Finding MAC Address Details of logged in zextras users - General Info

RE: Finding MAC Address Details of logged in zextras users

puvi — Fri, 20 Sep 2024 15:59:09 +0000

I understood from your point of view. Yes, there are no issues with LDAP authentication. We don't have any issues with other carbonio users which I clearly mentioned, meaning there are no issues LDAP authentication. I told you that some carbonio user's emails are configured in the Microsoft Outlook where the current passwords were updated correctly. In MS outlook, you cannot updated the passswords automatically right.

RE: Finding MAC Address Details of logged in zextras users

Klug — Fri, 20 Sep 2024 15:49:25 +0000

OK, so we just learnt you're using SSO.
While you said the passwords were updated in Outlook (thus, no SSO).

Are you sure you setup Carbonio auth the same way you did with Zimbra (fallback, etc)?
There are too many information lacking on your setup to help you.

RE: Finding MAC Address Details of logged in zextras users

puvi — Fri, 20 Sep 2024 15:22:05 +0000

I believe there's been a misunderstanding. I was referring to our own LDAP, not Carbonio. We've been using our LDAP clusters, which authenticate our Carbonio users for successful login. It seems the discussion has shifted from the original topic. We manage password changes through SSO, and this setup has been in place since we started using Zimbra, approximately 10 years ago, without any issues.

RE: Finding MAC Address Details of logged in zextras users

Klug — Fri, 20 Sep 2024 15:06:47 +0000

Numerous applications are using your Carbonio LDAP cluster?
Are you sure of that?
Because this is not what should be done (Carbonio LDAP is not supposed to be the main directory for your organization and used by other apps).

Do you have a Carbonio LDAP cluster or a global LDAP cluster?

In the second case, how is the authorization setup for the domain of the user with the password issue?
Did you disable local auth fallback in Carbonio?
How/where did you change the user's password (Carbonio or global LDAP)?

RE: Finding MAC Address Details of logged in zextras users

puvi — Fri, 20 Sep 2024 15:00:29 +0000

Yes, @Klug, we have LDAP clusters in place, and their replications are fully synchronized. Numerous applications utilize these LDAP clusters, and they are functioning without any issues.

RE: Finding MAC Address Details of logged in zextras users

Klug — Wed, 18 Sep 2024 11:26:07 +0000

You have a "cluster"?

Do you have several LDAP servers? If yes, have you checked they are correctly synced together?

RE: Finding MAC Address Details of logged in zextras users

puvi — Fri, 13 Sep 2024 15:34:17 +0000

I will proceed with upgrading our Carbonio Clusters and check if this resolves the issue. If not, I will follow up here. Thank you.

RE: Finding MAC Address Details of logged in zextras users

puvi — Fri, 13 Sep 2024 15:13:14 +0000

First, I would like to thank you for your prompt response. We have confirmed that no phones or laptops are connected to their accounts, as we have restricted email server access from outside the office premises for the users experiencing these issues.

The immediate logs indicate that the lockouts are occurring due to incorrect passwords.

RE: Finding MAC Address Details of logged in zextras users

Klug — Fri, 13 Sep 2024 15:01:54 +0000

Also, you should upgrade your Carbonio server, it's not up to date.

RE: Finding MAC Address Details of logged in zextras users

Klug — Fri, 13 Sep 2024 15:00:54 +0000

As I said, did you check the all the accounts (IMAP and SMTP and maybe CalDAV) were updated in Outlook?
Are you sure your users do not have some phone connected to their account too?

The log extract show "account locked", this is after the password issue.
You should look at the logs at the time the lockout happens to find out what is causing the lockout (IMAP or SMTP or something else).