Page 1 of 1

Can't logon to SAC after 11.1 upgrade

Posted: Thu Jun 21, 2007 2:45 pm
by jillrae
Did the 11.1 upgrade (please read Installation-> Server 11.1 won't install ) and now can not log into the SAC.

OK did a few things.

Did an ommodu sxadmin -p <newpassword> to make sure I knew the sxadmin password

Did an omshowu -n sxadmin to make sure I knew the authID

Tried to logon to SAC. Says Could not logon. Check Login ID and password.

Just for fun I also tried to login with my userID & password as I have admin rights. No go. also tried using sxqueryadmin. also No go.

Any ideas on where to go from here?

I can get into the mailboxes just fine using the Scalix webmail client. (neat new features. :-) )


Thanks

jillrae

Posted: Thu Jun 21, 2007 2:53 pm
by jillrae
OK, I give up. Where do I find the caa.log? Then i will post anything of interst.

Thanks

jillrae

Posted: Thu Jun 21, 2007 2:59 pm
by jillrae
I found a scalix_caa.log If this is it, it logged an LDAP error:

2007-06-21 14:09:21,279 ERROR [RbacAuthorizationHelper.authenticateUser:92] Exception:
javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.connect(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.<init>(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(Unknown Source)
at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
at javax.naming.InitialContext.init(Unknown Source)
at javax.naming.InitialContext.<init>(Unknown Source)
at javax.naming.directory.InitialDirContext.<init>(Unknown Source)
at com.scalix.sac.ubermgr.ldap.LDAPQuery.initContext(LDAPQuery.java:87)
at com.scalix.sac.ubermgr.rbac.RbacAuthorizationHelper.authenticateUser(RbacAuthorizationHelper.java:63)
at com.scalix.sac.ubermgr.ldap.LDAPServiceHandler.Login(LDAPServiceHandler.java:114)
at com.scalix.sac.ubermgr.caa.RESService.authenticateAndAuthorizeUser(RESService.java:157)
at com.scalix.sac.ubermgr.caa.RESService.doRequest(RESService.java:83)
at com.scalix.caa.soap.SOAPDispatcherServlet.onMessage(SOAPDispatcherServlet.java:268)
at com.scalix.caa.soap.SAAJServlet.doPost(SAAJServlet.java:123)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151)
at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:200)
at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:283)
at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:773)
at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703)
at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:895)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685)
at java.lang.Thread.run(Unknown Source)

But i already knew either the LoginID or password is not being accepted, yet they work fine to log in to the sxadmin mailbox.

jillrae

Posted: Mon Jun 25, 2007 11:18 am
by eyalm
I upgraded to 11.1 yesterday.
first it was working fine, I was able to login to SAC.
but today I'm getting the same error and can't login to SAC nor run omldapsync.
checking my openldap logs, it's trying to authenticate as uid=sxqueryadmin@fqdn instead of uid=admin (the one I use to login to SAC).

any ideas?

Posted: Mon Jun 25, 2007 11:55 am
by eyalm
admin's password was expired.
I unexpired it and it worked.

Posted: Mon Jul 02, 2007 11:02 am
by Mouseclone
would you mind listing what you did to resolve the problem. I'm still new to Scalix and any information on administration with helpful.

Posted: Mon Jul 02, 2007 11:10 am
by eyalm
after the upgrade I set the password to expire every 45 days and it seems like that set the admin password to expire
I use user admin to log into SAC.
I did omshowu -n admin and checked that Password was 'expired'
so I ran ommodu -E -k admin and it worked.

hope that helps