"Zombie User" after deleting one user

[capote (Marko)]

nothing different

[m.traeumner (Michael Träumner)]

Did you also look at messages log?

[capote (Marko)]

no, only mail.log.

Here the relevant entries:

Nov  2 14:17:29 ns-srv01 cockpit-ws: New connection to session from 87.xxx.yyy.zzz
Nov  2 14:17:29 ns-srv01 dbus[757]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service'
Nov  2 14:17:29 ns-srv01 systemd: Starting Time & Date Service...
Nov  2 14:17:29 ns-srv01 dbus[757]: [system] Successfully activated service 'org.freedesktop.timedate1'
Nov  2 14:17:29 ns-srv01 systemd: Started Time & Date Service.
Nov  2 14:17:29 ns-srv01 dbus[757]: [system] Activating via systemd: service name='org.freedesktop.realmd' unit='realmd.service'
Nov  2 14:17:29 ns-srv01 systemd: Starting Realm and Domain Configuration...
Nov  2 14:17:29 ns-srv01 dbus[757]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service'
Nov  2 14:17:29 ns-srv01 systemd: Starting Hostname Service...
Nov  2 14:17:29 ns-srv01 dbus[757]: [system] Successfully activated service 'org.freedesktop.hostname1'
Nov  2 14:17:29 ns-srv01 dbus[757]: [system] Successfully activated service 'org.freedesktop.realmd'
Nov  2 14:17:29 ns-srv01 systemd: Started Hostname Service.
Nov  2 14:17:29 ns-srv01 systemd: Started Realm and Domain Configuration.
Nov  2 14:17:30 ns-srv01 cockpit-bridge: No entry for terminal type "unknown";
Nov  2 14:17:30 ns-srv01 cockpit-bridge: using dumb terminal settings.
Nov  2 14:18:22 ns-srv01 cockpit-ws: New connection to session from 87.xxx.yyy.zzz
Nov  2 14:18:26 ns-srv01 cockpit-bridge: No entry for terminal type "unknown";
Nov  2 14:18:26 ns-srv01 cockpit-bridge: using dumb terminal settings.
Nov  2 14:18:50 ns-srv01 cockpit-bridge: No entry for terminal type "unknown";
Nov  2 14:18:50 ns-srv01 cockpit-bridge: using dumb terminal settings.
Nov  2 14:18:50 ns-srv01 /usr/libexec/nethserver/api/nethserver-mail/pseudonym/create[15616]: /var/lib/nethserver/db/accounts: OLD user01@mydomain.tld=(undefined)
Nov  2 14:18:50 ns-srv01 /usr/libexec/nethserver/api/nethserver-mail/pseudonym/create[15616]: /var/lib/nethserver/db/accounts: NEW user01@mydomain.tld=pseudonym|Access|public|Account|user01@mydomain.tld|de|Description|
Nov  2 14:18:50 ns-srv01 create: Event: pseudonym-create
Nov  2 14:18:51 ns-srv01 create: expanding /etc/postfix/internal_access
Nov  2 14:18:51 ns-srv01 create: expanding /etc/postfix/login_maps
Nov  2 14:18:51 ns-srv01 create: expanding /etc/postfix/virtual
Nov  2 14:18:51 ns-srv01 create: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [0.125078]
Nov  2 14:18:51 ns-srv01 create: Action: /etc/e-smith/events/pseudonym-create/S30nethserver-mail-postmap-update SUCCESS [0.084044]
Nov  2 14:18:51 ns-srv01 create: Event: pseudonym-create SUCCESS
Nov  2 14:19:14 ns-srv01 cockpit-ws: WebSocket from 87.xxx.yyy.zzz for session closed
Nov  2 14:19:15 ns-srv01 cockpit-ws: New connection to session from 87.xxx.yyy.zzz
Nov  2 14:20:04 ns-srv01 cockpit-ws: WebSocket from 87.xxx.yyy.zzz for session closed
Nov  2 14:20:04 ns-srv01 cockpit-ws: New connection to session from 87.xxx.yyy.zzz
Nov  2 14:20:05 ns-srv01 cockpit-bridge: No entry for terminal type "unknown";
Nov  2 14:20:05 ns-srv01 cockpit-bridge: using dumb terminal settings.
Nov  2 14:20:14 ns-srv01 /usr/libexec/nethserver/api/nethserver-mail/pseudonym/delete[16405]: /var/lib/nethserver/db/accounts: DELETE user01@mydomain.tld=pseudonym|Access|public|Account|user01@mydomain.tld|Description|
Nov  2 14:20:14 ns-srv01 delete: Event: pseudonym-delete
Nov  2 14:20:14 ns-srv01 delete: expanding /etc/postfix/internal_access
Nov  2 14:20:15 ns-srv01 delete: expanding /etc/postfix/login_maps
Nov  2 14:20:15 ns-srv01 delete: expanding /etc/postfix/virtual
Nov  2 14:20:15 ns-srv01 delete: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [0.125892]
Nov  2 14:20:15 ns-srv01 delete: Action: /etc/e-smith/events/pseudonym-delete/S30nethserver-mail-postmap-update SUCCESS [0.069905]
Nov  2 14:20:15 ns-srv01 delete: Event: pseudonym-delete SUCCESS
Nov  2 14:20:17 ns-srv01 cockpit-ws: WebSocket from 87.xxx.yyy.zzz for session closed
Nov  2 14:20:18 ns-srv01 dbus[757]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service'
Nov  2 14:20:18 ns-srv01 systemd: Starting Hostname Service...
Nov  2 14:20:18 ns-srv01 dbus[757]: [system] Successfully activated service 'org.freedesktop.hostname1'
Nov  2 14:20:18 ns-srv01 systemd: Started Hostname Service.
Nov  2 14:20:18 ns-srv01 cockpit-bridge: No entry for terminal type "unknown";
Nov  2 14:20:18 ns-srv01 cockpit-bridge: using dumb terminal settings.
Nov  2 14:20:21 ns-srv01 cockpit-bridge: No entry for terminal type "unknown";
Nov  2 14:20:21 ns-srv01 cockpit-bridge: using dumb terminal settings.
Nov  2 14:23:16 ns-srv01 cockpit-bridge: No entry for terminal type "unknown";
Nov  2 14:23:16 ns-srv01 cockpit-bridge: using dumb terminal settings.
Nov  2 14:23:17 ns-srv01 cockpit-bridge: No entry for terminal type "unknown";
Nov  2 14:23:17 ns-srv01 cockpit-bridge: using dumb terminal settings.
Nov  2 14:23:17 ns-srv01 esmith::event[17305]: Event: user-create user01 name surname /usr/libexec/openssh/sftp-server
Nov  2 14:23:17 ns-srv01 esmith::event[17305]: Action: /etc/e-smith/events/user-create/S04nethserver-directory-user-create SUCCESS [0.222542]
Nov  2 14:23:17 ns-srv01 esmith::event[17305]: Action: /etc/e-smith/events/actions/adjust-services SUCCESS [0.043159]
Nov  2 14:23:17 ns-srv01 esmith::event[17305]: [NOTICE] clearing sssd cache for user user01@mydomain.tld
Nov  2 14:23:17 ns-srv01 esmith::event[17305]: No cache object matched the specified search
Nov  2 14:23:17 ns-srv01 esmith::event[17305]: No cache object matched the specified search
Nov  2 14:23:17 ns-srv01 esmith::event[17305]: Action: /etc/e-smith/events/user-create/S90nethserver-sssd-clear-cache SUCCESS [0.022813]
Nov  2 14:23:17 ns-srv01 esmith::event[17305]: Event: user-create SUCCESS
Nov  2 14:23:17 ns-srv01 esmith::event[17316]: Event: group-modify mail <...list of mail addresses...> 
Nov  2 14:23:18 ns-srv01 esmith::event[17316]: Action: /etc/e-smith/events/group-modify/S15nethserver-directory-group-modify SUCCESS [0.087238]
Nov  2 14:23:18 ns-srv01 esmith::event[17316]: [NOTICE] clearing sssd cache for group mail@mydomain.tld
Nov  2 14:23:18 ns-srv01 esmith::event[17316]: [NOTICE] group members changed: clear users cache
Nov  2 14:23:18 ns-srv01 esmith::event[17316]: Action: /etc/e-smith/events/group-modify/S90nethserver-sssd-clear-cache SUCCESS [0.22927]
Nov  2 14:23:18 ns-srv01 esmith::event[17316]: Event: group-modify SUCCESS
Nov  2 14:23:18 ns-srv01 esmith::event[17330]: Event: password-policy-update florian no
Nov  2 14:23:18 ns-srv01 esmith::event[17330]: [NOTICE] clearing sssd cache for user user01@mydomain.tld
Nov  2 14:23:18 ns-srv01 esmith::event[17330]: No cache object matched the specified search
Nov  2 14:23:18 ns-srv01 esmith::event[17330]: No cache object matched the specified search
Nov  2 14:23:18 ns-srv01 esmith::event[17330]: Action: /etc/e-smith/events/password-policy-update/S10nethserver-sssd-clear-cache SUCCESS [0.019808]
Nov  2 14:23:18 ns-srv01 esmith::event[17330]: Action: /etc/e-smith/events/password-policy-update/S30nethserver-directory-password-policy SUCCESS [0.143038]
Nov  2 14:23:18 ns-srv01 esmith::event[17330]: Event: password-policy-update SUCCESS
Nov  2 14:23:18 ns-srv01 esmith::event[17338]: Event: password-modify user01@mydomain.tld /tmp/ng-fYpLgZ
Nov  2 14:23:18 ns-srv01 esmith::event[17338]: Action: /etc/e-smith/events/password-modify/S25password-set SUCCESS [0.004504]
Nov  2 14:23:18 ns-srv01 esmith::event[17338]: Password changed.
Nov  2 14:23:18 ns-srv01 esmith::event[17338]: Action: /etc/e-smith/events/password-modify/S30nethserver-directory-password-set SUCCESS [0.102074]
Nov  2 14:23:18 ns-srv01 esmith::event[17338]: Action: /etc/e-smith/events/password-modify/S40nethserver-directory-user-unlock SUCCESS [0.10278]
Nov  2 14:23:18 ns-srv01 esmith::event[17338]: Action: /etc/e-smith/events/password-modify/S90password-cleanup SUCCESS [0.008977]
Nov  2 14:23:18 ns-srv01 esmith::event[17338]: Event: password-modify SUCCESS
Nov  2 14:23:25 ns-srv01 cockpit-ws: New connection to session from 87.xxx.yyy.zzz
Nov  2 14:24:02 ns-srv01 cockpit-ws: WebSocket from 87.xxx.yyy.zzz for session closed
Nov  2 14:24:02 ns-srv01 cockpit-ws: New connection to session from 87.xxx.yyy.zzz
Nov  2 14:24:03 ns-srv01 cockpit-bridge: No entry for terminal type "unknown";
Nov  2 14:24:03 ns-srv01 cockpit-bridge: using dumb terminal settings.
Nov  2 14:24:17 ns-srv01 /usr/libexec/nethserver/api/nethserver-mail/pseudonym/update[17750]: /var/lib/nethserver/db/accounts: OLD user01@mydomain.tld=(undefined)
Nov  2 14:24:17 ns-srv01 /usr/libexec/nethserver/api/nethserver-mail/pseudonym/update[17750]: /var/lib/nethserver/db/accounts: NEW user01@mydomain.tld=user|MailAccess|public|MailForwardAddress||MailForwardKeepMessageCopy|no|MailForwardStatus|disabled|MailQuotaCustom|200|MailQuotaType|default|MailSpamRetentionStatus|disabled|MailSpamRetentionTime|15d|MailStatus|enabled
Nov  2 14:24:17 ns-srv01 /usr/libexec/nethserver/api/nethserver-mail/pseudonym/update[17750]: /var/lib/nethserver/db/accounts: OLD user01@mydomain.tld=user|MailAccess|public|MailForwardAddress||MailForwardKeepMessageCopy|no|MailForwardStatus|disabled|MailQuotaCustom|200|MailQuotaType|default|MailSpamRetentionStatus|disabled|MailSpamRetentionTime|15d|MailStatus|enabled
Nov  2 14:24:17 ns-srv01 /usr/libexec/nethserver/api/nethserver-mail/pseudonym/update[17750]: /var/lib/nethserver/db/accounts: NEW user01@mydomain.tld=user|MailAccess|private|MailForwardAddress||MailForwardKeepMessageCopy|no|MailForwardStatus|disabled|MailQuotaCustom|200|MailQuotaType|default|MailSpamRetentionStatus|disabled|MailSpamRetentionTime|15d|MailStatus|enabled
Nov  2 14:24:17 ns-srv01 update: Event: pseudonym-modify
Nov  2 14:24:17 ns-srv01 update: expanding /etc/postfix/internal_access
Nov  2 14:24:17 ns-srv01 update: expanding /etc/postfix/login_maps
Nov  2 14:24:17 ns-srv01 update: expanding /etc/postfix/virtual
Nov  2 14:24:17 ns-srv01 update: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [0.104481]
Nov  2 14:24:17 ns-srv01 update: Action: /etc/e-smith/events/pseudonym-modify/S30nethserver-mail-postmap-update SUCCESS [0.070221]
Nov  2 14:24:17 ns-srv01 update: Event: pseudonym-modify SUCCESS
Nov  2 14:24:22 ns-srv01 cockpit-ws: WebSocket from 87.xxx.yyy.zzz for session closed
Nov  2 14:24:22 ns-srv01 cockpit-ws: New connection to session from 87.xxx.yyy.zzz
Nov  2 14:26:09 ns-srv01 cockpit-ws: WebSocket from 87.xxx.yyy.zzz for session closed
Nov  2 14:26:10 ns-srv01 cockpit-bridge: No entry for terminal type "unknown";
Nov  2 14:26:10 ns-srv01 cockpit-bridge: using dumb terminal settings.
Nov  2 14:26:10 ns-srv01 dbus[757]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service'
Nov  2 14:26:10 ns-srv01 systemd: Starting Hostname Service...
Nov  2 14:26:10 ns-srv01 dbus[757]: [system] Successfully activated service 'org.freedesktop.hostname1'
Nov  2 14:26:10 ns-srv01 systemd: Started Hostname Service.
Nov  2 14:26:13 ns-srv01 cockpit-bridge: No entry for terminal type "unknown";
Nov  2 14:26:13 ns-srv01 cockpit-bridge: using dumb terminal settings.
Nov  2 14:26:21 ns-srv01 cockpit-bridge: No entry for terminal type "unknown";
Nov  2 14:26:21 ns-srv01 cockpit-bridge: using dumb terminal settings.
Nov  2 14:26:21 ns-srv01 esmith::event[18460]: Event: group-modify mail <...list of addresses...>
Nov  2 14:26:21 ns-srv01 esmith::event[18460]: Action: /etc/e-smith/events/group-modify/S15nethserver-directory-group-modify SUCCESS [0.102268]
Nov  2 14:26:21 ns-srv01 esmith::event[18460]: [NOTICE] clearing sssd cache for group mail@maidomain.tld
Nov  2 14:26:22 ns-srv01 esmith::event[18460]: [NOTICE] group members changed:

The user in webtop still exists.

[lucag (Luca Gasparini)]

Hi @capote,

@capote

My next suspicion would be WebTop, if WebTop would manage known users somewhere.

The user USER01 appears there in the suggested user list.

I can confirm that webtop has its own internal cronjob that every 2 minutes looks for any scheduled emails to be sent on all the IMAP accounts it has on its database.

If you delete a user on the server without first removing the profile on the webtop, what you reported happens:

You have two options to solve:

1. recreate the user on the server, access the webtop admin panel and remove the profile
   (for example)
   

only subsequently delete the user also from the server

2. access the database and deactivate the user profile of the xxxxx that no longer exists:

   su - postgres -c 'psql webtop5'
update core.users set enabled='f' where user_id='xxxxx';

   \q (to exit)

Let me know if you solve

[capote (Marko)]

Hi Luca, thank you for the hint. Unfortunately 2 minutes to late.
In the meantime I had completely deleted Webtop, including the database.
Since the documentation does not describe how to uninstall it, I based myself on this description:

WebTop 5 needs testing

@wbilger, what I’ve tried: Installed webtop4 removed webtop4 and some remnants installed webtop 5 got the same error (but logs might tie it to a different source cause, logs were showing password authentication error and non-existent sonicle role). What worked in my case was to delete webtop databases and sonicle user from postgresql, and reinstalling webtop5. Don’t know if devs will recommend against it, as I’m removing more things than really needed. WARNING - Don’t try this in productio…

#----removing webtop databases and its user----
su - postgres
dropdb webtop
dropdb webtop5
dropuser sonicle
exit

After reinstalling Webtop, I discovered the user management within Webtop at first sight; not before.
If I really missed it or if the previous installation had not been done correctly… I don’t know.

The former error is eliminated now.

Thank you very much.