Several users are locked by too many attempts from SMTP via SOAP a few days ago.
I m trying to figure out the root cause of this but I cannot find a thread to start on.
Can someone shine some light?
This is the message in the log, but as I said, I cannot figure out what is causing it:
Code: Select all
2022-09-28 19:46:02,315 WARN [qtp1935972447-26927:smtp://mail.domain.com:52373/service/admin/soap/] [name=user@domain.com;ip=10.10.0.9;port=43606;soapId=203cb887;] security - cmd=Auth; account=user@domain.com; protocol=soap; error=authentication failed for [user], missing userPassword;
Code: Select all
Sep 28 22:07:31 mail saslauthd[29369]: auth_zimbra: user@domain.com auth failed: authentication failed for [user@domain.com]
Sep 28 22:07:31 mail saslauthd[29369]: : auth failure: [user=user@domain.com] [service=smtp] [realm=domain.com] [mech=zimbra] [reason=Unknown]
Sep 28 22:07:40 mail saslauthd[29373]: zmpost: url='https://mail.domain.com:7073/service/admin/soap/' returned buffer->data='<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope"><soap:Header><context xmlns="urn:zimbra"/></soap:Header><soap:Body><soap:Fault><soap:Code><soap:Value>soap:Sender</soap:Value></soap:Code><soap:Reason><soap:Text>authentication failed for [user]</soap:Text></soap:Reason><soap:Detail><Error xmlns="urn:zimbra"><Code>account.AUTH_FAILED</Code><Trace>qtp1935972447-83:1664399260175:2bb8ad35212ef3cf</Trace></Error></soap:Detail></soap:Fault></soap:Body></soap:Envelope>', hti->error=''
Sep 28 22:07:40 mail saslauthd[29373]: auth_zimbra: user auth failed: authentication failed for [user]
Sep 28 22:07:40 mail saslauthd[29373]: : auth failure: [user=user] [service=smtp] [realm=] [mech=zimbra] [reason=Unknown]
Sep 28 22:20:47 mail saslauthd[29374]: zmpost: url='https://mail.domain.com:7073/service/admin/soap/' returned buffer->data='<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope"><soap:Header><context xmlns="urn:zimbra"/></soap:Header><soap:Body><soap:Fault><soap:Code><soap:Value>soap:Sender</soap:Value></soap:Code><soap:Reason><soap:Text>authentication failed for [user@domain.com]</soap:Text></soap:Reason><soap:Detail><Error xmlns="urn:zimbra"><Code>account.AUTH_FAILED</Code><Trace>qtp1935972447-297:1664400047290:2bb8ad35212ef3cf</Trace></Error></soap:Detail></soap:Fault></soap:Body></soap:Envelope>', hti->error=''
Sep 28 22:20:47 mail saslauthd[29374]: auth_zimbra: user@domain.com auth failed: authentication failed for [user@domain.com]
Sep 28 22:20:47 mail saslauthd[29374]: : auth failure: [user=user@domain.com] [service=smtp] [realm=domain.com] [mech=zimbra] [reason=Unknown]
Sep 28 22:20:55 mail saslauthd[29370]: zmpost: url='https://mail.domain.com:7073/service/admin/soap/' returned buffer->data='<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope"><soap:Header><context xmlns="urn:zimbra"/></soap:Header><soap:Body><soap:Fault><soap:Code><soap:Value>soap:Sender</soap:Value></soap:Code><soap:Reason><soap:Text>authentication failed for [user]</soap:Text></soap:Reason><soap:Detail><Error xmlns="urn:zimbra"><Code>account.AUTH_FAILED</Code><Trace>qtp1935972447-20:1664400055545:2bb8ad35212ef3cf</Trace></Error></soap:Detail></soap:Fault></soap:Body></soap:Envelope>', hti->error=''
Sep 28 22:20:55 mail saslauthd[29370]: auth_zimbra: user auth failed: authentication failed for [user]
Sep 28 22:20:55 mail saslauthd[29370]: : auth failure: [user=user] [service=smtp] [realm=] [mech=zimbra] [reason=Unknown]
Regards.
JG