Can't login with sxadmin account

[panama]

Hello,

I have been running succesfully scalix from the last saturday, but today I cannot acces to SAC with sxadmin account anymore. It says Check Login ID and password. I am sure I didn't change the password and also I tried to reset the password doing:

ommodu -o sxadmin --authid sxadmin -p <password>

but it didn't work. I really appreciate if can help with this problem. Thanks in advance.

My system:
Centos 4.4
Scalix 11.0.4

[panama]

I am including the logs (tail -f /var/opt/scalix/it/tomcat/logs/scalix-caa.log

2007-05-30 13:23:59,596 ERROR [RbacAuthorizationHelper.authenticateUser:92] Exception:
javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]

Any ideas?..... Thanks in advance.

[craig]

were there any changes made to the server recently, can you do a rpm -qa |grep java
omstat -a
omstat -s
ps aux |grep java


Post output of the above
Craig

[panama]

Hi,

No, there were no changes recently, it was running fine until today, yesterday I could login into SAC, it's weird.

# rpm -qa |grep java
java-1.4.2-gcj-compat-1.4.2.0-27jpp
gcc-java-3.4.6-8

# omstat -a
PC Monitor Started NON-STOP 0
Directory Relay Server Started 09:56:58
Notification Server Started 09:56:58 0
Shared memory daemon Started NON-STOP
Notification Monitor Started NON-STOP
Session Monitor Started NON-STOP
Indexer Started NON-STOP
Stats Daemon Started NON-STOP
Container Access Monitor Started NON-STOP
Item Structure Server Stopped
Database Monitor Started 09:56:58
Licence Monitor Daemon Started NON-STOP
LDAP Daemon Started 09:56:58
Queue Manager Started NON-STOP
Item Delete Daemon Started NON-STOP
IMAP Server Daemon Started 09:56:59
SMTP Relay Started 09:56:59
Mime Browser Controller Started 09:56:59
Event Server Started 09:56:59

[root@intranet ~]# omstat -s
Service Router Started 09:57:01 0
Local Delivery Started 09:57:01 0
Internet Mail Gateway Started 09:57:01 0
Local Client Interface Enabled 09:57:01 0
Remote Client Interface Enabled 09:57:01 2
Test Server Started 09:57:02 0
Request Server Started 09:57:02 0
Print Server Started 09:57:02 0
Bulletin Board Server Started 09:57:02 0
Background Search Service Started 09:57:02 0
CDA Server Started 09:57:02 0
POP3 interface Started 09:57:02 0
Omscan Server Started 09:57:02 0
Archiver Started 09:57:02 0

# ps aux |grep java
root 18816 0.8 12.6 324432 130412 ? Sl 12:01 2:02 /usr/java/jre1.5.0_06/bin/java -server -Djava.net.preferIPv4Stack=true -Dscalix.instance=/var/opt/scalix/it -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.util.logging.config.file=/var/opt/scalix/it/tomcat/conf/logging.properties -Djava.endorsed.dirs=/opt/scalix-tomcat/common/endorsed -classpath /usr/java/jre1.5.0_06/lib/tools.jar:/opt/scalix-tomcat/bin/bootstrap.jar:/opt/scalix-tomcat/bin/commons-logging-api.jar -Dcatalina.base=/var/opt/scalix/it/tomcat -Dcatalina.home=/opt/scalix-tomcat -Djava.io.tmpdir=/var/opt/scalix/it/tomcat/temp org.apache.catalina.startup.Bootstrap start

Thanks for helping.

[panama]

I also tried reinstalling Scalix Management Services and Scalix Management Agent as other posts in this forum suggest but it didn't work!!!.... Please do you have any other ideas?.. thanks.

[panama]

Please help!! which other logfiles could I look for?, Would you recommend reinstall Scalix-DB?

Thanks for helping.

[panama]

Hi,

Finally I solved this issue.

For some reason the sxqueryadmin account was locked.

1. I changed the sxqueryadmin password to the same as in psdata.
ommodu -o sxqueryadmin -p <mypasswd>

2. I unlocked the sxqueryadmin and configured his password to never expire
ommodu -o sxqueryadmin -E -k

That's it. I just logged in again with sxadmin and it works again!!

Does anybody could explain me what is the relationship between sxadmin and sxqueryadmin. Thanks

[grantwilson]

Hi Panama,

Thanks for this. I had the same problem after upgrading from Scalix 11.0.3 to 11.0.4
I did exactly what you said and it fixed my problem.

Regards

Grant

[Jeremy James]

I stumbled accross this thread because even i could not log into the SAC

When i read this:

For some reason the sxqueryadmin account was locked.

I checked the user but it was not locked, i then ran the command on the sxadmin and suddenly i was able to log in into SAC again.

I wonder what changed the sxadmin but it seems to be a good idea if you have problems logging into the SAC to check if sxadmin or sxqueryadmin are locked or have expired or pre-expired passwords even if you did not ever set expiry for passwords it seems to happen on it's own......

[kjakkanen]

This happened to us as well, by random I noticed that the omldapsync fails with "ldap_bind: Invalid credentials". Was fixed thanks to the information in this thread (the sxadmin password had expired).

Is it by design that also the password for sxadmin expires?

Can someone (from Scalix?) comment on the roles that the users sxadmin and sxqueryadmin have, what are the areas they are used for (just to learn more about the Scalix internals)? Can also the password for sxqueryadmin expire and what is affected?

KR;
Kimmo

[joaster]

Thanks to this threat we can also logon with sxadmin again...

[scalixuser]

Yes, this thread is definitely a life saver. We can login as sxadmin again as well.

[zweimeter]

a lot for this post and resolving this Issue. It also helped me a lot!

[mikgotier]

Hi everyone,

I'm actually a recent user of Scalix. I work as an IT Analyst for my company since only 2 weeks.
I was able to operate the SAC console with no problems for the past two weeks but this morning, nothing working at the SAC login screen. I get the following message :
Could not login
Check the login/password .....

I read a lot of post about the sxadmin account locked, psw expired and stuff like this.

Unfortunalty, i am still unable to log me in even if i try these commands :

ommodu -e sxadmin
ommodu -o sxadmin -p <mypsw>
ommodu -o sxadmin -e -k

This is what i got with the omshowu command :

mail-qc:~ # oshowu lsxadmin
-bash: oshowu: command not found
mail-qc:~ # omshowu lsxadmin
Authentication ID: lsxadmin@**.LS.LOCAL
Globally Unique ID: 15000000b8690464-2.0.861.291
User Name : lsxadmin /CN=lsxadmin
MailNode : mailqc
Internet Address : lsxadmin-mail-qc@**.com
System Login : 60534
Password : pre-expired
Admin Capabilities : YES
Mailbox Admin Capabilities : YES
Language : C
Mail Account: Unlocked
Last Signon : 12.02.08 02:00:02
Receipt of mail : ENABLED
Service level : 0
Excluded from Tidying : NO
Recovery Folder visible : NO
User Class : Limited
SIS URL : sxidx://mail-qc.**.com/05000000b8690464-2.0.861.291

I was unable to change the status of my sxadmin password (still on pre expired)

Thanks all for the help.