Page MenuHomekolab.org

No longer able to login after guam update
Closed, InvalidPublic

Description

Installed on Ubuntu 18.04 and up to date

# dpkg -l kolab
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                                     Version                   Architecture              Description
+++-========================================-=========================-=========================-=====================================================================================
ii  kolab                                    16.0.1-22                 all                       Metapackage for Kolab Groupware Server
# dpkg -l guam
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                                     Version                   Architecture              Description
+++-========================================-=========================-=========================-=====================================================================================
ii  guam                                     0.9.8-1                   amd64                     Smart Reverse IMAP Proxy

Webmail login and iRony are no longer working. Webmail is timing out and iRony is failing with authentication errors.

May be unrelated but it looks like neither guam or slapd are listening on ipv4

# netstat -tlnp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 127.0.0.1:10027         0.0.0.0:*               LISTEN      1555/master         
tcp        0      0 0.0.0.0:587             0.0.0.0:*               LISTEN      1555/master         
tcp        0      0 127.0.0.1:783           0.0.0.0:*               LISTEN      1547/perl           
tcp        0      0 0.0.0.0:4369            0.0.0.0:*               LISTEN      1058/epmd           
tcp        0      0 0.0.0.0:40853           0.0.0.0:*               LISTEN      775/guam            
tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN      899/systemd-resolve 
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1334/sshd           
tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN      1555/master         
tcp        0      0 127.0.0.1:8891          0.0.0.0:*               LISTEN      1279/opendkim       
tcp        0      0 0.0.0.0:4190            0.0.0.0:*               LISTEN      1358/cyrus-master   
tcp        0      0 127.0.0.1:10024         0.0.0.0:*               LISTEN      1654/amavisd-new (m 
tcp        0      0 127.0.0.1:10025         0.0.0.0:*               LISTEN      1555/master         
tcp        0      0 127.0.0.1:9993          0.0.0.0:*               LISTEN      1358/cyrus-master   
tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN      1392/mysqld         
tcp        0      0 127.0.0.1:10026         0.0.0.0:*               LISTEN      1436/python         
tcp6       0      0 :::587                  :::*                    LISTEN      1555/master         
tcp6       0      0 :::143                  :::*                    LISTEN      775/guam            
tcp6       0      0 ::1:783                 :::*                    LISTEN      1547/perl           
tcp6       0      0 :::80                   :::*                    LISTEN      1365/apache2        
tcp6       0      0 :::4369                 :::*                    LISTEN      1058/epmd           
tcp6       0      0 :::22                   :::*                    LISTEN      1334/sshd           
tcp6       0      0 :::25                   :::*                    LISTEN      1555/master         
tcp6       0      0 :::443                  :::*                    LISTEN      1365/apache2        
tcp6       0      0 :::4190                 :::*                    LISTEN      1358/cyrus-master   
tcp6       0      0 :::993                  :::*                    LISTEN      775/guam            
tcp6       0      0 :::389                  :::*                    LISTEN      1315/ns-slapd       
tcp6       0      0 ::1:10024               :::*                    LISTEN      1654/amavisd-new (m

Details

Ticket Type
Task

Event Timeline

emunson created this task.Nov 6 2020, 5:37 PM

Webmail interface shows the following message:

Connection to storage server failed.

Server Error: Failed to send LOGIN command

But there isn't anything useful in the logs for cyrus, ns-slapd, or guam

Happens as well on CentOS 7 after installing the current guam update guam-0.9.8-1.3.el7.kolab_16.x86_64

Guam logs:
2020-11-07 07:20:13.817 [error] <0.396.0> Supervisor {<0.396.0>,kolab_guam_listener} had child session started with {kolab_guam_session,start_link,undefined} at <0.18081.1> exit with reason no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in context child_terminated
2020-11-07 07:20:13.818 [error] <0.18185.1> gen_server <0.18185.1> terminated with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178
2020-11-07 07:20:13.819 [error] <0.18185.1> CRASH REPORT Process <0.18185.1> with 0 neighbours exited with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in gen_server:terminate/7 line 826
2020-11-07 07:20:13.819 [error] <0.396.0> Supervisor {<0.396.0>,kolab_guam_listener} had child session started with {kolab_guam_session,start_link,undefined} at <0.18185.1> exit with reason no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in context child_terminated
2020-11-07 07:20:13.819 [error] <0.18130.1> gen_server <0.18130.1> terminated with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178
2020-11-07 07:20:13.819 [error] <0.18130.1> CRASH REPORT Process <0.18130.1> with 0 neighbours exited with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in gen_server:terminate/7 line 826
2020-11-07 07:20:13.819 [error] <0.396.0> Supervisor {<0.396.0>,kolab_guam_listener} had child session started with {kolab_guam_session,start_link,undefined} at <0.18130.1> exit with reason no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in context child_terminated
2020-11-07 07:20:13.826 [error] <0.18128.1> gen_server <0.18128.1> terminated with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178
2020-11-07 07:20:13.826 [error] <0.18128.1> CRASH REPORT Process <0.18128.1> with 0 neighbours exited with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in gen_server:terminate/7 line 826
2020-11-07 07:20:13.826 [error] <0.396.0> Supervisor {<0.396.0>,kolab_guam_listener} had child session started with {kolab_guam_session,start_link,undefined} at <0.18128.1> exit with reason no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in context child_terminated

This comment was removed by sicherha-admin.
This comment was removed by sicherha-admin.
This comment was removed by sicherha-admin.
This comment was removed by sicherha-admin.

Those guam logs are different from mine, I see the following:

2020-11-10 05:29:26.321 [info] <0.350.0> Application lager started on node 'kolab_guam@127.0.0.1'
2020-11-10 05:29:26.322 [info] <0.350.0> Application eimap started on node 'kolab_guam@127.0.0.1'
2020-11-10 05:29:26.322 [info] <0.350.0> Application lager_syslog started on node 'kolab_guam@127.0.0.1'
2020-11-10 05:29:26.322 [info] <0.429.0>@kolab_guam:start:33 Starting Kolab Guam IMAP session proxy ...
2020-11-10 05:29:26.322 [info] <0.429.0>@kolab_guam:start:34     Starting the main supervisor ...
2020-11-10 05:29:26.322 [info] <0.431.0>@kolab_guam_listener:init:45 Starting listener "imap" on port 143 ([{keepalive,true},{reuseaddr,true},{active,false},inet6]) with 1 rules
2020-11-10 05:29:26.322 [info] <0.434.0>@kolab_guam_listener:init:45 Starting listener "imaps" on port 993 ([{keepalive,true},{reuseaddr,true},{active,false},inet6]) with 1 rules
2020-11-10 05:29:26.323 [info] <0.350.0> Application kolab_guam started on node 'kolab_guam@127.0.0.1'
2020-11-10 14:00:01.771 [info] <0.1615.0> TLS server: In state certify received CLIENT ALERT: Fatal - Bad Certificate

2020-11-10 14:00:01.772 [error] <0.1498.0>@kolab_guam_session:start_client_tls:389 gen_server <0.1498.0> terminated with reason: no match of right hand value {error,{tls_alert,"bad certificate"}} in kolab_guam_session:start_client_tls/4 line 389
2020-11-10 14:00:01.773 [error] <0.1498.0>@kolab_guam_session:start_client_tls:389 CRASH REPORT Process <0.1498.0> with 0 neighbours crashed with reason: no match of right hand value {error,{tls_alert,"bad certificate"}} in kolab_guam_session:start_client_tls/4 line 389
2020-11-10 14:00:01.774 [error] <0.431.0>@kolab_guam_session:start_client_tls:389 Supervisor {<0.431.0>,kolab_guam_listener} had child session started with {kolab_guam_session,start_link,undefined} at <0.1498.0> exit with reason no match of right hand value {error,{tls_alert,"bad certificate"}} in kolab_guam_session:start_client_tls/4 line 389 in context child_terminated
2020-11-10 14:03:58.547 [info] <0.1657.0> TLS server: In state certify received CLIENT ALERT: Fatal - Bad Certificate

2020-11-10 14:03:58.548 [error] <0.1514.0>@kolab_guam_session:start_client_tls:389 gen_server <0.1514.0> terminated with reason: no match of right hand value {error,{tls_alert,"bad certificate"}} in kolab_guam_session:start_client_tls/4 line 389
2020-11-10 14:03:58.548 [error] <0.1514.0>@kolab_guam_session:start_client_tls:389 CRASH REPORT Process <0.1514.0> with 0 neighbours crashed with reason: no match of right hand value {error,{tls_alert,"bad certificate"}} in kolab_guam_session:start_client_tls/4 line 389
2020-11-10 14:03:58.549 [error] <0.431.0>@kolab_guam_session:start_client_tls:389 Supervisor {<0.431.0>,kolab_guam_listener} had child session started with {kolab_guam_session,start_link,undefined} at <0.1514.0> exit with reason no match of right hand value {error,{tls_alert,"bad certificate"}} in kolab_guam_session:start_client_tls/4 line 389 in context child_terminated

But I don't understand why it is complaining about my certificates. I use Lets Encrypt and have been for several years now. The certificates rotated 3 weeks ago and nothing else is complaining (not cyrus, not apache, etc)

Actually I am also seeing the same failure as Spenneburg:

2020-11-10 14:46:05.651 [error] <0.483.0>@kolab_guam_session:accept_client:178 gen_server <0.483.0> terminated with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178
2020-11-10 14:46:05.651 [error] <0.483.0>@kolab_guam_session:accept_client:178 CRASH REPORT Process <0.483.0> with 0 neighbours crashed with reason: no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178
2020-11-10 14:46:05.651 [error] <0.434.0>@kolab_guam_session:accept_client:178 Supervisor {<0.434.0>,kolab_guam_listener} had child session started with {kolab_guam_session,start_link,undefined} at <0.483.0> exit with reason no match of right hand value {error,closed} in kolab_guam_session:accept_client/1 line 178 in context child_terminated

Now that my sessions has expired, I have no access to my calendar or contacts and I can only get email via smtp on my phone.

sicherha raised the priority of this task from Needs Triage to Unbreak Now!.Nov 10 2020, 9:56 PM
sicherha added a subscriber: sicherha.

This is likely the same issue as T6061