SYSTEM WARNING: 'file_get_contents(https://www.clearos.com/?rendertype=json&get=header): failed to open stream: Connection refused' in '/var/www/virtual/newwrapper/cf_topmenu.inc' line 5

ClearOS Bug Tracker


View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0001212ClearOSapp-imap - IMAP and POP Serverpublic2013-07-03 13:262013-08-22 16:16
ReporterNickH 
Assigned Touser2 
PrioritynormalSeverityminorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version6.4.0 
Target Version6.4.0 UpdatesFixed in Version6.4.0 Updates 
Summary0001212: Can no longer sign in to cyradm
DescriptionNormally if you issue the command "cyradm --user root 127.0.0.1" you get prompted for roots password. This still happens but now you get prompted for an IMAP password as well. No password I know works here
Steps To ReproduceIssue the command "cyradm --user root 127.0.0.1" then enter root's password when prompted. You will then be prompted for an "IMAP Password" which is not normal and will fail with a perl error:

[root@server ~]# cyradm --user root 127.0.0.1
Password:
IMAP Password:
              Login failed: authentication failure at /usr/lib64/perl5/vendor_perl/Cyrus/IMAP/Admin.pm line 120
cyradm: cannot authenticate to server with as root
TagsNo tags attached.
Attached Files

- Relationships

-  Notes
(0000913)
user2
2013-07-04 10:13

Found the problem. The PAM system only allows logins for users in the "imap_plugin" group (i.e. users that have the "IMAP and POP Server" option enabled in the User Manager). When I temporarily disable this requirement, the root login works. To duplicate this:

- Edit /etc/pam.d/imap

- Comment out:
  # account required pam_listfile.so item=group sense=allow file=/etc/clearos/imap.d/authorize onerr=fail

- Try cyradm


Solution: add "root" group to the /etc/clearos/imap.d/authorize:

imap_plugin
root
(0000914)
user2
2013-07-04 12:16

Source Code Changelog
---------------------------------------------------
Added root to PAM authorize list to allow cyradm access [tracker 0001212]

File Changes
---------------------------------------------------
Details: http://code.clearfoundation.com/svn/revision.php?repname=ClearOS&rev=6181 [^]
U webconfig/apps/imap/trunk/deploy/upgrade
U webconfig/apps/imap/trunk/packaging/authorize

- Issue History
Date Modified Username Field Change
2013-07-03 13:26 NickH New Issue
2013-07-04 10:13 user2 Assigned To => user2
2013-07-04 10:13 user2 Status new => confirmed
2013-07-04 10:13 user2 Note Added: 0000913
2013-07-04 12:15 user2 Category cyrus-imapd => app-imap - IMAP and POP Server
2013-07-04 12:15 user2 Target Version => 6.4.0 Updates
2013-07-04 12:16 user2 Checkin
2013-07-04 12:16 user2 Note Added: 0000914
2013-07-04 12:16 user2 Status confirmed => resolved
2013-07-04 12:16 user2 Fixed in Version => 6.4.0 Updates
2013-07-04 12:16 user2 Resolution open => fixed
2013-08-22 16:16 user2 Status resolved => closed

SYSTEM WARNING: 'file_get_contents(https://www.clearos.com/?rendertype=json&get=footer): failed to open stream: Connection refused' in '/var/www/virtual/newwrapper/cf_footer.inc' line 7