Page MenuHomePhorge
Create Task
Maniphest T6073

No longer able to login after guam update
Closed, InvalidPublic
Actions

Description

Installed on Ubuntu 18.04 and up to date

# dpkg -l kolab
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                                     Version                   Architecture              Description
+++-========================================-=========================-=========================-=====================================================================================
ii  kolab                                    16.0.1-22                 all                       Metapackage for Kolab Groupware Server
# dpkg -l guam
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                                     Version                   Architecture              Description
+++-========================================-=========================-=========================-=====================================================================================
ii  guam                                     0.9.8-1                   amd64                     Smart Reverse IMAP Proxy

Webmail login and iRony are no longer working. Webmail is timing out and iRony is failing with authentication errors.

May be unrelated but it looks like neither guam or slapd are listening on ipv4

# netstat -tlnp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 127.0.0.1:10027         0.0.0.0:*               LISTEN      1555/master         
tcp        0      0 0.0.0.0:587             0.0.0.0:*               LISTEN      1555/master         
tcp        0      0 127.0.0.1:783           0.0.0.0:*               LISTEN      1547/perl           
tcp        0      0 0.0.0.0:4369            0.0.0.0:*               LISTEN      1058/epmd           
tcp        0      0 0.0.0.0:40853           0.0.0.0:*               LISTEN      775/guam            
tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN      899/systemd-resolve 
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1334/sshd           
tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN      1555/master         
tcp        0      0 127.0.0.1:8891          0.0.0.0:*               LISTEN      1279/opendkim       
tcp        0      0 0.0.0.0:4190            0.0.0.0:*               LISTEN      1358/cyrus-master   
tcp        0      0 127.0.0.1:10024         0.0.0.0:*               LISTEN      1654/amavisd-new (m 
tcp        0      0 127.0.0.1:10025         0.0.0.0:*               LISTEN      1555/master         
tcp        0      0 127.0.0.1:9993          0.0.0.0:*               LISTEN      1358/cyrus-master   
tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN      1392/mysqld         
tcp        0      0 127.0.0.1:10026         0.0.0.0:*               LISTEN      1436/python         
tcp6       0      0 :::587                  :::*                    LISTEN      1555/master         
tcp6       0      0 :::143                  :::*                    LISTEN      775/guam            
tcp6       0      0 ::1:783                 :::*                    LISTEN      1547/perl           
tcp6       0      0 :::80                   :::*                    LISTEN      1365/apache2        
tcp6       0      0 :::4369                 :::*                    LISTEN      1058/epmd           
tcp6       0      0 :::22                   :::*                    LISTEN      1334/sshd           
tcp6       0      0 :::25                   :::*                    LISTEN      1555/master         
tcp6       0      0 :::443                  :::*                    LISTEN      1365/apache2        
tcp6       0      0 :::4190                 :::*                    LISTEN      1358/cyrus-master   
tcp6       0      0 :::993                  :::*                    LISTEN      775/guam            
tcp6       0      0 :::389                  :::*                    LISTEN      1315/ns-slapd       
tcp6       0      0 ::1:10024               :::*                    LISTEN      1654/amavisd-new (m

Details

Ticket Type
Task

Related Objects

Event Timeline

emunson created this task.Nov 6 2020, 5:37 PM
emunson mentioned this in T5809: Error: roundcube connection to storage server failed#.Nov 6 2020, 5:47 PM
emunson added a comment.Nov 6 2020, 5:51 PM

Webmail interface shows the following message:

Connection to storage server failed.

Server Error: Failed to send LOGIN command

But there isn't anything useful in the logs for cyrus, ns-slapd, or guam

Spenneberg subscribed.Nov 7 2020, 8:08 AM

Happens as well on CentOS 7 after installing the current guam update guam-0.9.8-1.3.el7.kolab_16.x86_64

Spenneberg added a comment.Nov 7 2020, 8:17 AM

Guam logs:
2020-11-07 07:20:13.817 [error] <0.396.0> Supervisor {<0.396.0>,kolab_guam_listener} had child session started with {kolab_guam_session,start_link,undefined} at <0.18081.1> exit with reason no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in context child_terminated
2020-11-07 07:20:13.818 [error] <0.18185.1> gen_server <0.18185.1> terminated with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178
2020-11-07 07:20:13.819 [error] <0.18185.1> CRASH REPORT Process <0.18185.1> with 0 neighbours exited with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in gen_server:terminate/7 line 826
2020-11-07 07:20:13.819 [error] <0.396.0> Supervisor {<0.396.0>,kolab_guam_listener} had child session started with {kolab_guam_session,start_link,undefined} at <0.18185.1> exit with reason no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in context child_terminated
2020-11-07 07:20:13.819 [error] <0.18130.1> gen_server <0.18130.1> terminated with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178
2020-11-07 07:20:13.819 [error] <0.18130.1> CRASH REPORT Process <0.18130.1> with 0 neighbours exited with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in gen_server:terminate/7 line 826
2020-11-07 07:20:13.819 [error] <0.396.0> Supervisor {<0.396.0>,kolab_guam_listener} had child session started with {kolab_guam_session,start_link,undefined} at <0.18130.1> exit with reason no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in context child_terminated
2020-11-07 07:20:13.826 [error] <0.18128.1> gen_server <0.18128.1> terminated with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178
2020-11-07 07:20:13.826 [error] <0.18128.1> CRASH REPORT Process <0.18128.1> with 0 neighbours exited with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in gen_server:terminate/7 line 826
2020-11-07 07:20:13.826 [error] <0.396.0> Supervisor {<0.396.0>,kolab_guam_listener} had child session started with {kolab_guam_session,start_link,undefined} at <0.18128.1> exit with reason no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in context child_terminated

• jacktenben subscribed.Nov 9 2020, 12:42 PM
This comment was removed by sicherha-admin.
• jacktenben added a comment.Nov 9 2020, 12:49 PM
This comment was removed by sicherha-admin.
• jacktenben added a comment.Nov 9 2020, 12:51 PM
This comment was removed by sicherha-admin.
• jacktenben added a comment.Nov 9 2020, 12:53 PM
This comment was removed by sicherha-admin.
emunson added a comment.Nov 10 2020, 8:16 PM

Those guam logs are different from mine, I see the following:

2020-11-10 05:29:26.321 [info] <0.350.0> Application lager started on node 'kolab_guam@127.0.0.1'
2020-11-10 05:29:26.322 [info] <0.350.0> Application eimap started on node 'kolab_guam@127.0.0.1'
2020-11-10 05:29:26.322 [info] <0.350.0> Application lager_syslog started on node 'kolab_guam@127.0.0.1'
2020-11-10 05:29:26.322 [info] <0.429.0>@kolab_guam:start:33 Starting Kolab Guam IMAP session proxy ...
2020-11-10 05:29:26.322 [info] <0.429.0>@kolab_guam:start:34     Starting the main supervisor ...
2020-11-10 05:29:26.322 [info] <0.431.0>@kolab_guam_listener:init:45 Starting listener "imap" on port 143 ([{keepalive,true},{reuseaddr,true},{active,false},inet6]) with 1 rules
2020-11-10 05:29:26.322 [info] <0.434.0>@kolab_guam_listener:init:45 Starting listener "imaps" on port 993 ([{keepalive,true},{reuseaddr,true},{active,false},inet6]) with 1 rules
2020-11-10 05:29:26.323 [info] <0.350.0> Application kolab_guam started on node 'kolab_guam@127.0.0.1'
2020-11-10 14:00:01.771 [info] <0.1615.0> TLS server: In state certify received CLIENT ALERT: Fatal - Bad Certificate

2020-11-10 14:00:01.772 [error] <0.1498.0>@kolab_guam_session:start_client_tls:389 gen_server <0.1498.0> terminated with reason: no match of right hand value {error,{tls_alert,"bad certificate"}} in kolab_guam_session:start_client_tls/4 line 389
2020-11-10 14:00:01.773 [error] <0.1498.0>@kolab_guam_session:start_client_tls:389 CRASH REPORT Process <0.1498.0> with 0 neighbours crashed with reason: no match of right hand value {error,{tls_alert,"bad certificate"}} in kolab_guam_session:start_client_tls/4 line 389
2020-11-10 14:00:01.774 [error] <0.431.0>@kolab_guam_session:start_client_tls:389 Supervisor {<0.431.0>,kolab_guam_listener} had child session started with {kolab_guam_session,start_link,undefined} at <0.1498.0> exit with reason no match of right hand value {error,{tls_alert,"bad certificate"}} in kolab_guam_session:start_client_tls/4 line 389 in context child_terminated
2020-11-10 14:03:58.547 [info] <0.1657.0> TLS server: In state certify received CLIENT ALERT: Fatal - Bad Certificate

2020-11-10 14:03:58.548 [error] <0.1514.0>@kolab_guam_session:start_client_tls:389 gen_server <0.1514.0> terminated with reason: no match of right hand value {error,{tls_alert,"bad certificate"}} in kolab_guam_session:start_client_tls/4 line 389
2020-11-10 14:03:58.548 [error] <0.1514.0>@kolab_guam_session:start_client_tls:389 CRASH REPORT Process <0.1514.0> with 0 neighbours crashed with reason: no match of right hand value {error,{tls_alert,"bad certificate"}} in kolab_guam_session:start_client_tls/4 line 389
2020-11-10 14:03:58.549 [error] <0.431.0>@kolab_guam_session:start_client_tls:389 Supervisor {<0.431.0>,kolab_guam_listener} had child session started with {kolab_guam_session,start_link,undefined} at <0.1514.0> exit with reason no match of right hand value {error,{tls_alert,"bad certificate"}} in kolab_guam_session:start_client_tls/4 line 389 in context child_terminated

But I don't understand why it is complaining about my certificates. I use Lets Encrypt and have been for several years now. The certificates rotated 3 weeks ago and nothing else is complaining (not cyrus, not apache, etc)

emunson added a comment.Nov 10 2020, 8:54 PM

Actually I am also seeing the same failure as Spenneburg:

2020-11-10 14:46:05.651 [error] <0.483.0>@kolab_guam_session:accept_client:178 gen_server <0.483.0> terminated with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178
2020-11-10 14:46:05.651 [error] <0.483.0>@kolab_guam_session:accept_client:178 CRASH REPORT Process <0.483.0> with 0 neighbours crashed with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178
2020-11-10 14:46:05.651 [error] <0.434.0>@kolab_guam_session:accept_client:178 Supervisor {<0.434.0>,kolab_guam_listener} had child session started with {kolab_guam_session,start_link,undefined} at <0.483.0> exit with reason no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in context child_terminated

Now that my sessions has expired, I have no access to my calendar or contacts and I can only get email via smtp on my phone.

sicherha-admin subscribed.Nov 10 2020, 9:43 PM
sicherha raised the priority of this task from Needs Triage to Unbreak Now!.Nov 10 2020, 9:56 PM
sicherha subscribed.
sicherha assigned this task to mollekopf.Nov 10 2020, 9:59 PM
sicherha mentioned this in T6067: Login no longer possible after update - same problem, but with apache2.
emunson added a comment.Nov 11 2020, 1:37 AM

This is likely the same issue as T6061

emunson closed this task as Invalid.Nov 11 2020, 1:37 AM
emunson mentioned this in T6061: Login no longer possible after update.