MIAB stop working

spec3 · December 23, 2022, 1:29am

No sure how to explain my situation or how did started happening, 2 weeks ago it was working and sending emails and receiving emails normally, did a few ubuntu upgrades including php lastest version (no sure if the problem is from that)
I guess after upgrades the services from Ubuntu and stopped working and I see errors on the logs but I can’t understand it at all, I have been searching answer but no solution yet.

*From /var/log/mail.err
Dec 22 20:21:35 mail postfix/trivial-rewrite[25210]: fatal: dict_sqlite_lookup: /etc/postfix/virtual-alias-maps.cf: SQL prepare failed: disk I/O error?

*From /var/log/mail.log
Dec 22 20:24:39 mail postfix/submission/smtpd[24013]: warning: problem talking to service rewrite: Application error
Dec 22 20:24:39 mail postfix/master[14507]: warning: process /usr/lib/postfix/sbin/trivial-rewrite pid 25290 exit status 1
Dec 22 20:24:39 mail postfix/smtpd[24628]: warning: problem talking to service rewrite: Connection reset by peer
Dec 22 20:24:39 mail postfix/smtpd[25253]: warning: problem talking to service rewrite: Connection reset by peer
Dec 22 20:24:39 mail postfix/smtpd[24669]: warning: problem talking to service rewrite: Application error
Dec 22 20:24:39 mail postfix/master[14507]: warning: process /usr/lib/postfix/sbin/trivial-rewrite pid 25291 exit status 1

From /var/log/nginx/error.log2022/12/22 20:12:20 [error] 23251#23251: 17 upstream timed out (110: Unknown error) while reading response header from upstream, client: ...**, server: *******, request: “POST /mail/?_task=mail&_unlock=loading1671757870356&_framed=1 HTTP/2.0”, upstream: “fastcgi://unix:/var/run/php/php8.0-fpm.sock”,

NOTE: ..*. is the IP just taking it off.

spec3 · December 23, 2022, 1:43am

from var log mail.log
Dec 22 20:41:54 mail postfix/submission/smtpd[37014]: connect from localhost[127.0.0.1]
Dec 22 20:42:19 mail postfix/trivial-rewrite[37017]: fatal: dict_sqlite_lookup: /etc/postfix/virtual-alias-maps.cf: SQL prepare failed: disk I/O error?
Dec 22 20:42:19 mail postfix/trivial-rewrite[37018]: fatal: dict_sqlite_lookup: /etc/postfix/virtual-alias-maps.cf: SQL prepare failed: disk I/O error?
Dec 22 20:42:20 mail postfix/submission/smtpd[36677]: warning: problem talking to service rewrite: Application error
Dec 22 20:42:20 mail postfix/smtpd[34497]: warning: problem talking to service rewrite: Connection reset by peer
Dec 22 20:42:20 mail postfix/master[31473]: warning: process /usr/lib/postfix/sbin/trivial-rewrite pid 37017 exit status 1
Dec 22 20:42:20 mail postfix/master[31473]: warning: /usr/lib/postfix/sbin/trivial-rewrite: bad command startup – throttling
Dec 22 20:42:20 mail postfix/master[31473]: warning: process /usr/lib/postfix/sbin/trivial-rewrite pid 37018 exit status 1

after a while I get Connection error server cannot be reached

eXTric · December 23, 2022, 11:35am

Search is your friend

spec3 · December 23, 2022, 2:03pm

actually I found out there is an issue when the password are changed, and I get that search if your friend. This is a forum to ask for help, then why bother having a maintenance forum or a forum at all?

spec3 · December 23, 2022, 3:48pm

cd /home/user-data/mail
sudo sqlite3 users.sqlite ‘PRAGMA journal_mode=delete;’;

this is not a permanent fix, as if user keep trying to change their password would brick it again.

NOTE: if you get and Error: stepping, database is locked (5), wait 5minutes to rerun the command

eXTric · December 23, 2022, 5:15pm

The possible temporary fixes are discussed in the github thread which i linked in the above. Unfortunately there is no easy fix for MiaB as the issue is coming from 3th party packages.

github.com/mail-in-a-box/mailinabox

Changing password via roundcube does not function

opened 07:08PM - 27 Oct 22 UTC

kiekerjan

Changing the password via the Roundcube settings does not work. See report [here…](https://discourse.mailinabox.email/t/cannot-update-password-through-roundcubemail-settings/9683). The error reported via /var/log/roundcubemail/errors.log: `DB Error: [1] near "%": syntax error (SQL Query: UPDATE users SET password=%D WHERE email='a@b.c') in /usr/local/lib/roundcubemail/program/lib/Roundcube/rcube_db.php on line 564 (POST /mail/?_task=settings&_action=plugin.password-save)` The sql update query contains %D which was removed from the 1.6.0 version of roundcube (see [1.6.0](https://github.com/roundcube/roundcubemail/blob/993b888afe29c383bf45c84f17090f4db96367ba/plugins/password/config.inc.php.dist#L105) versus [1.5.3](https://github.com/roundcube/roundcubemail/blob/0121082842400ce1919ff4b4d36c991630b6988c/plugins/password/config.inc.php.dist#L133)) Several observations: - `$config['password_algorithm'] = 'clear';` should probably be set to `dovecot` - There is a [MIAB password driver](https://github.com/roundcube/roundcubemail/pull/7824) in the Roundcube password plugin. No idea if it works. Also needs you to configure the admin password so does not feel nice to use.

github.com/ddavness/power-mailinabox

Roundcube: Use Mail-in-a-Box admin API to drive password changes

ddavness:current-dev ← ddavness:dev-roundcube-pw-miab-driver

opened 06:29PM - 06 Nov 22 UTC

ddavness

+198 -121

Fixes #85 Related to mail-in-a-box/mailinabox#2185 The Mail-in-a-Box driver …has a fallback mode where it can use the logged-in user's credentials to authenticate itself against the API. This is our next best solution (the first would be getting the root API key from `/var/lib/mailinabox/api.key`, but the driver does not support this and there isn't a fix we can do on our end). **Right now there are two problems with this approach:** - The endpoint used is admin-only (that means only admins can change their own password) - - This is because this endpoint is used to change the password of any account. **Fixable on our end; if the user does not have admin privileges it can only change their own password** - The authentication method used by the driver fails if the user has 2FA enabled - - This is a security measure and I'm not willing to waive the 2FA part. The API as-is pretty much only allows admins to enroll in 2FA anyway, so they can still change their own password from within the admin panel, too. But removing 2FA from an admin user would keep their 2FA enrolment, and at this point they'd be unable to change their own password. - - **Solution:** Allow non-admins to change their own passwords from within the admin panel (and also enroll in 2FA if they want to, ~~but that's future work~~).

spec3 · December 29, 2022, 8:22pm

github.com/ddavness/power-mailinabox

Roundcube: Use Mail-in-a-Box admin API to drive password changes

ddavness:current-dev ← ddavness:dev-roundcube-pw-miab-driver

opened 06:29PM - 06 Nov 22 UTC

ddavness

+198 -121

Fixes #85 Related to mail-in-a-box/mailinabox#2185 The Mail-in-a-Box driver …has a fallback mode where it can use the logged-in user's credentials to authenticate itself against the API. This is our next best solution (the first would be getting the root API key from `/var/lib/mailinabox/api.key`, but the driver does not support this and there isn't a fix we can do on our end). **Right now there are two problems with this approach:** - The endpoint used is admin-only (that means only admins can change their own password) - - This is because this endpoint is used to change the password of any account. **Fixable on our end; if the user does not have admin privileges it can only change their own password** - The authentication method used by the driver fails if the user has 2FA enabled - - This is a security measure and I'm not willing to waive the 2FA part. The API as-is pretty much only allows admins to enroll in 2FA anyway, so they can still change their own password from within the admin panel, too. But removing 2FA from an admin user would keep their 2FA enrolment, and at this point they'd be unable to change their own password. - - **Solution:** Allow non-admins to change their own passwords from within the admin panel (and also enroll in 2FA if they want to, ~~but that's future work~~).

No sure how is this done, I am new to this would you have a step by step guide?

weeix · January 20, 2023, 5:58am

After changing the users.sqlite logging mode back to delete, I ended up disabling Roundcube’s password plugin (to prevent users from changing their passwords) by using this command:

sudo nano /usr/local/lib/roundcubemail/config/config.inc.php

Then delete the password plugin from line 28, followed by Ctrl+O, Enter, and Ctrl+X. Alternatively, use sed (untested):

sudo sed -i "s/'password', //g" /usr/local/lib/roundcubemail/config/config.inc.php

system · March 1, 2023, 5:59am

This topic was automatically closed 40 days after the last reply. New replies are no longer allowed.