Authentication Problems¶

Troubleshooting login and authentication issues.

Quick Diagnostics¶

# Check authentication log
sudo tail -f /var/log/mailborder/auth.log

# Check user status
sudo mb-admin-list

# Check locked accounts
sudo mb-admin-list --locked

Invalid Credentials¶

Check user exists:

sudo mb-admin-list | grep user@example.com

Reset password:

sudo mb-admin-reset --email user@example.com

Check account enabled:

sudo mb-admin-list | grep user@example.com
# Status should show "enabled"

Account Locked¶

Check if locked:

sudo mb-admin-list --locked

Unlock account:

sudo mb-admin-unlock --email user@example.com

Reset failed attempts:

sudo mysql mailborder -e "UPDATE mb_users SET failed_login_attempts = 0 WHERE email = 'user@example.com'"

Account Disabled¶

Enable account:

sudo mb-admin-enable --email user@example.com

2FA Issues¶

Lost 2FA Device¶

Use backup code: User should have backup codes from 2FA setup.

Disable 2FA (emergency):

sudo mb-2fa-disable --email user@example.com

Re-enable after access:

sudo mb-2fa-enable --email user@example.com

Invalid 2FA Code¶

Check time sync:

timedatectl
# Time must be accurate for TOTP

Sync time if needed:

sudo timedatectl set-ntp true
sudo systemctl restart systemd-timesyncd

Verify TOTP:

sudo mb-2fa-verify --email user@example.com --code 123456

Passkey Issues¶

Cannot Use Passkey¶

List passkeys:

sudo mb-passkey-list --email user@example.com

Remove old passkey:

sudo mb-passkey-remove --email user@example.com --credential-id <id>

Browser compatibility: - Chrome/Edge: Full support - Firefox: Full support - Safari: macOS 13+, iOS 16+

Session Issues¶

Session Expires Immediately¶

Check Redis:

redis-cli ping

Restart Redis:

sudo systemctl restart redis-server

Check session timeout:

sudo mb-config get authentication.session_timeout

Increase timeout:

sudo mb-config set authentication.session_timeout 7200  # 2 hours

"Invalid Session" Error¶

Clear sessions:

redis-cli FLUSHDB

User clears browser cookies: - Chrome: Settings → Privacy → Clear browsing data - Firefox: Options → Privacy → Clear Data

Password Issues¶

Password Requirements¶

Default requirements: - Minimum 12 characters - Uppercase letter - Lowercase letter - Number - Special character

Check requirements:

sudo mb-config show authentication | grep password

Adjust if needed:

sudo mb-config set authentication.password_min_length 8

Password Reset Not Working¶

Check email delivery:

sudo tail -f /var/log/mail.log | grep "password reset"

Manual reset:

sudo mb-admin-reset --email user@example.com
# Provides temporary password

Brute Force Protection¶

Legitimate User Locked Out¶

Check guardian status:

sudo mb-guardian-status

Whitelist user's IP:

sudo mb-guardian-whitelist 203.0.113.50 --reason "Office IP"

Adjust thresholds:

sudo mb-config set guardian.max_failed_logins 10
sudo mb-config set guardian.lockout_duration 180  # 3 minutes

Database Authentication Issues¶

Test database connection:

sudo mysql -u mailborder -p mailborder -e "SELECT * FROM mb_users LIMIT 1"

Check credentials file:

sudo cat /etc/mailborder/database.conf

Fix permissions:

sudo chown root:mailborder /etc/mailborder/database.conf
sudo chmod 640 /etc/mailborder/database.conf