Admin (and admin users) can't access other mailboxes...

[djsmiley2k]

Any time an admin, or the admin user themselves tries to view another mailbox they'll get:

"JavaScript error encountered in method ZaAccountListController._viewMailListenerLauncher"

The access attempt shows correctly in the logs

"2012-01-13 11:29:38,335 INFO [btpool0-134://xxx.com:7071/service/admin/soap/DelegateAuthRequest] [name=admin@xxx.com;mid=1;ip=10.2.1.134;ua=ZimbraWe bClient - FF3.0 (Linux);] security - cmd=DelegateAuth; accountId=02dd873b-1353-4812-b86d-78e28ef1ae61; accountName=user@xxx.com;"

however the error appears every time.

The only time I don't get the error is if another global administrator logs in, and views the "admin" account - this is viewable.

Can anyone suggest what to even start looking at to try and figure out these errors? I'm presuming it might be some file system permissions issue but without an error telling me what can't be read i'm kind of stuck.

-- This happens in both windows and linux, with identical error.

We are using the OS edition.

Many Thanks

[liverpoolfcfan]

I am on 7.1.3 and this works just fine. Can you describe the steps you are taking.

Log in to the Admin Console
Click on Accounts to bring up the Manage Accounts page
Select a user from the list
Click View Mail
??

Is this what you are trying to do ? Or something else ?

[djsmiley2k]

Originally Posted by liverpoolfcfan

I am on 7.1.3 and this works just fine. Can you describe the steps you are taking.

Log in to the Admin Console
Click on Accounts to bring up the Manage Accounts page
Select a user from the list
Click View Mail
??

Is this what you are trying to do ? Or something else ?

That is exactly it and the error appears.

I've tried with brand new accounts with no email in them

accounts with no passwords

accounts which are in active use.

All fail. The only time i've seen any success is when I logged in with my personal account (i'm set as a global administrator) and accessed the admin account - everything else fails with the above error.

[liverpoolfcfan]

I don't ever see the "security - cmd" that shows in your log file. And, I always get email account addresses - not UUID's like show in your log file.

Here is a sample output from my mailbox.log (stripped down of course)

...:34,414 INFO  [btpool0-166://myServer:7071/service/admin/soap/DelegateAuthRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] soap - DelegateAuthRequest
...:34,414 INFO  [btpool0-166://myServer:7071/service/admin/soap/DelegateAuthRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] misc - delegated access: doc=DelegateAuth, authenticated account=adminAcct@myDomain, target account=targetAcct@myDomain
...:34,432 INFO  [btpool0-166://myServer:7071/service/admin/soap/GetEffectiveRightsRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] soap - GetEffectiveRightsRequest
...:34,445 INFO  [btpool0-166://myServer:7071/service/admin/soap/BatchRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] soap - BatchRequest
...:34,445 INFO  [btpool0-166://myServer:7071/service/admin/soap/BatchRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] soap - (batch) GetAccountRequest
...:34,445 INFO  [btpool0-166://myServer:7071/service/admin/soap/BatchRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] misc - delegated access: doc=GetAccount, authenticated account=adminAcct@myDomain, target account=targetAcct@myDomain
...:34,446 INFO  [btpool0-166://myServer:7071/service/admin/soap/BatchRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] soap - (batch) GetMailboxRequest
...:34,446 INFO  [btpool0-166://myServer:7071/service/admin/soap/BatchRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] misc - delegated access: doc=GetMailbox, authenticated account=adminAcct@myDomain, target account=targetAcct@myDomain
...:34,446 INFO  [btpool0-166://myServer:7071/service/admin/soap/BatchRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] soap - (batch) GetAccountMembershipRequest
...:34,446 INFO  [btpool0-166://myServer:7071/service/admin/soap/BatchRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] misc - delegated access: doc=GetAccountMembership, authenticated account=adminAcct@myDomain, target account=targetAcct@myDomain
...:34,490 INFO  [btpool0-166://myServer:7071/service/admin/soap/BatchRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] soap - (batch) GetAccountInfoRequest
...:34,491 INFO  [btpool0-166://myServer:7071/service/admin/soap/BatchRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] misc - delegated access: doc=GetAccountInfo, authenticated account=adminAcct@myDomain, target account=targetAcct@myDomain
...:34,491 INFO  [btpool0-166://myServer:7071/service/admin/soap/BatchRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] soap - (batch) GetDataSourcesRequest
...:34,491 INFO  [btpool0-166://myServer:7071/service/admin/soap/BatchRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] misc - delegated access: doc=GetDataSources, authenticated account=adminAcct@myDomain, target account=targetAcct@myDomain
...:34,710 INFO  [btpool0-167://localhost/service/soap/AuthRequest] [ip=192.168.0.1;ua=zclient/7.1.3_GA_3346;] soap - AuthRequest
...:34,743 INFO  [btpool0-167://localhost:7071/service/admin/soap/GetDomainInfoRequest] [ip=127.0.0.1;ua=ZCS/7.1.3_GA_3346;] soap - GetDomainInfoRequest
...:34,753 INFO  [btpool0-167://localhost:7071/service/admin/soap/GetDomainInfoRequest] [ip=127.0.0.1;ua=ZCS/7.1.3_GA_3346;] soap - GetDomainInfoRequest
...:34,778 INFO  [btpool0-167://localhost:7071/service/admin/soap/GetDomainInfoRequest] [ip=127.0.0.1;ua=ZCS/7.1.3_GA_3346;] soap - GetDomainInfoRequest
...:34,801 INFO  [btpool0-167://localhost/service/soap/BatchRequest] [name=targetAcct@myDomain;aname=adminAcct@myDomain;mid=26;ip=192.168.0.1;ua=ZCS/7.1.3_GA_3346;] soap - BatchRequest
...:34,801 INFO  [btpool0-167://localhost/service/soap/BatchRequest] [name=targetAcct@myDomain;aname=adminAcct@myDomain;mid=26;ip=192.168.0.1;ua=ZCS/7.1.3_GA_3346;] soap - (batch) GetInfoRequest
...:34,801 INFO  [btpool0-167://localhost/service/soap/BatchRequest] [name=targetAcct@myDomain;aname=adminAcct@myDomain;mid=26;ip=192.168.0.1;ua=ZCS/7.1.3_GA_3346;] misc - delegated access: doc=GetInfo, delegating account=adminAcct@myDomain, authenticated account=targetAcct@myDomain, target account=targetAcct@myDomain
...:34,937 INFO  [btpool0-167://localhost/service/soap/BatchRequest] [name=targetAcct@myDomain;aname=adminAcct@myDomain;mid=26;ip=192.168.0.1;ua=ZCS/7.1.3_GA_3346;] soap - (batch) SearchRequest
...:34,937 INFO  [btpool0-167://localhost/service/soap/BatchRequest] [name=targetAcct@myDomain;aname=adminAcct@myDomain;mid=26;ip=192.168.0.1;ua=ZCS/7.1.3_GA_3346;] misc - delegated access: doc=Search, delegating account=adminAcct@myDomain, authenticated account=targetAcct@myDomain, target account=targetAcct@myDomain
...:35,695 INFO  [btpool0-166://myServer/service/soap] [name=vincents@myDomain;mid=3;ip=192.168.200.100;] soap - SyncRequest
...:35,731 INFO  [btpool0-166://myServer/service/soap/BatchRequest] [name=targetAcct@myDomain;aname=adminAcct@myDomain;mid=26;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win)/7.1.3_GA_3346;] soap - BatchRequest
...:35,731 INFO  [btpool0-166://myServer/service/soap/BatchRequest] [name=targetAcct@myDomain;aname=adminAcct@myDomain;mid=26;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win)/7.1.3_GA_3346;] soap - (batch) GetMailboxMetadataRequest
...:35,731 INFO  [btpool0-166://myServer/service/soap/BatchRequest] [name=targetAcct@myDomain;aname=adminAcct@myDomain;mid=26;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win)/7.1.3_GA_3346;] misc - delegated access: doc=GetMailboxMetadata, delegating account=adminAcct@myDomain, authenticated account=targetAcct@myDomain, target account=targetAcct@myDomain

EDIT - sorry found the line similar to yours in the audit.log

...:34,414 INFO  [btpool0-166://myServer:7071/service/admin/soap/DelegateAuthRequest] [name=adminAcct@myDomain;mid=2;ip=192.168.0.1;ua=ZimbraWebClient - GC16 (Win);] security - cmd=DelegateAuth; accountId=00000005-86ab-44a3-9aa9-a96000000088; accountName=targetAcct@myDomain;

Do you see the above lines in your mailbox.log ?

[djsmiley2k]

2012-01-13 14:53:33,915 INFO  [btpool0-134://xxx.com:7071/service/admin/soap/DelegateAuthRequest] [name=admin@xxx.com;mid=1;ip=10.2.1.134;ua=ZimbraWebClient - FF3.0 (Linux);] soap - DelegateAuthRequest
2012-01-13 14:53:33,915 INFO  [btpool0-134://xxx.com:7071/service/admin/soap/DelegateAuthRequest] [name=admin@xxx.com;mid=1;ip=10.2.1.134;ua=ZimbraWebClient - FF3.0 (Linux);] misc - delegated access: doc=DelegateAuth, authenticated account=admin@xxx.com, target account=yyy@xxx.com

Accessing as admin user, attempting to access yyy@xxx.com's account.

So yeah, I appear to get something simular?

[liverpoolfcfan]

Do you get all the other lines too ?

See the third one - the one after those you quoted - refers to getting Effective Rights.

Perhaps this is where you are failing ?

[djsmiley2k]

Nope, it doesn't get that far... :/

[liverpoolfcfan]

I notice your lof suggests you are running FireFox 3.0 (FF3.0 )

Have you tried this from a newer browser ?

I use latest Chrome and Firefox and both work. Only other obvious difference is you have Ubuntu where I have CentOS

[djsmiley2k]

Tis firefox 9, no idea why its see as 3.0. Weird on the laptop (win7) it shows a 3.0 too. Thats 9 also.

Oh and its gentoo

[djsmiley2k]

Is there anymore ideas for this?