[Solved] OX listener not updating user, Authentication Failed

Apps & App Center
#1

Listener has 101 Errors:

28.05.20 17:15:33.482  LISTENER    ( WARN    ) : ox-groups(OXGroupCache): cache rebuild: runtime error: "listgroup 10" returned  101

listuser also returns authentication failed:

ADMIN_PASSWORD=$(cat /etc/ox-secrets/context10.secret) /opt/open-xchange/sbin/listuser -A oxadmin -c 10

users in context 10 could not be listed:
Server response:
 Authentication failed
        at com.openexchange.admin.rmi.impl.BasicAuthenticator.doAuthentication(BasicAuthenticator.java:259)

listcontext works

root@groupware:/opt/open-xchange# ADMIN_PASSWORD=$(cat /etc/ox-secrets/master.secret) /opt/open-xchange/sbin/listcontext -A oxadminmaster
cid fid fname        enabled   qmax qused name      lmappings
 10   4 10_ctx_store true    159453   223 context10 xxxxx.de,xxx.local,context10,10

also using the context10.secret and user oxadmin i can login in the webinterface

any ideas how to find the root of the problem here?

UCS-4-4-4 errata 617
OX-7.10.3-ucs1

Best Regards

Moritz Kunze

#2

Root cause is, somebody changed the oxadmin password in ldap to login and created shared calendars. Next he updated the context10.secret file, thought this is enough.

Problem:
api calls are authenticated against the mysql user store not the ldap!

Solution: (AT YOUR OWN RISK)
mysql -u root -p localhost_5 (or what your context db is)
select * from users; (find the oxadmin)
update users set userPassword=“SHA1BASE64HASH” where id=???;

SHA1BASE64HASH can be acquired by
https://md5decrypt.net/en/Sha1/ and then https://base64.guru/converter/encode/hex

hope this helps somebody some day

1 Like
Mastodon