Menu

#498 Usermin Errors recently observed - Troubleshoot Request

1.860
open
nobody
5
2022-11-04
2022-10-29
Vic Mbaz
No

Hi Guys, I noticed I couldn't properly access my usermin's awesome features & utilities upon logging in today to check mail. Never checked error log until this event occurred. Upon checking, I discovered the following details. (also attached screen shots as well if that helps).

Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
Use of uninitialized value $qstart in concatenation (.) or string at ./mailbox-lib.pl line 2073.
Use of uninitialized value $qstart in concatenation (.) or string at ./mailbox-lib.pl line 2073.
Use of uninitialized value $mailbox::userconfig{"ham_buttons"} in pattern match (m//) at ./mailbox-lib.pl line 1825.
readline() on closed filehandle $ADDRESS at /usr/share/usermin/mailbox/mailbox-lib.pl line 166.
readline() on closed filehandle $ADDRESS at /usr/share/usermin/mailbox/mailbox-lib.pl line 166.
Use of uninitialized value $mailbox::userconfig{"mailboxes"} in split at /usr/share/usermin/mailbox/mailbox-lib.pl line 601.
readline() on closed filehandle $ADDRESS at /usr/share/usermin/mailbox/mailbox-lib.pl line 166.
readline() on closed filehandle $ADDRESS at /usr/share/usermin/mailbox/mailbox-lib.pl line 166.
Use of uninitialized value $mailbox::userconfig{"mailboxes"} in split at /usr/share/usermin/mailbox/mailbox-lib.pl line 601.
Use of uninitialized value $mailbox::userconfig{"mailboxes"} in split at ./mailbox-lib.pl line 601.
Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
Use of uninitialized value $mailbox::in{"jump"} in pattern match (m//) at /usr/share/usermin/mailbox/index.cgi line 78.
Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 86.
Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 86.
Use of uninitialized value in numeric ge (>=) at /usr/share/usermin/mailbox/index.cgi line 87.
Use of uninitialized value $mailbox::in{"folder"} in concatenation (.) or string at /usr/share/usermin/mailbox/index.cgi line 398.
Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 402.
Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 405.
Use of uninitialized value in subtraction (-) at /usr/share/usermin/mailbox/index.cgi line 407.
Use of uninitialized value in subtraction (-) at /usr/share/usermin/mailbox/index.cgi line 408.
Use of uninitialized value in string eq at /usr/share/usermin/mailbox/index.cgi line 107.
Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 122.
Use of uninitialized value in addition (+) at /usr/share/usermin/mailbox/index.cgi line 123.
Use of uninitialized value $mailbox::userconfig{"ham_buttons"} in pattern match (m//) at ./mailbox-lib.pl line 1825.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
Use of uninitialized value $qstart in concatenation (.) or string at ./mailbox-lib.pl line 2073.
Use of uninitialized value $qstart in concatenation (.) or string at ./mailbox-lib.pl line 2073.
Use of uninitialized value $mailbox::userconfig{"ham_buttons"} in pattern match (m//) at ./mailbox-lib.pl line 1825.
readline() on closed filehandle $ADDRESS at /usr/share/usermin/mailbox/mailbox-lib.pl line 166.
readline() on closed filehandle $ADDRESS at /usr/share/usermin/mailbox/mailbox-lib.pl line 166.
Use of uninitialized value $mailbox::userconfig{"mailboxes"} in split at /usr/share/usermin/mailbox/mailbox-lib.pl line 601.
Use of uninitialized value $mailbox::userconfig{"mailboxes"} in split at ./mailbox-lib.pl line 601.
Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
Use of uninitialized value $mailbox::in{"jump"} in pattern match (m//) at /usr/share/usermin/mailbox/index.cgi line 78.
Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 86.
Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 86.
Use of uninitialized value in numeric ge (>=) at /usr/share/usermin/mailbox/index.cgi line 87.
Use of uninitialized value $mailbox::in{"folder"} in concatenation (.) or string at /usr/share/usermin/mailbox/index.cgi line 398.
Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 402.
Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 405.
Use of uninitialized value in subtraction (-) at /usr/share/usermin/mailbox/index.cgi line 407.
Use of uninitialized value in subtraction (-) at /usr/share/usermin/mailbox/index.cgi line 408.
Use of uninitialized value in string eq at /usr/share/usermin/mailbox/index.cgi line 107.
Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 122.
Use of uninitialized value in addition (+) at /usr/share/usermin/mailbox/index.cgi line 123.
Use of uninitialized value $mailbox::userconfig{"ham_buttons"} in pattern match (m//) at ./mailbox-lib.pl line 1825.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
Use of uninitialized value $qstart in concatenation (.) or string at ./mailbox-lib.pl line 2073.
Use of uninitialized value $qstart in concatenation (.) or string at ./mailbox-lib.pl line 2073.
Use of uninitialized value $mailbox::userconfig{"ham_buttons"} in pattern match (m//) at ./mailbox-lib.pl line 1825.

Wondering if anyone in the Webmin universe could be of kind assistance in getting these resolved. Thanks.

1 Attachments

Discussion

  • Jamie Cameron

    Jamie Cameron - 2022-10-29

    Those messages are just harmless perl warnings. But it looks like the real issue is that the email inbox isn't loading in Usermin?

     
  • Vic Mbaz

    Vic Mbaz - 2022-10-29

    @jcameron you are right on point with the diagnosis. Any thoughts or suggestions on how to fix it?

     
  • Vic Mbaz

    Vic Mbaz - 2022-10-29

    Btw, prior to my post on here, I remember installing a usermin theme ( https://github.com/qooob/authentic-theme/releases/download/18.49/authentic-theme-18.49-9.wbt.gz ) from a github thread with similar issue thinking that version 18.49-9 of the Authentic Theme for usermin might help with the fixing (though said thread was from few years back)..

     
    • Ilia

      Ilia - 2022-11-03

      Wait, what? Please don't do it. You should use Authentic Theme version that is supplied with Usermin.

      Please just reinstall Usermin using package manager. When done restart it forcefully (just in case) by running /etc/usermin/restart-by-force-kill and force reload browser's page by hitting Ctrl+Shift+R shortkey.

      Does it work for you?

      If not, which browser and version are you using?

       
      • Vic Mbaz

        Vic Mbaz - 2022-11-03

        Hi @iliajie so I re-installed usermin as per your advise. I used the command "wget https://sourceforge.net/projects/webadmin/files/usermin/1.860/usermin_1.860_all.deb" and "dpkg --install usermin_1.860_all.deb".

        Also ran the "/etc/usermin/restart-by-force-kill" on the terminal.

        Furthermore, I ran the following commands as well (just in case): "systemctl start usermin" & "systemctl enable usermin" .... even checked the status using command "systemctl status usermin" and it is active.

        However, upon trying to login to usermin using one of the emails I created, I can't and it still indicates "Warning.. Login Failed.. Please try again"

        Please advise. Thank you

         
  • Jamie Cameron

    Jamie Cameron - 2022-10-29

    Are you seeing any errors in your browser console?

     
  • Vic Mbaz

    Vic Mbaz - 2022-10-30

    Yes. Upon reading your message now, I tried logging in to one of my usermin email accounts to read mail and I can't even login anymore, tried again logging in with all email accounts I had created and same thing.. seems I've been locked out :( ... see attached pic

    Thank you

     
  • Vic Mbaz

    Vic Mbaz - 2022-10-30

    Btw I have been noticing tonnes of failed hacking attempts on my apache error log. Wondering if that might be a contributing factor to my not being able to login to any of my created usermin email accounts ... hmm, its strange

     
  • Jamie Cameron

    Jamie Cameron - 2022-10-30

    I don't think those Apache errors are related..

    What gets logged to /var/log/secure or /var/log/authlog when you try to login to Usermin?

     
  • Vic Mbaz

    Vic Mbaz - 2022-10-30

    @jcameron I still can't login to any of my created emails for usermin as I just checked the /var/log/auth.log and it seems I'm under attack from hackers, please review the details below and advice:

    Oct 30 17:02:15 host sshd[605737]: Disconnected from invalid user max 51.250.106.102 port 54928 [preauth]
    Oct 30 17:02:15 host sshd[605737]: Received disconnect from 51.250.106.102 port 54928:11: Bye Bye [preauth]
    Oct 30 17:02:15 host sshd[605737]: Failed password for invalid user max from 51.250.106.102 port 54928 ssh2
    Oct 30 17:02:12 host sshd[605737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.250.106.102
    Oct 30 17:02:12 host sshd[605737]: pam_unix(sshd:auth): check pass; user unknown
    Oct 30 17:02:12 host sshd[605737]: Invalid user max from 51.250.106.102 port 54928
    Oct 30 17:02:08 host sshd[605691]: Disconnected from invalid user external 167.71.200.50 port 51018 [preauth]
    Oct 30 17:02:08 host sshd[605691]: Received disconnect from 167.71.200.50 port 51018:11: Bye Bye [preauth]
    Oct 30 17:02:06 host sshd[605691]: Failed password for invalid user external from 167.71.200.50 port 51018 ssh2
    Oct 30 17:02:04 host sshd[605691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.200.50
    Oct 30 17:02:04 host sshd[605691]: pam_unix(sshd:auth): check pass; user unknown
    Oct 30 17:02:04 host sshd[605691]: Invalid user external from 167.71.200.50 port 51018
    Oct 30 17:02:01 host CRON[605585]: pam_unix(cron:session): session closed for user root
    Oct 30 17:02:01 host CRON[605585]: pam_unix(cron:session): session opened for user root by (uid=0)
    Oct 30 17:01:39 host sshd[605346]: Disconnected from invalid user vim 128.199.124.231 port 36706 [preauth]
    Oct 30 17:01:39 host sshd[605346]: Received disconnect from 128.199.124.231 port 36706:11: Bye Bye [preauth]
    Oct 30 17:01:38 host sshd[605346]: Failed password for invalid user vim from 128.199.124.231 port 36706 ssh2
    Oct 30 17:01:37 host sshd[605346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.124.231
    Oct 30 17:01:37 host sshd[605346]: pam_unix(sshd:auth): check pass; user unknown
    Oct 30 17:01:37 host sshd[605346]: Invalid user vim from 128.199.124.231 port 36706
    Oct 30 17:01:01 host sshd[605343]: Disconnected from invalid user olga 167.71.200.50 port 57310 [preauth]
    Oct 30 17:01:01 host sshd[605343]: Received disconnect from 167.71.200.50 port 57310:11: Bye Bye [preauth]
    Oct 30 17:01:00 host sshd[605343]: Failed password for invalid user olga from 167.71.200.50 port 57310 ssh2
    Oct 30 17:00:58 host sshd[605343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.200.50
    Oct 30 17:00:58 host sshd[605343]: pam_unix(sshd:auth): check pass; user unknown
    Oct 30 17:00:58 host sshd[605343]: Invalid user olga from 167.71.200.50 port 57310
    Oct 30 17:00:50 host sshd[605226]: Disconnected from invalid user yoko 128.199.124.231 port 54528 [preauth]
    Oct 30 17:00:50 host sshd[605226]: Received disconnect from 128.199.124.231 port 54528:11: Bye Bye [preauth]
    Oct 30 17:00:49 host sshd[605226]: Failed password for invalid user yoko from 128.199.124.231 port 54528 ssh2
    Oct 30 17:00:48 host sshd[605226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.124.231
    Oct 30 17:00:48 host sshd[605226]: pam_unix(sshd:auth): check pass; user unknown
    Oct 30 17:00:48 host sshd[605226]: Invalid user yoko from 128.199.124.231 port 54528
    Oct 30 17:00:22 host sshd[605149]: Disconnected from invalid user jdoe 129.226.165.250 port 41274 [preauth]
    Oct 30 17:00:22 host sshd[605149]: Received disconnect from 129.226.165.250 port 41274:11: Bye Bye [preauth]
    Oct 30 17:00:21 host sshd[605149]: Failed password for invalid user jdoe from 129.226.165.250 port 41274 ssh2
    Oct 30 17:00:19 host sshd[605149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.165.250
    Oct 30 17:00:19 host sshd[605149]: pam_unix(sshd:auth): check pass; user unknown
    Oct 30 17:00:19 host sshd[605149]: Invalid user jdoe from 129.226.165.250 port 41274
    Oct 30 17:00:03 host sshd[605127]: Disconnected from invalid user jenkins 128.199.124.231 port 44108 [preauth]
    Oct 30 17:00:03 host sshd[605127]: Received disconnect from 128.199.124.231 port 44108:11: Bye Bye [preauth]
    Oct 30 17:00:02 host sshd[605127]: Failed password for invalid user jenkins from 128.199.124.231 port 44108 ssh2
    Oct 30 17:00:02 host sshd[605125]: Disconnected from authenticating user root 220.225.126.55 port 47072 [preauth]
    Oct 30 17:00:02 host sshd[605125]: Received disconnect from 220.225.126.55 port 47072:11: Bye Bye [preauth]
    Oct 30 17:00:01 host CRON[605129]: pam_unix(cron:session): session closed for user root
    Oct 30 17:00:01 host CRON[605129]: pam_unix(cron:session): session opened for user root by (uid=0)
    Oct 30 17:00:00 host sshd[605125]: Failed password for root from 220.225.126.55 port 47072 ssh2
    Oct 30 17:00:00 host sshd[605127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.124.231
    Oct 30 17:00:00 host sshd[605127]: pam_unix(sshd:auth): check pass; user unknown
    Oct 30 17:00:00 host sshd[605127]: Invalid user jenkins from 128.199.124.231 port 44108
    Oct 30 16:59:58 host sshd[605125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.225.126.55 user=root
    Oct 30 16:59:55 host sshd[605122]: Disconnected from authenticating user root 167.71.200.50 port 46922 [preauth]
    Oct 30 16:59:55 host sshd[605122]: Received disconnect from 167.71.200.50 port 46922:11: Bye Bye [preauth]
    Oct 30 16:59:53 host sshd[605122]: Failed password for root from 167.71.200.50 port 46922 ssh2
    Oct 30 16:59:51 host sshd[605122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.200.50 user=root
    Oct 30 16:59:08 host sshd[605027]: Disconnected from authenticating user root 128.199.124.231 port 33694 [preauth]
    Oct 30 16:59:08 host sshd[605027]: Received disconnect from 128.199.124.231 port 33694:11: Bye Bye [preauth]
    Oct 30 16:59:07 host sshd[605027]: Failed password for root from 128.199.124.231 port 33694 ssh2
    Oct 30 16:59:04 host sshd[605027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.124.231 user=root
    Oct 30 16:58:49 host sshd[605022]: Disconnected from invalid user jenkins 167.71.200.50 port 34848 [preauth]
    Oct 30 16:58:49 host sshd[605022]: Received disconnect from 167.71.200.50 port 34848:11: Bye Bye [preauth]
    Oct 30 16:58:49 host sshd[605022]: Failed password for invalid user jenkins from 167.71.200.50 port 34848 ssh2
    Oct 30 16:58:47 host sshd[605022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.200.50
    Oct 30 16:58:47 host sshd[605022]: pam_unix(sshd:auth): check pass; user unknown
    Oct 30 16:58:47 host sshd[605022]: Invalid user jenkins from 167.71.200.50 port 34848
    Oct 30 16:58:10 host sshd[605011]: Disconnected from authenticating user root 128.199.124.231 port 51506 [preauth]
    Oct 30 16:58:10 host sshd[605011]: Received disconnect from 128.199.124.231 port 51506:11: Bye Bye [preauth]
    Oct 30 16:58:10 host sshd[605011]: Failed password for root from 128.199.124.231 port 51506 ssh2
    Oct 30 16:58:08 host sshd[605011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.124.231 user=root
    Oct 30 16:57:36 host sshd[605008]: Disconnected from invalid user alarm 167.71.200.50 port 56702 [preauth]
    Oct 30 16:57:36 host sshd[605008]: Received disconnect from 167.71.200.50 port 56702:11: Bye Bye [preauth]
    Oct 30 16:57:35 host sshd[605008]: Failed password for invalid user alarm from 167.71.200.50 port 56702 ssh2
    Oct 30 16:57:32 host sshd[605008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.200.50
    Oct 30 16:57:32 host sshd[605008]: pam_unix(sshd:auth): check pass; user unknown
    Oct 30 16:57:32 host sshd[605008]: Invalid user alarm from 167.71.200.50 port 56702
    Oct 30 16:55:58 host sshd[604906]: Disconnected from invalid user jincao 167.71.200.50 port 50030 [preauth]
    Oct 30 16:55:58 host sshd[604906]: Received disconnect from 167.71.200.50 port 50030:11: Bye Bye [preauth]
    Oct 30 16:55:58 host sshd[604906]: Failed password for invalid user jincao from 167.71.200.50 port 50030 ssh2
    Oct 30 16:55:56 host sshd[604906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.200.50
    Oct 30 16:55:56 host sshd[604906]: pam_unix(sshd:auth): check pass; user unknown
    Oct 30 16:55:56 host sshd[604906]: Invalid user jincao from 167.71.200.50 port 50030
    Oct 30 16:55:01 host CRON[604887]: pam_unix(cron:session): session closed for user root
    Oct 30 16:55:01 host CRON[604887]: pam_unix(cron:session): session opened for user root by (uid=0)
    Oct 30 16:51:07 host sshd[604689]: Connection closed by 5.8.10.202 port 24909 [preauth]
    Oct 30 16:51:06 host sshd[604687]: error: kex_exchange_identification: Connection closed by remote host
    Oct 30 16:50:44 host sshd[604676]: Connection closed by 5.8.10.202 port 33302 [preauth]
    Oct 30 16:50:44 host sshd[604675]: Connection closed by 5.8.10.202 port 58051 [preauth]
    Oct 30 16:50:44 host sshd[604677]: Connection closed by 5.8.10.202 port 10501 [preauth]
    Oct 30 16:50:44 host sshd[604674]: Connection closed by 5.8.10.202 port 11910 [preauth]
    Oct 30 16:50:44 host sshd[604664]: Connection closed by 5.8.10.202 port 54105 [preauth]
    Oct 30 16:50:44 host sshd[604669]: error: kex_exchange_identification: Connection closed by remote host
    Oct 30 16:50:44 host sshd[604668]: error: kex_exchange_identification: Connection closed by remote host
    Oct 30 16:50:44 host sshd[604666]: error: kex_exchange_identification: Connection closed by remote host
    Oct 30 16:50:44 host sshd[604667]: error: kex_exchange_identification: Connection closed by remote host
    Oct 30 16:50:43 host sshd[604662]: error: kex_exchange_identification: Connection closed by remote host
    Oct 30 16:50:20 host sshd[604659]: Disconnected from invalid user zabbix 128.199.124.231 port 48074 [preauth]
    Oct 30 16:50:20 host sshd[604659]: Received disconnect from 128.199.124.231 port 48074:11: Bye Bye [preauth]
    Oct 30 16:50:18 host sshd[604659]: Failed password for invalid user zabbix from 128.199.124.231 port 48074 ssh2
    Oct 30 16:50:17 host sshd[604659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.124.231
    Oct 30 16:50:17 host sshd[604659]: pam_unix(sshd:auth): check pass; user unknown
    Oct 30 16:50:17 host sshd[604659]: Invalid user zabbix from 128.199.124.231 port 48074

     
  • Vic Mbaz

    Vic Mbaz - 2022-10-30

    Also, just to keep you in the loop, I noticed hackers have been trying to use brute force access into my system using the following:

    /home/brandwatchmail/public_html/xmlrpc.php
    /home/brandwatchmail/public_html/wp-login.php
    /home/brandwatchmail/public_html/index.php
    /home/brandwatchmail/public_html/wp-login.php
    /home/brandwatchmail/public_html/wp-plain.php
    /home/brandwatchmail/public_html/ip.php
    /home/brandwatchmail/public_html/info.php

    They've been repeatedly trying these files I do not have them, however, I decided creating them and edited each of them with the following code:

    So far, haven't seen any attack using the file paths indicated above, however they still keep attempting using:

    /home/brandwatchmail/public_html/zeebkcty.php
    /home/brandwatchmail/public_html/swqwuwtb.php
    /home/brandwatchmail/public_html/qtvonfog.php
    /home/brandwatchmail/public_html/bqgirejw.php
    /home/brandwatchmail/cgi-bin/mt
    /home/brandwatchmail/cgi-bin/cyz.php
    /home/brandwatchmail/cgi-bin/mt-xmlrpc.cgi
    /home/brandwatchmail/cgi-bin/MT

    Quite interesting yet frustrating observing these recent brute force trends on my server ...

     
  • Jamie Cameron

    Jamie Cameron - 2022-10-30

    Sadly hackers are always trying brute-force attacks on wordpress, SSH logins and so on. As long as you keep your software up to date and don't have weak passwords, you're safe.

    This seems unrelated to email not loading though!

     
  • Vic Mbaz

    Vic Mbaz - 2022-10-30

    I tried login in again recently and still no luck. I have been reviewing the auto configurations as generated by the sever as default settings. I'm currently reviewing settings in the root login under Webmin -> webmin -> webmin users -> brandwatchmail (server user) -> available webmin modules .... I found these settings by default (as seen in the pics attached). Please advise if they are ok when you've got a sec.

    Btw, many thanks for your continues remote support all along @jcameron ! :)

     
  • Vic Mbaz

    Vic Mbaz - 2022-10-30

    Here's the second pic for the later part of same section

     
  • Jamie Cameron

    Jamie Cameron - 2022-10-31

    Hang on, is the issue with logging into Webmin, or Usermin?

     
  • Vic Mbaz

    Vic Mbaz - 2022-10-31

    Thelogin issue is with Usermin... just showed you the Webmin settings by the way, to make sure it was correct. My apologies if I had seemed to digress from doing so

     
  • Vic Mbaz

    Vic Mbaz - 2022-11-02

    Hi @jcameron I still can't login to usermin (i.e mydomain.info:20000) using any of my created user logins. Do you think this is a bug or have the hackers finally locked me out of reading and checking mails on my server? Please advise how to get this resolved.

    Thank you so much

     
  • Vic Mbaz

    Vic Mbaz - 2022-11-02

    I've also attached recent reports from my /var/usermin/miniserv.error log for your review below:

    [31/Oct/2022:13:33:39 +0000] PAM authentication enabled
    [31/Oct/2022:13:33:39 +0000] Using SHA512 module Crypt::SHA
    [31/Oct/2022:13:33:39 +0000] Using MD5 module Digest::MD5
    [31/Oct/2022:13:33:39 +0000] miniserv.pl started
    Use of uninitialized value $mailbox::userconfig{"ham_buttons"} in pattern match (m//) at ./mailbox-lib.pl line 1825.
    Use of uninitialized value $qstart in concatenation (.) or string at ./mailbox-lib.pl line 2073.
    Use of uninitialized value $qstart in concatenation (.) or string at ./mailbox-lib.pl line 2073.
    Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
    Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
    Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
    Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
    Use of uninitialized value $mailbox::userconfig{"ham_buttons"} in pattern match (m//) at ./mailbox-lib.pl line 1825.
    Use of uninitialized value in addition (+) at /usr/share/usermin/mailbox/index.cgi line 123.
    Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 122.
    Use of uninitialized value in string eq at /usr/share/usermin/mailbox/index.cgi line 107.
    Use of uninitialized value in subtraction (-) at /usr/share/usermin/mailbox/index.cgi line 408.
    Use of uninitialized value in subtraction (-) at /usr/share/usermin/mailbox/index.cgi line 407.
    Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 405.
    Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 402.
    Use of uninitialized value $mailbox::in{"folder"} in concatenation (.) or string at /usr/share/usermin/mailbox/index.cgi line 398.
    Use of uninitialized value in numeric ge (>=) at /usr/share/usermin/mailbox/index.cgi line 87.
    Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 86.
    Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 86.
    Use of uninitialized value $mailbox::in{"jump"} in pattern match (m//) at /usr/share/usermin/mailbox/index.cgi line 78.
    Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
    Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
    Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
    Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
    Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
    Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
    Use of uninitialized value $mailbox::userconfig{"mailboxes"} in split at ./mailbox-lib.pl line 601.
    Use of uninitialized value $mailbox::userconfig{"mailboxes"} in split at /usr/share/usermin/mailbox/mailbox-lib.pl line 601.
    readline() on closed filehandle $ADDRESS at /usr/share/usermin/mailbox/mailbox-lib.pl line 166.
    readline() on closed filehandle $ADDRESS at /usr/share/usermin/mailbox/mailbox-lib.pl line 166.
    Use of uninitialized value $mailbox::userconfig{"ham_buttons"} in pattern match (m//) at ./mailbox-lib.pl line 1825.
    Use of uninitialized value $qstart in concatenation (.) or string at ./mailbox-lib.pl line 2073.
    Use of uninitialized value $qstart in concatenation (.) or string at ./mailbox-lib.pl line 2073.
    Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
    Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
    Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
    Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
    Use of uninitialized value $mailbox::userconfig{"ham_buttons"} in pattern match (m//) at ./mailbox-lib.pl line 1825.
    Use of uninitialized value in addition (+) at /usr/share/usermin/mailbox/index.cgi line 123.
    Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 122.
    Use of uninitialized value in string eq at /usr/share/usermin/mailbox/index.cgi line 107.
    Use of uninitialized value in subtraction (-) at /usr/share/usermin/mailbox/index.cgi line 408.
    Use of uninitialized value in subtraction (-) at /usr/share/usermin/mailbox/index.cgi line 407.
    Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 405.
    Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 402.
    Use of uninitialized value $mailbox::in{"folder"} in concatenation (.) or string at /usr/share/usermin/mailbox/index.cgi line 398.
    Use of uninitialized value in numeric ge (>=) at /usr/share/usermin/mailbox/index.cgi line 87.
    Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 86.
    Use of uninitialized value $mailbox::in{"start"} in int at /usr/share/usermin/mailbox/index.cgi line 86.
    Use of uninitialized value $mailbox::in{"jump"} in pattern match (m//) at /usr/share/usermin/mailbox/index.cgi line 78.
    Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
    Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
    Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
    Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
    Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
    Use of uninitialized value in numeric eq (==) at /usr/share/usermin/mailbox/index.cgi line 30.
    Use of uninitialized value $mailbox::userconfig{"mailboxes"} in split at ./mailbox-lib.pl line 601.
    Use of uninitialized value $mailbox::userconfig{"mailboxes"} in split at /usr/share/usermin/mailbox/mailbox-lib.pl line 601.
    readline() on closed filehandle $ADDRESS at /usr/share/usermin/mailbox/mailbox-lib.pl line 166.
    readline() on closed filehandle $ADDRESS at /usr/share/usermin/mailbox/mailbox-lib.pl line 166.
    Use of uninitialized value $mailbox::userconfig{"ham_buttons"} in pattern match (m//) at ./mailbox-lib.pl line 1825.
    Use of uninitialized value $qstart in concatenation (.) or string at ./mailbox-lib.pl line 2073.
    Use of uninitialized value $qstart in concatenation (.) or string at ./mailbox-lib.pl line 2073.
    Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
    Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2056.
    Use of uninitialized value $sortfield in string eq at ./mailbox-lib.pl line 2055.
    Use of uninitialized value in concatenation (.) or string at ./mailbox-lib.pl line 2060.

    Can't really decipher what my log is reporting.

    Please advise when you got a sec. Thank you!

     
  • Jamie Cameron

    Jamie Cameron - 2022-11-03

    Are there lines for that user specifically in /var/log/auth.log ?

     
  • Vic Mbaz

    Vic Mbaz - 2022-11-03

    No... only thing I keep seeing in that log are hacking attempts from foreign entities on my system as seen below:

    Nov 3 23:46:59 host saslauthd[162]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:46:59 host saslauthd[162]: : auth failure: [user=thunder] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:46:59 host saslauthd[164]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:46:59 host saslauthd[164]: : auth failure: [user=patty@brandwatchmail.info] [service=smtp] [realm=brandwatchmail.info] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:00 host saslauthd[159]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:00 host saslauthd[159]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:00 host saslauthd[163]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:00 host saslauthd[163]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:00 host saslauthd[161]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:00 host saslauthd[161]: : auth failure: [user=roxie] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:02 host saslauthd[159]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:02 host saslauthd[159]: : auth failure: [user=bibliothek] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:02 host saslauthd[162]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:02 host saslauthd[162]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:02 host saslauthd[164]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:02 host saslauthd[164]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:02 host saslauthd[163]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:02 host saslauthd[163]: : auth failure: [user=isabelle@brandwatchmail.info] [service=smtp] [realm=brandwatchmail.info] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:03 host saslauthd[161]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:03 host saslauthd[161]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:04 host saslauthd[162]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:04 host saslauthd[162]: : auth failure: [user=nt] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:04 host saslauthd[164]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:04 host saslauthd[164]: : auth failure: [user=louie] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:04 host saslauthd[161]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:04 host saslauthd[161]: : auth failure: [user=nod32] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:05 host saslauthd[159]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:05 host saslauthd[159]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:05 host saslauthd[163]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:05 host saslauthd[163]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:05 host saslauthd[162]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:05 host saslauthd[162]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:07 host saslauthd[164]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:07 host saslauthd[164]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:07 host saslauthd[159]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:07 host saslauthd[159]: : auth failure: [user=uclickaccesscontrol] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:07 host saslauthd[163]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:07 host saslauthd[163]: : auth failure: [user=chloe] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:07 host saslauthd[162]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:07 host saslauthd[162]: : auth failure: [user=apicolombia] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:08 host saslauthd[161]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:08 host saslauthd[161]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:09 host saslauthd[159]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:09 host saslauthd[159]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:09 host saslauthd[164]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:09 host saslauthd[164]: : auth failure: [user=robin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:10 host saslauthd[163]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:10 host saslauthd[163]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:10 host saslauthd[161]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:10 host saslauthd[161]: : auth failure: [user=123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:11 host saslauthd[162]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:11 host saslauthd[162]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:11 host saslauthd[159]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:11 host saslauthd[159]: : auth failure: [user=dg] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:12 host saslauthd[164]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:12 host saslauthd[164]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:12 host saslauthd[161]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:12 host saslauthd[161]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:12 host saslauthd[163]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:12 host saslauthd[163]: : auth failure: [user=grzegorzb] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:12 host saslauthd[162]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:12 host saslauthd[162]: : auth failure: [user=qp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:13 host saslauthd[159]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:13 host saslauthd[159]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:14 host saslauthd[164]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:14 host saslauthd[164]: : auth failure: [user=shelia@brandwatchmail.info] [service=smtp] [realm=brandwatchmail.info] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:14 host saslauthd[163]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:14 host saslauthd[163]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:14 host saslauthd[161]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:14 host saslauthd[161]: : auth failure: [user=lesley@brandwatchmail.info] [service=smtp] [realm=brandwatchmail.info] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:15 host saslauthd[162]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:15 host saslauthd[162]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:15 host saslauthd[159]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:15 host saslauthd[159]: : auth failure: [user=aitor] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:15 host saslauthd[164]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:15 host saslauthd[164]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:16 host saslauthd[163]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:16 host saslauthd[163]: : auth failure: [user=transfer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:16 host saslauthd[161]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:16 host saslauthd[161]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:16 host saslauthd[162]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:16 host saslauthd[162]: : auth failure: [user=mooney] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:17 host saslauthd[164]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:17 host saslauthd[164]: : auth failure: [user=sSearch] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:17 host saslauthd[161]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:17 host saslauthd[161]: : auth failure: [user=caas] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:18 host saslauthd[159]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:18 host saslauthd[159]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:19 host saslauthd[163]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:19 host saslauthd[163]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:20 host saslauthd[162]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:20 host saslauthd[162]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:20 host saslauthd[164]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:20 host saslauthd[164]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:20 host saslauthd[159]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:20 host saslauthd[159]: : auth failure: [user=transmission] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]
    Nov 3 23:47:22 host saslauthd[161]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:22 host saslauthd[161]: pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
    Nov 3 23:47:22 host saslauthd[163]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure
    Nov 3 23:47:22 host saslauthd[163]: : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]

    Please advise. Thank you

     
  • Ilia

    Ilia - 2022-11-04

    Nov 3 23:47:00 host saslauthd[159]: pam_unix(smtp:auth): check pass; user unknown
    Nov 3 23:47:20 host saslauthd[159]: : auth failure: [user=transmission] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]

    But the error is self explanatory? Does the user with which you're trying to login with exists? Check it on Webmin side in System ⇾ Users and Groups module.

    If the user exists, perhaps changing the password for a use or restarting saslauthd service would solve it ..

    By the way, I would suggest using Virtualmin. It automates a lot, making life for a regular user much much easier.

     
  • Vic Mbaz

    Vic Mbaz - 2022-11-04

    @iliajie I did as per your advise, "restarted saslauthd" in the terminal and even changed passwords for all email accounts created and to my surprise I can now login to all email accounts. I am very grateful to both yourself and @jcameron, don't know what the Virtualmin & Webmin universe will be without your wisdom and gift of discerning the nature of technical issue one is experiencing at any point in time. You guys are just geniuses!

    Thank you lots!!! :)

     

Log in to post a comment.

MongoDB Logo MongoDB