Qmail servers are using NFS shares as mailbox storage.
Customer goes to to their POA CCP, tries to log into webmail using the link 'Open Web Mail' and sees the error message in the opened window:
Login failed. This page was disabled by security reason. You can log into webmail using POA CP or url like 'webmail.yourdomain'.
One of possible reasons is unsynchronized time between Qmail server and NFS server where mailboxes are stored.
You may identify this problem by trying to authenticate to Courier-Imap service. E.g. run the command like this on webmail server:
# telnet IP_OF_QMAIL_SERVER 143 00000000 LOGIN firstname.lastname@example.org mypassword
As the result you may see the similar output:
* OK [CAPABILITY IMAP4rev1 NAMESPACE] Courier-IMAP ready. Copyright 1998-2008 Double Precision, Inc. See COPYING for distribution information. 00000000 LOGIN email@example.com mypassword * BYE Clock skew detected. Check the clock on the file server
NO Error in IMAP command received by server.
This message means that time is different on Qmail server and on NFS server and webmail can not log into IMAP service.
Synchronize time on all Qmail and NFS servers using the utility 'ntpdate' (use some known NTP servers like time.nist.gov), e.g.:
# ntpdate 126.96.36.199 188.8.131.52 184.108.40.206 20 May 00:13:48 ntpdate: step time server 220.127.116.11 offset -191.476167 sec
In order to fix problem permanently either configure cron job on all involved servers to run the utility 'ntpdate' periodically (e.g. every 5 minutes) or configure NTP service on all servers. Use instructions from POA Deployment Guide to set up NTP service:
Log on to server by SSH
Ensure that NTP package is installed (install if necessary):
# rpm -qa | grep ntp-
Perform the following synchronization commands:
# echo "server time.nist.gov" > /etc/ntp.conf # chkconfig --level 2345 ntpd on # service ntpd stop # ntpdate time.nist.gov # service ntpd start