com.zimbra.common.service.ServiceException: permission denied: need admin token

[swix]

re-hello,

My problem on an actual Zimbra 6.0.4_GA production setup :

- user "adm@zimbra.example.com" can connect as domain admin
- user "om@zimbra.example.com" cannot connect as domain admin

User rights are exactely the same, according to web-interface. Only difference is that "adm" is a brand new user, and that "om" a migrated user from another server (with zmbackup/zmrestore). Both are members of the ressource_da_account@zimbra.example.com distribution list.

When I connect as user "om", I get this nice error on the zimbra.log (and a never-ending "Loading ..." display in the browser).

2010-02-01 14:41:21,107 INFO [btpool0-12://localhost:7071/service/admin/soap/GetDomainInfoRequest] [ip=127.0.0.1;] soap - GetDomainInfoRequest
2010-02-01 14:41:22,354 INFO [btpool0-20://zimbra.example.com:7071/service/admin/soap/BatchRequest] [ip=180.254.166.203;ua=ZimbraWebClient - FF3.0 (Linux);] soap - BatchRequest
2010-02-01 14:41:22,354 INFO [btpool0-20://zimbra.example.com:7071/service/admin/soap/BatchRequest] [ip=180.254.166.203;ua=ZimbraWebClient - FF3.0 (Linux);] soap - (batch) GetVersionInfoRequest
2010-02-01 14:41:22,354 INFO [btpool0-20://zimbra.example.com:7071/service/admin/soap/BatchRequest] [ip=180.254.166.203;ua=ZimbraWebClient - FF3.0 (Linux);] soap - (batch) GetDomainInfoRequest
2010-02-01 14:41:22,425 INFO [btpool0-20://zimbra.example.com:7071/service/admin/soap/GetInfoRequest] [name=om@zimbra.example.com;mid=151;ip=180.254.166. 203;ua=ZimbraWebClient - FF3.0 (Linux);] soap - GetInfoRequest
2010-02-01 14:41:22,960 INFO [btpool0-20://zimbra.example.com:7071/service/admin/soap/GetEffectiveRightsRequest] [name=om@zimbra.example.com;mid=151;ip=180.254.166. 203;ua=ZimbraWebClient - FF3.0 (Linux);] soap - GetEffectiveRightsRequest
2010-02-01 14:41:22,960 WARN [btpool0-20://zimbra.example.com:7071/service/admin/soap/GetEffectiveRightsRequest] [name=om@zimbra.example.com;mid=151;ip=180.254.166. 203;ua=ZimbraWebClient - FF3.0 (Linux);] SoapEngine - cannot dispatch request
com.zimbra.common.service.ServiceException: permission denied: need admin token
ExceptionId:btpool0-20://zimbra.example.com:7071/service/admin/soap/GetEffectiveRightsRequest:1265031682960:3179e7ea3a d79c18
Code:service.PERM_DENIED
at com.zimbra.common.service.ServiceException.PERM_DE NIED(ServiceException.java:277)
at com.zimbra.soap.SoapEngine.dispatchRequest(SoapEng ine.java:348)
at com.zimbra.soap.SoapEngine.dispatch(SoapEngine.jav a:272)
at com.zimbra.soap.SoapEngine.dispatch(SoapEngine.jav a:156)
at com.zimbra.soap.SoapServlet.doWork(SoapServlet.jav a:291)
at com.zimbra.soap.SoapServlet.doPost(SoapServlet.jav a:212)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:727)
at com.zimbra.cs.servlet.ZimbraServlet.service(Zimbra Servlet.java:181)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:820)
at org.mortbay.jetty.servlet.ServletHolder.handle(Ser vletHolder.java:511)
at org.mortbay.jetty.servlet.ServletHandler$CachedCha in.doFilter(ServletHandler.java:1166)
at org.mortbay.servlet.UserAgentFilter.doFilter(UserA gentFilter.java:81)
at org.mortbay.servlet.GzipFilter.doFilter(GzipFilter .java:132)
at org.mortbay.jetty.servlet.ServletHandler$CachedCha in.doFilter(ServletHandler.java:1157)
at org.mortbay.jetty.servlet.ServletHandler.handle(Se rvletHandler.java:388)
at org.mortbay.jetty.security.SecurityHandler.handle( SecurityHandler.java:216)
at org.mortbay.jetty.servlet.SessionHandler.handle(Se ssionHandler.java:182)
at org.mortbay.jetty.handler.ContextHandler.handle(Co ntextHandler.java:765)
at org.mortbay.jetty.webapp.WebAppContext.handle(WebA ppContext.java:418)
at org.mortbay.jetty.handler.ContextHandlerCollection .handle(ContextHandlerCollection.java:230)
at org.mortbay.jetty.handler.HandlerCollection.handle (HandlerCollection.java:114)
at org.mortbay.jetty.handler.HandlerWrapper.handle(Ha ndlerWrapper.java:152)
at org.mortbay.jetty.handler.rewrite.RewriteHandler.h andle(RewriteHandler.java:230)
at org.mortbay.jetty.handler.HandlerWrapper.handle(Ha ndlerWrapper.java:152)
at org.mortbay.jetty.handler.DebugHandler.handle(Debu gHandler.java:77)
at org.mortbay.jetty.handler.HandlerWrapper.handle(Ha ndlerWrapper.java:152)
at org.mortbay.jetty.Server.handle(Server.java:326)
at org.mortbay.jetty.HttpConnection.handleRequest(Htt pConnection.java:543)
at org.mortbay.jetty.HttpConnection$RequestHandler.co ntent(HttpConnection.java:939)
at org.mortbay.jetty.HttpParser.parseNext(HttpParser. java:755)
at org.mortbay.jetty.HttpParser.parseAvailable(HttpPa rser.java:218)
at org.mortbay.jetty.HttpConnection.handle(HttpConnec tion.java:405)
at org.mortbay.io.nio.SelectChannelEndPoint.run(Selec tChannelEndPoint.java:409)
at org.mortbay.thread.BoundedThreadPool$PoolThread.ru n(BoundedThreadPool.java:451)

Even if I give "zimbraIsAdminAccount" rights to this user it remains the same.
Is there any better way to try to solve/debug that issue ? I need to give admin rights to "old" users...

Thanks & regards, Olivier