Unable to do some operations after password change on user with admin rights

Support
, ,
1

What type of hardware are you using: Internet Cube with VPN
What YunoHost version are you running: 12.1.40.1
How are you able to access your server: The webadmin
SSH
Direct access via physical keyboard/screen
Are you in a special context or did you perform specific tweaking on your YunoHost instance ?: Not really

Describe your issue

What I’m trying to do: change password and then be able to connect with my yunohost user on terminal (screen, ssh password) and still be able to use all the apps as usual. (my user has admin rights for yunohost)
To achieve that I tried :

  • CLI commands to change user password
  • Web interface as the user to change it
  • admin web to change it

What happens:

  • impossible to connect in direct screen terminal with my username (whereas my other user that I connect with to have backup admin rights still connects with its password)
  • I’m able to connect to admin/sso panel in yunohost web but I had to increase timeout value for connection to make it work at some point.
  • I’m able to connect with ssh WITH CERTIFICATE but not able to use sudo once in.
  • I’m able to use all the apps EXCEPT the outgoing email server, where it says I have authentication failure with timeout issue.

Not being able to send emails is really painful, on top of that not being able to manage the server from ssh with my user and sudo too

Share relevant logs or error messages

https://paste.yunohost.org/raw/tofilohesi

2

Can you run yunohost tools regen-conf --dry-run(or focusing only on slapd nsswitch nslcd) and ssh youruser@domain.tld -vv
It won’t solve your issue but may help with debugging.

These threads also may help :

3 
yunohost tools regen-conf --dry-run

gives :

dnsmasq: 
  applied: 
    /etc/resolv.dnsmasq.conf: 
      status: updated
  pending: 
yunohost: 
  applied: 
  pending: 
    /etc/cron.daily/node_update: 
      status: unmanaged

specific focus on slapd, nsswitch, nslcd don’t do any output.

For the following: ssh youruser@domain.tld -vv should I unable the password ssh or leave the certificate connection?

4

What ssh client are you using?

Also check the output of these commands :

yunohost user group info admins

yunohost user permission info ssh

yunohost user permission info mail
5

Openssh I guess is the default one everywhere for me with endeavorOS, fedora and debian?

Those return my user as part of each

6

I tried that but don’t know how to share the logs removing any personal stuff.

I’m able to connect (because cert/keys/id) but once in, if I try to sudo and put the same pwd that connects me in the web interface I get a incorrect password attempt email from server.

7

It’s not the terminal. Like knosole, xfce terminal. I have read that some ssh clients alter special characters leading to authentication failure when using password

8

Ah, here it’s gnome terminal + picocom as I have access to the server, or termux on the smartphone, or gnome terminal or xfce terminal on endeavor. All give same result, and I can sudo fine on my other x64 server

9

Tried the parameters here :

And it helped with the sudo

10

Ok applied also this :

And it solved the dovecot timeout (?) thing and I can now send emails!

Thanks that solves it all :smiley:

11

Summary of the 2 links above :

add to this file here /etc/nslcd.conf the following :

bind_timelimit 60
timelimit 15
threads 3

and to this file /etc/dovecot/yunohost.d/post-ext.conf the following :
auth_cache_size = 10M

for more information, refer to the links from @otm33 :

BIG thanks to @otm33 and @jarod5001 for their help!