locked. Maybe this is normal and not "odd" - I may have mis-stated.

Regardless, once I noticed the account was locked I ran:

zmprov ma user@domain.com zimbraAccountStatus active

per mmorse's post and I have access again.

First, thanks for the quick replies to everyone via the forum. Great community.

Second, is there something I should do to rectify me running:

zmmypasswd password

Did I unknowingly change something that I now need to correct? At minimum, my MySQL password probably should not be "password"; however, more importantly, once I change it to something else, do I need to configure anything else besides just running the zmmypasswd command again?

Thanks,
-Marc

Block them. As a matter of fact, I'd block their entire IP range and send their ISP a nasty letter. That's what I would do ;)

Answer:
72.51.159.68 PTR record: host-72-51-159-68.newwavecomm.net. [TTL 43200s] [A=72.51.159.68]

I still would like to know if there is something I should do to rectify me running:

zmmypasswd password

Did I unknowingly change something that I now need to correct? At minimum, my MySQL password probably should not be "password"; however, more importantly, once I change it to something else, do I need to configure anything else besides just running the zmmypasswd command again?

Thanks,
-Marc

Actually that's for the zimbra user itself, the mysql is set through another process - see: Resetting LDAP & MySQL Passwords - ZimbraWiki

As long as you remember to set it away from 'password' you should be fine-that's the point of having such a command ;)