[horde] Standalone Horde server access disabled overnight (wrong username or password)

[Michael J Rubinsky]

Quoting Arjen de Korte <build+horde at de-korte.org>:

> Citeren L A <lp.allard.1 at gmail.com>:
>
>> On Wed, Feb 20, 2019 at 8:44 AM L A <lp.allard.1 at gmail.com> wrote:
>>
>>> Hello,
>>>
>>> I have been running Horde on a Centos VPS (located at home) for 7+years
>>> now, and it always worked great.  Yesterday I was using it without issues.
>>> It is configured to use my GMail account as auth backend.
>>>
>>> /var/www/html/horde/imp/config/backends.php has this in it:
>>> // IMAP server
>>> $servers['imap'] = array(
>>>   // ENABLED by default; will connect to IMAP port on local server
>>>   'disabled' => false,
>>>   'name' => 'GMail IMAP Server',
>>>   'hostspec' => 'imap.gmail.com',
>>>   'hordeauth' => true,
>>>   'protocol' => 'imap',
>>>   'port' => 993,
>>>   // Plaintext logins are disabled by default on IMAP servers (see RFC
>>> 3501
>>>   // [6.2.3]), so TLS is the only guaranteed authentication available by
>>>   // default.
>>>   'secure' => 'ssl',
>>> );
>>>
>>> Like I said this server has worked flawlessly for years.  This morning, I
>>> cannot login to my Horde server.  I get "Login failed because your username
>>> or password was entered incorrectly." at the login page.
>>>
>>> I have confirmed that I can login to gmail.com using the same
>>> credentials, and it works.  My android phone also works with gmail without
>>> issues.  So what happened?  Its a major issue because I am managing a condo
>>> property and use this horde install for calendar/tasks/contacts so now I'm
>>> locked out...
>>>
>>> Anybody can help?
>>>
>>
>> Geez I forgot to add the log's contents:
>>
>> Feb 20 09:25:52 centos-mail HORDE: [horde] PHP ERROR:
>> call_user_func_array() expects parameter 1 to be a valid callback, class
>> 'Horde_Deprecated' does not have a method 'verifySignedUrl' [pid 1158 on
>> line 1196 of "/usr/share/pear/Horde.php"]

The line above also leads me to suspect that you have a fairly  
outdated Horde_Core library installed.


>> Feb 20 09:25:53 centos-mail HORDE: [imp] [login] Mail server denied
>> authentication. [pid 1158 on line 730 of
>> "/var/www/html/horde/imp/lib/Imap.php"]
>> Feb 20 09:25:53 centos-mail HORDE: [imp] FAILED LOGIN for XXXXXXX at gmail.com
>> (XXX.XXX.XXX.XXX) to {imap://imap.gmail.com:993/} [pid 1158 on line 157 of
>> "/var/www/html/horde/imp/lib/Auth.php"]
>> Feb 20 09:25:53 centos-mail HORDE: [horde] FAILED LOGIN for
>> XXXXXXX at gmail.com to horde (XXX.XXX.XXX.XXX) [pid 1158 on line 199 of
>> "/var/www/html/horde/login.php"]
>>
>> Would the problem be on Google's side?  Legacy app access is enabled in my
>> google account (has always been for horde).  I have also ruled out firewall
>> issues.
>
> Fix your configuration. You should *never* modify  
> 'horde/imp/config/backends.php', only override defaults in  
> 'horde/imp/config/backends.local.php' like
>
> <?php
> $servers['imap']['name'] = 'GMail IMAP Server';
> $servers['imap']['hostspec'] = 'imap.gmail.com';
> $servers['imap']['hordeauth'] = true;
> $servers['imap']['port'] = 993;
> $servers['imap']['secure'] = 'ssl';
>
> Then enable debugging
>
> $servers['imap']['debug'] = '/tmp/imp_imap.log';
>
> The information in the logfile should provide clues why Gmail won't  
> let you in.
>
> -- 
> Horde mailing list
> Frequently Asked Questions: http://horde.org/faq/
> To unsubscribe, mail: horde-unsubscribe at lists.horde.org



-- 
mike
The Horde Project
http://www.horde.org
https://www.facebook.com/hordeproject
https://www.twitter.com/hordeproject
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-keys
Size: 9272 bytes
Desc: PGP Public Key
URL: <https://lists.horde.org/archives/horde/attachments/20190220/2d3ea9c7/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 821 bytes
Desc: PGP Digital Signature
URL: <https://lists.horde.org/archives/horde/attachments/20190220/2d3ea9c7/attachment-0001.bin>