JavaScript error blocking ability to edit the server

[aaddleman]

Hi Anyone,

I have been having a javascript message show in my browser with a strange error and it prevents me from being able to view or edit the details of my email domain server in the administrator interface. Can anyone help me out in trying to resolve this problem?

The full javascript message reads (note: I also attached a screenshot of the message):



Title: Zimbra Administration

JavaScript error encountered in method
ZaOverviewPanelController.prototype._overviewTreeL istener
----
arguments:
split,ldap://starbase.mydomain.org:3268,ldap://starship.mydomain.org:3268
type: undefined_method message: Object
ldap://starbase.mydomain.org:3268,ldap://starship.mydomain.org:3268 has
no method 'split' stack: TypeError: Object
ldap://starbase.mydomain.org,3268,ldap://...


Any suggestions are welcome.

Thanks in advance,

Aaddleman

[phoenix]

You cam start with answers to the following: is this a new install or an upgrade; how much RAM on this server; does everything else in Zimbra work; does this only happen in one part of the Admin UI; how long have you had this problem; if it's recent, did you make any changes to zimbra or your server; are there any other errors in the log files; do you have the zimbra posix extensions installed?

[aaddleman]

You cam start with answers to the following: is this a new install or an upgrade; how much RAM on this server; does everything else in Zimbra work; does this only happen in one part of the Admin UI; how long have you had this problem; if it's recent, did you make any changes to zimbra or your server; are there any other errors in the log files; do you have the zimbra posix extensions installed?

Hi Bill,

Thanks for responding to my question and your suggestions. I have pulled all of the information you have requested and here it is:

1) Is this a new install or an upgrade?

I have been running zcs-7.1.0_GA_3140.UBUNTU10_64.20110329151347 for approx. 6 months. The error has appeared recently in the past 3 months and I was trying many search queries on the forums, google, etc... to try and figure out the problem. Yesterday, I tried to do an upgrade to 7.1.1 to see if it would fix the error, but while the upgrade was smooth, the error message stayed the same.

2) How much ram is on this server?

Total is 3868MB

aaron@zimbra:~$ free -m
total used free shared buffers cached
Mem: 3868 3540 328 0 205 1266
-/+ buffers/cache: 2068 1800
Swap: 1443 5 1438

3) Does everything else in Zimbra work?

As far as services go, yes, all seems to be working okay. I do also get this error message when in the admin area and I try to edit a user that is bound to a Active Directory account. For non active directory accounts, the error message is _not_ displayed.

4) Does this only happen in one part of the Admin UI?

Yes, the only parts I have noticed this happening is:

- when I edit the server
- when I edit an account that is bound to a Active Directory account

5) How long have you had this problem?

I would estimate that this problem is going on for 3 months.

6) If it's recent, did you make any changes to zimbra on your server?

I do recall making a change to the GAL area (but was not successful). I have a suspicion that this is the cause of the error but I have not a clue how to remove the GAL configuration or to even identify that it is indeed the culprit.

7) Are their any other error in the log files?

Thanks for posting the link of the log files. I used "tail -f *log" to look at the log files. Here is what I noticed in the mail.log file while logging into the admin interface:


2011-08-18 09:23:14,692 INFO [btpool0-40://zimbra.mydomain.org:7071/service/admin/soap/AuthRequest] [ip=10.128.12.0;ua=ZimbraWebClient - SAF3 (Mac);] soap - AuthRequest
2011-08-18 09:23:14,697 WARN [btpool0-40://zimbra.mydomain.org:7071/service/admin/soap/AuthRequest] [name=admin@zimbra.mydomain.org;ip=10.128.12.0;ua=Z imbraWebClient - SAF3 (Mac);] account - ad auth for domain zimbra.mydomain.org failed, fall back to zimbra default auth mechanism
com.zimbra.cs.account.AccountServiceException$Auth FailedServiceException: authentication failed for [admin@zimbra.mydomain.org]
ExceptionId:btpool0-40://zimbra.mydomain.org:7071/service/admin/soap/AuthRequest:1313684594697:6ae5dfe572e0a818
Code:account.AUTH_FAILED
at com.zimbra.cs.account.AccountServiceException$Auth FailedServiceException.AUTH_FAILED(AccountServiceE xception.java:130)
at com.zimbra.cs.account.ldap.LdapProvisioning.extern alLdapAuth(LdapProvisioning.java:3709)
at com.zimbra.cs.account.auth.AuthMechanism$LdapAuth. doAuth(AuthMechanism.java:165)
at com.zimbra.cs.account.ldap.LdapProvisioning.verify PasswordInternal(LdapProvisioning.java:3759)
at com.zimbra.cs.account.ldap.LdapProvisioning.verify Password(LdapProvisioning.java:3732)
at com.zimbra.cs.account.ldap.LdapProvisioning.authAc count(LdapProvisioning.java:3562)
at com.zimbra.cs.account.ldap.LdapProvisioning.authAc count(LdapProvisioning.java:3544)
at com.zimbra.cs.service.admin.Auth.handle(Auth.java: 145)
at com.zimbra.soap.SoapEngine.dispatchRequest(SoapEng ine.java:412)
at com.zimbra.soap.SoapEngine.dispatch(SoapEngine.jav a:287)
at com.zimbra.soap.SoapEngine.dispatch(SoapEngine.jav a:158)
at com.zimbra.soap.SoapServlet.doWork(SoapServlet.jav a:294)
at com.zimbra.soap.SoapServlet.doPost(SoapServlet.jav a:215)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:725)
at com.zimbra.cs.servlet.ZimbraServlet.service(Zimbra Servlet.java:208)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:814)
at org.mortbay.jetty.servlet.ServletHolder.handle(Ser vletHolder.java:511)
at org.mortbay.jetty.servlet.ServletHandler$CachedCha in.doFilter(ServletHandler.java:1166)
at com.zimbra.cs.servlet.SetHeaderFilter.doFilter(Set HeaderFilter.java:79)
at org.mortbay.jetty.servlet.ServletHandler$CachedCha in.doFilter(ServletHandler.java:1157)
at org.mortbay.servlet.UserAgentFilter.doFilter(UserA gentFilter.java:81)
at org.mortbay.servlet.GzipFilter.doFilter(GzipFilter .java:132)
at org.mortbay.jetty.servlet.ServletHandler$CachedCha in.doFilter(ServletHandler.java:1157)
at org.mortbay.jetty.servlet.ServletHandler.handle(Se rvletHandler.java:388)
at org.mortbay.jetty.security.SecurityHandler.handle( SecurityHandler.java:218)
at org.mortbay.jetty.servlet.SessionHandler.handle(Se ssionHandler.java:182)
at org.mortbay.jetty.handler.ContextHandler.handle(Co ntextHandler.java:765)
at org.mortbay.jetty.webapp.WebAppContext.handle(WebA ppContext.java:422)
at org.mortbay.jetty.handler.ContextHandlerCollection .handle(ContextHandlerCollection.java:230)
at org.mortbay.jetty.handler.HandlerCollection.handle (HandlerCollection.java:114)
at org.mortbay.jetty.handler.HandlerWrapper.handle(Ha ndlerWrapper.java:152)
at org.mortbay.jetty.handler.rewrite.RewriteHandler.h andle(RewriteHandler.java:230)
at org.mortbay.jetty.handler.HandlerWrapper.handle(Ha ndlerWrapper.java:152)
at org.mortbay.jetty.handler.DebugHandler.handle(Debu gHandler.java:77)
at org.mortbay.jetty.handler.HandlerWrapper.handle(Ha ndlerWrapper.java:152)
at org.mortbay.jetty.Server.handle(Server.java:326)
at org.mortbay.jetty.HttpConnection.handleRequest(Htt pConnection.java:543)
at org.mortbay.jetty.HttpConnection$RequestHandler.co ntent(HttpConnection.java:946)
at org.mortbay.jetty.HttpParser.parseNext(HttpParser. java:756)
at org.mortbay.jetty.HttpParser.parseAvailable(HttpPa rser.java:212)
at org.mortbay.jetty.HttpConnection.handle(HttpConnec tion.java:405)
at org.mortbay.io.nio.SelectChannelEndPoint.run(Selec tChannelEndPoint.java:410)
at org.mortbay.thread.BoundedThreadPool$PoolThread.ru n(BoundedThreadPool.java:451)
Caused by: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1]
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.jav a:3041)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCt x.java:2987)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCt x.java:2789)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:270 3)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:293)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapC txFactory.java:175)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(Ldap CtxFactory.java:193)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstanc e(LdapCtxFactory.java:136)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext (LdapCtxFactory.java:66)
at javax.naming.spi.NamingManager.getInitialContext(N amingManager.java:667)
at javax.naming.InitialContext.getDefaultInitCtx(Init ialContext.java:288)
at javax.naming.InitialContext.init(InitialContext.ja va:223)
at javax.naming.ldap.InitialLdapContext.<init>(Initia lLdapContext.java:134)
at com.zimbra.cs.account.ldap.ZimbraLdapContext.ldapA uthenticate(ZimbraLdapContext.java:619)
at com.zimbra.cs.account.ldap.LdapUtil.ldapAuthentica te(LdapUtil.java:94)
at com.zimbra.cs.account.ldap.LdapProvisioning.extern alLdapAuth(LdapProvisioning.java:3704)
... 41 more
2011-08-18 09:23:14,758 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/GetInfoRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - GetInfoRequest
2011-08-18 09:23:14,877 INFO [btpool0-40://zimbra.mydomain.org:7071/service/admin/soap/GetAdminExtensionZimletsRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - GetAdminExtensionZimletsRequest
2011-08-18 09:23:15,021 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/GetEffectiveRightsRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - GetEffectiveRightsRequest
2011-08-18 09:23:15,082 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/BatchRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - BatchRequest
2011-08-18 09:23:15,082 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/BatchRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - (batch) GetAccountRequest
2011-08-18 09:23:15,082 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/BatchRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] misc - delegated access: doc=GetAccount, authenticated account=admin@zimbra.mydomain.org, target account=admin@zimbra.mydomain.org
2011-08-18 09:23:15,083 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/BatchRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - (batch) GetAccountMembershipRequest
2011-08-18 09:23:15,083 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/BatchRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] misc - delegated access: doc=GetAccountMembership, authenticated account=admin@zimbra.mydomain.org, target account=admin@zimbra.mydomain.org
2011-08-18 09:23:15,083 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/BatchRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - (batch) GetAccountInfoRequest
2011-08-18 09:23:15,083 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/BatchRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] misc - delegated access: doc=GetAccountInfo, authenticated account=admin@zimbra.mydomain.org, target account=admin@zimbra.mydomain.org
2011-08-18 09:23:15,083 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/BatchRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - (batch) GetDataSourcesRequest
2011-08-18 09:23:15,084 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/BatchRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] misc - delegated access: doc=GetDataSources, authenticated account=admin@zimbra.mydomain.org, target account=admin@zimbra.mydomain.org
2011-08-18 09:23:15,097 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/GetEffectiveRightsRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - GetEffectiveRightsRequest
2011-08-18 09:23:15,106 INFO [btpool0-40://zimbra.mydomain.org:7071/service/admin/soap/GetAdminConsoleUICompRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - GetAdminConsoleUICompRequest
2011-08-18 09:23:15,190 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/GetAdminSavedSearchesRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - GetAdminSavedSearchesRequest
2011-08-18 09:23:15,190 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/GetAdminSavedSearchesRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] misc - delegated access: doc=GetAdminSavedSearches, authenticated account=admin@zimbra.mydomain.org, target account=admin@zimbra.mydomain.org
2011-08-18 09:23:15,201 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/GetAllServersRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - GetAllServersRequest
2011-08-18 09:23:15,262 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/BatchRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - BatchRequest
2011-08-18 09:23:15,262 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/BatchRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - (batch) GetEffectiveRightsRequest
2011-08-18 09:23:15,276 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/SearchDirectoryRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - SearchDirectoryRequest
2011-08-18 09:23:15,325 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/SearchDirectoryRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - SearchDirectoryRequest
2011-08-18 09:23:15,376 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/BatchRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - BatchRequest
2011-08-18 09:23:15,376 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/BatchRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - (batch) GetEffectiveRightsRequest
2011-08-18 09:23:15,376 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/BatchRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - (batch) GetEffectiveRightsRequest
2011-08-18 09:23:15,386 INFO [btpool0-40://zimbra.mydomain.org:7071/service/admin/soap/GetAllServersRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - GetAllServersRequest
2011-08-18 09:23:15,442 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/GetAdminSavedSearchesRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - GetAdminSavedSearchesRequest
2011-08-18 09:23:15,442 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/GetAdminSavedSearchesRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] misc - delegated access: doc=GetAdminSavedSearches, authenticated account=admin@zimbra.mydomain.org, target account=admin@zimbra.mydomain.org
2011-08-18 09:23:15,525 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/GetEffectiveRightsRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - GetEffectiveRightsRequest
2011-08-18 09:23:15,546 INFO [btpool0-40://zimbra.mydomain.org:7071/service/admin/soap/GetDomainRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - GetDomainRequest
2011-08-18 09:23:15,600 INFO [btpool0-40://zimbra.mydomain.org:7071/service/admin/soap/GetEffectiveRightsRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - GetEffectiveRightsRequest
2011-08-18 09:23:15,608 INFO [btpool0-39://zimbra.mydomain.org:7071/service/admin/soap/GetAllConfigRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - GetAllConfigRequest
2011-08-18 09:23:15,660 INFO [btpool0-40://zimbra.mydomain.org:7071/service/admin/soap/GetServiceStatusRequest] [name=admin@zimbra.mydomain.org;mid=1;ip=10.128.12. 0;ua=ZimbraWebClient - SAF3 (Mac);] soap - GetServiceStatusRequest


8) Do you have any zimbra posix extensions installed?

No

If there is any more information that you need please let me know.

Thanks in advance,

Aaddleman

[aaddleman]

After looking around on Google and finding some entries about LDAP errors, I noticed I get logged out when I do the following:

1) Visit the admin interface
2) Enter in my admin credentials
3) Login and see the interface
4) When I press enter on the keyboard, I noticed that I am brought back to the login interface and have a error message in yellow saying "Authentication Failed"

Is this a security flaw?

[phoenix]

After looking around on Google and finding some entries about LDAP errors, I noticed I get logged out when I do the following:

1) Visit the admin interface
2) Enter in my admin credentials
3) Login and see the interface
4) When I press enter on the keyboard, I noticed that I am brought back to the login interface and have a error message in yellow saying "Authentication Failed"

Are you logging in as the Admin user or a user that admin rights?

Is this a security flaw?

I should think that makes it quite secure, throwing you out of the Admin interface.

[aaddleman]

Are you logging in as the Admin user or a user that admin rights?

Yes, I am logging as the Admin user

I should think that makes it quite secure, throwing you out of the Admin interface.

hahha yah it does seem more secure, but I think the error message is being pulled from a problem of the LDAP or something..., also, if i do not hit enter, i can go around and do lots of admin stuff. After I make a change and hit the enter key, I am not booted out, which seems like the authentication is failing at some area, then maybe the javascript message pops up and stops me from getting to the server details?