Staff Member Locked Out

[rachelahlmann]

One of our staff members gets locked out of her email at least once an hour. This requires the administrator to have to change her status to "active" every hour or so. Any idea what is going on here?

Rachel

[DavidMerrill]

Something is locking the mailbox:

• How is the user accessing their mail? Web based, IMAP-client? Do they have a mobile device configured? Maybe they've got a device where they've simply haven't updated the password?
• A lockout every hour could imply someone is trying to brute-force the account (What are the related-COS settings? When should a lock-out occur?)
• Check authentication attempts (run the following at the CLI (see which mailbox is authenticating "a lot"): grep sasl_user /var/log/zimbra.log | sed 's/.*sasl_username=//g' | sort | uniq -c | sort -nr | head)
• Troll the logs, Zimbra is reasonably verbose, you might very well see something related to the mailbox that'll get you going in the right direction.