auth credentials have expired

Posted by: @rmiranda16

Hello,

 

When login with zextras user(user admin) get this error: "auth credentials have expired". This error started couple days after install.

Hi @rmiranda16 ,

and welcome to zextras community forum.

Probably you or another admin have applied to default COS "Max password age", i suggest you to login with your admin into web user interface, this will ask you to change password, finally you can proceed to fix this misconfiguration in admin interface.

Hello @mgarbo,

I did this connecting from the user interface but from there I enter without problems, it only happens to me from the admin.

I also tried changing the password from the console, without any favorable result.

@rmiranda16 

Hi,
Can you please check servers' zimbraAuthTokenLifetime from CLI?

zmprov -l ga email_address | grep -i zimbraAuthTokenLifetime

Thanks.

Hello @shariful-islam,

Said this:

zmprov -l ga zextras@hunter.com.do | grep -i zimbraAuthTokenLifetime

zimbraAuthTokenLifetime: 2d

@rmiranda16 

AuthTokenLifetime is okay.

Did you get anything in carbonio.log about this issue?

Besides, can you please try to execute zmsshkeygen & zmupdateauthkeys and share your observations?

Thanks.

Thanks @shariful-islam,

in the log we don't see anything related to the issuse.

When running zmsshkeygen & zmupdateauthkeys we get this, but still can't log in:

zextras@correos:~$ zmsshkeygen & zmupdateauthkeys
[1] 61035
Generating public/private rsa key pair.
Your identification has been saved in /opt/zextras/.ssh/zimbra_identity
Your public key has been saved in /opt/zextras/.ssh/zimbra_identity.pub
The key fingerprint is:
SHA256:xxJeQArAbvqHERM9mT2tNsL+58f0H+nDJLIEpGKhIwU correos.hunter.com.do
The key's randomart image is:
+---[RSA 2048]----+
|Eo.o.+ oo |
| + *.o.o. |
| o + o.=. . |
|. B = =..+ |
| + * + .S.o |
|. . . o+ . .. |
| . o . + + +o |
| o . . . + ..o. |
| . o.. .o. |
+----[SHA256]-----+
Key has comment 'correos.hunter.com.do'
Your identification has been saved with the new passphrase.
Updating keys for correos.hunter.com.do
Fetching key for correos.hunter.com.do
Updating keys for correos.hunter.com.do
Updating /opt/zextras/.ssh/authorized_keys
[1]+ Done zmsshkeygen

@rmiranda16 

Hi,

Thanks a lot for your effort.

The issue you are facing is most likely due to the expiration of ZM_AUTH_TOKEN.

As you mentioned earlier that your token lifetime is 2d.

zmprov -l ga zextras@hunter.com.do | grep -i zimbraAuthTokenLifetime

zimbraAuthTokenLifetime: 2d

Another possible reason could be a mismatch in TIME & DATE Settings.
So Could you please check your server's time and date settings?

Besides, share the result of
zmprov zextras@hunter.com.do zimbraMailHost

Also, could you please clear your browser's cache and try again? If possible, try logging in with the browser's anonymous mode. During this login attempt please try checking the audit.log for any hints.

Thanks

Hello @shariful-islam,

Thanks for replying, check the TIME & DATE Settings and everything is ok, the same time zone as my computer.

If the problem is due to the expiration of ZM_AUTH_TOKEN, what could I do to solve it? sorry I'm new with carbon.

@rmiranda16 

Thanks for the hint.

Please share the result of
zmprov zextras@hunter.com.do zimbraMailHost

Also, could you please clear your browser's cache and try again? If possible, try logging in with the browser's anonymous/incognito mode. During this login attempt please try checking the audit.log for any hints.

Thanks.

@shariful-islam for 

It's OK after login anonymous in the browser. 

Thank you very much for the help!!

@rmiranda16 

Hi,

We are glad that it helped.

Thanks a lot for all of your efforts.

Thanks.

We also have this error often. It turns out that you can use the web version only in incognito mode or by permanently deleting the cache (ZM_AUTH_TOKEN)?

su - zextras -c "zmcontrol -v"
Carbonio Release 23.3.0

Posted by: @rmiranda16

Hello,

 

When login with zextras user(user admin) get this error: "auth credentials have expired". This error started couple days after install.

I already have this error, many times, after each update I guess.

I usually clear cookies from the site and it resolve my problem.