[horde] Standalone Horde server access disabled overnight (wrong username or password)

Arjen de Korte build+horde at de-korte.org
Fri Feb 22 08:22:10 UTC 2019


Citeren Louis-Philippe Allard <lp.allard.1 at gmail.com>:

> Quoting Arjen de Korte <build+horde at de-korte.org>:
>
>> Citeren Louis-Philippe Allard <lp.allard.1 at gmail.com>:
>>
>>> Quoting Michael J Rubinsky <mrubinsk at horde.org>:
>>>
>>>> Quoting Arjen de Korte <build+horde at de-korte.org>:
>>>>
>>>>> Citeren L A <lp.allard.1 at gmail.com>:
>>>>>
>>>>>> On Wed, Feb 20, 2019 at 8:44 AM L A <lp.allard.1 at gmail.com> wrote:
>>>>>>
>>>>>>> Hello,
>>>>>>>
>>>>>>> I have been running Horde on a Centos VPS (located at home) for 7+years
>>>>>>> now, and it always worked great.  Yesterday I was using it  
>>>>>>> without issues.
>>>>>>> It is configured to use my GMail account as auth backend.
>>>>>>>
>>>>>>> /var/www/html/horde/imp/config/backends.php has this in it:
>>>>>>> // IMAP server
>>>>>>> $servers['imap'] = array(
>>>>>>> // ENABLED by default; will connect to IMAP port on local server
>>>>>>> 'disabled' => false,
>>>>>>> 'name' => 'GMail IMAP Server',
>>>>>>> 'hostspec' => 'imap.gmail.com',
>>>>>>> 'hordeauth' => true,
>>>>>>> 'protocol' => 'imap',
>>>>>>> 'port' => 993,
>>>>>>> // Plaintext logins are disabled by default on IMAP servers (see RFC
>>>>>>> 3501
>>>>>>> // [6.2.3]), so TLS is the only guaranteed authentication available by
>>>>>>> // default.
>>>>>>> 'secure' => 'ssl',
>>>>>>> );
>>>>>>>
>>>>>>> Like I said this server has worked flawlessly for years.  This  
>>>>>>> morning, I
>>>>>>> cannot login to my Horde server.  I get "Login failed because  
>>>>>>> your username
>>>>>>> or password was entered incorrectly." at the login page.
>>>>>>>
>>>>>>> I have confirmed that I can login to gmail.com using the same
>>>>>>> credentials, and it works.  My android phone also works with  
>>>>>>> gmail without
>>>>>>> issues.  So what happened?  Its a major issue because I am  
>>>>>>> managing a condo
>>>>>>> property and use this horde install for  
>>>>>>> calendar/tasks/contacts so now I'm
>>>>>>> locked out...
>>>>>>>
>>>>>>> Anybody can help?
>>>>>>
>>>>>> Geez I forgot to add the log's contents:
>>>>>>
>>>>>> Feb 20 09:25:52 centos-mail HORDE: [horde] PHP ERROR:
>>>>>> call_user_func_array() expects parameter 1 to be a valid callback, class
>>>>>> 'Horde_Deprecated' does not have a method 'verifySignedUrl' [pid 1158 on
>>>>>> line 1196 of "/usr/share/pear/Horde.php"]
>>>>
>>>> The line above also leads me to suspect that you have a fairly  
>>>> outdated Horde_Core library installed.
>>>>
>>>>>> Feb 20 09:25:53 centos-mail HORDE: [imp] [login] Mail server denied
>>>>>> authentication. [pid 1158 on line 730 of
>>>>>> "/var/www/html/horde/imp/lib/Imap.php"]
>>>>>> Feb 20 09:25:53 centos-mail HORDE: [imp] FAILED LOGIN for  
>>>>>> XXXXXXX at gmail.com
>>>>>> (XXX.XXX.XXX.XXX) to {imap://imap.gmail.com:993/} [pid 1158 on  
>>>>>> line 157 of
>>>>>> "/var/www/html/horde/imp/lib/Auth.php"]
>>>>>> Feb 20 09:25:53 centos-mail HORDE: [horde] FAILED LOGIN for
>>>>>> XXXXXXX at gmail.com to horde (XXX.XXX.XXX.XXX) [pid 1158 on line 199 of
>>>>>> "/var/www/html/horde/login.php"]
>>>>>>
>>>>>> Would the problem be on Google's side?  Legacy app access is  
>>>>>> enabled in my
>>>>>> google account (has always been for horde).  I have also ruled  
>>>>>> out firewall
>>>>>> issues.
>>>>>
>>>>> Fix your configuration. You should *never* modify  
>>>>> 'horde/imp/config/backends.php', only override defaults in  
>>>>> 'horde/imp/config/backends.local.php' like
>>>>>
>>>>> <?php
>>>>> $servers['imap']['name'] = 'GMail IMAP Server';
>>>>> $servers['imap']['hostspec'] = 'imap.gmail.com';
>>>>> $servers['imap']['hordeauth'] = true;
>>>>> $servers['imap']['port'] = 993;
>>>>> $servers['imap']['secure'] = 'ssl';
>>>>>
>>>>> Then enable debugging
>>>>>
>>>>> $servers['imap']['debug'] = '/tmp/imp_imap.log';
>>>>>
>>>>> The information in the logfile should provide clues why Gmail  
>>>>> won't let you in.
>>>>>
>>>>> --
>>>>> Horde mailing list
>>>>> Frequently Asked Questions: http://horde.org/faq/
>>>>> To unsubscribe, mail: horde-unsubscribe at lists.horde.org
>>>>
>>>> --
>>>> mike
>>>> The Horde Project
>>>> http://www.horde.org
>>>> https://www.facebook.com/hordeprojecthttps://www.twitter.com/hordeproject
>>>
>>> Hello Michael,  yes I have had a hard time updating Horde for  
>>> several months if not over a year now.  Horde_Core is 2.16.1.
>>>
>>> Through the webinterface > Administration > Configuration > Check  
>>> for newer versions, pretty much everything has a newer version,  
>>> but when I issue a "pear upgrade -a -B horde/webmail" I always get  
>>> "Nothing to upgrade".
>>
>> I usually run
>>
>>    pear upgrade -c horde
>>
>> What happens if you try that? If that fails to update, what is the output of
>>
>>    pear config-get horde_dir
>>
>> This should point to the root of your Horde installation.
>>
>>> I wrote on this maillist a while ago about this issue, but I  
>>> couldnt find a solution.  Obviously the webinterface and the pear  
>>> command musty look at different locations if they are not seeing  
>>> the same packages...  Sure a Dev can confirm this?
>>
>> Well, it looks like the webinterface is correct here, your  
>> Horde_Core *is* out-of-date, the current version is 2.31.8.
>>
>> --
>> Horde mailing list
>> Frequently Asked Questions: http://horde.org/faq/To unsubscribe,  
>> mail: horde-unsubscribe at lists.horde.org
>
> Allright, OK running "pear upgrade -c horde" produced:
>
> [root at centos-mail mainuser]# pear upgrade -c horde
> Did not download optional dependencies: pear/Net_DNS2, pecl/idn, use  
> --alldeps to download automatically
> Did not download optional dependencies: horde/Horde_Backup,  
> horde/Horde_Ldap, pear/Net_DNS2, use --alldeps to download  
> automatically
> WARNING: "pear/Console_Getopt" is deprecated in favor of  
> "pear/Console_GetoptPlus"
> Did not download optional dependencies: pear/Net_DNS2,  
> pear/Console_Table, use --alldeps to download automatically
> Unknown remote channel: phpseclib.sourceforge.net
> Did not download optional dependencies:  
> channel://phpseclib.sourceforge.net/File_ASN1, use --alldeps to  
> download automatically
> Did not download optional dependencies: pear/Date_Holidays, use  
> --alldeps to download automatically
> Did not download optional dependencies: horde/Horde_Ldap, use  
> --alldeps to download automatically
> WARNING: "pear/Console_Getopt" is deprecated in favor of  
> "pear/Console_GetoptPlus"
> horde/Horde_Mapi requires PHP extension "bcmath"
> horde/Horde_Mime can optionally use package "pecl/idn"
> horde/Horde_Core can optionally use package "horde/Horde_Backup"  
> (version >= 1.0.0, version <= 2.0.0alpha1, excluded versions:  
> 2.0.0alpha1)
> horde/Horde_Core can optionally use package "horde/Horde_Ldap"  
> (version >= 2.0.0, version <= 3.0.0alpha1, excluded versions:  
> 3.0.0alpha1)
> horde/imp can optionally use package  
> "channel://phpseclib.sourceforge.net/File_ASN1"
> horde/kronolith can optionally use package "pear/Date_Holidays"  
> (version >= 0.21.0, version <= 1.0.0alpha1, excluded versions:  
> 1.0.0alpha1)
> horde/turba can optionally use package "horde/Horde_Ldap" (version  
> >= 2.0.0, version <= 3.0.0alpha1, excluded versions: 3.0.0alpha1)
> downloading Horde_Stream_Wrapper-2.1.4.tgz ...
> Starting to download Horde_Stream_Wrapper-2.1.4.tgz (5,668 bytes)
> .....done: 5,668 bytes
> downloading Horde_Browser-2.0.16.tgz ...
> Starting to download Horde_Browser-2.0.16.tgz (38,533 bytes)
> ...done: 38,533 bytes
> downloading Horde_Text_Filter-2.3.6.tgz ...
> Starting to download Horde_Text_Filter-2.3.6.tgz (54,976 bytes)
> ...done: 54,976 bytes
> downloading Horde_Compress-2.2.2.tgz ...
> Starting to download Horde_Compress-2.2.2.tgz (2,199,440 bytes)
> ...done: 2,199,440 bytes
> downloading Horde_Socket_Client-2.1.2.tgz ...
> Starting to download Horde_Socket_Client-2.1.2.tgz (13,072 bytes)
> ...done: 13,072 bytes
> downloading Horde_Controller-2.0.5.tgz ...
> Starting to download Horde_Controller-2.0.5.tgz (11,127 bytes)
> ...done: 11,127 bytes
> downloading Horde_Image-2.6.0.tgz ...
> Starting to download Horde_Image-2.6.0.tgz (779,789 bytes)
> ...done: 779,789 bytes
> downloading Horde_Icalendar-2.1.8.tgz ...
> Starting to download Horde_Icalendar-2.1.8.tgz (108,647 bytes)
> ...done: 108,647 bytes
> downloading Horde_Cli-2.3.0.tgz ...
> Starting to download Horde_Cli-2.3.0.tgz (30,628 bytes)
> ...done: 30,628 bytes
> downloading Horde_Mime-2.11.0.tgz ...
> Starting to download Horde_Mime-2.11.0.tgz (147,538 bytes)
> ...done: 147,538 bytes
> downloading Horde_ActiveSync-2.39.7.tgz ...
> Starting to download Horde_ActiveSync-2.39.7.tgz (401,667 bytes)
> ...done: 401,667 bytes
> downloading Horde_Crypt-2.7.12.tgz ...
> Starting to download Horde_Crypt-2.7.12.tgz (156,807 bytes)
> ...done: 156,807 bytes
> downloading Horde_Imap_Client-2.29.16.tgz ...
> Starting to download Horde_Imap_Client-2.29.16.tgz (262,433 bytes)
> ...done: 262,433 bytes
> downloading Horde_Core-2.31.8.tgz ...
> Starting to download Horde_Core-2.31.8.tgz (1,677,360 bytes)
> ...done: 1,677,360 bytes
> downloading Horde_Form-2.0.19.tgz ...
> Starting to download Horde_Form-2.0.19.tgz (198,152 bytes)
> ...done: 198,152 bytes
> downloading horde-5.2.20.tgz ...
> Starting to download horde-5.2.20.tgz (2,989,979 bytes)
> ...done: 2,989,979 bytes
> downloading imp-6.2.23.tgz ...
> Starting to download imp-6.2.23.tgz (5,055,257 bytes)
> ...done: 5,055,257 bytes
> downloading kronolith-4.2.27.tgz ...
> Starting to download kronolith-4.2.27.tgz (2,644,499 bytes)
> ...done: 2,644,499 bytes
> downloading nag-4.2.19.tgz ...
> Starting to download nag-4.2.19.tgz (1,652,197 bytes)
> ...done: 1,652,197 bytes
> downloading turba-4.2.23.tgz ...
> Starting to download turba-4.2.23.tgz (2,002,609 bytes)
> ...done: 2,002,609 bytes
> downloading PEAR-1.10.7.tgz ...
> Starting to download PEAR-1.10.7.tgz (291,786 bytes)
> ...done: 291,786 bytes
> downloading Archive_Tar-1.4.5.tgz ...
> Starting to download Archive_Tar-1.4.5.tgz (20,919 bytes)
> ...done: 20,919 bytes
> upgrade ok: channel://pear.horde.org/Horde_Stream_Wrapper-2.1.4
> upgrade ok: channel://pear.horde.org/Horde_Browser-2.0.16
> upgrade ok: channel://pear.horde.org/Horde_Text_Filter-2.3.6
> upgrade ok: channel://pear.horde.org/Horde_Socket_Client-2.1.2
> upgrade ok: channel://pear.horde.org/Horde_Controller-2.0.5
> upgrade ok: channel://pear.horde.org/Horde_Image-2.6.0
> upgrade ok: channel://pear.horde.org/Horde_Icalendar-2.1.8
> upgrade ok: channel://pear.horde.org/Horde_Cli-2.3.0
> upgrade ok: channel://pear.horde.org/Horde_Mime-2.11.0
> upgrade ok: channel://pear.php.net/Archive_Tar-1.4.5
> upgrade ok: channel://pear.horde.org/Horde_Compress-2.2.2
> upgrade ok: channel://pear.horde.org/Horde_Crypt-2.7.12
> upgrade ok: channel://pear.horde.org/Horde_Imap_Client-2.29.16
> upgrade ok: channel://pear.php.net/PEAR-1.10.7
> upgrade ok: channel://pear.horde.org/Horde_ActiveSync-2.39.7
> upgrade ok: channel://pear.horde.org/Horde_Core-2.31.8
> upgrade ok: channel://pear.horde.org/Horde_Form-2.0.19
> upgrade ok: channel://pear.horde.org/horde-5.2.20
> upgrade ok: channel://pear.horde.org/imp-6.2.23
> upgrade ok: channel://pear.horde.org/kronolith-4.2.27
> upgrade ok: channel://pear.horde.org/nag-4.2.19
> upgrade ok: channel://pear.horde.org/turba-4.2.23
> PEAR: Optional feature webinstaller available (PEAR's web-based installer)
> PEAR: Optional feature gtkinstaller available (PEAR's PHP-GTK-based  
> installer)
> PEAR: Optional feature gtk2installer available (PEAR's  
> PHP-GTK2-based installer)
> PEAR: To install optional features use "pear install pear/PEAR#featurename"
>
> Which seems to have updated a bunch of stuff.  Then I noticed that  
> the PHP extension "bcmath" wasn't installed, so I installed it using  
> YUM and re-ran the above command to upgrade "horde/Horde_Mapi".   
> However, when I go to Administration > Configuration, I still see  
> tons of apps that are still outdated:
>
> Horde_ActiveSync 2.20.0
> Horde_Alarm 2.2.3
> Horde_Argv 2.0.9
> Horde_Auth 2.1.5
> Horde_Autoloader 2.1.0
> Horde_Browser 2.0.7
> Horde_Cache 2.5.0
> Horde_Cli 2.0.5
> Horde_Compress 2.0.8
> Horde_Compress_Fast 1.0.3
> Horde_Constraint 2.0.1
> Horde_Controller 2.0.1
> Horde_Core 2.16.1
> Horde_Crypt 2.5.0
> Horde_Crypt_Blowfish 1.0.2
> Horde_CssMinify 1.0.2
> Horde_Css_Parser 1.0.4
> Horde_Data 2.1.0
> Horde_Date 2.0.12
> Horde_Date_Parser 2.0.2
> Horde_Dav 1.1.1
> Horde_Db 2.2.0
> Horde_Editor 2.0.4
> Horde_ElasticSearch 1.0.2
> Horde_Exception 2.0.4
> Horde_Feed 2.0.2
> Horde_Form 2.0.8
> Horde_Group 2.0.4
> Horde_HashTable 1.2.0
> Horde_History 2.3.2
> Horde_Http 2.1.1
> Horde_Icalendar 2.0.9
> Horde_Image 2.1.0
> Horde_Imap_Client 2.25.3
> Horde_Imsp 2.0.5
> Horde_Injector 2.0.3
> Horde_Itip 2.0.6
> Horde_JavascriptMinify 1.1.0
> Horde_JavascriptMinify_Jsmin 1.0.1
> Horde_Kolab_Format 2.0.5
> Horde_Kolab_Server 2.0.2
> Horde_Kolab_Session 2.0.1
> Horde_Kolab_Storage 2.1.1
> Horde_ListHeaders 1.1.5
> Horde_Lock 2.1.1
> Horde_Log 2.1.0
> Horde_LoginTasks 2.0.3
> horde_lz4 1.0.7
> Horde_Mail 2.4.0
> Horde_Mail_Autoconfig 1.0.1
> Horde_Mapi 1.0.3
> Horde_Memcache 2.0.6
> Horde_Mime 2.4.5
> Horde_Mime_Viewer 2.0.7
> Horde_Mongo 1.0.2
> Horde_Nls 2.0.4
> Horde_Notification 2.0.1
> Horde_Oauth 2.0.1
> Horde_OpenXchange 1.0.0
> Horde_Pack 1.0.5
> Horde_Pdf 2.0.3
> Horde_Perms 2.1.2
> Horde_Prefs 2.7.0
> Horde_Queue 1.1.1
> Horde_Rdo 2.0.2
> Horde_Role 1.0.1
> Horde_Routes 2.0.2
> Horde_Rpc 2.1.1
> Horde_Scribe 2.0.1
> Horde_Secret 2.0.4
> Horde_Serialize 2.0.2
> Horde_Service_Facebook 2.0.6
> Horde_Service_Gravatar 1.0.0
> Horde_Service_Twitter 2.1.1
> Horde_Service_Weather 2.1.4
> Horde_SessionHandler 2.2.4
> Horde_Share 2.0.5
> Horde_Smtp 1.6.0
> Horde_Socket_Client 1.1.2
> Horde_SpellChecker 2.1.1
> Horde_Stream 1.6.1
> Horde_Stream_Filter 2.0.2
> Horde_Stream_Wrapper 2.1.0
> Horde_Stringprep 1.0.0
> Horde_Support 2.1.1
> Horde_SyncMl 2.0.4
> Horde_Template 2.0.1
> Horde_Test 2.4.5
> Horde_Text_Diff 2.1.0
> Horde_Text_Filter 2.2.1
> Horde_Text_Filter_Jsmin 1.0.1
> Horde_Text_Flowed 2.0.1
> Horde_Thrift 2.0.1
> Horde_Timezone 1.0.8
> Horde_Token 2.0.5
> Horde_Translation 2.2.0
> Horde_Tree 2.0.2
> Horde_Url 2.2.3
> Horde_Util 2.5.1
> Horde_Vfs 2.2.0
> Horde_View 2.0.4
> Horde_Xml_Element 2.0.1
> Horde_Xml_Wbxml 2.0.1
> webmail 5.2.3
>
> Any other upgrade command always gives "Nothing to upgrade in  
> channel "horde""

I asked before, what is the output of

     pear config-get horde_dir




More information about the horde mailing list