admin

bigd41 · Postby **bigd41** » Fri Mar 17, 2006 11:44 pm

Hello I have unlocked my admin account and reset the password and still can't login to sac
I am able to login to the front end and this live and it work thursday 3/16/06 but not today.
what happen to this can't have this down long.

florian · Postby **florian** » Sat Mar 18, 2006 5:59 pm

This is not about your actual admin account being locked, but actually the sxqueryadmin account, which is used for internal communication between different parts of the admin system.

You will need to prevent this account from being subject to password aging.

The issue has come up with a number of customers; we are working on a full solution. Until then, the recommendation is to disable password aging as there is no simple way to reset the sxqueryadmin user's password.

Cheers,
Florian.

aniewels · Postby **aniewels** » Sun Mar 19, 2006 4:15 pm

how to disable without sac? nearly crashed my whole testserver with trying out things :)

i'm so glad that such stuff only happens on weekends :)
keeps away a lot of panic in the office.

aniewels · Postby **aniewels** » Mon Mar 20, 2006 7:01 am

ok, i disabled but still cant login.

i also set a new password (do i have to change it somewhere else?), reinstalled sac, checked fqdn a hundred times, checked several cfgs....

- no new ip
- no new hostname
- no new domains

just stopped working :(

any hints?

edit:
i get this error in caa.log:
LDAP: error code 49 - Invalid Credentials

all threads relating to this dont help in my case :(

Postby **ScalixSupport** » Mon Mar 20, 2006 7:39 am

Please post

omshowu sxadmin
omshowu sxqueryadmin

Cheers,

Sascha.

aniewels · Postby **aniewels** » Mon Mar 20, 2006 8:19 am

shame on me.... i made a mess... and don't know how.

i have a server running in our office (scalix,OFFICENODE) and one for testing / private use (scalix,TESTNODE).
these 2 are completely different machines.
i mixed it as follows:

[root@scalix /]# omshowu sxadmin
Authentication ID: sxadmin@TESTHOST.de
User Name : sxadmin /CN=sxadmin
MailNode : scalix,OFFICENODE
Internet Address : "sxadmin" <sxadmin@TESTHOST.de>
System Login : sxadmin
Password : set
Admin Capabilities : YES
Mailbox Admin Capabilities : NO
Language : C
Virtual Vault : Enabled (default)
Mail Account: Unlocked
Last Signon : 07.03.06 03:06:57
Receipt of mail : ENABLED
Service level : 0
Excluded from Tidying : NO
User Class : Limited

----

[root@scalix /]# omshowu sxqueryadmin
Authentication ID: sxqueryadmin@scalix.TESTHOST.de
User Name : sxqueryadmin /CN=sxqueryadmin
MailNode : scalix,OFFICENODE
Internet Address : sxqueryadmin-scalix@scalix.OFFICEHOST.de
System Login : 55000
Password : set
Admin Capabilities : YES
Mailbox Admin Capabilities : NO
Language : C
Virtual Vault : Enabled (default)
Mail Account: Unlocked
Last Signon : Never.
Receipt of mail : ENABLED
Service level : 0
Excluded from Tidying : NO
User Class : Limited

other things i mentioned:
the scalix,OFFICENODE exists on the testserver
[root@scalix ~]# omshowiam
scalix,TESTNODE TESTHOST.de "C" <C>
scalix,OFFICENODE Null Null

http://scalix.TESTHOST.de/res/RESDispatcher brings back:
RES:Not Okay - Not initialized

the thing is.... it worked :)
and stopped working from one day to another. no reboot, nothing.

is there a way to get out of this exepting reinstalling whole scalix (or loss of data)? Would not be a big problem (it's the testserver that is not working)

Sorry for having such messy users like me :)

aniewels · Postby **aniewels** » Wed Mar 22, 2006 3:39 pm

no solution?

florian · Postby **florian** » Thu Mar 23, 2006 6:00 am

ok... ;-)

first, if you wanted to reinstall anything, you could uninstall/reinstall only the SAC and RES components using a custom install; as long as you don't deinstall Scalix server, your data would be kept.

Actually, we should go through this in full.....

1) in your /etc/opt/scalix/caa/config/log4j.properties file, replace all occurences of "INFO" with "DEBUG" - there should be 2.
2) You might want to do the same thing in res/config/log4j.properties.
3) Restart tomcat.
4) try again.
5) check out the logfiles in /opt/scalix-tomcat/logs

cheers,
F.

aniewels · Postby **aniewels** » Thu Mar 23, 2006 8:30 am

hm... looks quite normal exept:

1 Warning in caa.log
WARN [CAAConfigLoader.parseConfigDocument:224] No services are configured in this config file

florian · Postby **florian** » Thu Mar 23, 2006 8:32 am

interesting are the DEBUG level lines just before the invalid credentials exception.

the line you posted is normal and not relevant.

-- f.

Postby **ScalixSupport** » Thu Mar 23, 2006 8:38 am

I'd also like to see

omshowpwd

please. Thanks,

Sascha.

aniewels · Postby **aniewels** » Thu Mar 23, 2006 9:13 am

2006-03-23 14:14:48,570 DEBUG [SAAJServlet.doPost:93] ************ Request Start ***************
2006-03-23 14:14:48,571 DEBUG [SAAJServlet.doPost:95] Starting SAAJServlet with POST
2006-03-23 14:14:48,572 DEBUG [SAAJUtils.dumpHeaders:129] -----> Header host:scalix.mampf.de
2006-03-23 14:14:48,573 DEBUG [SAAJUtils.dumpHeaders:129] -----> Header user-agent:Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1
2006-03-23 14:14:48,573 DEBUG [SAAJUtils.dumpHeaders:129] -----> Header accept:text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
2006-03-23 14:14:48,574 DEBUG [SAAJUtils.dumpHeaders:129] -----> Header accept-language:de-de,de;q=0.8,en-us;q=0.5,en;q=0.3
2006-03-23 14:14:48,574 DEBUG [SAAJUtils.dumpHeaders:129] -----> Header ---------------:------------
2006-03-23 14:14:48,575 DEBUG [SAAJUtils.dumpHeaders:129] -----> Header accept-charset:ISO-8859-1,utf-8;q=0.7,*;q=0.7
2006-03-23 14:14:48,575 DEBUG [SAAJUtils.dumpHeaders:129] -----> Header Keep-Alive:300
2006-03-23 14:14:48,576 DEBUG [SAAJUtils.dumpHeaders:129] -----> Header connection:keep-alive
2006-03-23 14:14:48,576 DEBUG [SAAJUtils.dumpHeaders:129] -----> Header content-type:text/xml
2006-03-23 14:14:48,577 DEBUG [SAAJUtils.dumpHeaders:129] -----> Header content-length:454
2006-03-23 14:14:48,577 DEBUG [SAAJUtils.dumpHeaders:129] -----> Header cookie:opPrefs=wl_redbear@mampf.de%3A8%26wt_redbear@mampf.de%3A8%26wl_an@ppng.de%3A234%26wt_an@ppng.de%3A11%26ww_redbear@mampf.de%3A1440%26wh_redbear@mampf.de%3A821; opTemp=g4%3Aredbear@mampf.de%26sy%3AOx6f716a6c756e7c332f232c342a2d22282a272c07%26f3%3AOx6f716a6c756e7c332f232c342a2d22282a272c07%26i2%3A1143114250%26jZ%3AFull
2006-03-23 14:14:48,578 DEBUG [SAAJUtils.dumpHeaders:129] -----> Header pragma:no-cache
2006-03-23 14:14:48,578 DEBUG [SAAJUtils.dumpHeaders:129] -----> Header Cache-Control:no-cache
2006-03-23 14:14:48,579 DEBUG [SOAPDispatcherServlet.onMessage:158] **** Start of Message Handling ****
2006-03-23 14:14:48,582 DEBUG [SOAPHelper.getElementValue:144] Found ServiceType
2006-03-23 14:14:48,583 DEBUG [CAAConfigLoader.getValue:56] Looking for config for scalix.res, key disabled found null
2006-03-23 14:14:48,584 DEBUG [SOAPHelperUtils.getSoapBodyElement:179] Body element1 CAARequestMessage = null
2006-03-23 14:14:48,584 DEBUG [SOAPHelperUtils.getSoapBodyElement:187] Body element2 ServiceType = scalix.res
2006-03-23 14:14:48,585 DEBUG [SOAPHelperUtils.getSoapBodyElement:187] Body element2 Credentials = null
2006-03-23 14:14:48,586 DEBUG [SOAPHelperUtils.getSoapBodyElement:190] Found Credentials
2006-03-23 14:14:48,586 DEBUG [SOAPHelperUtils.getCredentials:255] local name=id
2006-03-23 14:14:48,587 DEBUG [SOAPHelperUtils.getCredentials:256] qualified name=id
2006-03-23 14:14:48,587 DEBUG [SOAPHelperUtils.getCredentials:272] local name=name
2006-03-23 14:14:48,588 DEBUG [SOAPHelperUtils.getCredentials:273] qualified name=name
2006-03-23 14:14:48,588 DEBUG [SOAPHelperUtils.getCredentials:277] value=sxadmin@mampf.de
2006-03-23 14:14:48,610 DEBUG [SOAPHelperUtils.getCredentials:272] local name=passwd
2006-03-23 14:14:48,610 DEBUG [SOAPHelperUtils.getCredentials:273] qualified name=passwd
2006-03-23 14:14:48,611 DEBUG [SOAPHelperUtils.getCredentials:282] value=xxxxxxxxx
2006-03-23 14:14:48,611 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:69] Body element1 CAARequestMessage = null
2006-03-23 14:14:48,612 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:77] Body element2 ServiceType = scalix.res
2006-03-23 14:14:48,613 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:77] Body element2 Credentials = null
2006-03-23 14:14:48,613 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:77] Body element2 FunctionName = GetConsoleConfig
2006-03-23 14:14:48,614 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:80] Found FunctionName
2006-03-23 14:14:48,614 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:81] value =GetConsoleConfig
2006-03-23 14:14:48,615 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:69] Body element1 CAARequestMessage = null
2006-03-23 14:14:48,615 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:77] Body element2 ServiceType = scalix.res
2006-03-23 14:14:48,616 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:80] Found ServiceType
2006-03-23 14:14:48,617 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:81] value =scalix.res
2006-03-23 14:14:48,617 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:69] Body element1 CAARequestMessage = null
2006-03-23 14:14:48,618 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:77] Body element2 ServiceType = scalix.res
2006-03-23 14:14:48,618 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:77] Body element2 Credentials = null
2006-03-23 14:14:48,619 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:77] Body element2 FunctionName = GetConsoleConfig
2006-03-23 14:14:48,620 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:80] Found FunctionName
2006-03-23 14:14:48,621 DEBUG [SOAPHelperUtils.getSOAPBodyElementValue:81] value =GetConsoleConfig
2006-03-23 14:14:48,621 DEBUG [SOAPHelperUtils.getSoapBodyElement:179] Body element1 CAARequestMessage = null
2006-03-23 14:14:48,622 DEBUG [SOAPHelperUtils.getSoapBodyElement:187] Body element2 ServiceType = scalix.res
2006-03-23 14:14:48,622 DEBUG [SOAPHelperUtils.getSoapBodyElement:187] Body element2 Credentials = null
2006-03-23 14:14:48,623 DEBUG [SOAPHelperUtils.getSoapBodyElement:187] Body element2 FunctionName = GetConsoleConfig
2006-03-23 14:14:48,624 DEBUG [SOAPHelperUtils.getSoapBodyElement:187] Body element2 GetConsoleConfigParameters = null
2006-03-23 14:14:48,624 DEBUG [SOAPHelperUtils.getSoapBodyElement:190] Found GetConsoleConfigParameters
2006-03-23 14:14:48,625 DEBUG [CAAServiceFactory.getService:52] Looking for service called scalix.res
2006-03-23 14:14:48,625 DEBUG [CAAConfigLoader.getValue:56] Looking for config for scalix.res, key service.class found com.scalix.sac.ubermgr.caa.RESService
2006-03-23 14:14:48,626 DEBUG [SOAPDispatcherServlet.onMessage:265] Calling doRequest() on service com.scalix.sac.ubermgr.caa.RESService@174aa60
2006-03-23 14:14:48,627 DEBUG [LDAPHelperUtils.getTargetHost:326] Sending request to ldap host =scalix.mampf.de
2006-03-23 14:14:48,627 DEBUG [LDAPHelperUtils.getTargetHost:327] Sending request as quermgr id =sxqueryadmin@scalix.mampf.de
2006-03-23 14:14:48,628 DEBUG [LDAPHelperUtils.getTargetHost:328] Filter =(omUlAuthid=sxadmin@mampf.de)
2006-03-23 14:14:48,641 ERROR [LDAPHelperUtils.getTargetHost:352] javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
2006-03-23 14:14:48,642 DEBUG [RbacAuthorizationHelper.authenticateUser:49] Sending request to ldap host =scalix.mampf.de
2006-03-23 14:14:48,643 DEBUG [RbacAuthorizationHelper.authenticateUser:50] Sending request as user id = sxadmin@mampf.de
2006-03-23 14:14:48,643 DEBUG [RbacAuthorizationHelper.authenticateUser:51] Filter =(omUlAuthid=sxadmin@mampf.de)
2006-03-23 14:14:48,700 DEBUG [RbacAuthorizationHelper.isScalixUser:209] Sending request to ldap host =scalix.mampf.de
2006-03-23 14:14:48,701 DEBUG [RbacAuthorizationHelper.isScalixUser:210] Sending request as querymgr id =sxqueryadmin@scalix.mampf.de
2006-03-23 14:14:48,701 DEBUG [RbacAuthorizationHelper.isScalixUser:211] Filter =(omUlAuthid=sxadmin@mampf.de)
2006-03-23 14:14:48,725 ERROR [RbacAuthorizationHelper.isScalixUser:228] Exception:
javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.connect(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.<init>(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(Unknown Source)
at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
at javax.naming.InitialContext.init(Unknown Source)
at javax.naming.InitialContext.<init>(Unknown Source)
at javax.naming.directory.InitialDirContext.<init>(Unknown Source)
at com.scalix.sac.ubermgr.ldap.LDAPQuery.initContext(LDAPQuery.java:71)
at com.scalix.sac.ubermgr.rbac.RbacAuthorizationHelper.isScalixUser(RbacAuthorizationHelper.java:212)
at com.scalix.sac.ubermgr.ldap.LDAPServiceHandler.Login(LDAPServiceHandler.java:122)
at com.scalix.sac.ubermgr.caa.RESService.authenticateAndAuthorizeUser(RESService.java:157)
at com.scalix.sac.ubermgr.caa.RESService.doRequest(RESService.java:83)
at com.scalix.caa.soap.SOAPDispatcherServlet.onMessage(SOAPDispatcherServlet.java:267)
at com.scalix.caa.soap.SAAJServlet.doPost(SAAJServlet.java:123)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:237)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:214)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:198)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:152)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:137)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:118)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:102)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:929)
at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:160)
at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:300)
at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:374)
at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:743)
at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:675)
at org.apache.jk.common.SocketConnection.runIt(ChannelSocket.java:866)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683)
at java.lang.Thread.run(Unknown Source)
2006-03-23 14:14:48,729 DEBUG [SAAJServlet.doPost:130] ************ Request End Success ***************

aniewels · Postby **aniewels** » Thu Mar 23, 2006 9:15 am

and the omshowpwd

Scalix User Password Configuration:
Expiry (days): -
Min. length: -
Max. repeated characters: -
Must have alphabetic character: no
Must have lower case alphabetic: no
Must have upper case alphabetic: no
Must have numeric character: no
Must have non-alphanumeric character: no
Min. re-use count: -
Min. re-use duration (days): -
Max. invalid attempts before lock-out: -

florian · Postby **florian** » Thu Mar 23, 2006 9:20 am

and now omshowu -n sxadmin and omshowu -n sxqueryadmin

:-) thanks.

aniewels · Postby **aniewels** » Thu Mar 23, 2006 9:22 am

[root@scalix bin]# omshowu -n sxadmin
Authentication ID: sxadmin@mampf.de
User Name : sxadmin /CN=sxadmin
MailNode : scalix,niewels
Internet Address : "sxadmin" <sxadmin@mampf.de>
System Login : sxadmin
Password : set
Admin Capabilities : YES
Mailbox Admin Capabilities : NO
Language : C
Virtual Vault : Enabled (default)
Mail Account: Unlocked
Last Signon : 07.03.06 03:06:57
Receipt of mail : ENABLED
Service level : 0
Excluded from Tidying : NO
User Class : Limited

[root@scalix bin]# omshowu -n sxqueryadmin
Authentication ID: sxqueryadmin@scalix.mampf.de
User Name : sxqueryadmin /CN=sxqueryadmin
MailNode : scalix,niewels
Internet Address : sxqueryadmin-scalix@scalix.niewels.de
System Login : 55000
Password : set
Admin Capabilities : YES
Mailbox Admin Capabilities : NO
Language : C
Virtual Vault : Enabled (default)
Mail Account: Unlocked
Last Signon : Never.
Receipt of mail : ENABLED
Service level : 0
Excluded from Tidying : NO
User Class : Limited

Scalix Forums

admin

admin

Who is online