Search The ForumSearch   RegisterRegister  LoginLogin

AfterLogic WebMail Pro

 AfterLogic Forum : AfterLogic WebMail Pro
Subject Topic: Password incorrect Post ReplyPost New Topic
Author
Message << Prev Topic | Next Topic >>
petesky
Newbie
Newbie


Joined: 28 September 2009
Location: Austria
Online Status: Offline
Posts: 23
Posted: 28 September 2009 at 6:50am | IP Logged Quote petesky

Hello !

I have to setup the AL free version for a internal mail system (if this is ok). Running in debug mode i can see, that in PHP version the

<param name="mail_inc_pass">

Contains the hostadress instead of users password. Whats wrong ?
Back to Top View petesky's Profile Search for other posts by petesky
 
Andrew
AfterLogic Support
AfterLogic Support


Joined: 28 April 2006
Location: United States
Online Status: Offline
Posts: 1189
Posted: 28 September 2009 at 7:50am | IP Logged Quote Andrew

That's really strange. We've just re-tested it, everything works fine. Please make sure that you've specified correct data in your settings.

BTW, we don't provide free support for Lite version of AfterLogic WebMail. However, you may provide us with your settings.xml file, we'll take a look at settings of your login form.

Best regards,
Andrew
Back to Top View Andrew's Profile Search for other posts by Andrew
 
petesky
Newbie
Newbie


Joined: 28 September 2009
Location: Austria
Online Status: Offline
Posts: 23
Posted: 28 September 2009 at 8:35am | IP Logged Quote petesky

Hmm i just deleted this system because i found all information is stored outside root accessable in these xml files password for admin and mysql ?

Back to Top View petesky's Profile Search for other posts by petesky
 
Andrew
AfterLogic Support
AfterLogic Support


Joined: 28 April 2006
Location: United States
Online Status: Offline
Posts: 1189
Posted: 28 September 2009 at 8:56am | IP Logged Quote Andrew

Yes, the passwords are stored in plain text, but that's secure as the data folder and all its subfolders are protected with .htaccess file which doesn't allow accessing those files from web. Moreover, this is mentioned in the installation instructions.

Best regards,
Andrew
Back to Top View Andrew's Profile Search for other posts by Andrew
 
Andrew
AfterLogic Support
AfterLogic Support


Joined: 28 April 2006
Location: United States
Online Status: Offline
Posts: 1189
Posted: 28 September 2009 at 8:59am | IP Logged Quote Andrew

Also, for even better security, it's possible to move the settings and all data in that folder outside of web folder on your server.

Best regards,
Andrew
Back to Top View Andrew's Profile Search for other posts by Andrew
 
petesky
Newbie
Newbie


Joined: 28 September 2009
Location: Austria
Online Status: Offline
Posts: 23
Posted: 28 September 2009 at 9:11am | IP Logged Quote petesky

OK well i try install it again. htaccess may not secure enough. Btw. can you check what happen when password contains host instead pw ?
Back to Top View petesky's Profile Search for other posts by petesky
 
petesky
Newbie
Newbie


Joined: 28 September 2009
Location: Austria
Online Status: Offline
Posts: 23
Posted: 29 September 2009 at 1:21am | IP Logged Quote petesky

OK, i can see following problems:

1) I installed the PRO trial without key, this seems top be the first problem.

2) After installing i encounter wrong login from IP 186.9.6.150 also as PASS:

09/29/09 10:07:02 ID 2556 - POP3 connection to server...
09/29/09 10:07:02 ID 2556 - USER p.laengle\0D\0A
09/29/09 10:07:02 ID 2556 - +OK valid\0D\0A
09/29/09 10:07:02 ID 2556 - PASS 186.9.6.150\0D\0A
09/29/09 10:07:02 ID 2556 - -ERR Invalid Command\0D\0A

Why is someone trying to login from this IP adresse right after installation and why is always the ip in password field ?

3) The design and functionality is smooth and worth buying but not with these strange behaviors.
Back to Top View petesky's Profile Search for other posts by petesky
 
Andrew
AfterLogic Support
AfterLogic Support


Joined: 28 April 2006
Location: United States
Online Status: Offline
Posts: 1189
Posted: 29 September 2009 at 3:20am | IP Logged Quote Andrew

Quote:
1) I installed the PRO trial without key, this seems top be the first problem.


Do you need a trial key? If yes, you can request it from us through Helpdesk.

Quote:
2) After installing i encounter wrong login from IP 186.9.6.150 also as PASS:

Why is someone trying to login from this IP adresse right after installation and why is always the ip in password field ?


We have no idea why that happens. We've never heard about such issue before. This has never happened for hundreds of our clients and thousands of their users.

Who.is states that's someone from Rambla Republica de Mexico 6125. Does this info explain you anything?

If you think this caused by strange behavior of our product, please try to install it on another machine and check if the issue happens there.

Best regards,
Andrew
Back to Top View Andrew's Profile Search for other posts by Andrew
 
petesky
Newbie
Newbie


Joined: 28 September 2009
Location: Austria
Online Status: Offline
Posts: 23
Posted: 29 September 2009 at 3:55am | IP Logged Quote petesky

The install process is fine but the ip trying to login into the account came right up after installing it ?! Very strange.

The problem with wrong password field is still there. The server is an W32 not NIX system ?!
Back to Top View petesky's Profile Search for other posts by petesky
 
Andrew
AfterLogic Support
AfterLogic Support


Joined: 28 April 2006
Location: United States
Online Status: Offline
Posts: 1189
Posted: 29 September 2009 at 4:01am | IP Logged Quote Andrew

Quote:
The install process is fine but the ip trying to login into the account came right up after installing it ?! Very strange.


We have no idea why that happens. We've never heard about such issue before. This has never happened for hundreds of our clients and thousands of their users.

Who.is states that's someone from Rambla Republica de Mexico 6125. Does this info explain you anything?

If you think this caused by strange behavior of our product, please try to install it on another machine and check if the issue happens there.

Quote:
The problem with wrong password field is still there. The server is an W32 not NIX system ?!


Do you mean if you try to log in, you'll get the host in the password field? If so, please provide us with URL pointing to your WebMail Pro installation, a test account on your mail server and password to AdminPanel, we'll be able to investigate it directly.

Best regards,
Andrew
Back to Top View Andrew's Profile Search for other posts by Andrew
 
petesky
Newbie
Newbie


Joined: 28 September 2009
Location: Austria
Online Status: Offline
Posts: 23
Posted: 29 September 2009 at 4:19am | IP Logged Quote petesky

Hmm i just disabled the direct mode. Don't know why but now it works. I will try the system for a month and let my chiefs decide to use it or not. Thanks for help.
Back to Top View petesky's Profile Search for other posts by petesky
 
Andrew
AfterLogic Support
AfterLogic Support


Joined: 28 April 2006
Location: United States
Online Status: Offline
Posts: 1189
Posted: 29 September 2009 at 4:25am | IP Logged Quote Andrew

Do you mean disabling the direct mode resolves the issue with host in the password field?

Best regards,
Andrew
Back to Top View Andrew's Profile Search for other posts by Andrew
 
petesky
Newbie
Newbie


Joined: 28 September 2009
Location: Austria
Online Status: Offline
Posts: 23
Posted: 29 September 2009 at 5:41am | IP Logged Quote petesky

Hello - yes it seems so.

Another problem - it fetches only the first 10 mails from server and marks them as read. Is it possible to force fetching pop again (there are about 300 on server left but they wont be fetched).
Back to Top View petesky's Profile Search for other posts by petesky
 
Andrew
AfterLogic Support
AfterLogic Support


Joined: 28 April 2006
Location: United States
Online Status: Offline
Posts: 1189
Posted: 29 September 2009 at 6:19am | IP Logged Quote Andrew

1. Please log into your account the issue with 10 messages happens on.
2. Enable logging in AdminPanel / WebMail / Debug Settings / Enable Logging.
3. Press "Check Mail" button in your account (i.e. reproduce the issue).
4. Disable logging.
5. Provide us with the log file for examination.

It's important to make sure the log file doesn't contain irrelevant records, that's why we recommend enabling it, reproducing the issue and immediately disabling.

Best regards,
Andrew
Back to Top View Andrew's Profile Search for other posts by Andrew
 
petesky
Newbie
Newbie


Joined: 28 September 2009
Location: Austria
Online Status: Offline
Posts: 23
Posted: 29 September 2009 at 6:41am | IP Logged Quote petesky

Hmm youre right - server responds only with:

[15:39:38.549] POP3 >>: STAT
[15:39:38.549] POP3 <<: +OK 10 259274
[15:39:38.549] POP3 >>: UIDL
[15:39:38.550] POP3 <<: +OK Unique-id listing follows
[15:39:38.550] POP3 <<: 1 350C24
[15:39:38.550] POP3 <<: 2 350C22
[15:39:38.550] POP3 <<: 3 350C21
[15:39:38.551] POP3 <<: 4 350C20
[15:39:38.551] POP3 <<: 5 350AC2
[15:39:38.551] POP3 <<: 6 350C1F
[15:39:38.551] POP3 <<: 7 350C1E
[15:39:38.551] POP3 <<: 8 350C1D
[15:39:38.552] POP3 <<: 9 350C1C
[15:39:38.552] POP3 <<: 10 350B25

The box has 355 mails at all but they seems to be fetched from complete different days.
Back to Top View petesky's Profile Search for other posts by petesky
 
petesky
Newbie
Newbie


Joined: 28 September 2009
Location: Austria
Online Status: Offline
Posts: 23
Posted: 29 September 2009 at 6:44am | IP Logged Quote petesky

OK sorry ; misconfig of server - i limited to 10 messages per session. Sry.
Back to Top View petesky's Profile Search for other posts by petesky
 
petesky
Newbie
Newbie


Joined: 28 September 2009
Location: Austria
Online Status: Offline
Posts: 23
Posted: 02 October 2009 at 12:29am | IP Logged Quote petesky

Hello again !

I encounter the following problem:

The user can only collect mail if username / password is the same as SMTP username / password otherwise i get an error that authentication is wrong ?!

Can this happen because of login type ?
Back to Top View petesky's Profile Search for other posts by petesky
 
Andrew
AfterLogic Support
AfterLogic Support


Joined: 28 April 2006
Location: United States
Online Status: Offline
Posts: 1189
Posted: 02 October 2009 at 4:02am | IP Logged Quote Andrew

Yes, that's correct, but the credentials should match with ones on POP3/IMAP server (depends on account type), not SMTP. What's wrong with this?

If you create the following Gmail account:

user: mytestaccount@gmail.com
password: mypassword

You'll be able to use these credentials to log into Gmail's web interface as well as through Gmail's POP3/IMAP. The same for AfterLogic WebMail.

Best regards,
Andrew
Back to Top View Andrew's Profile Search for other posts by Andrew
 
petesky
Newbie
Newbie


Joined: 28 September 2009
Location: Austria
Online Status: Offline
Posts: 23
Posted: 02 October 2009 at 7:14am | IP Logged Quote petesky

I tought, that SMTP user/login is used to fetch/send mails and user/login is used by database to auth user in webmail.

Another suggestion - the option to fetch the mails right after login can cause the user to wait a while before accessing the system (when user has a lot of mails). The other option is let the user login first then he has to fetch manually.

So is there a setting to automatic fetch after login without pressing Check Mailbox ?

Back to Top View petesky's Profile Search for other posts by petesky
 
petesky
Newbie
Newbie


Joined: 28 September 2009
Location: Austria
Online Status: Offline
Posts: 23
Posted: 02 October 2009 at 10:34am | IP Logged Quote petesky

Btw. it seems that there is a bug introduced in PHP 5.2.11 (on W2K3) which breaks SMTP classes. See http://bugs.php.net/bug.php?id=49706

So may this breaks also some functionality here.
Back to Top View petesky's Profile Search for other posts by petesky
 
Andrew
AfterLogic Support
AfterLogic Support


Joined: 28 April 2006
Location: United States
Online Status: Offline
Posts: 1189
Posted: 05 October 2009 at 12:06am | IP Logged Quote Andrew

Quote:
I tought, that SMTP user/login is used to fetch/send mails and user/login is used by database to auth user in webmail.


Having two separate passwords might confuse users.

Quote:
So is there a setting to automatic fetch after login without pressing Check Mailbox ?


This is not so simple as it looks. Because requests within the same web session (from the same client) are processed by web server consecutively, automatic mail check may significantly degrade UI response time.

Just imagine, you're filtering your mailbox (briefly viewing each message, deleting some messages) and automatic mail check starts. You'll be not able to continue filtering until it gets completed. This'd be annoying.

However, we're considering implementing this option in future versions of the product.

Quote:
Btw. it seems that there is a bug introduced in PHP 5.2.11 (on W2K3) which breaks SMTP classes. See http://bugs.php.net/bug.php?id=49706

So may this breaks also some functionality here.


Thanks for the info, we'll check it.

Best regards,
Andrew
Back to Top View Andrew's Profile Search for other posts by Andrew
 
petesky
Newbie
Newbie


Joined: 28 September 2009
Location: Austria
Online Status: Offline
Posts: 23
Posted: 22 October 2009 at 12:44am | IP Logged Quote petesky

As for your notice - i just buyed the 10 users PHP version (order xxxx575). Thx for help - software works so far with PHP 5.2.12 DEV.
Back to Top View petesky's Profile Search for other posts by petesky
 

If you wish to post a reply to this topic you must first login
If you are not already registered you must first register

  Post ReplyPost New Topic
Printable version Printable version

Forum Jump

Powered by Web Wiz Forums version 7.9
Copyright ©2001-2004 Web Wiz Guide