Restore password ca...
 
Notifications
Clear all

Restore password carbonio ce 25.6.1

7 Posts
3 Users
0 Reactions
119 Views
 usmt
(@usmt)
New Member
Joined: 2 years ago
Posts: 14
Topic starter  

I can't login after restoring the password

carbonio prov ma usmt@example.com userPassword "{ARGON2}$argon2id$v=19$m=65536,t=2,p=1$aRAQvIHgMhJI9sz1zji5/Q$hgJytKu8P8LAO1MzfVr7K9UKUoDF6Cph//r3B5y5wes"


   
Quote
(@ulug79)
New Member
Joined: 3 weeks ago
Posts: 7
 

You can't access with admin account to web interface?


   
ReplyQuote
 usmt
(@usmt)
New Member
Joined: 2 years ago
Posts: 14
Topic starter  

@ulug79 

No i can't access with admin account to web interface

I think that there is a problem in Openldap when restoring the password cryptid with Argon2

 

This post was modified 3 weeks ago by usmt

   
ReplyQuote
 usmt
(@usmt)
New Member
Joined: 2 years ago
Posts: 14
Topic starter  

export:
zmprov -l ga usmt@example.com userPassword > usmt@example.com.shadow
cat usmt@example.com.shadow
{ARGON2}$argon2id$v=19$m=65536,t=2,p=1$aRAQvIHgMhJI9sz1zji5/Q$hgJytKu8P8LAO1MzfVr7K9UKUoDF6Cph//r3B5y5wes
Restore:
carbonio prov ma usmt@example.com userPassword "{ARGON2}$argon2id$v=19$m=65536,t=2,p=1$aRAQvIHgMhJI9sz1zji5/Q$hgJytKu8P8LAO1MzfVr7K9UKUoDF6Cph//r3B5y5wes"

no error but I can't login


   
ReplyQuote
(@sharif)
Reputable Member Admin
Joined: 3 years ago
Posts: 768
 

@usmt 

Please help us with some details:

  • What is your source server and destination server

Carbonio CE uses by default the SHA-512. But Since version 23.4.0, Carbonio CE supports the storage of LDAP password using the Argon2 algorithm.

Therefore, SHA-512 remains the default on Carbonio CE installation, but it is possible to allow the the new algorithm. And I am not sure if your system is currently using Argon2 instead of the default SHA-512.

Assuming your source is Zimbra OSE and Destination is Carbonio CE could you please test followings:

On Source:

zimbra@mail:~$ for i in test1@domain.com; do zmprov  -l ga $i userPassword | grep userPassword: | awk '{ print $2}' > /tmp/$i.shadow; done

Once you get the shadow file, transfer it to the destination server (Carbonio CE).

On Destination:

root@mail:~# chown zextras:zextras /tmp/test1@domain.com.shadow

# Now as zextras user

zextras@mail:~$ carbonio prov ma test1@domain.com userPassword $(cat /tmp/test1@domain.com.shadow)

I tested this. let us know what you get.

Regards,


   
ReplyQuote
 usmt
(@usmt)
New Member
Joined: 2 years ago
Posts: 14
Topic starter  

for more detail

I am installing Carbonio CE 25.6.1 for the first time.
I created a new user account usmt@example.com from the Admin Panel.
After that, I exported the user's data and password, then deleted the user from the Admin Panel.
Later, I attempted to restore the same user (usmt@example.com) on the same server running Carbonio CE 25.6.1.
However, after restoration, I am unable to log in as that user.

 

Regards,

This post was modified 3 weeks ago by usmt

   
ReplyQuote
 usmt
(@usmt)
New Member
Joined: 2 years ago
Posts: 14
Topic starter  

I previously performed a migration from Zimbra 8.15 to Carbonio CE 23.4.0, and everything worked correctly without any issues.
Now, I'm attempting the same migration with Carbonio CE 25.6.1
I am unable to log in as that user.

Regards,


   
ReplyQuote