Unable to login Zimbra despite setting the SSHA-512 hashed password

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
User avatar
talha06
Posts: 25
Joined: Sat Sep 13, 2014 3:02 am

Unable to login Zimbra despite setting the SSHA-512 hashed password

Post by talha06 »

I have set a test user's password to a previously known SSHA-512 hashed value and verify the password using Apache Directory Studio. The password is verified as it is expected.

The problem is that I am not able to login Zimbra via this password using the web interface. What is the problem here? Why can't I login Zimbra despite the password is verified by Apache Directory Studio?

Waiting your urgent help,
All ideas are appreciated a lot.

Thanks in advance.
User avatar
DualBoot
Elite member
Elite member
Posts: 1326
Joined: Mon Apr 18, 2016 8:18 pm
Location: France - Earth
ZCS/ZD Version: ZCS FLOSS - 8.8.15 Mutli servers
Contact:

Re: Unable to login Zimbra despite setting the SSHA-512 hashed password

Post by DualBoot »

What did you get in the log when you try to connect to the web Interface ?
How does your zimbra userPassword field look like ?
User avatar
talha06
Posts: 25
Joined: Sat Sep 13, 2014 3:02 am

Re: Unable to login Zimbra despite setting the SSHA-512 hashed password

Post by talha06 »

The generic wrong password warning is displayed when I try to login Zimbra thru the web interface. When I look the the user's ldap entry thru the Apache Directory Studio, it has a description like that: "userPassword: SSHA-512 hashed password"

When I investigate the userPassword by double-clicking on it, these details are displayed in the Password Editor window:

Code: Select all

Current Password: {ssha-512}THE_VALUE_WE_HAVE_SET

Hash Method: SSHA-512
Password(Hex): XXXXXXXXXXXXXX
Salt (Hex): XXXXXX
p.s. The same password is hashed differently if the Zimbra versions are not equal.
User avatar
DualBoot
Elite member
Elite member
Posts: 1326
Joined: Mon Apr 18, 2016 8:18 pm
Location: France - Earth
ZCS/ZD Version: ZCS FLOSS - 8.8.15 Mutli servers
Contact:

Re: Unable to login Zimbra despite setting the SSHA-512 hashed password

Post by DualBoot »

Try this :
- transform your clear password into the corresponding SSHA-512 hash
- put the password with command line into zimbra user account like this :

Code: Select all

zmprov ma user@domain.tld userPassword "{SSHA-512}YOUR_HASH"
- check if you can log in
User avatar
talha06
Posts: 25
Joined: Sat Sep 13, 2014 3:02 am

Re: Unable to login Zimbra despite setting the SSHA-512 hashed password

Post by talha06 »

DualBoot wrote:Try this :
- transform your clear password into the corresponding SSHA-512 hash
What will be my salt in order to hash the clear-text password using SSHA-512?
User avatar
DualBoot
Elite member
Elite member
Posts: 1326
Joined: Mon Apr 18, 2016 8:18 pm
Location: France - Earth
ZCS/ZD Version: ZCS FLOSS - 8.8.15 Mutli servers
Contact:

Re: Unable to login Zimbra despite setting the SSHA-512 hashed password

Post by DualBoot »

I think a part of the answer is here :
https://redpill-linpro.com/techblog/201 ... -hash.html

From my part I do not know what kind of salt is used.
User avatar
talha06
Posts: 25
Joined: Sat Sep 13, 2014 3:02 am

Re: Unable to login Zimbra despite setting the SSHA-512 hashed password

Post by talha06 »

I hope that someone here can help me to set SSHA-512 hashed passwords to internal LDAP of Zimbra.

Thanks in advance.
Post Reply