OX App Suite No Login (LGI-0006)

Hi there

After the update, the users can no longer log in to the OX with the error message “the username or password is incorrect” (LGI-00006)

We have two systems, a master and a slave on which the OX is installed.

Can someone help me at short notice?

Thanks Michael

Please take a look at what is written in /var/log/open-xchange/open-xchange.log.0 during a login.

Hi
that the Ouput
021-01-06T13:17:23,456+0100 INFO [OXWorker-0000037] com.openexchange.login.internal.LoginPerformer.logLoginRequest(LoginPerformer.java:750)
Login:KSurmund IP:10.0.0.1 AuthID:3ea43aa17abf4bd5b23e9955555874af Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 Client:open-xchange-appsuite(7.10.4-6) Interface:HTTP_JSON No session created.
com.openexchange.grizzly.method=POST
com.openexchange.grizzly.queryString=
com.openexchange.grizzly.remoteAddress=10.0.0.1
com.openexchange.grizzly.remotePort=41928
com.openexchange.grizzly.requestURI=/ajax/login
com.openexchange.grizzly.serverName=10.0.10.70
com.openexchange.grizzly.servletPath=/ajax/login
com.openexchange.grizzly.session=732533927210769685.APP1
com.openexchange.grizzly.threadName=OXWorker-0000037
com.openexchange.grizzly.userAgent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36
com.openexchange.localhost.ipAddress=10.0.10.70
com.openexchange.localhost.version=7.10.4-Rev7
com.openexchange.login.authId=3ea43aa17abf4bd5b23e9955555874af
com.openexchange.login.client=open-xchange-appsuite
com.openexchange.login.clientIp=10.0.0.1
com.openexchange.login.login=KSurmund
com.openexchange.login.userAgent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36
com.openexchange.login.version=7.10.4-6
com.openexchange.request.trackingId=1233681099-616840586

I have the feeling that he is not accessing the master to verify the password.

The communication between master and slave does not seem to work.

That’s other User

2021-01-06T13:23:28,942+0100 INFO [OXWorker-0000040] com.openexchange.login.internal.LoginPerformer.logLoginRequest(LoginPerformer.java:750)
Login:null IP:10.0.20.17 AuthID:1124249b9e5b4720818a912b88c7bde6 Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0 Client:open-xchange-appsuite(null) Interface:HTTP_JSON No session created.
com.openexchange.grizzly.method=GET
com.openexchange.grizzly.queryString=action=autologin&client=open-xchange-appsuite&rampup=true&rampUpFor=open-xchange-appsuite&version=7.10.4-6
com.openexchange.grizzly.remoteAddress=10.0.20.17
com.openexchange.grizzly.remotePort=42236
com.openexchange.grizzly.requestURI=/ajax/login
com.openexchange.grizzly.serverName=10.0.10.70
com.openexchange.grizzly.servletPath=/ajax/login
com.openexchange.grizzly.threadName=OXWorker-0000040
com.openexchange.grizzly.userAgent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0
com.openexchange.localhost.ipAddress=10.0.10.70
com.openexchange.localhost.version=7.10.4-Rev7
com.openexchange.request.trackingId=1233681099-616840591
2021-01-06T13:23:32,293+0100 INFO [OXWorker-0000038] com.openexchange.authentication.ucs.common.impl.UCSLookupImpl.handleLoginInfo(UCSLookupImpl.java:321)
Authentication against ldap server failed
com.openexchange.grizzly.method=POST
com.openexchange.grizzly.queryString=
com.openexchange.grizzly.remoteAddress=10.0.20.17
com.openexchange.grizzly.remotePort=42240
com.openexchange.grizzly.requestURI=/ajax/login
com.openexchange.grizzly.serverName=10.0.10.70
com.openexchange.grizzly.servletPath=/ajax/login
com.openexchange.grizzly.session=1200794770165935670.APP1
com.openexchange.grizzly.threadName=OXWorker-0000038
com.openexchange.grizzly.userAgent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0
com.openexchange.localhost.ipAddress=10.0.10.70
com.openexchange.localhost.version=7.10.4-Rev7
com.openexchange.login.authId=1353db4dbe414f819f8d909a8bd5e8d9
com.openexchange.login.client=open-xchange-appsuite
com.openexchange.login.clientIp=10.0.20.17
com.openexchange.login.login=bstapper
com.openexchange.login.userAgent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0
com.openexchange.login.version=7.10.4-6
com.openexchange.request.trackingId=1233681099-616840592
javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3261)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3207)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2993)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2907)
at com.sun.jndi.ldap.LdapCtx.(LdapCtx.java:347)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxFromUrl(LdapCtxFactory.java:225)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:189)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:243)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:154)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:84)
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:684)
at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:313)
at javax.naming.InitialContext.init(InitialContext.java:244)
at javax.naming.InitialContext.(InitialContext.java:216)
at javax.naming.directory.InitialDirContext.(InitialDirContext.java:101)
at com.openexchange.authentication.ucs.common.impl.UCSLookupImpl.getUserDn(UCSLookupImpl.java:455)
at com.openexchange.authentication.ucs.common.impl.UCSLookupImpl.handleLoginInfo(UCSLookupImpl.java:307)
at com.openexchange.authentication.ucs.impl.UCSAuthentication.handleLoginInfo(UCSAuthentication.java:94)
at com.openexchange.authentication.service.Authentication.login(Authentication.java:111)
at com.openexchange.authentication.service.Authentication.login(Authentication.java:98)
at com.openexchange.login.internal.NormalLoginMethod.doAuthentication(NormalLoginMethod.java:100)
at com.openexchange.login.internal.LoginPerformer.doLogin(LoginPerformer.java:232)
at com.openexchange.login.internal.LoginPerformer.doLogin(LoginPerformer.java:160)
at com.openexchange.login.internal.LoginPerformer.doLogin(LoginPerformer.java:148)
at com.openexchange.ajax.login.Login$1.doLogin(Login.java:110)
at com.openexchange.ajax.login.AbstractLoginRequestHandler.loginOperation(AbstractLoginRequestHandler.java:235)
at com.openexchange.ajax.login.AbstractLoginRequestHandler.loginOperation(AbstractLoginRequestHandler.java:192)
at com.openexchange.ajax.login.Login.doLogin(Login.java:98)
at com.openexchange.ajax.login.Login.handleRequest(Login.java:90)
at com.openexchange.ajax.LoginServlet.doJSONAuth(LoginServlet.java:897)
at com.openexchange.ajax.LoginServlet.doGet(LoginServlet.java:835)
at com.openexchange.ajax.LoginServlet.doPost(LoginServlet.java:973)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:706)
at com.openexchange.ajax.AJAXServlet.doService(AJAXServlet.java:577)
at com.openexchange.ajax.LoginServlet.service(LoginServlet.java:808)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:791)
at org.glassfish.grizzly.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:124)
at com.openexchange.http.grizzly.servletfilter.RequestReportingFilter.doFilter(RequestReportingFilter.java:137)
at org.glassfish.grizzly.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:114)
at com.openexchange.http.grizzly.servletfilter.WrappingFilter.doFilter(WrappingFilter.java:223)
at org.glassfish.grizzly.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:114)
at com.openexchange.http.grizzly.service.http.OSGiAuthFilter.doFilter(OSGiAuthFilter.java:139)
at org.glassfish.grizzly.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:114)
at org.glassfish.grizzly.servlet.FilterChainImpl.invokeFilterChain(FilterChainImpl.java:83)
at org.glassfish.grizzly.servlet.ServletHandler.doServletService(ServletHandler.java:202)
at org.glassfish.grizzly.servlet.ServletHandler.service(ServletHandler.java:154)
at com.openexchange.http.grizzly.service.http.OSGiMainHandler.service(OSGiMainHandler.java:302)
at org.glassfish.grizzly.http.server.HttpHandler$1.run(HttpHandler.java:200)
at com.openexchange.threadpool.internal.CustomThreadPoolExecutor$MDCProvidingRunnable.run(CustomThreadPoolExecutor.java:2621)
at com.openexchange.threadpool.internal.CustomThreadPoolExecutor$Worker.runTask(CustomThreadPoolExecutor.java:834)
at com.openexchange.threadpool.internal.CustomThreadPoolExecutor$Worker.run(CustomThreadPoolExecutor.java:861)
at java.lang.Thread.run(Thread.java:748)
2021-01-06T13:23:32,294+0100 INFO [OXWorker-0000038] com.openexchange.login.internal.LoginPerformer.logLoginRequest(LoginPerformer.java:750)
Login:bstapper IP:10.0.20.17 AuthID:1353db4dbe414f819f8d909a8bd5e8d9 Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0 Client:open-xchange-appsuite(7.10.4-6) Interface:HTTP_JSON No session created.
com.openexchange.grizzly.method=POST
com.openexchange.grizzly.queryString=
com.openexchange.grizzly.remoteAddress=10.0.20.17
com.openexchange.grizzly.remotePort=42240
com.openexchange.grizzly.requestURI=/ajax/login
com.openexchange.grizzly.serverName=10.0.10.70
com.openexchange.grizzly.servletPath=/ajax/login
com.openexchange.grizzly.session=1200794770165935670.APP1
com.openexchange.grizzly.threadName=OXWorker-0000038
com.openexchange.grizzly.userAgent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0
com.openexchange.localhost.ipAddress=10.0.10.70
com.openexchange.localhost.version=7.10.4-Rev7
com.openexchange.login.authId=1353db4dbe414f819f8d909a8bd5e8d9
com.openexchange.login.client=open-xchange-appsuite
com.openexchange.login.clientIp=10.0.20.17
com.openexchange.login.login=bstapper
com.openexchange.login.userAgent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0
com.openexchange.login.version=7.10.4-6
com.openexchange.request.trackingId=1233681099-616840592
2021-01-06T13:25:02,831+0100 INFO [RMI TCP Connection(3196)-10.0.10.70] com.openexchange.admin.plugin.hosting.storage.mysqlStorage.OXContextMySQLStorage.change(OXContextMySQLStorage.java:2942)
Context 10 changed.
com.openexchange.database.schema=configdb
com.openexchange.provisioning.adminName=oxadminmaster
com.openexchange.provisioning.contextId=10
2021-01-06T13:25:02,927+0100 INFO [RMI TCP Connection(3196)-10.0.10.70] com.openexchange.database.internal.GlobalDbInit.getGroupsByPool(GlobalDbInit.java:289)
No pool identifier defined at section “default”, ignoring global database section
com.openexchange.database.ignoreServerAssociation=true
com.openexchange.database.schema=localhost_5
com.openexchange.provisioning.adminName=oxadminmaster
com.openexchange.provisioning.contextId=10
2021-01-06T13:25:06,801+0100 ERROR [RMI TCP Connection(3206)-10.0.10.70] com.openexchange.admin.rmi.impl.OXCommonImpl.logAndReturnException(OXCommonImpl.java:328)

Hi
I found the problem it was due to the master.secret password which was not synchronized.

Thanks Michael

how to reset master.secret?

Hi, would you mind posting what you did to solve the problem?
Thanks in Advance!

If you don´t know how to login after a fresh install:

  1. login to machine via ssh
  2. cat /etc/ox-secrets/context10.secret and copy the password output
  3. Login with oxadmin / the copied password
Mastodon