Results 1 to 7 of 7

Thread: upgrade 5.0.5 to 5.0.6 pre auth failures

  1. #1
    phingers is offline Special Member
    Join Date
    Jan 2007
    Location
    Fort Lauderdale, FL
    Posts
    151
    Rep Power
    8

    Default upgrade 5.0.5 to 5.0.6 pre auth failures

    Upgraded to 5.0.6 last night, and now all my code that uses pre-auths dont work.

    gdpak domain.com says there already is a key for the domain.

    Do I need to wipe them out and re-generate?

    They should have worked fine after the upgrade right?

    Thoughts?

  2. #2
    webman's Avatar
    webman is offline Special Member
    Join Date
    Oct 2007
    Location
    North East England
    Posts
    167
    Rep Power
    7

    Default

    Hi

    I did an upgrade to 5.0.6 too and the preauth stuff still works; so I don't think it's by design that you have to re-generate yor preauth stuff.

    You can get the current preauth key by running this:

    Code:
    zmprov gd example.com|grep zimbraPreAuthKey
    This should match what you have in your applications. If not, then you can set it again (to what you already have) using something like:

    Code:
    zmprov md example.com zimbraPreAuthKey {my-existing-key}
    Craig Rodway » Flickr | Last.fm | Del.icio.us | Twitter

  3. #3
    phingers is offline Special Member
    Join Date
    Jan 2007
    Location
    Fort Lauderdale, FL
    Posts
    151
    Rep Power
    8

    Default

    So I have the wrong error I guess...

    What would cause this after the upgrade?

    =============================

    HTTP ERROR: 400

    authentication failed for user@domain.com

    RequestURI=/service/preauth

    Powered by Jetty://

  4. #4
    phingers is offline Special Member
    Join Date
    Jan 2007
    Location
    Fort Lauderdale, FL
    Posts
    151
    Rep Power
    8

    Default why would this have changed? with the upgrade?

    2008-05-27 11:44:49,389 WARN [btpool0-22] [] security - cmd=PreAuth; account=user@domain.com; admin=false; error=authentication failed for user@domain.com, preauth timestamp is too old, server time: Tue May 27 11:44:49 CDT 2008, preauth timestamp: Tue May 27 11:49:55 CDT 2008;

  5. #5
    webman's Avatar
    webman is offline Special Member
    Join Date
    Oct 2007
    Location
    North East England
    Posts
    167
    Rep Power
    7

    Default

    Looks like there's a huge time difference (more than five minutes) between Zimbra and the computer calculating the preauth. Try adjusting the time so they're both the same (use NTP?) and try again.
    Craig Rodway » Flickr | Last.fm | Del.icio.us | Twitter

  6. #6
    phingers is offline Special Member
    Join Date
    Jan 2007
    Location
    Fort Lauderdale, FL
    Posts
    151
    Rep Power
    8

    Default

    The two server date/times were off by more than 5 mins. I corrected by running:

    /usr/sbin/ntpdate -b -s us.pool.ntp.org

    Manually on the zimbra server, since that one seemed to be slower. Weird how that happened though.

  7. #7
    webman's Avatar
    webman is offline Special Member
    Join Date
    Oct 2007
    Location
    North East England
    Posts
    167
    Rep Power
    7

    Default

    Cool

    Sometimes this happens after a reboot. Stick that ntp command in root's daily cron and you should be OK though
    Craig Rodway » Flickr | Last.fm | Del.icio.us | Twitter

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Delegate Auth Request using pre auth
    By palikero in forum Developers
    Replies: 3
    Last Post: 03-31-2009, 02:03 PM
  2. zimbra 5.0.5 -> 5.0.6, multi-server, sasl auth broken
    By spirit in forum Administrators
    Replies: 0
    Last Post: 05-26-2008, 12:48 AM
  3. Debian 4.0 Upgrade Zimbra 5.0.4 -> 5.0.5
    By swentz in forum Installation
    Replies: 1
    Last Post: 05-17-2008, 09:26 AM
  4. Slight problem after upgrade to 5.0.5, any ideas?
    By Diluted in forum Administrators
    Replies: 5
    Last Post: 04-28-2008, 12:19 PM
  5. Zimlets and 5.0.5 Upgrade
    By Ericx in forum Installation
    Replies: 2
    Last Post: 04-25-2008, 11:07 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •