Topic: Roundcube - not able to login with correct credentials

[Amir Inbar]

Sme server ver 9
Installed Roundcube as to described here:
https://wiki.contribs.org/RoundCube
All was working fine.
After changing server name via console and after re configuring self issued certificate, i get the Roundcube web login page but providing the correct username and correct password returns "Login failed" (after please wait).

Uninstalled (including plugins) and re-installed - i get the following errors and the same happens.

Code: [Select]

Running Transaction
  Installing : smeserver-roundcube-1.2-8.el6.sme.noarch                                                                                                                                                                                  1/1

Update the Roundcube Plugins, please wait

Your version of PHP, 5.3.3, is affected by CVE-2013-6420 and cannot safely perform certificate validation, we strongly suggest you upgrade.
Updating to version a8e9df55dc62d8806360be2f79ad112b8678d397.
    Downloading: 100%
Use composer self-update --rollback to return to version 7c62e2b5346a6a656dd9587203719e35bb768056
Your version of PHP, 5.3.3, is affected by CVE-2013-6420 and cannot safely perform certificate validation, we strongly suggest you upgrade.
Loading composer repositories with package information


  [Composer\Downloader\TransportException]
  Your configuration does not allow connection to http://plugins.roundcube.net. See https://getcomposer.org/doc/06-config.md#secure-http for details.


update [--prefer-source] [--prefer-dist] [--dry-run] [--dev] [--no-dev] [--lock] [--no-plugins] [--no-custom-installers] [--no-autoloader] [--no-scripts] [--no-progress] [--with-dependencies] [-v|vv|vvv|--verbose] [-o|--optimize-autoloader] [-a|--classmap-authoritative] [--ignore-platform-reqs] [--prefer-stable] [--prefer-lowest] [-i|--interactive] [--root-reqs] [--] [<packages>]...


Migrating existing database domains
Migrating existing database networks
Migrating existing database accounts
Migrating existing database spamassassin
Migrating existing database backups
Migrating existing database hosts
Migrating existing database mailpatterns
Migrating existing database yum_repositories
Migrating existing database wbl
Migrating existing database yum_updates
Migrating existing database configuration
Migrating existing database yum_installed
Migrating existing database yum_available

unclosed CDATA section at line 88, column 0, byte 2384 at /usr/lib64/perl5/XML/Parser.pm line 187
  Verifying  : smeserver-roundcube-1.2-8.el6.sme.noarch                                                                                                                                                                                  1/1

Installed:
  smeserver-roundcube.noarch 0:1.2-8.el6.sme

Complete!

Uninstalled Roundcube and enabled Horde via server-manager - Horde works fine and lets me login with no problem.

Disabled Horde and reinstalled Roundcube - same problem.

Roundcube error log:

Code: [Select]

[17-Mar-2016 17:20:14 +0200]: <787c0f9b> PHP Error: Failed to load plugin file /usr/share/roundcubemail/plugins/globaladdressbook/globaladdressbook.php in /usr/share/roundcubemail/program/lib/Roundcube/rcube_plugin_api.php on line 198 (POST /webmail/?_task=login?_task=login&_action=login)
[17-Mar-2016 17:20:14 +0200]: <787c0f9b> PHP Error: Failed to load plugin file /usr/share/roundcubemail/plugins/contextmenu/contextmenu.php in /usr/share/roundcubemail/program/lib/Roundcube/rcube_plugin_api.php on line 198 (POST /webmail/?_task=login?_task=login&_action=login)
[17-Mar-2016 17:20:14 +0200]: <787c0f9b> PHP Error: Failed to load plugin file /usr/share/roundcubemail/plugins/markasjunk2/markasjunk2.php in /usr/share/roundcubemail/program/lib/Roundcube/rcube_plugin_api.php on line 198 (POST /webmail/?_task=login?_task=login&_action=login)
[17-Mar-2016 17:20:14 +0200]: <787c0f9b> PHP Error: Failed to load plugin file /usr/share/roundcubemail/plugins/sieverules/sieverules.php in /usr/share/roundcubemail/program/lib/Roundcube/rcube_plugin_api.php on line 198 (POST /webmail/?_task=login?_task=login&_action=login)
[17-Mar-2016 17:20:17 +0200]: <787c0f9b> IMAP Error: Login failed for admin from xx.xx.xx.xx. AUTHENTICATE PLAIN: Authentication failed. in /usr/share/roundcubemail/program/lib/Roundcube/rcube_imap.php on line 198 (POST /webmail/?_task=login?_task=login&_action=login)
I'll be glad to get some help, thank you!

[stephdl]

the guilty is https://github.com/composer/composer/issues/4963
but roundecubemail has an issue with the ssl certificate -> http://www.roundcubeforum.net/index.php?topic=23284.0

I have no immediate solutions

but I don't understand this error message

unclosed CDATA section at line 88, column 0, byte 2384 at /usr/lib64/perl5/XML/Parser.pm line 187

perl-XML-Parser is not a dependency of roundecubemail

[stephdl]

can you add in /usr/share/roundcubemail/composer.json (remove the '+')

    "name": "roundcube/roundcubemail",
    "description": "The Roundcube Webmail suite",
    "license": "GPL-3.0+",
+    "config": {"disable-tls": true},
    "repositories": [

then do rcplugin_update.sh

and try to log in

[Amir Inbar]

I have added it and got this after running rcplugin_update.sh:

Code: [Select]

rcplugin_update.sh
Your version of PHP, 5.3.3, is affected by CVE-2013-6420 and cannot safely perform certificate validation, we strongly suggest you upgrade.
You are already using composer version a8e9df55dc62d8806360be2f79ad112b8678d397.
You are running Composer with SSL/TLS protection disabled.
Loading composer repositories with package information


  [Composer\Downloader\TransportException]
  Your configuration does not allow connection to http://plugins.roundcube.net. See https://getcomposer.org/doc/06-config.md#secure-http for details.

login still fails

[Amir Inbar]

I have changed the link in /usr/share/roundcubemail/composer.json and added S to http://... and now plugin updates work (with disable-tls:true)

Code: [Select]

rcplugin_update.sh
Your version of PHP, 5.3.3, is affected by CVE-2013-6420 and cannot safely perform certificate validation, we strongly suggest you upgrade.
You are already using composer version a8e9df55dc62d8806360be2f79ad112b8678d397.
You are running Composer with SSL/TLS protection disabled.
Loading composer repositories with package information
Updating dependencies (including require-dev)
  - Installing roundcube/plugin-installer (dev-master 43f0938)
    Cloning 43f0938f2c4ce6885c5cb7c5c43d13e8fdc8b8a8

Deprecation Notice: The Composer\Package\LinkConstraint\VersionConstraint class is deprecated, use Composer\Semver\Constraint\Constraint instead. in phar:///usr/share/roundcubemail/composer.phar/src/Composer/Package/LinkConstraint/VersionConstraint.php:17
Deprecation Notice: The Composer\Package\LinkConstraint\LinkConstraintInterface interface is deprecated, use Composer\Semver\Constraint\ConstraintInterface instead. in phar:///usr/share/roundcubemail/composer.phar/src/Composer/Package/LinkConstraint/LinkConstraintInterface.php:17
  - Installing johndoh/markasjunk2 (dev-master 9fe7830)
    Cloning 9fe7830461bd7c211c11e577f205ba20f7750bc9

  - Installing johndoh/contextmenu (dev-master c656446)
    Cloning c6564460e48ce8ddd588cf7485c5e0e6b271234a

  - Installing johndoh/globaladdressbook (dev-release-1.0 0a8bc0c)
    Cloning 0a8bc0ca7d965f5fc2f2d6e712dcd339fc2ed07a

  - Installing johndoh/sieverules (dev-master 7e65e1c)
    Cloning 7e65e1c9462151accf8368834df1d786a422f43a

Writing lock file
Generating autoload files

But Roundcube login still fails

[stephdl]

what is the new roundcube log error message ?

[Amir Inbar]

Code: [Select]

[17-Mar-2016 23:23:21 +0200]: <b27f385a> IMAP Error: Login failed for admin from xx.xx.xx.xx. AUTHENTICATE PLAIN: Authentication failed. in /usr/share/roundcubemail/program/lib/Roundcube/rcube_imap.php on line 198 (POST /roundcube/?_task=login?_task=login&_action=login)


[stephdl]

I have updated my server and I can perform a login, so the problem is tied to your server.

Of course you try to login with 'user' and not 'user@yourdomain.com'

you don't stop the imap service ???

[Amir Inbar]

@stephdl:

i try to login the same as to the imap server - without @domain.tld.
Imap service is running - email (IMAP - outlook clients) is working fine, webmail (Horde) is working fine.

Can you please help point to the problem - where to look for it?

[warren]

When you re-installed roundcube, did you drop the DB ?


I seem to recall something written / posted when users where re-installing roundcube that they also had a login failure when using a valid username.

[root@[#mysql roundcube
mysql> select * from users limit 2;

do you see your correct mailhost name in the roundcube user table  :

[Amir Inbar]

yes i did drop the DB.

Code: [Select]

mysql> select * from users limit 2;
Empty set (0.00 sec)


[Amir Inbar]

I have the cause of the problem.

I am using server only mode.

At first install i have defined the Domain DNS servers to be resolved localy by sme server, but after customizing the server for several other different things i have changed the definition of the Domain DNS servers to resolve through Internet DNS servers since the domain is actually managed elsewhere and this Sme server manages only the mail.domain.tld part of the domain.

Roundcube template has a definition of localhost with variable %n that should have prevented the problem since it finds the servername.hostname.tld (not like %t variable that finds only hostnem.tld) and sets the output as the IMAP server that roundcube should verify login against.

Somehow, on my server, looking at /etc/roundcubmail/config.inc.php i have found that even though the variable in template is %n, the configuration is

Code: [Select]

$config['defualt_host'] = 'ssl://domain.tld'
I have managed to login to Roundcube when i have changed the Doman DNS servers to resolve locally again.

[byte]

I have the cause of the problem.

Time to start making notes of the changes you do in future to enable you to roll back if you encounter problems

[stephdl]

anyway amir you bring us an issue with composer...merci