[SOLVED] Admin Password Not Working!

[msf004]

Suddenly this morning, I cannot log into my account. I *know* my password, but it says "authentication failed".

So, I attempted to login to the admin console to look at what is going on. Again, on the admin console it says "authentication failed".

I am concerned that someone else has access?

Or is it common for Zimbra to corrupt the password for an account?

Is there a way for me to change my password via the command line?

I have tried to stop and start Zimbra via zmcontrol stop, zmcontrol start. But I still have the same problem.

Any suggestions?

I recently had an instance whereby some outside source sent SPAM through my Zimbra server, so I am very concerned about this issue.

Thanks,
-Marc

[mmorse]

su zimbra

zmprov sp admin@domain.com newpassword

zmprov gaaa will show you all the current admin users

To set another admin:
zmprov ma futureadmin@domain.com zimbraIsAdminAccount TRUE
or
zmprov ma futureadmin@domain.com zimbraIsDomainAdminAccount TRUE

and if it got 'lockedout' after x tries:
zmprov ma user@domain.com zimbraAccountStatus active

[msf004]

Ok, two things...

(1) Prior to your post, I was reading other posts and I ran:

zmmypasswd password

Which I have since learned changed the MySQL Password - Oops. Should I change that back to something? I really have no idea what the default was.


(2) I also ran:

zmprov sp <email-address> password

Then I tried to login with <email-address> and "password" and I still get an authentication failed.

Looking at the syntax for the zmprov command, it shows the usage as:

usage: setPassword(sp) {name@domain|id} {password}

Did I not run the command properly?

I also, again, attempted a zmcontrol stop/zmcontrol start after changing the password - I still cannot log in.

[jholder]

Originally Posted by msf004

I am concerned that someone else has access?

Check your /opt/zimbra/log/audit.log fo more information.

Originally Posted by msf004

Or is it common for Zimbra to corrupt the password for an account?

No. To my knowledge, it's never happened. .

Originally Posted by msf004

I recently had an instance whereby some outside source sent SPAM through my Zimbra server, so I am very concerned about this issue.

You should be. Check your audit.log Look for failed login attempts, and you'll see which IP they're coming from, and ban them at your firewall.

[msf004]

JHolder,

Thanks! The key was in the audit log. I am still becoming acquainted with Zimbra as we have only been a customer for one month - I forgot about the Audit Log.

It appears someone at IP Address: 72.51.159.68

Has been attempted to login to my account all morning. Thus it locked the account. The odd part is that when I attempted to login via the web-client, it stated authentication failed, not account locked. Maybe this is normal and not "odd" - I may have mis-stated.

Regardless, once I noticed the account was locked I ran:

zmprov ma user@domain.com zimbraAccountStatus active

per mmorse's post and I have access again.

[msf004]

First, thanks for the quick replies to everyone via the forum. Great community.

Second, is there something I should do to rectify me running:

zmmypasswd password

Did I unknowingly change something that I now need to correct? At minimum, my MySQL password probably should not be "password"; however, more importantly, once I change it to something else, do I need to configure anything else besides just running the zmmypasswd command again?

Thanks,
-Marc

[jholder]

Block them. As a matter of fact, I'd block their entire IP range and send their ISP a nasty letter. That's what I would do

Answer:
72.51.159.68 PTR record: host-72-51-159-68.newwavecomm.net. [TTL 43200s] [A=72.51.159.68]

[msf004]

I still would like to know if there is something I should do to rectify me running:

zmmypasswd password

Did I unknowingly change something that I now need to correct? At minimum, my MySQL password probably should not be "password"; however, more importantly, once I change it to something else, do I need to configure anything else besides just running the zmmypasswd command again?

Thanks,
-Marc

[mmorse]

Actually that's for the zimbra user itself, the mysql is set through another process - see: Resetting LDAP & MySQL Passwords - ZimbraWiki

As long as you remember to set it away from 'password' you should be fine-that's the point of having such a command