Suddenly cannot login as admin

[zim_mike]

I have two administrator accounts on zimbra 8.8.11 and suddenly, I cannot get into either one, keep getting authentication failed on port 7071.
I've changed the passwords from the CLI and even re-set them both as full administrators but keep getting the same.

Server was rebooted, no difference.

What's going on?

[L. Mark Stone]

I have two administrator accounts on zimbra 8.8.11 and suddenly, I cannot get into either one, keep getting authentication failed on port 7071.
I've changed the passwords from the CLI and even re-set them both as full administrators but keep getting the same.

Server was rebooted, no difference.

What's going on?

What do you get from the following:

Code: Select all

zmprov ga admin@yourdomain.com zimbraAccountStatus

Mark

[zim_mike]

Oddly, I get 'lockout' for the main one and 'active' for the secondary but still cannot log in with either.

[L. Mark Stone]

Oddly, I get 'lockout' for the main one and 'active' for the secondary but still cannot log in with either.

Any DoSFilter entries in mailbox.log?

[zim_mike]

Seems not.

# grep "DoSFilter" /var/log/maillog
#

[zim_mike]

BTW, both of those accounts, I cannot get their mail either. I can get all other accounts email but those two.
I've tried changing their passwords and nothing, no access. I only have CLI access, nothing else.

[L. Mark Stone]

Seems not.

# grep "DoSFilter" /var/log/maillog
#

Please instead try:

Code: Select all

cat ~/log/mailbox.log | grep "suspended, for repeated failed login."

and if you get any hits, then run:

Code: Select all

cat ~/log/mailbox.log | grep "authentication failed"

to see who caused the failure.

[zim_mike]

# cat /opt/zimbra/log/mailbox.log | grep "suspended, for repeated failed login."
#

[zim_mike]

Changing the password has no effect. The log still shows wrong password.

# su - zimbra
$ zmprov sp xxx@xxx.com xxxxxxxxxxxxxxxxxxxxxxxxx
$ exit
logout

# tail -f /opt/zimbra/log/mailbox.log | grep "xxx@xxx.com"

2020-06-12 15:20:13,525 INFO [qtp1225197672-526:https://mx.xxx.com:7071/service/admin/soap/AuthRequest] [name=xxx@xxx.com;ip=x.x.x.x;port=58116;ua=ZimbraWebClient - FF68 (Win);soapId=2f42b9ef;] SoapEngine - handler exception: authentication failed for [xxx@xxx.com], invalid password
2020-06-12 15:20:13,525 INFO [qtp1225197672-526:https://mx.xxx.com:7071/service/admin/soap/AuthRequest] [name=xxx@xxx.com;ip=x.x.x.x;port=58116;ua=ZimbraWebClient - FF68 (Win);soapId=2f42b9ef;] soap - AuthRequest elapsed=1

[zim_mike]

I recently made policy changes to the passwords requirements and forced a 90 day change.
I have access to all email accounts but not the administrator ones. Is it possible it's something to do with the passwords?