Hello everyone,
after our nightly maintenance all updated kolab instances show the same problem:
Login into roundcube is no longer possible. The request on /?_task=login is aborted after a minute and nginx terminates the connection with status 504. The update afaik only changed guam-libs (0.9.8-1) over (0.9.7-3) and erlang-eimap (0.4.3-1.1) over (0.4.2-2.1). So I suspect the error to be there!?
Could you please check you most recent commits for any changes that might cause this error? Is thee a way to further debug and provide more information for you?
Thanks a lot
Sebastian
Test login
- Trying 127.0.0.1...
- TCP_NODELAY set
- Expire in 200 ms for 4 (transfer 0x563ebc0f1a90)
- Connected to localhost (127.0.0.1) port 10000 (#0)
POST /?_task=login HTTP/1.1
Host: localhost:10000
User-Agent: curl/7.64.0
Accept: */*
Cookie: roundcube_sessid=6253p3m28lpb0ce6qngk3i5bib
Content-Length: 108
Content-Type: application/x-www-form-urlencoded
- upload completely sent off: 108 out of 108 bytes
Expected results:
On systems with the software from yesterday these requests still work fine. Login is possible. iRony works.
Expected login Status 302 immediately
Actual results:
On the updated systems, when trying to log in (or get something from iRony) we get a 504 from nginx (which uses php-fpm 7.3):
RESP (1 minute later):
HTTP/1.1 504 Gateway Time-out
<html>
<head><title>504 Gateway Time-out</title></head>
<body>
<center><h1>504 Gateway Time-out</h1></center>
<hr><center>nginx/1.19.4</center>
</body>
</html>
Other tests
kolab lm is working
testsaslauthd -u cyrus-admin -p <<cyrus_password>>
kolab list-mailbox-metadata user/admin@testing.it
kolab-webadmin ist working
cyrus via imap is working
Versions:
We're running on Debian 10.
APT Packages & PHP Includes are pasted to https://git.kolab.org/P58
dpkg -l pykolab
Desired=Unknown/Install/Remove/Purge/Hold
Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend | |
/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) | |
/ Name Version Architecture Description | |
+++-==============-===============-============-====================================
ii pykolab 0.8.18-0~kolab2 all Kolab Groupware daemon and utilities
Relevant log snippets:
/var/log/mail.log
Nov 6 11:17:20 apps cyrus/imaps[12438]: starttls: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits reused) no authentication
Nov 6 11:17:20 apps cyrus/imaps[15925]: Option 'ldap_servers' is deprecated in favor of 'ldap_uri' since version 2.5.0.
/var/log/dirsrv/slapd-apps/access
[06/Nov/2020:11:17:20.371875269 +0100] conn=62 fd=68 slot=68 connection from 127.0.0.1 to 127.0.0.1
[06/Nov/2020:11:17:20.372244083 +0100] conn=62 op=0 BIND dn="uid=kolab-service,ou=Special Users,dc=testing,dc=it" method=128 version=3
[06/Nov/2020:11:17:20.409440751 +0100] conn=62 op=1 SRCH base="cn=config" scope=2 filter="(objectClass=vlvsearch)" attrs="* aci"
[06/Nov/2020:11:17:20.410575881 +0100] conn=62 op=1 RESULT err=0 tag=101 nentries=0 etime=0.0001387866
[06/Nov/2020:11:17:20.410919611 +0100] conn=62 op=2 SRCH base="ou=People,dc=testing,dc=it" scope=2 filter="(&(objectClass=inetorgperson)(|(uid=admin)(mail=admin@testing.it)(alias=admin@testing.it)))" attrs="displayName mail alias nsRoleDN uid nsUniqueId"
[06/Nov/2020:11:17:20.411439590 +0100] conn=62 op=2 RESULT err=0 tag=101 nentries=1 etime=0.0000682918
[06/Nov/2020:11:17:20.418621146 +0100] conn=62 op=0 RESULT err=0 tag=97 nentries=0 etime=0.0046576307 dn="uid=kolab-service,ou=special users,dc=testing,dc=it"
[06/Nov/2020:11:18:21.537415066 +0100] conn=62 op=3 UNBIND
[06/Nov/2020:11:18:21.537517075 +0100] conn=62 op=3 fd=68 closed - U1
nginx log
127.0.0.1 - - [06/Nov/2020:11:18:20 +0100] "POST /?_task=login HTTP/1.0" 499 0 "https://orga.testing.it/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.122 Safari/537.36"
No entries in php-fpm log or pykolab.log.