Problem with ISPConfig3 + (SquirrelMail or Roundcube e-mail access)

Discussion in 'Server Operation' started by HomerJay82, Dec 4, 2013.

  1. HomerJay82

    HomerJay82 New Member

    Hello everybody,

    I have a Debian 7 64bits server configured with ISPconfig3 + roundcube and squirrelMail.
    I already have created MX records in my host panel.

    I followed exactly these instructions:
    http://www.howtoforge.com/using-roundcube-webmail-with-ispconfig-3-on-debian-wheezy-apache2

    http://www.howtoforge.com/perfect-server-debian-wheezy-apache2-bind-dovecot-ispconfig-3-p5

    I've set up the access' roundcube through https://MYDOMAIN.com.br:10000/webmail1 and SquirrelMail's through https://MYDOMAIN.com.br:10000/webmail2, but both don't work (return login failed).

    Some informations below:

    - Dovecot debug log trying to connect through RoundCube
    Code:
    Dec 04 01:27:20 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth
    Dec 04 01:27:20 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so
    Dec 04 01:27:20 auth: Debug: auth client connected (pid=21779)
    Dec 04 01:27:20 auth: Debug: client in: AUTH	1	PLAIN	service=imap	secured	session=eVJ+UKvsSwB/AAAB	lip=127.0.0.1	rip=127.0.0.1 lport=143	rport=46667	resp=AHRlc3RlQGphb2suY29tLmJyAHRlc3RlMTIz
    Dec 04 01:27:20 auth-worker(21782): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth
    Dec 04 01:27:20 auth-worker(21782): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so
    Dec 04 01:27:20 auth-worker(21782): Debug: pam([email protected],127.0.0.1): lookup service=dovecot
    Dec 04 01:27:20 auth-worker(21782): Debug: pam([email protected],127.0.0.1): #1/1 style=1 msg=Password: 
    Dec 04 01:27:25 auth: Debug: client out: FAIL	1	[email protected]
    - Dovecot debug log trying to connect through SquirrelMail
    Code:
    Dec 04 01:21:21 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth
    Dec 04 01:21:21 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so
    Dec 04 01:21:21 auth: Debug: auth client connected (pid=21626)
    Dec 04 01:21:21 auth: Debug: client in: AUTH	1	PLAIN	service=imap	secured	session=kKwMO6vsMAB/AAAB	lip=127.0.0.1	rip=127.0.0.1 lport=143	rport=46640	resp=AHRlc3RlQGphb2suY29tLmJyAHRlc3RlMTIz
    Dec 04 01:21:21 auth-worker(21629): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth
    Dec 04 01:21:21 auth-worker(21629): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so
    Dec 04 01:21:21 auth-worker(21629): Debug: pam([email protected],127.0.0.1): lookup service=dovecot
    Dec 04 01:21:21 auth-worker(21629): Debug: pam([email protected],127.0.0.1): #1/1 style=1 msg=Password: 
    Dec 04 01:21:24 auth: Debug: client out: FAIL	1	[email protected]
    - mail.log
    Code:
    Dec  4 01:24:11 4every1-server1 dovecot: auth-worker(21693): pam([email protected],127.0.0.1): pam_authenticate() failed: Authentication failure (password mismatch?) (given password: *******)
    Dec  4 01:24:13 4every1-server1 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 3 secs): user=<[email protected]>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<c+0mRavsNgB/AAAB>
    - Dovecot -n output
    Code:
    # 2.1.7: /etc/dovecot/dovecot.conf
    # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2
    auth_debug = yes
    auth_debug_passwords = yes
    auth_mechanisms = plain login
    auth_verbose = yes
    debug_log_path = /var/log/dovecot-debug.log
    disable_plaintext_auth = no
    mail_debug = yes
    mail_location = mbox:~/mail:INBOX=/var/vmail/%d/%n
    mail_privileged_group = mail
    namespace inbox {
      inbox = yes
      location =
      mailbox Drafts {
        special_use = \Drafts
      }
      mailbox Junk {
        special_use = \Junk
      }
      mailbox Sent {
        special_use = \Sent
      }
      mailbox "Sent Messages" {
        special_use = \Sent
      }
      mailbox Trash {
        special_use = \Trash
      }
      prefix =
    }
    passdb {
      driver = pam
    }
    plugin {
      sieve = ~/.dovecot.sieve
      sieve_dir = ~/sieve
    }
    protocols = " imap pop3"
    service auth {
      unix_listener /var/spool/postfix/private/auth {
        group = postfix
        mode = 0660
        user = postfix
      }
      unix_listener auth-userdb {
        group = postfix
        user = postfix
      }
    }
    ssl = required
    ssl_cert = </etc/dovecot/dovecot.pem
    ssl_key = </etc/dovecot/private/dovecot.pem
    userdb {
      driver = passwd
    }
    verbose_ssl = yes
    protocol imap {
      mail_plugins = " autocreate"
    }
    Thank you in advance for any help.
     
  2. Quaxth

    Quaxth Member

  3. HomerJay82

    HomerJay82 New Member

    Hello Quaxth,

    I've just disable SSL both for ISPconfig and Dovecot and didn't work too.

    Tryed to test through telnet and outputs:
    Code:
    # telnet localhost 143
    Trying 127.0.0.1...
    Connected to localhost.
    Escape character is '^]'.
    * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
    a login [email protected] *******
    a NO [AUTHENTICATIONFAILED] Authentication failed.
     
  4. Quaxth

    Quaxth Member

    Did you get the Login Screen for either Roundcube and Squirrelmail?

    If so, you have to key in the Username (which is the complete e-mail address like [email protected]) and the password (case sensitive)!

    Also, have you checked that the ports using for sending and receiving mail are open?
     
  5. HomerJay82

    HomerJay82 New Member

    Yes, I did. And both are returning Login failed. As I said, /webmail1 reaches Roundcube login screen and /webmail2 reaches Squirrelmail one.

    How can I do that, which is the command line?

    Best regards,
     
  6. Quaxth

    Quaxth Member

    Recheck Username and Password after you checked that the ports needed to open they are!



    You could use best with on line check like: http://www.yougetsignal.com/tools/open-ports/; http://www.canyouseeme.org/; http://www.checkmyports.net/

    Also check, if you run a Firewall like Bastille, that the ports are opened in ISPConfig. And for sure that the MX Records are correct!
     
  7. Quaxth

    Quaxth Member

    Also, if your server is in your Office or Home, Be sure that you have done the Portforwarding in your Router!
     
  8. HomerJay82

    HomerJay82 New Member

    I've tested all these ports beside and all are open: 21,22,25,80,110,143,443.

    I checked and ISPconfig is running Bastille. Just in case, I added Firewall record opening ports below:

    - Open TCP Ports
    20,21,22,25,53,80,110,143,443,993,995,3306,8080,8081,10000

    - Open UDP ports
    53,3306

    Ps: My server is not in my office or home :)
     
  9. Quaxth

    Quaxth Member

    OK, the standard ports are open! Port 10000 is used by Webmin as standard and if you have installed Webmin, you could not use for any other apps.

    Check out default ports here and if any of those apps is installed on your server.

    May you try top open Webmail just without Port :)10000) and see that will works. If you had set the SMTP to port 10000, that wouldn't, but: if you had SMTP run on Port 25, it should work!
     
    Last edited: Dec 4, 2013
  10. HomerJay82

    HomerJay82 New Member

    I configured ISPconfig to run on port 10000. I don't have Webmin installed on my server.

    - Output for port 10000
    Code:
    # netstat -anp | grep 10000
    tcp6       0      0 :::10000                :::*                    LISTEN      16571/apache2
    When I try to open through MYDOMAIN.com.br/webmail1 (roundcube) it falls in a blank page.
    When open MYDOMAIN.com.br/webmail2 (squirrel) outputs "ERROR: Config file "config/config.php" not found. You need to configure SquirrelMail before you can use it."

    I only can open the login page without port 10000 through MYIP.com.br. It works both for webmail1 and webmail2.
    But when I try to log in, doesn't work.

    :-(
     
  11. HomerJay82

    HomerJay82 New Member

    Also, some ports listening:

    Code:
    # netstat -anp | grep :110
    tcp        0      0 0.0.0.0:110             0.0.0.0:*               LISTEN      13270/dovecot
    tcp6       0      0 :::110                  :::*                    LISTEN      13270/dovecot
    # netstat -anp | grep :143
    tcp        0      0 0.0.0.0:143             0.0.0.0:*               LISTEN      13270/dovecot
    tcp        0      0 127.0.0.1:49504         127.0.0.1:143           TIME_WAIT   -
    tcp6       0      0 :::143                  :::*                    LISTEN      13270/dovecot
    # netstat -anp | grep :25
    tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN      17066/smtpd
    tcp6       0      0 :::25                   :::*                    LISTEN      17066/smtpd
    # netstat -anp | grep :21
    tcp        0      0 0.0.0.0:21              0.0.0.0:*               LISTEN      3190/pure-ftpd (SER
    tcp6       0      0 :::21                   :::*                    LISTEN      3190/pure-ftpd (SER
    # netstat -anp | grep :80
    tcp6       0      0 :::80                   :::*                    LISTEN      16571/apache2
    tcp6       0      0 :::8081                 :::*                    LISTEN      16571/apache2
     
  12. Quaxth

    Quaxth Member

    I use both Roundcube and Squirrelmail on my server and connect using Port 25 for SMTP (send). That works just with: http://mydomain.com/sqmail (for squirrelmail) and that just works fine. I also use an external SMTP Open Relay Server which is configured via the CP: Server Config -->Mail under Relay host.

    As I use the Name Servers of my Domain Registra, I didn't have any DNS Zone set in ISPConfig and the MX Record is also set on my Registra's site.

    As you got the Login Screen of Web-Mail Client, normally shows that all ok before using Username and Password.

    Now in ISPConfig, you've to create an Domain and, if you use, an Domain Alias under the Mail Tab -->E-Mail accounts -->Domain following by creating the E-mail Accounts. I believe that you'd done that correctly!

    If you click on the Mailbox Icon for an Mail account in Mail Tab --> Mailbox [​IMG], the one in the middle what happen? Will the default Mail Client open the Mailbox?
     

Share This Page