Notifications
Clear all

auth credentials have expired


rmiranda16
(@rmiranda16)
Joined: 3 months ago
Posts: 7
Topic starter  

Hello,

 

When login with zextras user(user admin) get this error: "auth credentials have expired". This error started couple days after install.


Quote
mgarbo
(@mgarbo)
Joined: 7 years ago
Posts: 30
 
Posted by: @rmiranda16

Hello,

 

When login with zextras user(user admin) get this error: "auth credentials have expired". This error started couple days after install.

Hi @rmiranda16 ,

and welcome to zextras community forum.

Probably you or another admin have applied to default COS "Max password age", i suggest you to login with your admin into web user interface, this will ask you to change password, finally you can proceed to fix this misconfiguration in admin interface.

 


ReplyQuote
rmiranda16
(@rmiranda16)
Joined: 3 months ago
Posts: 7
Topic starter  

Hello @mgarbo,

I did this connecting from the user interface but from there I enter without problems, it only happens to me from the admin.

I also tried changing the password from the console, without any favorable result.


ReplyQuote
Md. Shariful Islam
(@shariful-islam)
Admin
Joined: 3 months ago
Posts: 45
 

@rmiranda16 

Hi,
Can you please check servers' zimbraAuthTokenLifetime from CLI?

zmprov -l ga email_address | grep -i zimbraAuthTokenLifetime

Thanks.


ReplyQuote
rmiranda16
(@rmiranda16)
Joined: 3 months ago
Posts: 7
Topic starter  

Hello @shariful-islam,

 

Said this:

zmprov -l ga zextras@hunter.com.do | grep -i zimbraAuthTokenLifetime

zimbraAuthTokenLifetime: 2d


ReplyQuote
Md. Shariful Islam
(@shariful-islam)
Admin
Joined: 3 months ago
Posts: 45
 

@rmiranda16 

AuthTokenLifetime is okay.

Did you get anything in carbonio.log about this issue?

Besides, can you please try to execute zmsshkeygen & zmupdateauthkeys and share your observations?

Thanks.


ReplyQuote
rmiranda16
(@rmiranda16)
Joined: 3 months ago
Posts: 7
Topic starter  

Thanks @shariful-islam,

 

in the log we don't see anything related to the issuse.

When running zmsshkeygen & zmupdateauthkeys we get this, but still can't log in:

zextras@correos:~$ zmsshkeygen & zmupdateauthkeys
[1] 61035
Generating public/private rsa key pair.
Your identification has been saved in /opt/zextras/.ssh/zimbra_identity
Your public key has been saved in /opt/zextras/.ssh/zimbra_identity.pub
The key fingerprint is:
SHA256:xxJeQArAbvqHERM9mT2tNsL+58f0H+nDJLIEpGKhIwU correos.hunter.com.do
The key's randomart image is:
+---[RSA 2048]----+
|Eo.o.+ oo |
| + *.o.o. |
| o + o.=. . |
|. B = =..+ |
| + * + .S.o |
|. . . o+ . .. |
| . o . + + +o |
| o . . . + ..o. |
| . o.. .o. |
+----[SHA256]-----+
Key has comment 'correos.hunter.com.do'
Your identification has been saved with the new passphrase.
Updating keys for correos.hunter.com.do
Fetching key for correos.hunter.com.do
Updating keys for correos.hunter.com.do
Updating /opt/zextras/.ssh/authorized_keys
[1]+ Done zmsshkeygen


ReplyQuote
Md. Shariful Islam
(@shariful-islam)
Admin
Joined: 3 months ago
Posts: 45
 

@rmiranda16 

Hi,

Thanks a lot for your effort.

The issue you are facing is most likely due to the expiration of ZM_AUTH_TOKEN.

As you mentioned earlier that your token lifetime is 2d.

zmprov -l ga zextras@hunter.com.do | grep -i zimbraAuthTokenLifetime

zimbraAuthTokenLifetime: 2d

 

Another possible reason could be a mismatch in TIME & DATE Settings.
So Could you please check your server's time and date settings?

Besides, share the result of
zmprov zextras@hunter.com.do zimbraMailHost

Also, could you please clear your browser's cache and try again? If possible, try logging in with the browser's anonymous mode. During this login attempt please try checking the audit.log for any hints.

Thanks


ReplyQuote
rmiranda16
(@rmiranda16)
Joined: 3 months ago
Posts: 7
Topic starter  

Hello @shariful-islam,

 

Thanks for replying, check the TIME & DATE Settings and everything is ok, the same time zone as my computer.

 

If the problem is due to the expiration of ZM_AUTH_TOKEN, what could I do to solve it? sorry I'm new with carbon.


ReplyQuote
Md. Shariful Islam
(@shariful-islam)
Admin
Joined: 3 months ago
Posts: 45
 

@rmiranda16 

Thanks for the hint.

Please share the result of
zmprov zextras@hunter.com.do zimbraMailHost

Also, could you please clear your browser's cache and try again? If possible, try logging in with the browser's anonymous/incognito mode. During this login attempt please try checking the audit.log for any hints.

Thanks.


ReplyQuote
rmiranda16
(@rmiranda16)
Joined: 3 months ago
Posts: 7
Topic starter  

@shariful-islam for 

It's OK after login anonymous in the browser. 

 

Thank you very much for the help!!

 


ReplyQuote
Md. Shariful Islam
(@shariful-islam)
Admin
Joined: 3 months ago
Posts: 45
 

@rmiranda16 

Hi,

We are glad that it helped.

Thanks a lot for all of your efforts.

Thanks.


ReplyQuote