auth credentials ha...
 
Notifications
Clear all

auth credentials have expired

14 Posts
5 Users
2 Likes
2,229 Views
(@rmiranda16)
Joined: 2 years ago
Posts: 8
Topic starter  

Hello,

 

When login with zextras user(user admin) get this error: "auth credentials have expired". This error started couple days after install.


   
Quote
mgarbo
(@mgarbo)
Joined: 9 years ago
Posts: 61
 
Posted by: @rmiranda16

Hello,

 

When login with zextras user(user admin) get this error: "auth credentials have expired". This error started couple days after install.

Hi @rmiranda16 ,

and welcome to zextras community forum.

Probably you or another admin have applied to default COS "Max password age", i suggest you to login with your admin into web user interface, this will ask you to change password, finally you can proceed to fix this misconfiguration in admin interface.

 


   
ReplyQuote
(@rmiranda16)
Joined: 2 years ago
Posts: 8
Topic starter  

Hello @mgarbo,

I did this connecting from the user interface but from there I enter without problems, it only happens to me from the admin.

I also tried changing the password from the console, without any favorable result.


   
ReplyQuote
(@sharif)
Admin
Joined: 2 years ago
Posts: 362
 

@rmiranda16 

Hi,
Can you please check servers' zimbraAuthTokenLifetime from CLI?

zmprov -l ga email_address | grep -i zimbraAuthTokenLifetime

Thanks.


   
ReplyQuote
(@rmiranda16)
Joined: 2 years ago
Posts: 8
Topic starter  

Hello @shariful-islam,

 

Said this:

zmprov -l ga zextras@hunter.com.do | grep -i zimbraAuthTokenLifetime

zimbraAuthTokenLifetime: 2d


   
ReplyQuote
(@sharif)
Admin
Joined: 2 years ago
Posts: 362
 

@rmiranda16 

AuthTokenLifetime is okay.

Did you get anything in carbonio.log about this issue?

Besides, can you please try to execute zmsshkeygen & zmupdateauthkeys and share your observations?

Thanks.


   
ReplyQuote
(@rmiranda16)
Joined: 2 years ago
Posts: 8
Topic starter  

Thanks @shariful-islam,

 

in the log we don't see anything related to the issuse.

When running zmsshkeygen & zmupdateauthkeys we get this, but still can't log in:

zextras@correos:~$ zmsshkeygen & zmupdateauthkeys
[1] 61035
Generating public/private rsa key pair.
Your identification has been saved in /opt/zextras/.ssh/zimbra_identity
Your public key has been saved in /opt/zextras/.ssh/zimbra_identity.pub
The key fingerprint is:
SHA256:xxJeQArAbvqHERM9mT2tNsL+58f0H+nDJLIEpGKhIwU correos.hunter.com.do
The key's randomart image is:
+---[RSA 2048]----+
|Eo.o.+ oo |
| + *.o.o. |
| o + o.=. . |
|. B = =..+ |
| + * + .S.o |
|. . . o+ . .. |
| . o . + + +o |
| o . . . + ..o. |
| . o.. .o. |
+----[SHA256]-----+
Key has comment 'correos.hunter.com.do'
Your identification has been saved with the new passphrase.
Updating keys for correos.hunter.com.do
Fetching key for correos.hunter.com.do
Updating keys for correos.hunter.com.do
Updating /opt/zextras/.ssh/authorized_keys
[1]+ Done zmsshkeygen


   
ReplyQuote
(@sharif)
Admin
Joined: 2 years ago
Posts: 362
 

@rmiranda16 

Hi,

Thanks a lot for your effort.

The issue you are facing is most likely due to the expiration of ZM_AUTH_TOKEN.

As you mentioned earlier that your token lifetime is 2d.

zmprov -l ga zextras@hunter.com.do | grep -i zimbraAuthTokenLifetime

zimbraAuthTokenLifetime: 2d

 

Another possible reason could be a mismatch in TIME & DATE Settings.
So Could you please check your server's time and date settings?

Besides, share the result of
zmprov zextras@hunter.com.do zimbraMailHost

Also, could you please clear your browser's cache and try again? If possible, try logging in with the browser's anonymous mode. During this login attempt please try checking the audit.log for any hints.

Thanks


   
ReplyQuote
(@rmiranda16)
Joined: 2 years ago
Posts: 8
Topic starter  

Hello @shariful-islam,

 

Thanks for replying, check the TIME & DATE Settings and everything is ok, the same time zone as my computer.

 

If the problem is due to the expiration of ZM_AUTH_TOKEN, what could I do to solve it? sorry I'm new with carbon.


   
ReplyQuote
(@sharif)
Admin
Joined: 2 years ago
Posts: 362
 

@rmiranda16 

Thanks for the hint.

Please share the result of
zmprov zextras@hunter.com.do zimbraMailHost

Also, could you please clear your browser's cache and try again? If possible, try logging in with the browser's anonymous/incognito mode. During this login attempt please try checking the audit.log for any hints.

Thanks.


   
ReplyQuote
(@rmiranda16)
Joined: 2 years ago
Posts: 8
Topic starter  

@shariful-islam for 

It's OK after login anonymous in the browser. 

 

Thank you very much for the help!!

 


   
ReplyQuote
(@sharif)
Admin
Joined: 2 years ago
Posts: 362
 

@rmiranda16 

Hi,

We are glad that it helped.

Thanks a lot for all of your efforts.

Thanks.


   
ReplyQuote
(@oldmax)
Joined: 11 months ago
Posts: 1
 

We also have this error often. It turns out that you can use the web version only in incognito mode or by permanently deleting the cache (ZM_AUTH_TOKEN)?

su - zextras -c "zmcontrol -v"
Carbonio Release 23.3.0


   
ReplyQuote
dominix
(@dominix)
Joined: 11 years ago
Posts: 129
 
Posted by: @rmiranda16

Hello,

 

When login with zextras user(user admin) get this error: "auth credentials have expired". This error started couple days after install.

I already have this error, many times, after each update I guess.

I usually clear cookies from the site and it resolve my problem.


   
ReplyQuote