Webmail username & password errors

[Graphrix]

I have 37 domains on the same server - a lot of mail boxes are returning the error "Login failed because your username or password was entered incorrectly."

Some mail boxes work and other don't ... I create a mail box and it works fine, 2 hours later it returns this error, 20 minutes later it is working again.

I have followed sollution http://kb.parallels.com/en/114430 it didn't solve the problem.

I have check /var/log/psa-horde/psa-horde.log and it returns:
#####################################################
May 24 09:28:26 HORDE [error] [imp] FAILED LOGIN for [email protected] [110.143.###.###] (forwarded for [110.143.###.###]) to {127.0.0.1:143 [imap/notls]} [pid 3896 on line 139 of "/usr/share/psa-horde/imp/lib/Auth/imp.php"]
May 26 08:32:41 HORDE [error] [imp] FAILED LOGIN for [email protected] [203.45.###.###] (forwarded for [203.45.###.###]) to {127.0.0.1:143 [imap/notls]} [pid 13054 on line 139 of "/usr/share/psa-horde/imp/lib/Auth/imp.php"]
#####################################################




This is the IMP test for http://webmail.domain.com.au/imp/test.php

#####################################################
IMP Version

IMP: H3 (4.3.11)
Other Horde Applications

dimp: No
DIMP provides an alternate display view using JavaScript.
gollem: No
Gollem provides access to local VFS filesystems to attach files.
ingo: Yes (Version: H3 (1.2.6))
mimp: Yes (Version: H3 (1.1.4))
nag: No
Nag allows tasks to be directly created from e-mail data.
turba: Yes (Version: H3 (2.3.6))
PHP Version

PHP Version: 5.3.3
PHP Major Version: 5.3
PHP Minor Version: 3
PHP Version Classification: release
This version of PHP has not been fully tested with this version of Horde.
PHP Module Capabilities

Internationalized Domain Names Support: No
IMP requires the idn module (installed via PECL) in order to handle Internationalized Domain Names.
IMAP Support: Yes
OpenSSL Support: Yes
Tidy support: No
If the tidy PHP extension is available, IMP can use it to sanitize the output of HTML messages before displaying to the user, and to clean outgoing HTML messages created in the HTML composition mode. See imp/docs/INSTALL for more information.
Miscellaneous PHP Settings

file_uploads enabled: Yes
Required IMP Configuration Files

config/conf.php: Yes
config/mime_drivers.php: Yes
config/prefs.php: Yes
config/servers.php: Yes
PEAR

PEAR Search Path (PHP's include_path): */usr/share/psa-horde:/usr/share/psa-horde/lib:/usr/share/psa-pear:.
PEAR: Yes
Recent PEAR: Yes
Auth_SASL: Yes
HTTP_Request: Yes
PHP Mail Server Support Test

Attempting to automatically determine the correct connection parameters for your server:
Trying protocol pop3/notls, Port 110:
ERROR - The server returned the following error message:
Retrying CRAM-MD5 authentication after Login failed.Retrying CRAM-MD5 authentication after Login failed.SECURITY PROBLEM: insecure server advertised AUTH=PLAINRetrying PLAIN authentication after Login failed.SECURITY PROBLEM: insecure server advertised AUTH=PLAINRetrying PLAIN authentication after Login failed.SECURITY PROBLEM: insecure server advertised AUTH=PLAINCan not authenticate to POP3 server: Login failed.
Trying protocol pop3/ssl, Port 995:
ERROR - The server returned the following error message:
Certificate failure for mail.DOMAIN.com.au: self signed certificate:
/C=US/ST=Virginia/L=Herndon/O=Parallels/OU=Parallels Panel/CN=Parallels
Panel/[email protected]
Trying protocol pop3/ssl/novalidate-cert, Port 995:
ERROR - The server returned the following error message:
Retrying CRAM-MD5 authentication after Login failed.Retrying CRAM-MD5 authentication after Login failed.Retrying PLAIN authentication after Login failed.Retrying PLAIN authentication after Login failed.Can not authenticate to POP3 server: Login failed.
Trying protocol pop3/tls/novalidate-cert, Port 110:
ERROR - The server returned the following error message:
Retrying CRAM-MD5 authentication after Login failed.Retrying CRAM-MD5 authentication after Login failed.Retrying PLAIN authentication after Login failed.Retrying PLAIN authentication after Login failed.Can not authenticate to POP3 server: Login failed.
Could not determine a successful connection protocol. Make sure your mail server is running and you have specified the correct port.

#####################################################




Can I get some help to solve this problem please? ... our last servers hard drive died and had to transfer everything on this new centos 6.4 server. It is a fresh Centos and Plesk install.

I have tried to run telnet using ssh, returning the following response.

[root@host /]# telnet localhost 143
-bash: telnet: command not found

 

[Graphrix]

Still trying to figure this out ... have found that a LOT of people are having the same problem and there is NO solution that I have found.

################################################## ###

[root@host log]# /usr/local/psa/admin/sbin/mchk --with-spam
==> Checking for: mailsrv_conf_init... ok
==> Checking for: mail_handlers_init... ok
==> Checking for: mailsrv_entities_dump... ok
==> Checking for: mail_admin_aliases... ok
==> Checking for: mail_auth_dump... ok
==> Checking for: mailman_lists_dump... ok
==> Checking for: mail_kav8_restore... ok
==> Checking for: mail_responder_restore... ok
==> Checking for: mail_postfix_transport_restore... ok
==> Checking for: mail_spam_restore... ok
==> Checking for: mail_grey_restore... ok
==> Checking for: mail_mailbox_restore... ok
==> Checking for: mail_spf_restore... ok
==> Checking for: mail_dk_restore... ok
==> Checking for: mail_drweb_restore... ok

###############################################

[root@host log]# /etc/init.d/courier-imap status
couriertcpd (pid 9589 9580 9572 9562) is running...

################################################## ###

 

[Graphrix]

I can make a new webmail account on a different account and log in using the full email address & password .. BUT .. once I log out I can no longer use that account for any email.

When replying to a email I get the following response....

"The requested URL /imp/compose.php was not found on this server."

Apache Server at webmail.DOMAIN.com.au Port 80

 

[Graphrix]

I now have http://webmail.DOMAIN.com.au/imp/test.php


PHP Mail Server Support Test

Attempting to automatically determine the correct connection parameters for your server:
Trying protocol imap/notls, Port 143:
SUCCESS - INBOX has 95 messages (8 new 1 recent)
Trying protocol imap/ssl, Port 993:
ERROR - The server returned the following error message:
SECURITY PROBLEM: insecure server advertised AUTH=PLAINCertificate failure for mail.DOMAIN.com.au: self signed certificate:
/C=US/ST=Virginia/L=Herndon/O=Parallels/OU=Parallels Panel/CN=Parallels
Panel/[email protected]
Trying protocol imap/ssl/novalidate-cert, Port 993:
SUCCESS - INBOX has 95 messages (8 new 0 recent)
Trying protocol imap/tls/novalidate-cert, Port 143:
SUCCESS - INBOX has 95 messages (8 new 0 recent)
The following configurations were successful and may be used in your imp/config/servers.php file:
Configuration 1
'server' => 'mail.DOMAIN.com.au'
'protocol' => 'imap/notls'
'port' => '143'
Configuration 2
'server' => 'mail.DOMAIN.com.au'
'protocol' => 'imap/ssl/novalidate-cert'
'port' => '993'
Configuration 3
'server' => 'mail.DOMAIN.com.au'
'protocol' => 'imap/tls/novalidate-cert'
'port' => '143'
The following IMAP server information was discovered from the remote server:
Namespace Information
NAMESPACE: "INBOX."
DELIMITER: .
TYPE: personal

NAMESPACE: "#shared."
DELIMITER: .
TYPE: shared

NAMESPACE: "shared."
DELIMITER: .
TYPE: shared

IMAP server capabilities:
Array
(
[UIDPLUS] => 1
[CHILDREN] => 1
[NAMESPACE] => 1
[THREAD] => Array
(
[0] => ORDEREDSUBJECT
[1] => REFERENCES
)

[SORT] => 1
[QUOTA] => 1
[AUTH] => Array
(
[0] => PLAIN
)

[IDLE] => 1
[ACL] => 1
[ACL2] => Array
(
[0] => UNION
)

[STARTTLS] => 1
)
IMAP Charset Search Support:

 

[Faris Raouf]

Take a look at http://kb.parallels.com/en/112316 and maybe http://kb.parallels.com/en/114066 to increase debug info.

It is not clear from your post whether normal (i.e. not webmail) IMAP/POP3 works or not. Does it?

Have you made any changes to the configuration of your system at all? For example doing anything to help pass PCI compliance?

Telnet is one of the most basic tools on any Linux server. It is very useful indeed. Just install it and you'll be able to use it as per the KB. If it is Centos/RedHat/Fedora use "yum install telnet" (I'm assuming it is a separate package that can be installed like this -- I've never had to install it by itself so maybe I'm wrong!)

 

[Graphrix]

I get the same response using a mail client as what I do when using webmail.



###############################################
[root@host /]# telnet localhost 143
Trying ::1...
Connected to localhost.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA AUTH=PLAIN IDLE ACL ACL2=UNION STARTTLS]

###############################################
[root@host /]# netstat -tap
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 *:sunrpc *:* LISTEN 2067/rpcbind
tcp 0 0 223.252.18.235:http *:* LISTEN 2598/nginx
tcp 0 0 223.252.18.234:http *:* LISTEN 2598/nginx
tcp 0 0 host.gfxserver.com:http *:* LISTEN 2598/nginx
tcp 0 0 *:urd *:* LISTEN 2536/master
tcp 0 0 localhost:scp-config *:* LISTEN 2391/sw-cp-serverd
tcp 0 0 223.252.18.235:domain *:* LISTEN 2817/named
tcp 0 0 223.252.18.234:domain *:* LISTEN 2817/named
tcp 0 0 host.gfxserver.com:domain *:* LISTEN 2817/named
tcp 0 0 localhost:domain *:* LISTEN 2817/named
tcp 0 0 *:ssh *:* LISTEN 2402/sshd
tcp 0 0 localhost:ipp *:* LISTEN 2241/cupsd
tcp 0 0 localhost:rndc *:* LISTEN 2817/named
tcp 0 0 *:smtp *:* LISTEN 2536/master
tcp 0 0 223.252.18.234:https *:* LISTEN 2598/nginx
tcp 0 0 223.252.18.235:https *:* LISTEN 2598/nginx
tcp 0 0 host.gfxserver.com:https *:* LISTEN 2598/nginx
tcp 0 0 *:45055 *:* LISTEN 2085/rpc.statd
tcp 0 0 localhost:12768 *:* LISTEN 2550/psa-pc-remote
tcp 0 0 *:mysql *:* LISTEN 2749/mysqld
tcp 0 2072 host.gfxserver.com:ssh printr1.lnk.telstra.n:53184 ESTABLISHED 3767/sshd
tcp 0 0 *op3 *:* LISTEN 2445/couriertcpd
tcp 0 0 *:imap *:* LISTEN 2427/couriertcpd
tcp 0 0 *:sunrpc *:* LISTEN 2067/rpcbind
tcp 0 0 *:cddbp-alt *:* LISTEN 2391/sw-cp-serverd
tcp 0 0 *:urd *:* LISTEN 2536/master
tcp 0 0 *:domain *:* LISTEN 2817/named
tcp 0 0 *:ftp *:* LISTEN 2410/xinetd
tcp 0 0 *:ssh *:* LISTEN 2402/sshd
tcp 0 0 localhost:ipp *:* LISTEN 2241/cupsd
tcp 0 0 *:smtp *:* LISTEN 2536/master
tcp 0 0 *csync-https *:* LISTEN 2391/sw-cp-serverd
tcp 0 0 *:47296 *:* LISTEN 2085/rpc.statd
tcp 0 0 *:imaps *:* LISTEN 2437/couriertcpd
tcp 0 0 *op3s *:* LISTEN 2454/couriertcpd
tcp 0 0 *:empowerid *:* LISTEN 2896/httpd
tcp 0 0 *:7081 *:* LISTEN 2896/httpd
tcp 0 0 localhost:imap localhost:48275 TIME_WAIT -

###############################################

http://kb.parallels.com/en/112316

[root@host /]# grep DEBUG /etc/courier-imap/imapd
##NAME: DEBUG_LOGIN:0
# DEBUG_LOGIN=0 - turn off login debugging
# DEBUG_LOGIN=1 - turn on login debugging
# DEBUG_LOGIN=2 - turn on login debugging + log passwords too
DEBUG_LOGIN=0
[root@host /]# grep DEBUG /etc/courier-imap/pop3d
##NAME: DEBUG_LOGIN:0
# DEBUG_LOGIN=0 - turn off login debugging
# DEBUG_LOGIN=1 - turn on login debugging
# DEBUG_LOGIN=2 - turn on login debugging + log passwords too

###############################################
[root@host /]# /etc/init.d/courier-imap stop
Stopping Courier-IMAP server:
Stopping imap [ OK ]
Stopping imap-ssl [ OK ]
Stopping pop3 [ OK ]
Stopping pop3-ssl [ OK ]

[root@host /]# /etc/init.d/courier-imap start
Starting Courier-IMAP server:
Starting imapd [ OK ]
Starting imap-ssl [ OK ]
Starting pop3 [ OK ]
Starting pop3-ssl [ OK ]

###############################################

[root@host /]# ps ax | grep courier
20042 ? S 0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
20044 ? S 0:00 /usr/sbin/courierlogger imapd
20052 ? S 0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
20054 ? S 0:00 /usr/sbin/courierlogger imapd-ssl
20060 ? S 0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
20062 ? S 0:00 /usr/sbin/courierlogger pop3d
20069 ? S 0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
20071 ? S 0:00 /usr/sbin/courierlogger pop3d-ssl
20092 pts/0 S+ 0:00 grep courier

###############################################
http://kb.parallels.com/en/114066

[root@host /]# grep LOG /etc/psa-webmail/horde/horde/conf.php
$conf['log']['priority'] = PEAR_LOG_ERR;