[horde] Standalone Horde server access disabled overnight (wrong username or password)

[Arjen de Korte]

Citeren Louis-Philippe Allard <lp.allard.1 at gmail.com>:

> Quoting Michael J Rubinsky <mrubinsk at horde.org>:
>
>> Quoting Arjen de Korte <build+horde at de-korte.org>:
>>
>>> Citeren L A <lp.allard.1 at gmail.com>:
>>>
>>>> On Wed, Feb 20, 2019 at 8:44 AM L A <lp.allard.1 at gmail.com> wrote:
>>>>
>>>>> Hello,
>>>>>
>>>>> I have been running Horde on a Centos VPS (located at home) for 7+years
>>>>> now, and it always worked great.  Yesterday I was using it  
>>>>> without issues.
>>>>> It is configured to use my GMail account as auth backend.
>>>>>
>>>>> /var/www/html/horde/imp/config/backends.php has this in it:
>>>>> // IMAP server
>>>>> $servers['imap'] = array(
>>>>> // ENABLED by default; will connect to IMAP port on local server
>>>>> 'disabled' => false,
>>>>> 'name' => 'GMail IMAP Server',
>>>>> 'hostspec' => 'imap.gmail.com',
>>>>> 'hordeauth' => true,
>>>>> 'protocol' => 'imap',
>>>>> 'port' => 993,
>>>>> // Plaintext logins are disabled by default on IMAP servers (see RFC
>>>>> 3501
>>>>> // [6.2.3]), so TLS is the only guaranteed authentication available by
>>>>> // default.
>>>>> 'secure' => 'ssl',
>>>>> );
>>>>>
>>>>> Like I said this server has worked flawlessly for years.  This morning, I
>>>>> cannot login to my Horde server.  I get "Login failed because  
>>>>> your username
>>>>> or password was entered incorrectly." at the login page.
>>>>>
>>>>> I have confirmed that I can login to gmail.com using the same
>>>>> credentials, and it works.  My android phone also works with  
>>>>> gmail without
>>>>> issues.  So what happened?  Its a major issue because I am  
>>>>> managing a condo
>>>>> property and use this horde install for calendar/tasks/contacts  
>>>>> so now I'm
>>>>> locked out...
>>>>>
>>>>> Anybody can help?
>>>>
>>>> Geez I forgot to add the log's contents:
>>>>
>>>> Feb 20 09:25:52 centos-mail HORDE: [horde] PHP ERROR:
>>>> call_user_func_array() expects parameter 1 to be a valid callback, class
>>>> 'Horde_Deprecated' does not have a method 'verifySignedUrl' [pid 1158 on
>>>> line 1196 of "/usr/share/pear/Horde.php"]
>>
>> The line above also leads me to suspect that you have a fairly  
>> outdated Horde_Core library installed.
>>
>>>> Feb 20 09:25:53 centos-mail HORDE: [imp] [login] Mail server denied
>>>> authentication. [pid 1158 on line 730 of
>>>> "/var/www/html/horde/imp/lib/Imap.php"]
>>>> Feb 20 09:25:53 centos-mail HORDE: [imp] FAILED LOGIN for  
>>>> XXXXXXX at gmail.com
>>>> (XXX.XXX.XXX.XXX) to {imap://imap.gmail.com:993/} [pid 1158 on line 157 of
>>>> "/var/www/html/horde/imp/lib/Auth.php"]
>>>> Feb 20 09:25:53 centos-mail HORDE: [horde] FAILED LOGIN for
>>>> XXXXXXX at gmail.com to horde (XXX.XXX.XXX.XXX) [pid 1158 on line 199 of
>>>> "/var/www/html/horde/login.php"]
>>>>
>>>> Would the problem be on Google's side?  Legacy app access is enabled in my
>>>> google account (has always been for horde).  I have also ruled  
>>>> out firewall
>>>> issues.
>>>
>>> Fix your configuration. You should *never* modify  
>>> 'horde/imp/config/backends.php', only override defaults in  
>>> 'horde/imp/config/backends.local.php' like
>>>
>>> <?php
>>> $servers['imap']['name'] = 'GMail IMAP Server';
>>> $servers['imap']['hostspec'] = 'imap.gmail.com';
>>> $servers['imap']['hordeauth'] = true;
>>> $servers['imap']['port'] = 993;
>>> $servers['imap']['secure'] = 'ssl';
>>>
>>> Then enable debugging
>>>
>>> $servers['imap']['debug'] = '/tmp/imp_imap.log';
>>>
>>> The information in the logfile should provide clues why Gmail  
>>> won't let you in.
>>>
>>> --
>>> Horde mailing list
>>> Frequently Asked Questions: http://horde.org/faq/
>>> To unsubscribe, mail: horde-unsubscribe at lists.horde.org
>>
>> --
>> mike
>> The Horde Project
>> http://www.horde.org
>> https://www.facebook.com/hordeprojecthttps://www.twitter.com/hordeproject
>
> Hello Michael,  yes I have had a hard time updating Horde for  
> several months if not over a year now.  Horde_Core is 2.16.1.
>
> Through the webinterface > Administration > Configuration > Check  
> for newer versions, pretty much everything has a newer version, but  
> when I issue a "pear upgrade -a -B horde/webmail" I always get  
> "Nothing to upgrade".

I usually run

     pear upgrade -c horde

What happens if you try that? If that fails to update, what is the output of

     pear config-get horde_dir

This should point to the root of your Horde installation.

> I wrote on this maillist a while ago about this issue, but I couldnt  
> find a solution.  Obviously the webinterface and the pear command  
> musty look at different locations if they are not seeing the same  
> packages...  Sure a Dev can confirm this?

Well, it looks like the webinterface is correct here, your Horde_Core  
*is* out-of-date, the current version is 2.31.8.