mysql and ldap authentication issue

[chandu]

Hi Guys,

I was doing some testing on my test server and regenerated self - signed certificate..after that all services were up but i was not able to login in mysql and in mailboxd.log i was keep geting database authentication related error ..so i followed below steps to fix it :

1. added below line in mysql.server :
--ledir=${mysql_directory}/libexec < /dev/null > /dev/null 2>&1 --skip-grant-tables &
mysql> use mysql;
mysql> select user,password,host from user;
+--------+-------------------------------------------+-----------------------+
| user | password | host |
+--------+-------------------------------------------+-----------------------+
| root | *F4DB5AEB3837CA8C77C648F90B8A88E2C2F05774 | localhost |
| root | | mail |
| root | | 127.0.0.1 |
| | | localhost |
| | | mail |
| zimbra | *5944C10DC1427A97C1CC33D79878E363F453BB30 | % |
| zimbra | *2470C0C06DEE42FD1618BB99005ADCA2EC9D1E19 | localhost |
| zimbra | *5944C10DC1427A97C1CC33D79878E363F453BB30 | localhost.localdomain |
| root | *6E6F7B4008B7AD56CE235EE6AB66BC6B8207C6FF | localhost.localdomain |
+--------+-------------------------------------------+-----------------------+
9 rows in set (0.00 sec)

mysql> update user set password=xdcfvgbg' where user='zimbra';
Query OK, 3 rows affected (0.01 sec)
Rows matched: 3 Changed: 3 Warnings: 0

mysql> select user,password,host from user;
+--------+-------------------------------------------+-----------------------+
| user | password | host |
+--------+-------------------------------------------+-----------------------+
| root | *F4DB5AEB3837CA8C77C648F90B8A88E2C2F05774 | localhost |
| root | | mail |
| root | | 127.0.0.1 |
| | | localhost |
| | | mail |
| zimbra | xdcfvgbg | % |
| zimbra | xdcfvgbg | localhost |
| zimbra | xdcfvgbg | localhost.localdomain |
| root | *6E6F7B4008B7AD56CE235EE6AB66BC6B8207C6FF | localhost.localdomain |
+--------+-------------------------------------------+-----------------------+
9 rows in set (0.00 sec)


mysql> UPDATE mysql.user SET Password=PASSWORD(xdcfvgbg) WHERE User='zimbra';
Query OK, 3 rows affected (0.00 sec)
Rows matched: 3 Changed: 3 Warnings: 0

mysql> select user,password,host from user;
+--------+-------------------------------------------+-----------------------+
| user | password | host |
+--------+-------------------------------------------+-----------------------+
| root | *F4DB5AEB3837CA8C77C648F90B8A88E2C2F05774 | localhost |
| root | | mail |
| root | | 127.0.0.1 |
| | | localhost |
| | | mail |
| zimbra | *5944C10DC1427A97C1CC33D79878E363F453BB30 | % |
| zimbra | *5944C10DC1427A97C1CC33D79878E363F453BB30 | localhost |
| zimbra | *5944C10DC1427A97C1CC33D79878E363F453BB30 | localhost.localdomain |
| root | *6E6F7B4008B7AD56CE235EE6AB66BC6B8207C6FF | localhost.localdomain |
+--------+-------------------------------------------+-----------------------+
9 rows in set (0.00 sec)

mysql> exit
Bye

################################################## #

After thsi i removed entry from mysql.server and now able to get database authentication without eny issue.

But now when i try to run zmprov command its throughing below error :

[zimbra@mail ~]$ zmprov gad
ERROR: account.AUTH_FAILED (authentication failed for zimbra)
[zimbra@mail ~]$

And in mailbox.log and audit.log i was getting below error :

################################################
2009-10-29 15:52:08,081 WARN [btpool0-7] [name=zimbra;ip=127.0.0.1;] security - cmd=Auth; account=zimbra; protocol=soap; error=authentication failed for zimbra, account lockout;

2009-10-29 15:52:08,081 INFO [btpool0-7] [name=zimbra;ip=127.0.0.1;] SoapEngine - handler exception: authentication failed for zimbra, account lockout

#################################################

So I have changed ldap password by using below mentioned link

Resetting LDAP and MySQL Passwords - Zimbra :: Wiki

and restarted zmibra services...but now still i am not able to use zmprov commands and getting below error .... :-(

##################################################

2009-10-29 15:52:08,081 WARN [btpool0-7] [name=zimbra;ip=127.0.0.1;] security - cmd=AdminAuth; account=zimbra; error=authentication failed for zimbra;

################################################## ##

Please suggest...


Thanks

[uxbod]

su - zimbra
zmlocalconfig -s | grep password

Make sure these are set correctly.

[chandu]

Thanks for reply Uxbod.

Please have a look on output..

[zimbra@mail ~]$ zmlocalconfig -s | grep password
ldap_amavis_password = XInPp345
ldap_nginx_password = XInPp345
ldap_postfix_password = XInPp345
ldap_replication_password = XInPp345
ldap_root_password = zimbra
mailboxd_keystore_base_password = zimbra
mailboxd_keystore_password = SVloGkM56Q
mailboxd_truststore_password = changeit
mysql_logger_root_password = hnhjn
mysql_root_password = vgbvgb
zimbra_ldap_password = zimbra
zimbra_logger_mysql_password = fvgfbgb
zimbra_mysql_password = dcfvfv
[zimbra@mail ~]$