Resolved Roundcube Login Failed

[dima1002]

Hello,

my login to roundcube failed with errors:

[11-Oct-2017 12:21:53 +0000]: <522hp306> IMAP Error: Login failed for [email protected] from 219.112.204.212(X-Real-IP: 219.112.204.212). AUTHENTICATE DIGEST-MD5: in /usr/share/psa-roundcube/program/lib/Roundcube/rcube_imap.php on line 193 (POST /?_task=login&_action=login)

Version:

‪Ubuntu 14.04.5 LTS‬
Produkt Plesk Onyx
Version 17.5.3 Update #24
Roundcube: 1.2.5


What can i do?

 

[UFHH01]

Hi dima1002,

did you consider to switch the webmailer - software ( roundcube to horde and backwards to horde again ), to solve your issue?

Sometimes it helps as well to DE- and RE-install a Plesk component, with the example commands ( logged in as user "root" over SSH ):

plesk installer --select-product-id plesk --select-release-current --remove-component roundcube

plesk installer --select-product-id plesk --select-release-current --install-component roundcube

A list of all the Plesk components names can be viewed with for example:

plesk installer --select-product-id plesk --select-release-current --show-components --show-options

 

[Bitpalast]

In this case it is possible that this is not a software fault and a reinstallation is not needed. More likely the login name (e-mail address) or password are wrong. The error messages comes from the /var/log/plesk-roundcube/plesk-roundcube/errors and is the default message that Roundcube logs when a user tries to login with false credentials. The only difference you have on some environments is the MD5 (or missing MD5) encryption. The default error message is:

[01-Oct-2017 11:10:00 +0000]: <code> IMAP Error: Login failed for <address> from <remote IP>(X-Real-IP: <remote IP>). Authentication failed. in /usr/share/psa-roundcube/program/lib/Roundcube/rcube_imap.php on line 193 (POST /roundcube/?_task=login&_action=login)

My suggestion is to first set a new password on the mailbox, then retry to login with mail address and the new password. Watch out for extra spaces at the beginning or end of a password. They must not be copied when using copy & paste to paste a password into the password field, else login could fail, too.

 

[dima1002]

Reinstallation was not successfully

All e-mail accounts have the problem.Password I have already reset. Unfortunately, we still have the error.

When I restart the Dovcut service, it works a few minutes.

I have made the following settings:

nano /etc/dovecot/conf.d/99-imap-login.confservice
service imap-login {
process_limit = 200
process_min_avail = 60
}

Now it works for a while. Then we get an MD5 Authentication error

Syslog:
() failed: error:1408A10B:SSL routines:SSL3_GET_CLIENT_HELLO:wrong version number, session=<NOBJ9T9bcttXuFUP>
Oct 11 08:59:01 web02 dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=88.184.85.12, lip=5.45.98.74, TLS handshaking: SSL_accept() failed: error:1408A10B:SSL routines:SSL3_GET_CLIENT_HELLO:wrong version number, session=<v+Rh9T9bdttXuFUP>
Oct 11 10:11:24 web02 dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=88.184.85.12, lip=5.45.98.74, TLS handshaking: SSL_accept() failed: error:1408A10B:SSL routines:SSL3_GET_CLIENT_HELLO:wrong version number, session=<tu9F+EBbf9tXuFUP>
Oct 11 10:11:26 web02 dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=88.184.85.12, lip=5.45.98.74, TLS handshaking: SSL_accept() failed: error:1408A10B:SSL routines:SSL3_GET_CLIENT_HELLO:wrong version number, session=<W5la+EBbjttXuFUP>
Oct 11 10:30:26 web02 dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=135.4.131.127, lip=5.45.98.74, TLS handshaking: SSL_accept() failed: error:1408A10B:SSL routines:SSL3_GET_CLIENT_HELLO:wrong version number, session=<pPdRPEFbTuXDBIOd>
Oct 11 13:30:26 web02 dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=135.4.131.127, lip=5.45.98.74, TLS handshaking: SSL_accept() failed: error:1408A10B:SSL routines:SSL3_GET_CLIENT_HELLO:wrong version number, session=<Z+0NwENb0ULDBIOd>
Oct 11 14:00:27 web02 dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=135.4.131.127, lip=5.45.98.74, TLS handshaking: SSL_accept() failed: error:1408A10B:SSL routines:SSL3_GET_CLIENT_HELLO:wrong version number, session=<dllpK0RbtU3DBIOd>

 

[Bitpalast]

Where the accounts migrated from another system or restored from a backup? In that case this could apply: Roundcube authorization fails for migrated accounts. Login failed error appears

 

[dima1002]

No I have only installed Plesk updates.

 

[Bitpalast]

Could you please try to change the authentication method to "Plain" anyway? Just to rule out the possibility that it is a problem with the MD5 hash.

 

[dima1002]

Do you mean to adjust the parameters here?

root@web:/usr/share/psa-roundcube/config# cat defaults.inc.php | grep auth_type
$config['imap_auth_type'] = null;
$config['smtp_auth_type'] = '';

 

[Bitpalast]

Yes, so that they read

$config['imap_auth_type'] = PLAIN;
$config['smtp_auth_type'] = 'PLAIN';

Probably no need to restart any services afterwards. Simply change and try. If it does not work, change back to the previous state.

 

[dima1002]

In the file is now Plain and I have the services restarted.

[11-Oct-2017 15:55:27 +0000]: <58bl23gp> IMAP Error: Login failed for [email protected] from 99.192.131.252(X-Real-IP: 99.192.131.252). AUTHENTICATE PLAIN: in /usr/share/psa-roundcube/program/lib/Roundcube/rcube_imap.php on line 193 (POST /?_task=mail&_action=refresh)
[11-Oct-2017 15:55:44 +0000]: <58bl23gp> IMAP Error: Login failed for [email protected] from 99.192.131.252(X-Real-IP: 99.192.131.252). AUTHENTICATE PLAIN: in /usr/share/psa-roundcube/program/lib/Roundcube/rcube_imap.php on line 193 (GET /?_task=mail&_action=list&_refresh=1&_mbox=INBOX.Sent&_page=1&_remote=1&_unlock=loading1507737344640&_=1507736844684)

 

[dima1002]

I found this log:
Oct 11 17:40:13 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 17:43:04 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 17:43:44 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 17:46:24 web02 dovecot: auth: Error: Master requested auth for nonexistent client 18926
Oct 11 17:46:29 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 17:49:39 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 17:49:39 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 17:51:51 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 17:51:51 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 17:53:37 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:53:43 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 17:53:45 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 17:54:20 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:54:37 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:55:24 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:55:27 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:55:44 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:56:28 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:56:31 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 17:56:53 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 17:56:53 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 17:57:28 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:57:45 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:57:56 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 17:58:13 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:58:18 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:58:28 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:59:17 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:59:17 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:59:20 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 17:59:28 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 18:00:14 web02 dovecot: imap-login: Error: fd_send(imap, 19) failed: Broken pipe
Oct 11 18:00:14 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 18:00:15 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 18:00:15 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 18:00:15 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 18:00:15 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 18:00:28 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 18:01:28 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 18:01:53 web02 /usr/lib/plesk-9.0/psa-pc-remote[1298]: Message aborted.
Oct 11 18:02:06 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
Oct 11 18:02:07 web02 dovecot: imap-login: Error: read(imap) failed: Remote closed connection (destination service { process_limit } reached?)
root@web02:/var/log#

 

[Bitpalast]

"Verbindung zum Speicherserver fehlgeschlagen" (Connection to storage server failed) can be a totally different issue and may be the "real" issue you are facing. Normally this error occurs when the number of concurrent connections to either the IMAP service or the number of concurrent connections from the same IP address exceeds the alottment. This can be the reason why you can access Roundcube briefly after a restart of the service, but a few minutes later it is failing again. Because by that time, many connections have been built and yours won't be processed as it exceeds the alottment.

Please verify that the number of concurrent connections that an IP address can have to the IMAP service is large enough. Now, what is "large enough": It depends. GUI > Tools & Settings > Mailserver Settings:

The number ins the sample are an example only from a test server. You can for test purposes greatly increase them. For example, when you have many users on the machine who are using web mail, you must increase the "100" to a much higher number, because all connections of Roundcube are done through IP 127.0.0.1 (the same IP address). So if 101 users try to connect with the sample setting, the first above the hundred won't be able to connect as Roundcube already uses the 100 connections.

No separate restart is needed after the setting is changed (restart is done automatically).

 

[Bitpalast]

Is your issue solved?

 

[dima1002]

I have now been able to test it.
After the conversion to 1500 connections everything works.
Thanks
The Problem is Solved !!!

 

[tanjix]

Hi Guys! I am having the same problem, but the beforementioned solution does not help for me on Debian 8.10, Version 17.8.11 Update #7.

According to my log:

[17-May-2018 16:07:26 UTC] PHP Warning:  stream_socket_client(): SSL: Die Verbindung wurde vom Kommunikationspartner zurückgesetzt in /usr/share/psa-roundcube/program/lib/Roundcube/rcube_imap_generic.php on line 959
[17-May-2018 16:07:26 UTC] PHP Warning:  stream_socket_client(): Failed to enable crypto in /usr/share/psa-roundcube/program/lib/Roundcube/rcube_imap_generic.php on line 959
[17-May-2018 16:07:26 UTC] PHP Warning:  stream_socket_client(): unable to connect to ssl://localhost:993 (Unknown error) in /usr/share/psa-roundcube/program/lib/Roundcube/rcube_imap_generic.php on line 959
[17-May-2018 16:07:26 +0000]: <1khgjova> IMAP Error: Login failed for [email protected] from xx.xxx.xxx.xx(X-Real-IP: xx.xxx.xxx.xx). Could not connect to ssl://localhost:993: Unknown reason in /usr/share/psa-roundcube/program/lib/Roundcube/rcube_imap.php on line 196 (POST /?_task=login&_action=login)

Trying to raise the maximum connection number did not help.

Can anyone advise?

Thanks!

 

[Bitpalast]

Is 127.0.0.1 and your public IPv4 address included in the Fail2Ban whitelist?

 

[tanjix]

Hi Peter,

yes, they are ...

 

[Bitpalast]

Please see the solution for the issue here:
Unable to log in to Roundcube webmail after upgrade to Plesk Onyx 17.8: Connection to storage server failed

 

[tanjix]

Hi Peter, thanks for directing me to this post.

Unfortunately I have to say, that my config files already have verify_peer = false, so this is also not the problem in my case ... :-(

 

[Bitpalast]

Several users are experiencing the issue according to
Roundcube stoped working "Connection to imap server failed"
but the solution should work. Did you restart Dovecot?
If this does not help, you should open a ticket with official Plesk support.