users logon with 2 passwords

[vmcastro]

Hi everybody!! i have a active directory on windows server 2003, i use a script to copy all users of my ad to zimbra(zsync_ad.sh), but when i change password users from AD in zimbra the user can logon with the old password and the new password, i do the next things:

1.zmcontrol stop
2.zmcontrol start
the user logon with the old and new passwords

restart the AD server , the same thing happens

when i restart the server(debian 4) of the zimbra 6.0.1 the user only logon with the new password, what can i do to solve my problem??

[uxbod]

Welcome to the forums

What does /opt/zimbra/log/mailbox.log show ? Is it falling back to the internal authentication mechanism ?

[vmcastro]

Hi uxbod!! thanks for the welcome

here is part of the log when i logon with the old and new password
2010-01-09 17:23:23,242 INFO [btpool0-21] [oip=172.16.1.41;ua=zclient/6.0.1_GA_1816.DEBIAN5;] soap - AuthRequest
2010-01-09 17:23:23,263 INFO [btpool0-21] [ip=127.0.0.1;] soap - GetDomainInfoRequest
2010-01-09 17:23:23,281 INFO [btpool0-21] [name=vmcastro@gk.com.mx;mid=47;oip=172.16.1.41;ua= zclient/6.0.1_GA_1816.DEBIAN5;] soap - BatchRequest
2010-01-09 17:23:23,281 INFO [btpool0-21] [name=vmcastro@gk.com.mx;mid=47;oip=172.16.1.41;ua= zclient/6.0.1_GA_1816.DEBIAN5;] soap - (batch) GetInfoRequest
2010-01-09 17:23:23,493 INFO [btpool0-21] [name=vmcastro@gk.com.mx;mid=47;oip=172.16.1.41;ua= zclient/6.0.1_GA_1816.DEBIAN5;] soap - (batch) SearchRequest
2010-01-09 17:23:30,336 INFO [btpool0-21] [name=vmcastro@gk.com.mx;mid=47;ip=172.16.1.41;ua=Z imbraWebClient - IE6 (Win)/6.0.1_GA_1816.DEBIAN5;] soap - GetMiniCalRequest
2010-01-09 17:23:35,228 INFO [btpool0-17] [name=vmcastro@gk.com.mx;mid=47;ip=172.16.1.41;ua=Z imbraWebClient - IE6 (Win)/6.0.1_GA_1816.DEBIAN5;] soap - SearchRequest
2010-01-09 17:26:26,483 INFO [btpool0-19] [oip=172.16.1.41;ua=zclient/6.0.1_GA_1816.DEBIAN5;] soap - AuthRequest
2010-01-09 17:26:26,538 INFO [btpool0-19] [ip=127.0.0.1;] soap - GetDomainInfoRequest
2010-01-09 17:26:26,561 INFO [btpool0-19] [name=vmcastro@gk.com.mx;mid=47;oip=172.16.1.41;ua= zclient/6.0.1_GA_1816.DEBIAN5;] soap - BatchRequest
2010-01-09 17:26:26,561 INFO [btpool0-19] [name=vmcastro@gk.com.mx;mid=47;oip=172.16.1.41;ua= zclient/6.0.1_GA_1816.DEBIAN5;] soap - (batch) GetInfoRequest
2010-01-09 17:26:26,581 INFO [btpool0-19] [name=vmcastro@gk.com.mx;mid=47;oip=172.16.1.41;ua= zclient/6.0.1_GA_1816.DEBIAN5;] soap - (batch) SearchRequest
2010-01-09 17:26:29,020 INFO [btpool0-19] [name=vmcastro@gk.com.mx;mid=47;ip=172.16.1.41;ua=Z imbraWebClient - IE6 (Win)/6.0.1_GA_1816.DEBIAN5;] soap - EndSessionRequest
2010-01-09 17:26:29,341 INFO [btpool0-20] [oip=172.16.1.41;ua=zclient/6.0.1_GA_1816.DEBIAN5;] soap - AuthRequest
2010-01-09 17:26:29,363 INFO [btpool0-20] [ip=127.0.0.1;] soap - GetDomainInfoRequest
2010-01-09 17:26:29,410 INFO [btpool0-20] [name=vmcastro@gk.com.mx;mid=47;oip=172.16.1.41;ua= zclient/6.0.1_GA_1816.DEBIAN5;] soap - BatchRequest
2010-01-09 17:26:29,410 INFO [btpool0-20] [name=vmcastro@gk.com.mx;mid=47;oip=172.16.1.41;ua= zclient/6.0.1_GA_1816.DEBIAN5;] soap - (batch) GetInfoRequest
2010-01-09 17:26:29,428 INFO [btpool0-20] [name=vmcastro@gk.com.mx;mid=47;oip=172.16.1.41;ua= zclient/6.0.1_GA_1816.DEBIAN5;] soap - (batch) SearchRequest
2010-01-09 17:26:36,586 INFO [btpool0-19] [name=vmcastro@gk.com.mx;mid=47;ip=172.16.1.41;ua=Z imbraWebClient - IE6 (Win)/6.0.1_GA_1816.DEBIAN5;] soap - GetMiniCalRequest
2010-01-09 17:26:37,148 INFO [btpool0-19] [name=vmcastro@gk.com.mx;mid=47;ip=172.16.1.41;ua=Z imbraWebClient - IE6 (Win)/6.0.1_GA_1816.DEBIAN5;] soap - EndSessionRequest
2010-01-09 17:26:37,166 INFO [btpool0-21] [ip=127.0.0.1;] soap - GetDomainInfoRequest
2010-01-09 17:26:47,149 INFO [btpool0-21] [oip=172.16.1.41;ua=zclient/6.0.1_GA_1816.DEBIAN5;] soap - AuthRequest
2010-01-09 17:26:47,158 ERROR [btpool0-19] [] log - /zimbra/
org.mortbay.io.RuntimeIOException: java.io.IOException: Closed
at org.mortbay.io.UncheckedPrintWriter.write(Unchecke dPrintWriter.java:183)
at org.apache.jasper.runtime.JspWriterImpl.flushBuffe r(JspWriterImpl.java:181)
at org.apache.jasper.runtime.PageContextImpl.release( PageContextImpl.java:237)
at org.apache.jasper.runtime.JspFactoryImpl.internalR eleasePageContext(JspFactoryImpl.java:173)
at org.apache.jasper.runtime.JspFactoryImpl.releasePa geContext(JspFactoryImpl.java:124)
at org.apache.jsp.public_.login_jsp._jspService(login _jsp.java:663)
at org.apache.jasper.runtime.HttpJspBase.service(Http JspBase.java:109)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:820)
at org.apache.jasper.servlet.JspServletWrapper.servic e(JspServletWrapper.java:389)
at org.apache.jasper.servlet.JspServlet.serviceJspFil e(JspServlet.java:486)
at org.apache.jasper.servlet.JspServlet.service(JspSe rvlet.java:380)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:820)
at com.zimbra.webClient.servlet.JspServlet.service(Js pServlet.java:66)
at org.mortbay.jetty.servlet.ServletHolder.handle(Ser vletHolder.java:502)
at org.mortbay.jetty.servlet.ServletHandler.handle(Se rvletHandler.java:380)
at org.mortbay.jetty.security.SecurityHandler.handle( SecurityHandler.java:216)
at org.mortbay.jetty.servlet.SessionHandler.handle(Se ssionHandler.java:181)
at org.mortbay.jetty.handler.ContextHandler.handle(Co ntextHandler.java:765)
at org.mortbay.jetty.webapp.WebAppContext.handle(WebA ppContext.java:417)
at org.mortbay.jetty.servlet.Dispatcher.forward(Dispa tcher.java:334)
at org.mortbay.jetty.servlet.Dispatcher.forward(Dispa tcher.java:126)
at org.mortbay.jetty.servlet.DefaultServlet.doGet(Def aultServlet.java:472)
at org.mortbay.jetty.servlet.DefaultServlet.doPost(De faultServlet.java:505)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:727)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:820)
at org.mortbay.jetty.servlet.ServletHolder.handle(Ser vletHolder.java:502)
at org.mortbay.jetty.servlet.ServletHandler$CachedCha in.doFilter(ServletHandler.java:1148)
at com.zimbra.webClient.filters.SetHeaderFilter.doFil ter(SetHeaderFilter.java:305)
at org.mortbay.jetty.servlet.ServletHandler$CachedCha in.doFilter(ServletHandler.java:1139)
at org.mortbay.servlet.UserAgentFilter.doFilter(UserA gentFilter.java:81)
at org.mortbay.servlet.GzipFilter.doFilter(GzipFilter .java:129)
at org.mortbay.jetty.servlet.ServletHandler$CachedCha in.doFilter(ServletHandler.java:1139)
at org.mortbay.jetty.servlet.ServletHandler.handle(Se rvletHandler.java:378)
at org.mortbay.jetty.security.SecurityHandler.handle( SecurityHandler.java:216)
at org.mortbay.jetty.servlet.SessionHandler.handle(Se ssionHandler.java:181)
at org.mortbay.jetty.handler.ContextHandler.handle(Co ntextHandler.java:765)
at org.mortbay.jetty.webapp.WebAppContext.handle(WebA ppContext.java:417)
at org.mortbay.jetty.handler.ContextHandlerCollection .handle(ContextHandlerCollection.java:230)
at org.mortbay.jetty.handler.HandlerCollection.handle (HandlerCollection.java:114)
at org.mortbay.jetty.handler.HandlerWrapper.handle(Ha ndlerWrapper.java:152)
at org.mortbay.jetty.handler.rewrite.RewriteHandler.h andle(RewriteHandler.java:230)
at org.mortbay.jetty.handler.HandlerWrapper.handle(Ha ndlerWrapper.java:152)
at org.mortbay.jetty.Server.handle(Server.java:324)
at org.mortbay.jetty.HttpConnection.handleRequest(Htt pConnection.java:517)
at org.mortbay.jetty.HttpConnection$RequestHandler.co ntent(HttpConnection.java:868)
at org.mortbay.jetty.HttpParser.parseNext(HttpParser. java:747)
at org.mortbay.jetty.HttpParser.parseAvailable(HttpPa rser.java:218)
at org.mortbay.jetty.HttpConnection.handle(HttpConnec tion.java:386)
at org.mortbay.io.nio.SelectChannelEndPoint.run(Selec tChannelEndPoint.java:409)
at org.mortbay.thread.BoundedThreadPool$PoolThread.ru n(BoundedThreadPool.java:451)
Caused by: java.io.IOException: Closed
at org.mortbay.jetty.AbstractGenerator$Output.write(A bstractGenerator.java:629)
at org.mortbay.jetty.AbstractGenerator$Output.write(A bstractGenerator.java:579)
at java.io.ByteArrayOutputStream.writeTo(ByteArrayOut putStream.java:109)
at org.mortbay.jetty.AbstractGenerator$OutputWriter.w rite(AbstractGenerator.java:903)
at org.mortbay.io.UncheckedPrintWriter.write(Unchecke dPrintWriter.java:174)
... 49 more
2010-01-09 17:26:47,177 INFO [btpool0-19] [oip=172.16.1.41;ua=zclient/6.0.1_GA_1816.DEBIAN5;] soap - AuthRequest
2010-01-09 17:26:47,198 INFO [btpool0-19] [ip=127.0.0.1;] soap - GetDomainInfoRequest
2010-01-09 17:26:47,213 INFO [btpool0-19] [name=vmcastro@gk.com.mx;mid=47;oip=172.16.1.41;ua= zclient/6.0.1_GA_1816.DEBIAN5;] soap - BatchRequest
2010-01-09 17:26:47,213 INFO [btpool0-19] [name=vmcastro@gk.com.mx;mid=47;oip=172.16.1.41;ua= zclient/6.0.1_GA_1816.DEBIAN5;] soap - (batch) GetInfoRequest
2010-01-09 17:26:47,233 INFO [btpool0-19] [name=vmcastro@gk.com.mx;mid=47;oip=172.16.1.41;ua= zclient/6.0.1_GA_1816.DEBIAN5;] soap - (batch) SearchRequest
2010-01-09 17:26:51,078 INFO [btpool0-21] [name=vmcastro@gk.com.mx;mid=47;ip=172.16.1.41;ua=Z imbraWebClient - IE6 (Win)/6.0.1_GA_1816.DEBIAN5;] soap - SearchRequest
2010-01-09 17:26:54,326 INFO [btpool0-17] [name=vmcastro@gk.com.mx;mid=47;ip=172.16.1.41;ua=Z imbraWebClient - IE6 (Win)/6.0.1_GA_1816.DEBIAN5;] soap - GetMiniCalRequest
2010-01-09 17:26:59,185 INFO [btpool0-21] [name=vmcastro@gk.com.mx;mid=47;ip=172.16.1.41;ua=Z imbraWebClient - IE6 (Win)/6.0.1_GA_1816.DEBIAN5;] soap - SearchRequest
2010-01-09 17:28:37,677 INFO [btpool0-20] [name=admin@gk.com.mx;mid=31;ip=172.16.1.41;ua=Zimb raWebClient - IE6 (Win);] soap - SearchDirectoryRequest
2010-01-09 17:28:37,677 INFO [btpool0-20] [name=admin@gk.com.mx;mid=31;ip=172.16.1.41;ua=Zimb raWebClient - IE6 (Win);] session - requested session no longer exists: 32
2010-01-09 17:28:39,502 INFO [btpool0-20] [name=admin@gk.com.mx;mid=31;ip=172.16.1.41;ua=Zimb raWebClient - IE6 (Win);] soap - SearchDirectoryRequest
2010-01-09 17:28:45,495 INFO [btpool0-20] [name=admin@gk.com.mx;mid=31;ip=172.16.1.41;ua=Zimb raWebClient - IE6 (Win);] soap - GetEffectiveRightsRequest
2010-01-09 17:28:50,527 INFO [btpool0-19] [name=admin@gk.com.mx;mid=31;ip=172.16.1.41;ua=Zimb raWebClient - IE6 (Win);] soap - GetEffectiveRightsRequest
2010-01-09 17:28:50,646 INFO [btpool0-19] [name=admin@gk.com.mx;mid=31;ip=172.16.1.41;ua=Zimb raWebClient - IE6 (Win);] soap - GetDomainRequest
2010-01-09 17:28:54,586 INFO [Timer-Zimbra] [] SessionCache - Removed 1 idle sessions (ADMIN). 4 active sessions remain.
2010-01-09 17:29:03,593 INFO [btpool0-21] [name=admin@gk.com.mx;mid=31;ip=172.16.1.41;ua=Zimb raWebClient - IE6 (Win);] soap - GetEffectiveRightsRequest
2010-01-09 17:29:03,726 INFO [btpool0-21] [name=admin@gk.com.mx;mid=31;ip=172.16.1.41;ua=Zimb raWebClient - IE6 (Win);] soap - GetDomainRequest
2010-01-09 17:30:08,545 INFO [btpool0-21] [ip=127.0.0.1;] soap - AuthRequest
2010-01-09 17:30:08,667 INFO [btpool0-21] [name=zimbra;ip=127.0.0.1;] soap - GetAllServersRequest
2010-01-09 17:30:54,586 INFO [Timer-Zimbra] [] SessionCache - Removed 1 idle sessions (ADMIN). 4 active sessions remain.

i configurate external ldap