Results 1 to 9 of 9

Thread: [SOLVED] '"zimbra" user fails authenication

  1. #1
    jrefl5 is offline Advanced Member
    Join Date
    Nov 2007
    Location
    AZ, USA
    Posts
    205
    Rep Power
    7

    Default [SOLVED] '"zimbra" user fails authenication

    When running zmprov, as the zimbra user "I su - zimbra" on CENT-OS 5 I get the following;
    ERROR: account.AUTH_FAILED (authenication failed for user zimbra)
    .

    We had a server crash which lead to a reinstall of everything OS & zimbra,
    I then used the last good backup set of tapes (outside product) to restore the /opt/zimbra/ structure.

    I'm thinking that the file restore over wrote something that is needed.

    What was clobbered and how do I fix it?

    Thanks

  2. #2
    jrefl5 is offline Advanced Member
    Join Date
    Nov 2007
    Location
    AZ, USA
    Posts
    205
    Rep Power
    7

    Default Additional Symptoms

    Additional Info from the web administration console looking at Manage Mail Queues I get;

    Message: system failure: exception during auth {RemoteManager: email.sb.state.az.us->zimbra@email.sb.state.az.us:22}
    Error code: service.FAILURE
    Method: ZmCsfeCommand.prototype.invoke
    Details:soap:Receiver

  3. #3
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    Have you reset the ldap password? Directions: Resetting LDAP & MySQL Passwords - Zimbra :: Wiki
    Do you have an entry in /etc/passwd? UID's match?
    After restores you often need to regenerate the certs: SSL Certificate Problems - Zimbra :: Wiki
    Queue problem: Mail Queue Monitoring - Zimbra :: Wiki

  4. #4
    jrefl5 is offline Advanced Member
    Join Date
    Nov 2007
    Location
    AZ, USA
    Posts
    205
    Rep Power
    7

    Default Testing Suggestion

    Thanks,
    That did not appear in my searches. zmprov is working. now.

    Testing

    Partial fix, "Manage Mail Queues" still returning errors.

  5. #5
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    Alright getting there, so run me through what you've done - like:
    1. check /etc/sshd_config and be sure it's set to 22
    Code:
    port 22
    2. stop/start/restart sshd
    Code:
    /etc/init.d/ssh restart
    3. su - zimbra
    4. Just to double check that it's set:
    Code:
    zmprov ms server.domain.com zimbraRemoteManagementPort 22
    5. generate new ssh keys:
    Code:
    cd /opt/zimbra/bin/
    ./zmsshkeygen
    6. deploy the keys
    Code:
    ./zmupdateauthkeys
    all done, to test this, you can run the following command
    Code:
    ssh -i .ssh/zimbra_identity -o strictHostKeyChecking=no zimbra@server.domain.com -p 22
    or -vi
    and it should not prompt you for a password

  6. #6
    jrefl5 is offline Advanced Member
    Join Date
    Nov 2007
    Location
    AZ, USA
    Posts
    205
    Rep Power
    7

    Exclamation still not there

    checking with
    Code:
    ssh -i .ssh/zimbra_identity -o strictHostKeyChecking=no -p 22
    I get the following;
    Code:
    $ ssh -i .ssh/zimbra_identity -o strictHostKeyChecking=no zimbra@FQDN -p 22
    Warning: Identity file .ssh/zimbra_identity not accessible: No such file or directory.
    Warning: Permanently added 'FQDN,10.168.30.60' (RSA) to the list of known hosts.
    zimbra@FQDN's password: 
    Permission denied, please try again.
    Is there an option to the install.sh script that will reset ALL the access controls without killing the various mailboxes?
    Last edited by jrefl5; 12-13-2007 at 11:03 AM. Reason: add final question

  7. #7
    jrefl5 is offline Advanced Member
    Join Date
    Nov 2007
    Location
    AZ, USA
    Posts
    205
    Rep Power
    7

    Post The Final FIX

    The final fix was to get a full all accounts backup, and copy /opt/zimbra/backup to another filesystem. Then install.sh -u followed by a reinstall.

    1.
    Code:
    zmbackup -a all-f
    2.
    Code:
    cp -pr /opt/zimbra/backup /tmp/zimbra/
    as root.

    3.
    Code:
    install.sh -u
    4.
    Code:
    install.sh -s
    5.
    Code:
    cp -pr /tmp/zimbra/backup /opt/zimbra/backup
    as zimbra
    6.
    Code:
    zmrestore -a all -lb last-Full_backup (step 1.)
    from the Zimbra Administration console
    7. confirm everything was back.

    note that I had to restore some accounts from an older backup (these were mostly accounts that had not been used at that time).

    8. recheck again.
    9. another Full backup
    Code:
    zmbackup --fullbackup --target /opt/zimbra/backup --account all

  8. #8
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    Guess you got a good test of your backups out of this!
    -marking thread solved

  9. #9
    jrefl5 is offline Advanced Member
    Join Date
    Nov 2007
    Location
    AZ, USA
    Posts
    205
    Rep Power
    7

    Default True

    Much better than planed

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Error loading on Mac OS X 10.4.10 server PPC
    By qprcanada in forum Installation
    Replies: 7
    Last Post: 10-26-2007, 06:25 AM
  2. [SOLVED] Error Installing Zimbra on RHEL 5
    By harris7139 in forum Installation
    Replies: 10
    Last Post: 09-25-2007, 11:39 AM
  3. Replies: 8
    Last Post: 02-27-2007, 04:10 AM
  4. zimbra suddently refused to get mail
    By nosiath in forum Installation
    Replies: 2
    Last Post: 02-21-2007, 08:06 AM
  5. 3.1 on FC4 problems
    By cohnhead in forum Installation
    Replies: 8
    Last Post: 05-26-2006, 11:16 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •