Migrate from 10 to 11, /SAC is ok, but /webmail failed login

[fraserchen]

Hello..

Recently I moved v10 mail storage from CentOS4.5 to a new CentOS5 machine, then installed v11. The installer went smoothly and successful. SAC is OK, I can list all existing users. 'omstat -a' is good,too. However I can't login webmail, neither existing accounts nor new created one. I always got incorrect password.

what happen......

[fraserchen]

update:

I can 'telnet localhost 110' , use pop3 command to login with existing user credential, then do LIST , STAT.

[fraserchen]

Is there any logs I can check for SWA login failure?

[fraserchen]

Strange, success POP3 login but failed IMAP, same user account.


[xxx@server2 ~]$ telnet 10.0.0.6 110
Trying 10.0.0.6...
Connected to 10.0.0.6 (10.0.0.6).
Escape character is '^]'.
+OK Scalix POP3 interface ready on: server1.xxxr.com
User xxxx@xxxxr.com
+OK xxxx@xxxx.com gets mail here
Pass 123456
+OK User Signed on: xxxx@xxxx.com intray has 140 messages
LIST
+OK Listing
1 2048

-------------------------

[xxxx@server2 ~]$ telnet 10.0.0.6 143
Trying 10.0.0.6...
Connected to 10.0.0.6 (10.0.0.6).
Escape character is '^]'.
* OK Scalix IMAP server 11.1.0.10849 ready on server1.xxxx.com
a login xxxx@xxxx.com 123456
a NO LOGIN failure, service unavailable
* BYE IMAP Server not available
Connection closed by foreign host.

[Valerion]

It is not a CentOS 5 issue, as I have Scalix running on that perfectly.

My suggestion would be to do the following:

1) Do a omstat -s and omstat -a to ensure everything is running
2) Check if Outlook and MAPI works (otherwise it could be the Remote Client Interface)
3) Do a omshowlog -e and see if there's any log entries at the same time as the failed login attempt that could shed light on this
4) Are you using authentication to the internal Scalix password database, or to an external one (like AD or LDAP)?

[les]

Strange, success POP3 login but failed IMAP, same user account.


[xxx@server2 ~]$ telnet 10.0.0.6 110
Trying 10.0.0.6...
Connected to 10.0.0.6 (10.0.0.6).
Escape character is '^]'.
+OK Scalix POP3 interface ready on: server1.xxxr.com
User xxxx@xxxxr.com
+OK xxxx@xxxx.com gets mail here
Pass 123456
+OK User Signed on: xxxx@xxxx.com intray has 140 messages
LIST
+OK Listing
1 2048

-------------------------

[xxxx@server2 ~]$ telnet 10.0.0.6 143
Trying 10.0.0.6...
Connected to 10.0.0.6 (10.0.0.6).
Escape character is '^]'.
* OK Scalix IMAP server 11.1.0.10849 ready on server1.xxxx.com
a login xxxx@xxxx.com 123456
a NO LOGIN failure, service unavailable
* BYE IMAP Server not available
Connection closed by foreign host.

This is normal.

pop3 uses a different pam authentication method to imap. swa uses the same as imap. Mapi is also different.

Thus you can have a problem which only affects imap/swa based logins, with pop3, mapi and sac ok.

Its a difficult problem to solve but this may help you out......

viewtopic.php?t=8100&highlight=experience

[fraserchen]

I have been working on the upgrade for a week. my mail store is about 46GB.

This time I redo the rsync of mailstore. Just got through the procedure 10 minutes ago. No difference from before, but now it seems up and running and I can login webmail.

The new server is not in production but load is quite high, 3.5. Also webmail got timeout several times while opening a mail folder, calendar and contacts. Is it working hard to initial the mailbox database?


Fraser

[les]

I have been working on the upgrade for a week. my mail store is about 46GB.

This time I redo the rsync of mailstore. Just got through the procedure 10 minutes ago. No difference from before, but now it seems up and running and I can login webmail.

The new server is not in production but load is quite high, 3.5. Also webmail got timeout several times while opening a mail folder, calendar and contacts. Is it working hard to initial the mailbox database?


Fraser

That would be postgres and the index of all users mail. This will take some time for 46gb......

You can limit the load that the cpu uses with the following switches in general.cfg in scalix....

# Throttle the mailbox indexing service to avoid system crash
# where xx and yy are per-CPU load averages. The IDX_MAXLOAD setting
# will stop the indexer from indexing any further messages when the
# per-CPU load average goes above the defined value. The indexer will
# not resume indexing until the per-CPU load average goes below the
# value defined by IDX_MINLOAD.
IDX_MAXLOAD=6
IDX_MINLOAD=2

while thats running everything else will suffer.

Once its completed a full run then it will return to normal.

[fraserchen]

Thanks for the information. That's true. I just tried again and the webmail ran smoothly. I got a SOAP27 error on another user account, but when I relogin after a few minutes, it was good.

fraser

[fraserchen]

my two pennies here;

1. I was stuck on installer back and forth many times, error log as following

2007-08-16 12:07:40,253 WARNING Could not determine PostgreSQL whitelist, OK.
2007-08-16 12:07:50,326 INFO Configuring PostgreSQL...
2007-08-16 12:07:56,577 ERROR Operation failed: Failed to initialize the PostgreSQL database.

Postgres Log showed 'can't bind to port 5733' , or another instance is running. Later, it was 'password can't work with postgresql' . Even if I've killed all postgres process, still couldn't pass.

Eventally, reinstall postgresql solved the problem.

2. After a failed installation, /var/opt/scalix was moved to a subfolder. I'll need to move it back, otherwise installer couldn't detect massage store.

fraser

[btisdall]

[xxxx@server2 ~]$ telnet 10.0.0.6 143
Trying 10.0.0.6...
Connected to 10.0.0.6 (10.0.0.6).
Escape character is '^]'.
* OK Scalix IMAP server 11.1.0.10849 ready on server1.xxxx.com
a login xxxx@xxxx.com 123456
a NO LOGIN failure, service unavailable
* BYE IMAP Server not available
Connection closed by foreign host.

Just in case this helps anyone else I had the same issue this week with a user, the problem seemed to be stale imap connections, the fix was to kill all the imap processes belonging to that virtual user (omshowu $user gets you the ID).