Dear all
We are facing a strange issue with a Zimbra installation.
Created a new account, set the password.
When trying to connect from our LAN on the webmail, the interface replies that the username or password is invalid. HOWEVER if we try the same credentials from an external address the authentication is correct.
What could be the issue and where can we start to look ? We checked the nginx log but they are not helpful.
Thank you
Invalid password from LAN / OK from exterior
-
fs.schmidt
- Outstanding Member
- Posts: 278
- Joined: Sat Sep 13, 2014 3:37 am
- Location: Brazil
- Contact:
Re: Invalid password from LAN / OK from exterior
Hello,
You could check for "suspended" in mailbox.log and zmmailboxd.out. Once your users can login from external IPS, could be an issue with the server not logging the real LAN client IPs.
You could check for "suspended" in mailbox.log and zmmailboxd.out. Once your users can login from external IPS, could be an issue with the server not logging the real LAN client IPs.
Re: Invalid password from LAN / OK from exterior
Thank you for the replyfs.schmidt wrote:Hello,
You could check for "suspended" in mailbox.log and zmmailboxd.out. Once your users can login from external IPS, could be an issue with the server not logging the real LAN client IPs.
When facing the login error there is no trace of the login attempt anywhere, only the nginx reply.
Is there a way to increase the log verbosity of the login backend ?
Re: Invalid password from LAN / OK from exterior
Still no luck finding the issue
From the "outside" we see the valid and invalid (intentional to test) logins for the account in the audit.log file
From the inside the login attempts do not even register in the file.
Where could they be blocked or be misdirected ?
Auth is internal LDAP
From the "outside" we see the valid and invalid (intentional to test) logins for the account in the audit.log file
From the inside the login attempts do not even register in the file.
Where could they be blocked or be misdirected ?
Auth is internal LDAP
PJKgerk11 wrote:Dear all
We are facing a strange issue with a Zimbra installation.
Created a new account, set the password.
When trying to connect from our LAN on the webmail, the interface replies that the username or password is invalid. HOWEVER if we try the same credentials from an external address the authentication is correct.
What could be the issue and where can we start to look ? We checked the nginx log but they are not helpful.
Thank you
Re: Invalid password from LAN / OK from exterior
Found the issue and solved it
If anyone encounters the same issue, the LDAP synchro was not working. From the outside the master LDAP was used and it worked, from the inside the secondary LDAP was used and it was out of sync.
If anyone encounters the same issue, the LDAP synchro was not working. From the outside the master LDAP was used and it worked, from the inside the secondary LDAP was used and it was out of sync.