[horde] Standalone Horde server access disabled overnight (wrong username or password)

Louis-Philippe Allard lp.allard.1 at gmail.com
Fri Feb 22 01:38:09 UTC 2019


  Quoting Arjen de Korte <build+horde at de-korte.org>:

> Citeren Louis-Philippe Allard <lp.allard.1 at gmail.com>:
>
>> Quoting Michael J Rubinsky <mrubinsk at horde.org>:
>>
>>> Quoting Arjen de Korte <build+horde at de-korte.org>:
>>>
>>>> Citeren L A <lp.allard.1 at gmail.com>:
>>>>
>>>>> On Wed, Feb 20, 2019 at 8:44 AM L A <lp.allard.1 at gmail.com> wrote:
>>>>>
>>>>>> Hello,
>>>>>>
>>>>>> I have been running Horde on a Centos VPS (located at home) for 7+years
>>>>>> now, and it always worked great.  Yesterday I was using it  
>>>>>> without issues.
>>>>>> It is configured to use my GMail account as auth backend.
>>>>>>
>>>>>> /var/www/html/horde/imp/config/backends.php has this in it:
>>>>>> // IMAP server
>>>>>> $servers['imap'] = array(
>>>>>> // ENABLED by default; will connect to IMAP port on local server
>>>>>> 'disabled' => false,
>>>>>> 'name' => 'GMail IMAP Server',
>>>>>> 'hostspec' => 'imap.gmail.com',
>>>>>> 'hordeauth' => true,
>>>>>> 'protocol' => 'imap',
>>>>>> 'port' => 993,
>>>>>> // Plaintext logins are disabled by default on IMAP servers (see RFC
>>>>>> 3501
>>>>>> // [6.2.3]), so TLS is the only guaranteed authentication available by
>>>>>> // default.
>>>>>> 'secure' => 'ssl',
>>>>>> );
>>>>>>
>>>>>> Like I said this server has worked flawlessly for years.  This  
>>>>>> morning, I
>>>>>> cannot login to my Horde server.  I get "Login failed because  
>>>>>> your username
>>>>>> or password was entered incorrectly." at the login page.
>>>>>>
>>>>>> I have confirmed that I can login to gmail.com using the same
>>>>>> credentials, and it works.  My android phone also works with  
>>>>>> gmail without
>>>>>> issues.  So what happened?  Its a major issue because I am  
>>>>>> managing a condo
>>>>>> property and use this horde install for calendar/tasks/contacts  
>>>>>> so now I'm
>>>>>> locked out...
>>>>>>
>>>>>> Anybody can help?
>>>>>
>>>>> Geez I forgot to add the log's contents:
>>>>>
>>>>> Feb 20 09:25:52 centos-mail HORDE: [horde] PHP ERROR:
>>>>> call_user_func_array() expects parameter 1 to be a valid callback, class
>>>>> 'Horde_Deprecated' does not have a method 'verifySignedUrl' [pid 1158 on
>>>>> line 1196 of "/usr/share/pear/Horde.php"]
>>>
>>> The line above also leads me to suspect that you have a fairly  
>>> outdated Horde_Core library installed.
>>>
>>>>> Feb 20 09:25:53 centos-mail HORDE: [imp] [login] Mail server denied
>>>>> authentication. [pid 1158 on line 730 of
>>>>> "/var/www/html/horde/imp/lib/Imap.php"]
>>>>> Feb 20 09:25:53 centos-mail HORDE: [imp] FAILED LOGIN for  
>>>>> XXXXXXX at gmail.com
>>>>> (XXX.XXX.XXX.XXX) to {imap://imap.gmail.com:993/} [pid 1158 on  
>>>>> line 157 of
>>>>> "/var/www/html/horde/imp/lib/Auth.php"]
>>>>> Feb 20 09:25:53 centos-mail HORDE: [horde] FAILED LOGIN for
>>>>> XXXXXXX at gmail.com to horde (XXX.XXX.XXX.XXX) [pid 1158 on line 199 of
>>>>> "/var/www/html/horde/login.php"]
>>>>>
>>>>> Would the problem be on Google's side?  Legacy app access is  
>>>>> enabled in my
>>>>> google account (has always been for horde).  I have also ruled  
>>>>> out firewall
>>>>> issues.
>>>>
>>>> Fix your configuration. You should *never* modify  
>>>> 'horde/imp/config/backends.php', only override defaults in  
>>>> 'horde/imp/config/backends.local.php' like
>>>>
>>>> <?php
>>>> $servers['imap']['name'] = 'GMail IMAP Server';
>>>> $servers['imap']['hostspec'] = 'imap.gmail.com';
>>>> $servers['imap']['hordeauth'] = true;
>>>> $servers['imap']['port'] = 993;
>>>> $servers['imap']['secure'] = 'ssl';
>>>>
>>>> Then enable debugging
>>>>
>>>> $servers['imap']['debug'] = '/tmp/imp_imap.log';
>>>>
>>>> The information in the logfile should provide clues why Gmail  
>>>> won't let you in.
>>>>
>>>> --
>>>> Horde mailing list
>>>> Frequently Asked Questions: http://horde.org/faq/
>>>> To unsubscribe, mail: horde-unsubscribe at lists.horde.org
>>>
>>> --
>>> mike
>>> The Horde Project
>>> http://www.horde.org
>>> https://www.facebook.com/hordeprojecthttps://www.twitter.com/hordeproject
>>
>> Hello Michael,  yes I have had a hard time updating Horde for  
>> several months if not over a year now.  Horde_Core is 2.16.1.
>>
>> Through the webinterface > Administration > Configuration > Check  
>> for newer versions, pretty much everything has a newer version, but  
>> when I issue a "pear upgrade -a -B horde/webmail" I always get  
>> "Nothing to upgrade".
>
> I usually run
>
>    pear upgrade -c horde
>
> What happens if you try that? If that fails to update, what is the output of
>
>    pear config-get horde_dir
>
> This should point to the root of your Horde installation.
>
>> I wrote on this maillist a while ago about this issue, but I  
>> couldnt find a solution.  Obviously the webinterface and the pear  
>> command musty look at different locations if they are not seeing  
>> the same packages...  Sure a Dev can confirm this?
>
> Well, it looks like the webinterface is correct here, your  
> Horde_Core *is* out-of-date, the current version is 2.31.8.
>
> --
> Horde mailing list
> Frequently Asked Questions: http://horde.org/faq/To unsubscribe,  
> mail: horde-unsubscribe at lists.horde.org

Allright, OK running "pear upgrade -c horde" produced:

[root at centos-mail mainuser]# pear upgrade -c horde
Did not download optional dependencies: pear/Net_DNS2, pecl/idn, use  
--alldeps to download automatically
Did not download optional dependencies: horde/Horde_Backup,  
horde/Horde_Ldap, pear/Net_DNS2, use --alldeps to download automatically
WARNING: "pear/Console_Getopt" is deprecated in favor of  
"pear/Console_GetoptPlus"
Did not download optional dependencies: pear/Net_DNS2,  
pear/Console_Table, use --alldeps to download automatically
Unknown remote channel: phpseclib.sourceforge.net
Did not download optional dependencies:  
channel://phpseclib.sourceforge.net/File_ASN1, use --alldeps to  
download automatically
Did not download optional dependencies: pear/Date_Holidays, use  
--alldeps to download automatically
Did not download optional dependencies: horde/Horde_Ldap, use  
--alldeps to download automatically
WARNING: "pear/Console_Getopt" is deprecated in favor of  
"pear/Console_GetoptPlus"
horde/Horde_Mapi requires PHP extension "bcmath"
horde/Horde_Mime can optionally use package "pecl/idn"
horde/Horde_Core can optionally use package "horde/Horde_Backup"  
(version >= 1.0.0, version <= 2.0.0alpha1, excluded versions:  
2.0.0alpha1)
horde/Horde_Core can optionally use package "horde/Horde_Ldap"  
(version >= 2.0.0, version <= 3.0.0alpha1, excluded versions:  
3.0.0alpha1)
horde/imp can optionally use package  
"channel://phpseclib.sourceforge.net/File_ASN1"
horde/kronolith can optionally use package "pear/Date_Holidays"  
(version >= 0.21.0, version <= 1.0.0alpha1, excluded versions:  
1.0.0alpha1)
horde/turba can optionally use package "horde/Horde_Ldap" (version >=  
2.0.0, version <= 3.0.0alpha1, excluded versions: 3.0.0alpha1)
downloading Horde_Stream_Wrapper-2.1.4.tgz ...
Starting to download Horde_Stream_Wrapper-2.1.4.tgz (5,668 bytes)
.....done: 5,668 bytes
downloading Horde_Browser-2.0.16.tgz ...
Starting to download Horde_Browser-2.0.16.tgz (38,533 bytes)
...done: 38,533 bytes
downloading Horde_Text_Filter-2.3.6.tgz ...
Starting to download Horde_Text_Filter-2.3.6.tgz (54,976 bytes)
...done: 54,976 bytes
downloading Horde_Compress-2.2.2.tgz ...
Starting to download Horde_Compress-2.2.2.tgz (2,199,440 bytes)
...done: 2,199,440 bytes
downloading Horde_Socket_Client-2.1.2.tgz ...
Starting to download Horde_Socket_Client-2.1.2.tgz (13,072 bytes)
...done: 13,072 bytes
downloading Horde_Controller-2.0.5.tgz ...
Starting to download Horde_Controller-2.0.5.tgz (11,127 bytes)
...done: 11,127 bytes
downloading Horde_Image-2.6.0.tgz ...
Starting to download Horde_Image-2.6.0.tgz (779,789 bytes)
...done: 779,789 bytes
downloading Horde_Icalendar-2.1.8.tgz ...
Starting to download Horde_Icalendar-2.1.8.tgz (108,647 bytes)
...done: 108,647 bytes
downloading Horde_Cli-2.3.0.tgz ...
Starting to download Horde_Cli-2.3.0.tgz (30,628 bytes)
...done: 30,628 bytes
downloading Horde_Mime-2.11.0.tgz ...
Starting to download Horde_Mime-2.11.0.tgz (147,538 bytes)
...done: 147,538 bytes
downloading Horde_ActiveSync-2.39.7.tgz ...
Starting to download Horde_ActiveSync-2.39.7.tgz (401,667 bytes)
...done: 401,667 bytes
downloading Horde_Crypt-2.7.12.tgz ...
Starting to download Horde_Crypt-2.7.12.tgz (156,807 bytes)
...done: 156,807 bytes
downloading Horde_Imap_Client-2.29.16.tgz ...
Starting to download Horde_Imap_Client-2.29.16.tgz (262,433 bytes)
...done: 262,433 bytes
downloading Horde_Core-2.31.8.tgz ...
Starting to download Horde_Core-2.31.8.tgz (1,677,360 bytes)
...done: 1,677,360 bytes
downloading Horde_Form-2.0.19.tgz ...
Starting to download Horde_Form-2.0.19.tgz (198,152 bytes)
...done: 198,152 bytes
downloading horde-5.2.20.tgz ...
Starting to download horde-5.2.20.tgz (2,989,979 bytes)
...done: 2,989,979 bytes
downloading imp-6.2.23.tgz ...
Starting to download imp-6.2.23.tgz (5,055,257 bytes)
...done: 5,055,257 bytes
downloading kronolith-4.2.27.tgz ...
Starting to download kronolith-4.2.27.tgz (2,644,499 bytes)
...done: 2,644,499 bytes
downloading nag-4.2.19.tgz ...
Starting to download nag-4.2.19.tgz (1,652,197 bytes)
...done: 1,652,197 bytes
downloading turba-4.2.23.tgz ...
Starting to download turba-4.2.23.tgz (2,002,609 bytes)
...done: 2,002,609 bytes
downloading PEAR-1.10.7.tgz ...
Starting to download PEAR-1.10.7.tgz (291,786 bytes)
...done: 291,786 bytes
downloading Archive_Tar-1.4.5.tgz ...
Starting to download Archive_Tar-1.4.5.tgz (20,919 bytes)
...done: 20,919 bytes
upgrade ok: channel://pear.horde.org/Horde_Stream_Wrapper-2.1.4
upgrade ok: channel://pear.horde.org/Horde_Browser-2.0.16
upgrade ok: channel://pear.horde.org/Horde_Text_Filter-2.3.6
upgrade ok: channel://pear.horde.org/Horde_Socket_Client-2.1.2
upgrade ok: channel://pear.horde.org/Horde_Controller-2.0.5
upgrade ok: channel://pear.horde.org/Horde_Image-2.6.0
upgrade ok: channel://pear.horde.org/Horde_Icalendar-2.1.8
upgrade ok: channel://pear.horde.org/Horde_Cli-2.3.0
upgrade ok: channel://pear.horde.org/Horde_Mime-2.11.0
upgrade ok: channel://pear.php.net/Archive_Tar-1.4.5
upgrade ok: channel://pear.horde.org/Horde_Compress-2.2.2
upgrade ok: channel://pear.horde.org/Horde_Crypt-2.7.12
upgrade ok: channel://pear.horde.org/Horde_Imap_Client-2.29.16
upgrade ok: channel://pear.php.net/PEAR-1.10.7
upgrade ok: channel://pear.horde.org/Horde_ActiveSync-2.39.7
upgrade ok: channel://pear.horde.org/Horde_Core-2.31.8
upgrade ok: channel://pear.horde.org/Horde_Form-2.0.19
upgrade ok: channel://pear.horde.org/horde-5.2.20
upgrade ok: channel://pear.horde.org/imp-6.2.23
upgrade ok: channel://pear.horde.org/kronolith-4.2.27
upgrade ok: channel://pear.horde.org/nag-4.2.19
upgrade ok: channel://pear.horde.org/turba-4.2.23
PEAR: Optional feature webinstaller available (PEAR's web-based installer)
PEAR: Optional feature gtkinstaller available (PEAR's PHP-GTK-based installer)
PEAR: Optional feature gtk2installer available (PEAR's PHP-GTK2-based  
installer)
PEAR: To install optional features use "pear install pear/PEAR#featurename"

Which seems to have updated a bunch of stuff.  Then I noticed that the  
PHP extension "bcmath" wasn't installed, so I installed it using YUM  
and re-ran the above command to upgrade "horde/Horde_Mapi".  However,  
when I go to Administration > Configuration, I still see tons of apps  
that are still outdated:

Horde_ActiveSync 2.20.0
Horde_Alarm 2.2.3
Horde_Argv 2.0.9
Horde_Auth 2.1.5
Horde_Autoloader 2.1.0
Horde_Browser 2.0.7
Horde_Cache 2.5.0
Horde_Cli 2.0.5
Horde_Compress 2.0.8
Horde_Compress_Fast 1.0.3
Horde_Constraint 2.0.1
Horde_Controller 2.0.1
Horde_Core 2.16.1
Horde_Crypt 2.5.0
Horde_Crypt_Blowfish 1.0.2
Horde_CssMinify 1.0.2
Horde_Css_Parser 1.0.4
Horde_Data 2.1.0
Horde_Date 2.0.12
Horde_Date_Parser 2.0.2
Horde_Dav 1.1.1
Horde_Db 2.2.0
Horde_Editor 2.0.4
Horde_ElasticSearch 1.0.2
Horde_Exception 2.0.4
Horde_Feed 2.0.2
Horde_Form 2.0.8
Horde_Group 2.0.4
Horde_HashTable 1.2.0
Horde_History 2.3.2
Horde_Http 2.1.1
Horde_Icalendar 2.0.9
Horde_Image 2.1.0
Horde_Imap_Client 2.25.3
Horde_Imsp 2.0.5
Horde_Injector 2.0.3
Horde_Itip 2.0.6
Horde_JavascriptMinify 1.1.0
Horde_JavascriptMinify_Jsmin 1.0.1
Horde_Kolab_Format 2.0.5
Horde_Kolab_Server 2.0.2
Horde_Kolab_Session 2.0.1
Horde_Kolab_Storage 2.1.1
Horde_ListHeaders 1.1.5
Horde_Lock 2.1.1
Horde_Log 2.1.0
Horde_LoginTasks 2.0.3
horde_lz4 1.0.7
Horde_Mail 2.4.0
Horde_Mail_Autoconfig 1.0.1
Horde_Mapi 1.0.3
Horde_Memcache 2.0.6
Horde_Mime 2.4.5
Horde_Mime_Viewer 2.0.7
Horde_Mongo 1.0.2
Horde_Nls 2.0.4
Horde_Notification 2.0.1
Horde_Oauth 2.0.1
Horde_OpenXchange 1.0.0
Horde_Pack 1.0.5
Horde_Pdf 2.0.3
Horde_Perms 2.1.2
Horde_Prefs 2.7.0
Horde_Queue 1.1.1
Horde_Rdo 2.0.2
Horde_Role 1.0.1
Horde_Routes 2.0.2
Horde_Rpc 2.1.1
Horde_Scribe 2.0.1
Horde_Secret 2.0.4
Horde_Serialize 2.0.2
Horde_Service_Facebook 2.0.6
Horde_Service_Gravatar 1.0.0
Horde_Service_Twitter 2.1.1
Horde_Service_Weather 2.1.4
Horde_SessionHandler 2.2.4
Horde_Share 2.0.5
Horde_Smtp 1.6.0
Horde_Socket_Client 1.1.2
Horde_SpellChecker 2.1.1
Horde_Stream 1.6.1
Horde_Stream_Filter 2.0.2
Horde_Stream_Wrapper 2.1.0
Horde_Stringprep 1.0.0
Horde_Support 2.1.1
Horde_SyncMl 2.0.4
Horde_Template 2.0.1
Horde_Test 2.4.5
Horde_Text_Diff 2.1.0
Horde_Text_Filter 2.2.1
Horde_Text_Filter_Jsmin 1.0.1
Horde_Text_Flowed 2.0.1
Horde_Thrift 2.0.1
Horde_Timezone 1.0.8
Horde_Token 2.0.5
Horde_Translation 2.2.0
Horde_Tree 2.0.2
Horde_Url 2.2.3
Horde_Util 2.5.1
Horde_Vfs 2.2.0
Horde_View 2.0.4
Horde_Xml_Element 2.0.1
Horde_Xml_Wbxml 2.0.1
webmail 5.2.3

Any other upgrade command always gives "Nothing to upgrade in channel "horde""


More information about the horde mailing list