Can't login SquirrelMail

Discussion in 'Server Operation' started by satimis, May 27, 2008.

  1. satimis

    satimis Member

    Hi folks,


    Network
    Server-1 a working LAMP server
    local IP - 192.168.0.10

    Server-2 a newly built LAMP server
    loval IP - 192.168.0.52 (without port forwarded )


    Server 2
    Ubuntu 6.05 drake amd65
    postfix 2.2.10
    SquirrelMail 2:1.4.6
    uw-imapd 7:2002edebian
    uw-imapd-ssl 7:2002edebian


    the building of Server-2 has been completed.

    It can send emails.
    It can also receive emails if with port 25 forwarded to its local IP


    On Server-1 browser running "https://192.168.0.52/squirrelmail/src/login.php"

    SquirrelMail starts but unable to login with warning "ERROR: Connection dropped by IMAP server" prompted finally.


    $ tail /var/log/auth.log
    Code:
    May 27 22:19:01 lampserver sudo:  satimis : TTY=pts/1 ; PWD=/home/satimis ; USER=root ; COMMAND=/usr/bin/nano /var/spool/postfix/var/run/saslauthd/mux.accept
    May 27 22:19:14 lampserver sudo:  satimis : TTY=pts/1 ; PWD=/home/satimis ; USER=root ; COMMAND=/usr/bin/nano /var/spool/postfix/var/run/saslauthd/saslauthd.pid
    May 27 22:39:01 lampserver CRON[4525]: (pam_unix) session opened for user root by (uid=0)
    May 27 22:39:01 lampserver CRON[4525]: (pam_unix) session closed for user root
    May 27 23:07:36 lampserver sshd[4552]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.0.10  user=satimis
    May 27 23:07:37 lampserver sshd[4552]: Failed password for satimis from 192.168.0.10 port 60350 ssh2
    May 27 23:07:45 lampserver sshd[4552]: Accepted password for satimis from 192.168.0.10 port 60350 ssh2
    May 27 23:07:45 lampserver sshd[4554]: (pam_unix) session opened for user satimis by (uid=0)
    May 27 23:09:01 lampserver CRON[4574]: (pam_unix) session opened for user root by (uid=0)
    May 27 23:09:01 lampserver CRON[4574]: (pam_unix) session closed for user root
    

    $ tail /var/log/mail.log
    Code:
     
    May 27 22:22:11 lampserver cyrus/ctl_cyrusdb[4523]: done checkpointing cyrus databases
    May 27 22:22:11 lampserver cyrus/master[3881]: process 4523 exited, status 0
    May 27 22:52:11 lampserver cyrus/master[4540]: about to exec /usr/sbin/ctl_cyrusdb
    May 27 22:52:11 lampserver cyrus/ctl_cyrusdb[4540]: checkpointing cyrus databases
    May 27 22:52:11 lampserver cyrus/ctl_cyrusdb[4540]: archiving database file: /var/lib/cyrus/annotations.db
    May 27 22:52:11 lampserver cyrus/ctl_cyrusdb[4540]: archiving log file: /var/lib/cyrus/db/log.0000000001
    May 27 22:52:11 lampserver cyrus/ctl_cyrusdb[4540]: archiving database file: /var/lib/cyrus/mailboxes.db
    May 27 22:52:11 lampserver cyrus/ctl_cyrusdb[4540]: archiving log file: /var/lib/cyrus/db/log.0000000001
    May 27 22:52:11 lampserver cyrus/ctl_cyrusdb[4540]: done checkpointing cyrus databases
    May 27 22:52:11 lampserver cyrus/master[3881]: process 4540 exited, status 0
    

    Please help. TIA



    Edit:

    $ mutt -f imap://localhost/
    Code:
    ....
    ....
    authentication (PLAIN)....
    sasl authentication fail
    

    B.R.
    satimis
     
    Last edited: May 27, 2008
  2. falko

    falko Super Moderator Howtoforge Staff

  3. satimis

    satimis Member

    Hi falko,


    Performed following steps.


    $ sudo /usr/sbin/squirrelmail-configure

    2 Server Settings --> (IMAP Settings) 8. Server software : other;
    (changed to ; )
    uw
    --> S (command >>)
    Data saved in config.php
    Press enter to continue... [Enter]
    command >> Q [Enter]


    8. Plugins
    can't find change_sqlpass


    $ sudo /etc/init.d/apache2 reload


    On Server-1 browser run;

    https://192.168.0.52/squirrelmail/

    It changes to;

    https://192.168.0.52/squirrelmail/src/login.php

    login fails. Finally it prompts;
    Code:
    ERROR: Connection dropped by IMAP server.

    $ tail /var/log/auth.log
    Code:
    May 28 22:17:01 mail CRON[7212]: (pam_unix) session opened for user root by (uid=0)
    May 28 22:17:01 mail CRON[7212]: (pam_unix) session closed for user root
    May 28 22:39:01 mail CRON[7228]: (pam_unix) session opened for user root by (uid=0)
    May 28 22:39:01 mail CRON[7228]: (pam_unix) session closed for user root
    May 28 23:09:01 mail CRON[7417]: (pam_unix) session opened for user root by (uid=0)
    May 28 23:09:01 mail CRON[7417]: (pam_unix) session closed for user root
    May 28 23:17:01 mail CRON[7430]: (pam_unix) session opened for user root by (uid=0)
    May 28 23:17:01 mail CRON[7430]: (pam_unix) session closed for user root
    May 28 23:39:01 mail CRON[7458]: (pam_unix) session opened for user root by (uid=0)
    May 28 23:39:01 mail CRON[7458]: (pam_unix) session closed for user root
    

    $ tail /var/log/mail.log
    Code:
    May 28 23:48:11 mail postfix/smtpd[7475]: connect from unknown[190.24.214.154]
    May 28 23:48:12 mail postfix/smtpd[7475]: 8D014DF005D: client=unknown[190.24.214
    .154]
    May 28 23:48:13 mail postfix/cleanup[7480]: 8D014DF005D: message-id=<000701c8c0d
    8$079f87ec$697a31b7@giqbh>
    May 28 23:48:13 mail postfix/qmgr[5083]: 8D014DF005D: from=<postmaster@canalhori
    zons.com>, size=1497, nrcpt=1 (queue active)
    May 28 23:48:13 mail postfix/local[7481]: 8D014DF005D: to=<[email protected]>,
     relay=local, delay=0.83, delays=0.82/0.01/0/0.01, dsn=2.0.0, status=sent (deliv
    ered to command: procmail -a "$EXTENSION")
    May 28 23:48:13 mail postfix/qmgr[5083]: 8D014DF005D: removed
    May 28 23:48:13 mail postfix/smtpd[7475]: disconnect from unknown[190.24.214.154
    ]
    May 28 23:51:33 mail postfix/anvil[7477]: statistics: max connection rate 1/60s 
    for (smtp:190.24.214.154) at May 28 23:48:11
    May 28 23:51:33 mail postfix/anvil[7477]: statistics: max connection count 1 for
     (smtp:190.24.214.154) at May 28 23:48:11
    May 28 23:51:33 mail postfix/anvil[7477]: statistics: max cache size 1 at May 28
     23:48:11
    

    $ tail /var/log/mail.err
    Code:
    May 20 18:38:24 mail postfix[5936]: error: to submit mail, use the Postfix sendmail command
    May 20 18:38:24 mail postfix[5936]: fatal: the postfix command is reserved for the superuser
    May 20 18:38:25 mail postfix[5939]: error: to submit mail, use the Postfix sendmail command
    May 20 18:38:25 mail postfix[5939]: fatal: the postfix command is reserved for the superuser
    May 20 18:38:26 mail postfix[5942]: error: to submit mail, use the Postfix sendmail command
    May 20 18:38:26 mail postfix[5942]: fatal: the postfix command is reserved for the superuser
    May 20 18:38:27 mail postfix[5945]: error: to submit mail, use the Postfix sendmail command
    May 20 18:38:27 mail postfix[5945]: fatal: the postfix command is reserved for the superuser
    May 20 18:40:33 mail postfix[6004]: error: to submit mail, use the Postfix sendmail command
    May 20 18:40:33 mail postfix[6004]: fatal: the postfix command is reserved for the superuser
    

    https://192.168.0.52/src/configtest.php
    Code:
    The requested URL /src/configtest.php was not found on this server.
    

    Edit-1:

    $ sudo nano /etc/c-client.cf
    copying following lines on it;
    Code:
    I accept the risk
    set disable-plaintext 0 
    
    (also tried "nil")


    $ sudo nano /etc/init.d/saslauthd
    change;
    PIDFILE="/var/run/${NAME}/saslauthd.pid"

    as;
    PIDFILE="/var/spool/postfix/var/run/${NAME}/saslauthd.pid"


    $ sudo nano /etc/default/saslauthd
    deleting following lines;
    PWDIR="/var/spool/postfix/var/run/saslauthd"
    PIDFILE="${PWDIR}/saslauthd.pid"

    changing;
    PARAMS="-m ${PWDIR}"

    as;
    PARAMS="-m /var/spool/postfix/var/run/saslauthd -r"


    & cat /etc/default/saslauthd
    Code:
    # This needs to be uncommented before saslauthd will be run automatically
    START=yes
    PARAMS="-m /var/spool/postfix/var/run/saslauthd -r"
    
    # You must specify the authentication mechanisms you wish to use.
    # This defaults to "pam" for PAM support, but may also include
    # "shadow" or "sasldb", like this:
    # MECHANISMS="pam shadow"
    
    MECHANISMS="pam"
    

    $ sudo /etc/init.d/saslauthd restart
    Code:
    Stopping SASL Authentication Daemon: saslauthd.
    Starting SASL Authentication Daemon: changed ownership of `/var/run/saslauthd' to root:sasl
    mode of `/var/run/saslauthd' changed to 0710 (rwx--x---)
    saslauthd.
    

    $ sudo /etc/init.d/inetd restart
    No printout

    $ sudo /etc/init.d/apache2 reload
    Code:
     * Reloading apache 2.0 configuration...             [ ok ] 
    

    On Server-1 browser run;
    https://192.168.0.52/squirrelmail/src/login.php

    still fail unble to login;
    ERROR: Connection dropped by IMAP server.


    B.R.
    satimis
     
    Last edited: May 29, 2008
  4. falko

    falko Super Moderator Howtoforge Staff

    What's the output of
    Code:
    netstat -tap
    ?
     
  5. satimis

    satimis Member

    $ netstat -tap
    Code:
    (No info could be read for "-p": geteuid()=1000 but you should be root.)
    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address           Foreign Address         State       
    PID/Program name   
    tcp        0      0 *:cvspserver            *:*                     LISTEN     -
                       
    tcp        0      0 *:nfs                   *:*                     LISTEN     -
                       
    tcp        0      0 *:57634                 *:*                     LISTEN     -
                       
    tcp        0      0 localhost:mysql         *:*                     LISTEN     -
                       
    tcp        0      0 *:pop3                  *:*                     LISTEN     -
                       
    tcp        0      0 *:imap2                 *:*                     LISTEN     -
                       
    tcp        0      0 *:sunrpc                *:*                     LISTEN     -
                       
    tcp        0      0 localhost:sieve         *:*                     LISTEN     -
                       
    tcp        0      0 192.168.0.52:domain     *:*                     LISTEN     -
                       
    tcp        0      0 localhost:domain        *:*                     LISTEN     -
                       
    tcp        0      0 *:ftp                   *:*                     LISTEN     -
                       
    tcp        0      0 *:nntp                  *:*                     LISTEN     -
                       
    tcp        0      0 192.168.0.52:ipp        *:*                     LISTEN     -
                       
    tcp        0      0 localhost:ipp           *:*                     LISTEN     -
                       
    tcp        0      0 *:8888                  *:*                     LISTEN     -
                       
    tcp        0      0 *:665                   *:*                     LISTEN     -
                       
    tcp        0      0 *:smtp                  *:*                     LISTEN     -
    
    tcp        0      0 *:893                   *:*                     LISTEN     -
                       
    tcp       36      0 localhost:imap2         localhost:35904         CLOSE_WAIT -
                       
    tcp       32      0 localhost:imap2         localhost:34638         CLOSE_WAIT -
                       
    tcp       35      0 localhost:imap2         localhost:34639         CLOSE_WAIT -
                       
    tcp6       0      0 *:2222                  *:*                     LISTEN     -
                       
    tcp6       0      0 *:pop3                  *:*                     LISTEN     -
                       
    tcp6       0      0 *:imap2                 *:*                     LISTEN     -
                       
    tcp6       0      0 *:www                   *:*                     LISTEN     -
                       
    tcp6       0      0 *:nntp                  *:*                     LISTEN     -
                       
    tcp6       0      0 *:smtp                  *:*                     LISTEN     -
                       
    tcp6       0      0 *:https                 *:*                     LISTEN     -
                       
    tcp6       0    144 ::ffff:192.168.0.5:2222 ::ffff:192.168.0.:55351 ESTABLISHED-        
    
    satimis
     
    Last edited: May 30, 2008
  6. falko

    falko Super Moderator Howtoforge Staff

    Can you run
    Code:
    netstat -tap
    as root again?
     
  7. satimis

    satimis Member

    # netstat -tap
    Code:
    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name   
    tcp        0      0 *:cvspserver            *:*                     LISTEN     4277/xinetd         
    tcp        0      0 *:nfs                   *:*                     LISTEN     -                   
    tcp        0      0 *:52260                 *:*                     LISTEN     -                   
    tcp        0      0 localhost:mysql         *:*                     LISTEN     3977/mysqld         
    tcp        0      0 *:pop3                  *:*                     LISTEN     3881/cyrmaster      
    tcp        0      0 *:imap2                 *:*                     LISTEN     3881/cyrmaster      
    tcp        0      0 *:sunrpc                *:*                     LISTEN     3493/portmap        
    tcp        0      0 localhost:sieve         *:*                     LISTEN     3881/cyrmaster      
    tcp        0      0 *:ftp                   *:*                     LISTEN     4224/vsftpd         
    tcp        0      0 192.168.0.52:domain     *:*                     LISTEN     3812/named          
    tcp        0      0 localhost:domain        *:*                     LISTEN     3812/named          
    tcp        0      0 *:nntp                  *:*                     LISTEN     3881/cyrmaster      
    tcp        0      0 192.168.0.52:ipp        *:*                     LISTEN     3848/cupsd          
    tcp        0      0 localhost:ipp           *:*                     LISTEN     3848/cupsd          
    tcp        0      0 *:8888                  *:*                     LISTEN     4337/(squid)        
    tcp        0      0 *:665                   *:*                     LISTEN     4299/rpc.statd      
    tcp        0      0 *:smtp                  *:*                     LISTEN     4183/master         
    tcp        0      0 *:893                   *:*                     LISTEN     4106/rpc.mountd     
    tcp6       0      0 *:2222                  *:*                     LISTEN     4212/sshd           
    tcp6       0      0 *:pop3                  *:*                     LISTEN     3881/cyrmaster      
    tcp6       0      0 *:imap2                 *:*                     LISTEN     3881/cyrmaster      
    tcp6       0      0 *:www                   *:*                     LISTEN     4382/apache2        
    tcp6       0      0 *:nntp                  *:*                     LISTEN     3881/cyrmaster      
    tcp6       0      0 *:smtp                  *:*                     LISTEN     4183/master         
    tcp6       0      0 *:https                 *:*                     LISTEN     4382/apache2        
    tcp6       0    144 ::ffff:192.168.0.5:2222 ::ffff:192.168.0.:44048 ESTABLISHED4425/sshd: satimis  
    
    satimis
     
  8. chipsafts

    chipsafts New Member

    2 imap2 and no plain imap ?

    do you have multiple NIC or IP addresses ?
    if so, is the imap and squirrel listening to the correct one?
     
  9. satimis

    satimis Member

    Hi chipsafts,


    I have no idea which package generate imap2?


    Whether you meant imap4? Neither I have idea which package provides it.


    Only one NIC and one public IP. I'm testing the LAMP server on local network.


    I think it may be a bug on uw-imapd
    Code:
    Plain text logins are not enabled. See bugs 227709, 239537, 273687.
    http://www.squirrelmail.org/docs/admin/admin-10.html#ss10.3


    satimis


    B.R.
    satimis
     
  10. falko

    falko Super Moderator Howtoforge Staff

    Are you sure that this is uw-imapd?
    Code:
    tcp        0      0 *:imap2                 *:*                     LISTEN     3881/cyrmaster
    cyrmaster is the process that controls all of the Cyrus processes.
     
  11. satimis

    satimis Member

    Hi falko,


    Referring to the notes taken down on building this LAMP server I found an unfinished test on 2-factors One Time Password on SquirrelMail.


    Ah I think the problem is here. I have installed cyrus-imapd-2.2 as well as SquirrelMail at that time.


    Now on running "apt-cache policy cyrus-imapd-2.2" I can't found it. Would it be removed automatically when I installed uw-imapd later?


    Could you please shed me some light. What shall I do if I need retaining cyrus-imapd-2.2 to complete the test on One Time Password?


    I installed following packages;

    uw-imapd
    uw-imapd-ssl
    uw-mailutils
    gamin
    ipopd
    ipopd-ssl
    libc-client-dev

    creating /etc/c-client.cf
    ???

    TIA


    B.R.
    satimis
     
  12. falko

    falko Super Moderator Howtoforge Staff

    I think uw-imapd is controlled by inetd. Can you post your /etc/inetd.conf?
     
  13. satimis

    satimis Member

    $ cat /etc/inetd.conf
    Code:
    imap2   stream  tcp     nowait  root    /usr/sbin/tcpd /usr/sbin/imapd
    imaps   stream  tcp     nowait  root    /usr/sbin/tcpd /usr/sbin/imapd
    pop3    stream  tcp     nowait  root    /usr/sbin/tcpd /usr/sbin/ipop3d
    pop3s   stream  tcp     nowait  root    /usr/sbin/tcpd /usr/sbin/ipop3d
    
    satimis
     
  14. falko

    falko Super Moderator Howtoforge Staff

    Can you try to stop the cyrmaster process and restart inetd?
     
  15. satimis

    satimis Member

    $ sudo /etc/init.d/cyrus2.2 stop
    Code:
    Stopping Cyrus IMAPd: cyrmaster.
    

    $ sudo netstat -tap | grep imap2
    No printout


    $ sudo /etc/init.d/inetd restart
    No printout


    $ sudo netstat -tap | grep imap2
    $ sudo netstat -tap | grep imap
    Both also no printout


    SquirrelMail still fails to login
    Code:
    Error connecting to IMAP server: localhost.
    111 : Connection refused
    

    $ tail /var/log/mail.log
    Code:
    Jun  2 18:32:06 lampserver cyrus/master[3889]: about to exec /usr/lib/cyrus/bin/notifyd
    Jun  2 18:32:07 lampserver cyrus/ctl_cyrusdb[3888]: archiving database file: /var/lib/cyrus/annotations.db
    Jun  2 18:32:07 lampserver cyrus/notify[3889]: executed
    Jun  2 18:32:07 lampserver cyrus/ctl_cyrusdb[3888]: archiving log file: /var/lib/cyrus/db/log.0000000001
    Jun  2 18:32:07 lampserver cyrus/ctl_cyrusdb[3888]: archiving database file: /var/lib/cyrus/mailboxes.db
    Jun  2 18:32:07 lampserver cyrus/ctl_cyrusdb[3888]: archiving log file: /var/lib/cyrus/db/log.0000000001
    Jun  2 18:32:07 lampserver cyrus/ctl_cyrusdb[3888]: done checkpointing cyrus databases
    Jun  2 18:32:07 lampserver cyrus/master[3881]: process 3888 exited, status 0
    Jun  2 18:32:13 lampserver postfix/master[4183]: daemon started -- version 2.2.10, configuration /etc/postfix
    Jun  2 18:44:00 lampserver cyrus/master[3881]: exiting on SIGTERM/SIGINT
    

    $ tail /var/log/mail.err
    No Printout


    I think uw-imapd is NOT running


    $ ls -l /etc/hosts
    Code:
    -rw-r--r-- 1 root root 247 2008-05-05 04:57 /etc/hosts
    

    $ netstat netstat -tl | grep -i imap
    No printout


    $ sudo /etc/init.d/dovecot restart
    No printout


    satimis
     
  16. chipsafts

    chipsafts New Member

    How about uninstalling the cyrus and the uw-imap,
    then reinstalling just the uw-imap
     
  17. satimis

    satimis Member

    Hi chipsafts,


    Thanks for your advice.


    I have an unfinished test "One Time Password". Because I can't locate cyrus-imapd-utils and cyrus-sasl on Ubuntu repo I stopped there after installing cyrus-imapd. Then I continued setup SquirrelMail.


    I'm considering erasing following packages;
    uw-imapd
    uw-imapd-ssl
    uw-mailutils
    gamin
    ipopd
    ipopd-ssl
    libc-client-dev
    etc.

    which were installed on setup SquirrelMail and retaining cyrus-imapd. Because I need it to finish my pending test "One Time Password".


    I'll make some search first before moving my next step. Thanks


    B.R.
    satimis
     
  18. pantagruel

    pantagruel New Member

    Hi, i have a problem with the login in squirrelmail

    this is /var/log/mail.log

    Please help me!!!

    sorry for my english but i'm italian :(
     

    Attached Files:

  19. pantagruel

    pantagruel New Member

    Other informations :

    The Server can send and receive email.
    On server browser running http://mydomain.it/squirrelmail/src/login.php
    Squirrelmail starts but unable to login with warning"ERROR: Unknown user or password incorrect"
     

    Attached Files:

  20. falko

    falko Super Moderator Howtoforge Staff

    Which distribution are you using? Do you use virtual or syszem users for your email accounts?
     

Share This Page