View Issue Details

IDProjectCategoryView StatusLast Update
0003899SOGoWeb Generalpublic2016-11-18 06:52
Reporterlabnet Assigned Toludovic  
PriorityhighSeverityblockReproducibilityalways
Status resolvedResolutionfixed 
Platform[Server] LinuxOSDebianOS Version7 (Wheezy)
Product Version3.2.1 
Target VersionFixed in Version3.2.2 
Summary0003899: SQL authentication
DescriptionAfter Upgrade to the actual nightly build. The authentication din't work:

SOGO LOG
Nov 14 18:21:57 sogod [16773]: SOGoRootPage Login from 'xxxxx' for user 'xxx@xxx.com' might not have worked - password policy: 65535 grace: -1 expire: -1 bound: 0
  

SOGo Config
  SOGoUserSources =
  (
    {
        type = sql;
        id = directory;
        viewURL="mysql://postfixadmin:xxxxx@127.0.0.1:3306/postfixadmin/sogo_auth";
        canAuthenticate = YES;
        isAddressBook = YES;
        userPasswordAlgorithm = md5-crypt;
    }
  );
Steps To ReproduceStandard Login on on the Web-Groupware.
Also the CalDAV and CardDAV authentication connections do not work.
Tagsauthentication, mysql, passwordPolicy

Activities

labnet

labnet

2016-11-14 15:37

reporter   ~0010849

I don't know why the password policy produce the error, due to the authentication credentials are used from the postfix mailbox?
ludovic

ludovic

2016-11-14 15:59

administrator   ~0010850

Show a sample of a user password from the db.

We recently modified that code to also support sha256/512-crypt.
labnet

labnet

2016-11-14 16:22

reporter  

SQL-Result.html (3,409 bytes)
labnet

labnet

2016-11-15 13:45

reporter   ~0010864

Last edited: 2016-11-15 13:45

View 2 revisions

Test with sha512 password scheme, we get the same error. Is it possible to deactivate this password policy?

Nov 15 19:40:18 sogod [28343]: SOGoRootPage Login from '2a02:1205:506a:da80:f057:e5a2:4ed:86b5' for user 'test@xxxx.info' might not have worked - password policy: 65535 grace: -1 expire: -1 bound: 0

ludovic

ludovic

2016-11-15 13:46

administrator   ~0010865

Password policy has nothing to do with this, it's used only for LDAP.
ludovic

ludovic

2016-11-15 14:13

administrator   ~0010866

I think I fixed the issue but I would need a sample password you have in your c_password column. Copy/paste the value *AS IS*.
labnet

labnet

2016-11-15 14:28

reporter   ~0010867

Test Password "q1w2e3r4t5_test" (without quote)

c_password
$1$0ed624b4$v9DuuC7u8TZvPHr.aVcn21

(when is the fix in the next daily build to test it?)
ludovic

ludovic

2016-11-15 14:29

administrator   ~0010868

in 16 hours from now
labnet

labnet

2016-11-16 08:45

reporter   ~0010872

After update to the nightly build, again the same problem:
Setting up sogo:amd64 (3.2.1.20161115-1) ...
======= Important SOGo post-installation note =======

SOGo database schemas are _not_ automatically upgraded by
the packaging system.

Please check the list of database schema upgrade scripts
inside /usr/share/doc/sogo/ and apply them if needed.

[ ok ] Restarting SOGo: sogo.
Setting up sudo (1.8.5p2-1+nmu3+deb7u2) ...



Nov 16 14:43:20 sogod [11355]: SOGoRootPage Login from 'xxxx' for user 'xxx@xxxx.com' might not have worked - password policy: 65535 grace: -1 expire: -1 bound: 0
ludovic

ludovic

2016-11-16 08:53

administrator   ~0010873

There was no nightly builds generated last night - we'll generate a new one tonight so the fix is NOT in 20161115.
labnet

labnet

2016-11-17 10:58

reporter   ~0010887

I have tried to update, but no new build was available. when can I test the fixed version? Thanks.
francis

francis

2016-11-17 15:35

administrator   ~0010888

New nightly builds are now available.
labnet

labnet

2016-11-18 00:30

reporter   ~0010889

Great work the login is working as before - Thanks!!

Related Changesets

sogo: master bf42f225

2016-11-15 14:18:57

ludovic

Details Diff
(fix) fixed broken string initializations (fixes 0003899) Affected Issues
0003899
mod - SoObjects/SOGo/NSData+Crypto.m Diff File

sogo: v2 53b1cc54

2016-11-15 14:18:57

ludovic

Details Diff
(fix) fixed broken string initializations (fixes 0003899) Affected Issues
0003899
mod - SoObjects/SOGo/NSData+Crypto.m Diff File

Issue History

Date Modified Username Field Change
2016-11-14 15:32 labnet New Issue
2016-11-14 15:33 labnet Tag Attached: authentication
2016-11-14 15:33 labnet Tag Attached: Baikal
2016-11-14 15:33 labnet Tag Attached: mysql
2016-11-14 15:34 labnet Tag Detached: Baikal
2016-11-14 15:34 labnet Tag Attached: passwordPolicy
2016-11-14 15:37 labnet Note Added: 0010849
2016-11-14 15:59 ludovic Note Added: 0010850
2016-11-14 16:22 labnet File Added: SQL-Result.html
2016-11-15 13:45 labnet Note Added: 0010864
2016-11-15 13:45 labnet Note Edited: 0010864 View Revisions
2016-11-15 13:46 ludovic Note Added: 0010865
2016-11-15 14:13 ludovic Note Added: 0010866
2016-11-15 14:19 ludovic Changeset attached => sogo master bf42f225
2016-11-15 14:19 ludovic Assigned To => ludovic
2016-11-15 14:19 ludovic Resolution open => fixed
2016-11-15 14:23 ludovic Changeset attached => sogo v2 53b1cc54
2016-11-15 14:28 labnet Note Added: 0010867
2016-11-15 14:29 ludovic Note Added: 0010868
2016-11-16 08:45 labnet Note Added: 0010872
2016-11-16 08:53 ludovic Note Added: 0010873
2016-11-17 10:58 labnet Note Added: 0010887
2016-11-17 15:35 francis Note Added: 0010888
2016-11-18 00:30 labnet Note Added: 0010889
2016-11-18 06:52 ludovic Status new => resolved
2016-11-18 06:52 ludovic Fixed in Version => 3.2.2