Help on debugging an issue with SOAP

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
User avatar
jasggomes
Advanced member
Advanced member
Posts: 90
Joined: Sat Sep 13, 2014 12:59 am
Location: Lisbon, PT
ZCS/ZD Version: Release 8.7.11.GA.1854.UBUNTU14.64
Contact:

Help on debugging an issue with SOAP

Post by jasggomes »

Hello all,

Several users are locked by too many attempts from SMTP via SOAP a few days ago.
I m trying to figure out the root cause of this but I cannot find a thread to start on.

Can someone shine some light?

This is the message in the log, but as I said, I cannot figure out what is causing it:

Code: Select all

2022-09-28 19:46:02,315 WARN  [qtp1935972447-26927:smtp://mail.domain.com:52373/service/admin/soap/] [name=user@domain.com;ip=10.10.0.9;port=43606;soapId=203cb887;] security - cmd=Auth; account=user@domain.com; protocol=soap; error=authentication failed for [user], missing userPassword;

Code: Select all

Sep 28 22:07:31 mail saslauthd[29369]: auth_zimbra: user@domain.com auth failed: authentication failed for [user@domain.com]
Sep 28 22:07:31 mail saslauthd[29369]:                 : auth failure: [user=user@domain.com] [service=smtp] [realm=domain.com] [mech=zimbra] [reason=Unknown]
Sep 28 22:07:40 mail saslauthd[29373]: zmpost: url='https://mail.domain.com:7073/service/admin/soap/' returned buffer->data='<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope"><soap:Header><context xmlns="urn:zimbra"/></soap:Header><soap:Body><soap:Fault><soap:Code><soap:Value>soap:Sender</soap:Value></soap:Code><soap:Reason><soap:Text>authentication failed for [user]</soap:Text></soap:Reason><soap:Detail><Error xmlns="urn:zimbra"><Code>account.AUTH_FAILED</Code><Trace>qtp1935972447-83:1664399260175:2bb8ad35212ef3cf</Trace></Error></soap:Detail></soap:Fault></soap:Body></soap:Envelope>', hti->error=''
Sep 28 22:07:40 mail saslauthd[29373]: auth_zimbra: user auth failed: authentication failed for [user]
Sep 28 22:07:40 mail saslauthd[29373]:                 : auth failure: [user=user] [service=smtp] [realm=] [mech=zimbra] [reason=Unknown]
Sep 28 22:20:47 mail saslauthd[29374]: zmpost: url='https://mail.domain.com:7073/service/admin/soap/' returned buffer->data='<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope"><soap:Header><context xmlns="urn:zimbra"/></soap:Header><soap:Body><soap:Fault><soap:Code><soap:Value>soap:Sender</soap:Value></soap:Code><soap:Reason><soap:Text>authentication failed for [user@domain.com]</soap:Text></soap:Reason><soap:Detail><Error xmlns="urn:zimbra"><Code>account.AUTH_FAILED</Code><Trace>qtp1935972447-297:1664400047290:2bb8ad35212ef3cf</Trace></Error></soap:Detail></soap:Fault></soap:Body></soap:Envelope>', hti->error=''
Sep 28 22:20:47 mail saslauthd[29374]: auth_zimbra: user@domain.com auth failed: authentication failed for [user@domain.com]
Sep 28 22:20:47 mail saslauthd[29374]:                 : auth failure: [user=user@domain.com] [service=smtp] [realm=domain.com] [mech=zimbra] [reason=Unknown]
Sep 28 22:20:55 mail saslauthd[29370]: zmpost: url='https://mail.domain.com:7073/service/admin/soap/' returned buffer->data='<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope"><soap:Header><context xmlns="urn:zimbra"/></soap:Header><soap:Body><soap:Fault><soap:Code><soap:Value>soap:Sender</soap:Value></soap:Code><soap:Reason><soap:Text>authentication failed for [user]</soap:Text></soap:Reason><soap:Detail><Error xmlns="urn:zimbra"><Code>account.AUTH_FAILED</Code><Trace>qtp1935972447-20:1664400055545:2bb8ad35212ef3cf</Trace></Error></soap:Detail></soap:Fault></soap:Body></soap:Envelope>', hti->error=''
Sep 28 22:20:55 mail saslauthd[29370]: auth_zimbra: user auth failed: authentication failed for [user]
Sep 28 22:20:55 mail saslauthd[29370]:                 : auth failure: [user=user] [service=smtp] [realm=] [mech=zimbra] [reason=Unknown]
Thanks for the help.
Regards.
JG
liverpoolfcfan
Elite member
Elite member
Posts: 1096
Joined: Sat Sep 13, 2014 12:47 am

Re: Help on debugging an issue with SOAP

Post by liverpoolfcfan »

If you look just above any of the failures you should see where the connection came from. For example

Code: Select all

Sep 29 04:33:01 mail postfix/smtps/smtpd[236357]: warning: hostname abts-tn-static-192.10.185.136.airtelbroadband.in does not resolve to address 136.185.10.192: Name or service not known
Sep 29 04:33:01 mail postfix/smtps/smtpd[236357]: connect from unknown[136.185.10.192]
Sep 29 04:33:02 mail postfix/smtps/smtpd[236357]: Anonymous TLS connection established from unknown[136.185.10.192]: TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)
followed by another line (redacted) that tells you which account it was a login attempt for
User avatar
jasggomes
Advanced member
Advanced member
Posts: 90
Joined: Sat Sep 13, 2014 12:59 am
Location: Lisbon, PT
ZCS/ZD Version: Release 8.7.11.GA.1854.UBUNTU14.64
Contact:

Re: Help on debugging an issue with SOAP

Post by jasggomes »

liverpoolfcfan wrote:If you look just above any of the failures you should see where the connection came from. For example

Code: Select all

Sep 29 04:33:01 mail postfix/smtps/smtpd[236357]: warning: hostname abts-tn-static-192.10.185.136.airtelbroadband.in does not resolve to address 136.185.10.192: Name or service not known
Sep 29 04:33:01 mail postfix/smtps/smtpd[236357]: connect from unknown[136.185.10.192]
Sep 29 04:33:02 mail postfix/smtps/smtpd[236357]: Anonymous TLS connection established from unknown[136.185.10.192]: TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)
followed by another line (redacted) that tells you which account it was a login attempt for
Thank you so much.
My search string was not picking that.

Regards.
JG
Post Reply