[GH-ISSUE #3787] Radicale with other app: Permission Denied #1908

Closed
opened 2026-02-27 11:19:50 +03:00 by kerem · 17 comments
Owner

Originally created by @FutureCow on GitHub (Nov 10, 2025).
Original GitHub issue: https://github.com/modoboa/modoboa/issues/3787

Using Installer to install 2.6.2 on Debian 13

When I use the webui for the mail/calendar everything is working nice. When i try to add the calendar inside Thunderbird (or any other caldav client), I get a permission denied.

[2025-11-10 10:02:08 +0100] [640/Thread-17 (process_request_thread)] [INFO] PROPFIND request for '/user@example.com/test' with depth '0' received from 127.0.0.1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1'
[2025-11-10 10:02:09 +0100] [640/Thread-17 (process_request_thread)] [INFO] Authentication request (dovecot): 'user@example.com'
[2025-11-10 10:02:14 +0100] [640/Thread-17 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: timed out
[2025-11-10 10:02:14 +0100] [640/Thread-17 (process_request_thread)] [WARNING] Failed login attempt from 127.0.0.1 (forwarded for '2a0d::'): 'user@example.com' (radicale_modoboa_auth_oauth2)
[2025-11-10 10:02:14 +0100] [640/Thread-17 (process_request_thread)] [INFO] PROPFIND response status for '/user@example.com/test' with depth '0' in 6.296 seconds: 401 Unauthorized

Everything is setup as: https://modoboa.readthedocs.io/en/stable/manual_installation/radicale.html
the section inside 10-master.conf was already there.

My radicale config:

[server]
hosts = 0.0.0.0:5232,[::]:5232
[encoding]
[auth]
type = radicale_modoboa_auth_oauth2
oauth2_introspection_endpoint = https://radicale:[user-id]@mail.example.com/api/o/introspect/
dovecot_socket = /run/dovecot/auth-radicale
[rights]
type = from_file
file = /etc/radicale/rights
[storage]
filesystem_folder = /srv/radicale/collections
[web]
type = none
[logging]
[headers]

I don't see anything in the dovecot logs

Originally created by @FutureCow on GitHub (Nov 10, 2025). Original GitHub issue: https://github.com/modoboa/modoboa/issues/3787 Using Installer to install 2.6.2 on Debian 13 When I use the webui for the mail/calendar everything is working nice. When i try to add the calendar inside Thunderbird (or any other caldav client), I get a permission denied. ``` [2025-11-10 10:02:08 +0100] [640/Thread-17 (process_request_thread)] [INFO] PROPFIND request for '/user@example.com/test' with depth '0' received from 127.0.0.1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1' [2025-11-10 10:02:09 +0100] [640/Thread-17 (process_request_thread)] [INFO] Authentication request (dovecot): 'user@example.com' [2025-11-10 10:02:14 +0100] [640/Thread-17 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: timed out [2025-11-10 10:02:14 +0100] [640/Thread-17 (process_request_thread)] [WARNING] Failed login attempt from 127.0.0.1 (forwarded for '2a0d::'): 'user@example.com' (radicale_modoboa_auth_oauth2) [2025-11-10 10:02:14 +0100] [640/Thread-17 (process_request_thread)] [INFO] PROPFIND response status for '/user@example.com/test' with depth '0' in 6.296 seconds: 401 Unauthorized ``` Everything is setup as: https://modoboa.readthedocs.io/en/stable/manual_installation/radicale.html the section inside 10-master.conf was already there. My radicale config: ``` [server] hosts = 0.0.0.0:5232,[::]:5232 [encoding] [auth] type = radicale_modoboa_auth_oauth2 oauth2_introspection_endpoint = https://radicale:[user-id]@mail.example.com/api/o/introspect/ dovecot_socket = /run/dovecot/auth-radicale [rights] type = from_file file = /etc/radicale/rights [storage] filesystem_folder = /srv/radicale/collections [web] type = none [logging] [headers] ``` I don't see anything in the dovecot logs
kerem closed this issue 2026-02-27 11:19:50 +03:00
Author
Owner

@tonioo commented on GitHub (Nov 12, 2025):

How did you configure calendar access?

<!-- gh-comment-id:3522462944 --> @tonioo commented on GitHub (Nov 12, 2025): How did you configure calendar access?
Author
Owner

@FutureCow commented on GitHub (Nov 12, 2025):

Just the way the installer configured it. So it's using Dovecot/oath2?
Is there anything else I need to do than this: https://modoboa.readthedocs.io/en/stable/manual_installation/radicale.html

<!-- gh-comment-id:3523584905 --> @FutureCow commented on GitHub (Nov 12, 2025): Just the way the installer configured it. So it's using Dovecot/oath2? Is there anything else I need to do than this: https://modoboa.readthedocs.io/en/stable/manual_installation/radicale.html
Author
Owner

@tonioo commented on GitHub (Nov 13, 2025):

I'm talking about your client software. Are you trying a user/password authentication?

<!-- gh-comment-id:3526119563 --> @tonioo commented on GitHub (Nov 13, 2025): I'm talking about your client software. Are you trying a user/password authentication?
Author
Owner

@FutureCow commented on GitHub (Nov 13, 2025):

Sorry, Yes using email as username and the password that belongs to that user's email.

<!-- gh-comment-id:3526157330 --> @FutureCow commented on GitHub (Nov 13, 2025): Sorry, Yes using email as username and the password that belongs to that user's email.
Author
Owner

@tonioo commented on GitHub (Nov 13, 2025):

Have you checked if the /run/dovecot/auth-radicale exists and has proper permissions?

<!-- gh-comment-id:3526405562 --> @tonioo commented on GitHub (Nov 13, 2025): Have you checked if the /run/dovecot/auth-radicale exists and has proper permissions?
Author
Owner

@FutureCow commented on GitHub (Nov 13, 2025):

It's there:

srw-rw---- 1 radicale radicale 0 Nov 10 11:04 auth-radicale

after removing the file and restaring dovecot/radicale:

srw-rw-rw- 1 radicale radicale 0 Nov 13 17:00 auth-radicale

this are the error inside radicale:

[2025-11-13 17:17:28 +0100] [739693/Thread-49 (process_request_thread)] [INFO] GET request for '/user@example.nl/test' received from 127.0.0.1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1'
[2025-11-13 17:17:29 +0100] [739693/Thread-49 (process_request_thread)] [INFO] Authentication request (dovecot): 'user@example.nl'
[2025-11-13 17:17:34 +0100] [739693/Thread-49 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: timed out
[2025-11-13 17:17:34 +0100] [739693/Thread-49 (process_request_thread)] [WARNING] Failed login attempt from 127.0.0.1 (forwarded for '2a0d::'): 'user@example.nl' (radicale_modoboa_auth_oauth2)
[2025-11-13 17:17:35 +0100] [739693/Thread-49 (process_request_thread)] [INFO] GET response status for '/user@example.nl/test' in 6.298 seconds: 401 Unauthorized
[2025-11-13 17:17:35 +0100] [739693/Thread-50 (process_request_thread)] [INFO] GET request for '/user@example.nl/test' received from ::1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1'
[2025-11-13 17:17:35 +0100] [739693/Thread-50 (process_request_thread)] [INFO] Authentication request (dovecot): 'user@example.nl'
[2025-11-13 17:17:40 +0100] [739693/Thread-50 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: timed out
[2025-11-13 17:17:40 +0100] [739693/Thread-50 (process_request_thread)] [WARNING] Failed login attempt from ::1 (forwarded for '2a0d::'): 'user@example.nl' (radicale_modoboa_auth_oauth2)
[2025-11-13 17:17:41 +0100] [739693/Thread-50 (process_request_thread)] [INFO] GET response status for '/user@example.nl/test' in 6.345 seconds: 401 Unauthorized
[2025-11-13 17:17:41 +0100] [739693/Thread-51 (process_request_thread)] [INFO] GET request for '/user@example.nl/test' received from 127.0.0.1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1'
[2025-11-13 17:17:41 +0100] [739693/Thread-51 (process_request_thread)] [INFO] Access to '/user@example.nl/test' denied for anonymous user
[2025-11-13 17:17:41 +0100] [739693/Thread-51 (process_request_thread)] [INFO] GET response status for '/user@example.nl/test' in 0.002 seconds: 401 Unauthorized
<!-- gh-comment-id:3528589185 --> @FutureCow commented on GitHub (Nov 13, 2025): It's there: `srw-rw---- 1 radicale radicale 0 Nov 10 11:04 auth-radicale` after removing the file and restaring dovecot/radicale: `srw-rw-rw- 1 radicale radicale 0 Nov 13 17:00 auth-radicale` this are the error inside radicale: ``` [2025-11-13 17:17:28 +0100] [739693/Thread-49 (process_request_thread)] [INFO] GET request for '/user@example.nl/test' received from 127.0.0.1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1' [2025-11-13 17:17:29 +0100] [739693/Thread-49 (process_request_thread)] [INFO] Authentication request (dovecot): 'user@example.nl' [2025-11-13 17:17:34 +0100] [739693/Thread-49 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: timed out [2025-11-13 17:17:34 +0100] [739693/Thread-49 (process_request_thread)] [WARNING] Failed login attempt from 127.0.0.1 (forwarded for '2a0d::'): 'user@example.nl' (radicale_modoboa_auth_oauth2) [2025-11-13 17:17:35 +0100] [739693/Thread-49 (process_request_thread)] [INFO] GET response status for '/user@example.nl/test' in 6.298 seconds: 401 Unauthorized [2025-11-13 17:17:35 +0100] [739693/Thread-50 (process_request_thread)] [INFO] GET request for '/user@example.nl/test' received from ::1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1' [2025-11-13 17:17:35 +0100] [739693/Thread-50 (process_request_thread)] [INFO] Authentication request (dovecot): 'user@example.nl' [2025-11-13 17:17:40 +0100] [739693/Thread-50 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: timed out [2025-11-13 17:17:40 +0100] [739693/Thread-50 (process_request_thread)] [WARNING] Failed login attempt from ::1 (forwarded for '2a0d::'): 'user@example.nl' (radicale_modoboa_auth_oauth2) [2025-11-13 17:17:41 +0100] [739693/Thread-50 (process_request_thread)] [INFO] GET response status for '/user@example.nl/test' in 6.345 seconds: 401 Unauthorized [2025-11-13 17:17:41 +0100] [739693/Thread-51 (process_request_thread)] [INFO] GET request for '/user@example.nl/test' received from 127.0.0.1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1' [2025-11-13 17:17:41 +0100] [739693/Thread-51 (process_request_thread)] [INFO] Access to '/user@example.nl/test' denied for anonymous user [2025-11-13 17:17:41 +0100] [739693/Thread-51 (process_request_thread)] [INFO] GET response status for '/user@example.nl/test' in 0.002 seconds: 401 Unauthorized ```
Author
Owner

@tonioo commented on GitHub (Nov 13, 2025):

Can you check if you can access mail.example.com from your server? (using ping)

<!-- gh-comment-id:3528665200 --> @tonioo commented on GitHub (Nov 13, 2025): Can you check if you can access mail.example.com from your server? (using ping)
Author
Owner

@FutureCow commented on GitHub (Nov 13, 2025):

I think it's related to this #3725
I use Caddy als Reverse Proxy, that pointing to the nginx of the mail server (port 80)

This is inside the nginx.log:

192.168.1.64 - radicale [13/Nov/2025:20:15:45 +0100] "POST /api/o/introspect/ HTTP/1.1" 200 17 "-" "python-requests/2.32.5"
2a0d:6e00:1d55:1:b044:8428:14a4:d977 - user@example.nl [13/Nov/2025:20:15:52 +0100] "PROPFIND /radicale/user@example.nl/test HTTP/2.0" 401 61 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1"

When i ping inside the mail server, i got a reply

<!-- gh-comment-id:3529027288 --> @FutureCow commented on GitHub (Nov 13, 2025): I think it's related to this #3725 I use Caddy als Reverse Proxy, that pointing to the nginx of the mail server (port 80) This is inside the nginx.log: ``` 192.168.1.64 - radicale [13/Nov/2025:20:15:45 +0100] "POST /api/o/introspect/ HTTP/1.1" 200 17 "-" "python-requests/2.32.5" 2a0d:6e00:1d55:1:b044:8428:14a4:d977 - user@example.nl [13/Nov/2025:20:15:52 +0100] "PROPFIND /radicale/user@example.nl/test HTTP/2.0" 401 61 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1" ``` When i ping inside the mail server, i got a reply
Author
Owner

@tonioo commented on GitHub (Nov 15, 2025):

Have you enabled debug logs in Radicale?

<!-- gh-comment-id:3536228873 --> @tonioo commented on GitHub (Nov 15, 2025): Have you enabled debug logs in Radicale?
Author
Owner

@FutureCow commented on GitHub (Nov 15, 2025):

DEBUG log from modoboa web:

[2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [INFO] REPORT request for '/user@example.nl/test' with depth '1' received from ::1 (forwarded for '192.168.1.64') using 'python-caldav/2.0.1'
[2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug
[2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale'
[2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test'
[2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching
[2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug
[2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl/test' doesn't match any section
[2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug
[2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl' doesn't match any section
[2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [INFO] Access to '/user@example.nl/test' denied for anonymous user
[2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Asking client for authentication
[2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug
[2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [INFO] REPORT response status for '/user@example.nl/test' with depth '1' in 0.001 seconds: 401 Unauthorized
[2025-11-15 10:49:43 +0100] [350661/Thread-30 (process_request_thread)] [INFO] REPORT request for '/user@example.nl/test' with depth '1' received from 127.0.0.1 (forwarded for '192.168.1.64') using 'python-caldav/2.0.1'
[2025-11-15 10:49:43 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug
[2025-11-15 10:49:43 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale'
[2025-11-15 10:49:43 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test'
[2025-11-15 10:49:43 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching
[2025-11-15 10:49:44 +0100] [350661/Thread-30 (process_request_thread)] [INFO] Successful login: 'user@example.nl' (radicale_modoboa_auth_oauth2)
[2025-11-15 10:49:44 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug
[2025-11-15 10:49:44 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] Rule 'user@example.nl':'user@example.nl/test' matches '.+':'{user}/[^/]+' from section 'calendars' permission 'RrWw'
[2025-11-15 10:49:44 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] Request content (XML): suppressed by config/option [logging] request_content_on_debug
[2025-11-15 10:49:44 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] Response content (XML): suppressed by config/option [logging] response_content_on_debug
[2025-11-15 10:49:44 +0100] [350661/Thread-30 (process_request_thread)] [INFO] REPORT response status for '/user@example.nl/test' with depth '1' in 1.020 seconds: 207 Multi-Status

Debug log from thrid party client:

[2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [INFO] HEAD request for '/user@example.nl/test' received from ::1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1'
[2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug
[2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale'
[2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test'
[2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching
[2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug
[2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl/test' doesn't match any section
[2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug
[2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl' doesn't match any section
[2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [INFO] Access to '/user@example.nl/test' denied for anonymous user
[2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Asking client for authentication
[2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug
[2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [INFO] HEAD response status for '/user@example.nl/test' in 0.001 seconds: 401 Unauthorized
[2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [INFO] PROPFIND request for '/user@example.nl/test' with depth '0' received from ::1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1'
[2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug
[2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale'
[2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test'
[2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching
[2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug
[2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl/test' doesn't match any section
[2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug
[2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl' doesn't match any section
[2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [INFO] Access to '/user@example.nl/test' denied for anonymous user
[2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Asking client for authentication
[2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug
[2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [INFO] PROPFIND response status for '/user@example.nl/test' with depth '0' in 0.001 seconds: 401 Unauthorized
[2025-11-15 10:48:02 +0100] [350661/Thread-18 (process_request_thread)] [INFO] HEAD request for '/user@example.nl/test' received from 127.0.0.1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1'
[2025-11-15 10:48:02 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug
[2025-11-15 10:48:02 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale'
[2025-11-15 10:48:02 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test'
[2025-11-15 10:48:02 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching
[2025-11-15 10:48:02 +0100] [350661/Thread-20 (process_request_thread)] [INFO] PROPFIND request for '/user@example.nl/test' with depth '0' received from 127.0.0.1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1'
[2025-11-15 10:48:02 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug
[2025-11-15 10:48:02 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale'
[2025-11-15 10:48:02 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test'
[2025-11-15 10:48:02 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching
[2025-11-15 10:48:03 +0100] [350661/Thread-20 (process_request_thread)] [INFO] Authentication request (dovecot): 'user@example.nl'
[2025-11-15 10:48:03 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Dovecot server version: '1.3'
[2025-11-15 10:48:03 +0100] [350661/Thread-18 (process_request_thread)] [INFO] Authentication request (dovecot): 'user@example.nl'
[2025-11-15 10:48:03 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Dovecot server version: '1.3'
[2025-11-15 10:48:08 +0100] [350661/Thread-20 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: timed out
[2025-11-15 10:48:08 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Failed login constant execution time need increase of failed_auth_delay: 0.000000000 -> 6.020667416 sec
[2025-11-15 10:48:08 +0100] [350661/Thread-20 (process_request_thread)] [WARNING] Failed login attempt from 127.0.0.1 (forwarded for '2a0d::'): 'user@example.nl' (radicale_modoboa_auth_oauth2)
[2025-11-15 10:48:08 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Failed login, sleeping random: 1.398 sec
[2025-11-15 10:48:08 +0100] [350661/Thread-18 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: timed out
[2025-11-15 10:48:08 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Failed login constant execution time need increase of failed_auth_delay: 6.020667416 -> 6.053246487 sec
[2025-11-15 10:48:08 +0100] [350661/Thread-18 (process_request_thread)] [WARNING] Failed login attempt from 127.0.0.1 (forwarded for '2a0d::'): 'user@example.nl' (radicale_modoboa_auth_oauth2)
[2025-11-15 10:48:08 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Failed login, sleeping random: 0.696 sec
[2025-11-15 10:48:09 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Asking client for authentication
[2025-11-15 10:48:09 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug
[2025-11-15 10:48:09 +0100] [350661/Thread-18 (process_request_thread)] [INFO] HEAD response status for '/user@example.nl/test' in 6.751 seconds: 401 Unauthorized
[2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [INFO] GET request for '/user@example.nl/test' received from ::1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1'
[2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug
[2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale'
[2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test'
[2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching
[2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug
[2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl/test' doesn't match any section
[2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug
[2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl' doesn't match any section
[2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [INFO] Access to '/user@example.nl/test' denied for anonymous user
[2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Asking client for authentication
[2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug
[2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [INFO] GET response status for '/user@example.nl/test' in 0.001 seconds: 401 Unauthorized
[2025-11-15 10:48:09 +0100] [350661/Thread-22 (process_request_thread)] [INFO] GET request for '/user@example.nl/test' received from 127.0.0.1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1'
[2025-11-15 10:48:09 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug
[2025-11-15 10:48:09 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale'
[2025-11-15 10:48:09 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test'
[2025-11-15 10:48:09 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching
[2025-11-15 10:48:09 +0100] [350661/Thread-22 (process_request_thread)] [INFO] Authentication request (dovecot): 'user@example.nl'
[2025-11-15 10:48:09 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Dovecot server version: '1.3'
[2025-11-15 10:48:10 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Asking client for authentication
[2025-11-15 10:48:10 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug
[2025-11-15 10:48:10 +0100] [350661/Thread-20 (process_request_thread)] [INFO] PROPFIND response status for '/user@example.nl/test' with depth '0' in 7.420 seconds: 401 Unauthorized
[2025-11-15 10:48:15 +0100] [350661/Thread-22 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: timed out
[2025-11-15 10:48:15 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Failed login constant exection time alignment, sleeping: 0.529063462 sec
[2025-11-15 10:48:15 +0100] [350661/Thread-22 (process_request_thread)] [WARNING] Failed login attempt from 127.0.0.1 (forwarded for '2a0d::'): 'user@example.nl' (radicale_modoboa_auth_oauth2)
[2025-11-15 10:48:15 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Failed login, sleeping random: 1.366 sec
[2025-11-15 10:48:16 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Asking client for authentication
[2025-11-15 10:48:16 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug
[2025-11-15 10:48:16 +0100] [350661/Thread-22 (process_request_thread)] [INFO] GET response status for '/user@example.nl/test' in 7.422 seconds: 401 Unauthorized
[2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [INFO] PROPFIND request for '/user@example.nl/test' with depth '0' received from ::1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1'
[2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug
[2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale'
[2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test'
[2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching
[2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug
[2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl/test' doesn't match any section
[2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug
[2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl' doesn't match any section
[2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [INFO] Access to '/user@example.nl/test' denied for anonymous user
[2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Asking client for authentication
[2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug
[2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [INFO] PROPFIND response status for '/user@example.nl/test' with depth '0' in 0.003 seconds: 401 Unauthorized
[2025-11-15 10:48:16 +0100] [350661/Thread-24 (process_request_thread)] [INFO] PROPFIND request for '/user@example.nl/test' with depth '0' received from 127.0.0.1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1'
[2025-11-15 10:48:16 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug
[2025-11-15 10:48:16 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale'
[2025-11-15 10:48:16 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test'
[2025-11-15 10:48:16 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching
[2025-11-15 10:48:17 +0100] [350661/Thread-24 (process_request_thread)] [INFO] Authentication request (dovecot): 'user@example.nl'
[2025-11-15 10:48:17 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Dovecot server version: '1.3'
[2025-11-15 10:48:22 +0100] [350661/Thread-24 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: timed out
[2025-11-15 10:48:22 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Failed login constant exection time alignment, sleeping: 0.526197233 sec
[2025-11-15 10:48:22 +0100] [350661/Thread-24 (process_request_thread)] [WARNING] Failed login attempt from 127.0.0.1 (forwarded for '2a0d::'): 'user@example.nl' (radicale_modoboa_auth_oauth2)
[2025-11-15 10:48:22 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Failed login, sleeping random: 1.088 sec
[2025-11-15 10:48:24 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Asking client for authentication
[2025-11-15 10:48:24 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug
[2025-11-15 10:48:24 +0100] [350661/Thread-24 (process_request_thread)] [INFO] PROPFIND response status for '/user@example.nl/test' with depth '0' in 7.144 seconds: 401 Unauthorized
<!-- gh-comment-id:3536271321 --> @FutureCow commented on GitHub (Nov 15, 2025): DEBUG log from modoboa web: ``` [2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [INFO] REPORT request for '/user@example.nl/test' with depth '1' received from ::1 (forwarded for '192.168.1.64') using 'python-caldav/2.0.1' [2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug [2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale' [2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test' [2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching [2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug [2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl/test' doesn't match any section [2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug [2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl' doesn't match any section [2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [INFO] Access to '/user@example.nl/test' denied for anonymous user [2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Asking client for authentication [2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug [2025-11-15 10:49:43 +0100] [350661/Thread-27 (process_request_thread)] [INFO] REPORT response status for '/user@example.nl/test' with depth '1' in 0.001 seconds: 401 Unauthorized [2025-11-15 10:49:43 +0100] [350661/Thread-30 (process_request_thread)] [INFO] REPORT request for '/user@example.nl/test' with depth '1' received from 127.0.0.1 (forwarded for '192.168.1.64') using 'python-caldav/2.0.1' [2025-11-15 10:49:43 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug [2025-11-15 10:49:43 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale' [2025-11-15 10:49:43 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test' [2025-11-15 10:49:43 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching [2025-11-15 10:49:44 +0100] [350661/Thread-30 (process_request_thread)] [INFO] Successful login: 'user@example.nl' (radicale_modoboa_auth_oauth2) [2025-11-15 10:49:44 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug [2025-11-15 10:49:44 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] Rule 'user@example.nl':'user@example.nl/test' matches '.+':'{user}/[^/]+' from section 'calendars' permission 'RrWw' [2025-11-15 10:49:44 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] Request content (XML): suppressed by config/option [logging] request_content_on_debug [2025-11-15 10:49:44 +0100] [350661/Thread-30 (process_request_thread)] [DEBUG] Response content (XML): suppressed by config/option [logging] response_content_on_debug [2025-11-15 10:49:44 +0100] [350661/Thread-30 (process_request_thread)] [INFO] REPORT response status for '/user@example.nl/test' with depth '1' in 1.020 seconds: 207 Multi-Status ``` Debug log from thrid party client: ``` [2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [INFO] HEAD request for '/user@example.nl/test' received from ::1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1' [2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug [2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale' [2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test' [2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching [2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug [2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl/test' doesn't match any section [2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug [2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl' doesn't match any section [2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [INFO] Access to '/user@example.nl/test' denied for anonymous user [2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Asking client for authentication [2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug [2025-11-15 10:48:02 +0100] [350661/Thread-17 (process_request_thread)] [INFO] HEAD response status for '/user@example.nl/test' in 0.001 seconds: 401 Unauthorized [2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [INFO] PROPFIND request for '/user@example.nl/test' with depth '0' received from ::1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1' [2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug [2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale' [2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test' [2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching [2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug [2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl/test' doesn't match any section [2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug [2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl' doesn't match any section [2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [INFO] Access to '/user@example.nl/test' denied for anonymous user [2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Asking client for authentication [2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug [2025-11-15 10:48:02 +0100] [350661/Thread-19 (process_request_thread)] [INFO] PROPFIND response status for '/user@example.nl/test' with depth '0' in 0.001 seconds: 401 Unauthorized [2025-11-15 10:48:02 +0100] [350661/Thread-18 (process_request_thread)] [INFO] HEAD request for '/user@example.nl/test' received from 127.0.0.1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1' [2025-11-15 10:48:02 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug [2025-11-15 10:48:02 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale' [2025-11-15 10:48:02 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test' [2025-11-15 10:48:02 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching [2025-11-15 10:48:02 +0100] [350661/Thread-20 (process_request_thread)] [INFO] PROPFIND request for '/user@example.nl/test' with depth '0' received from 127.0.0.1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1' [2025-11-15 10:48:02 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug [2025-11-15 10:48:02 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale' [2025-11-15 10:48:02 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test' [2025-11-15 10:48:02 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching [2025-11-15 10:48:03 +0100] [350661/Thread-20 (process_request_thread)] [INFO] Authentication request (dovecot): 'user@example.nl' [2025-11-15 10:48:03 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Dovecot server version: '1.3' [2025-11-15 10:48:03 +0100] [350661/Thread-18 (process_request_thread)] [INFO] Authentication request (dovecot): 'user@example.nl' [2025-11-15 10:48:03 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Dovecot server version: '1.3' [2025-11-15 10:48:08 +0100] [350661/Thread-20 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: timed out [2025-11-15 10:48:08 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Failed login constant execution time need increase of failed_auth_delay: 0.000000000 -> 6.020667416 sec [2025-11-15 10:48:08 +0100] [350661/Thread-20 (process_request_thread)] [WARNING] Failed login attempt from 127.0.0.1 (forwarded for '2a0d::'): 'user@example.nl' (radicale_modoboa_auth_oauth2) [2025-11-15 10:48:08 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Failed login, sleeping random: 1.398 sec [2025-11-15 10:48:08 +0100] [350661/Thread-18 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: timed out [2025-11-15 10:48:08 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Failed login constant execution time need increase of failed_auth_delay: 6.020667416 -> 6.053246487 sec [2025-11-15 10:48:08 +0100] [350661/Thread-18 (process_request_thread)] [WARNING] Failed login attempt from 127.0.0.1 (forwarded for '2a0d::'): 'user@example.nl' (radicale_modoboa_auth_oauth2) [2025-11-15 10:48:08 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Failed login, sleeping random: 0.696 sec [2025-11-15 10:48:09 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Asking client for authentication [2025-11-15 10:48:09 +0100] [350661/Thread-18 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug [2025-11-15 10:48:09 +0100] [350661/Thread-18 (process_request_thread)] [INFO] HEAD response status for '/user@example.nl/test' in 6.751 seconds: 401 Unauthorized [2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [INFO] GET request for '/user@example.nl/test' received from ::1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1' [2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug [2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale' [2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test' [2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching [2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug [2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl/test' doesn't match any section [2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug [2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl' doesn't match any section [2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [INFO] Access to '/user@example.nl/test' denied for anonymous user [2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Asking client for authentication [2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug [2025-11-15 10:48:09 +0100] [350661/Thread-21 (process_request_thread)] [INFO] GET response status for '/user@example.nl/test' in 0.001 seconds: 401 Unauthorized [2025-11-15 10:48:09 +0100] [350661/Thread-22 (process_request_thread)] [INFO] GET request for '/user@example.nl/test' received from 127.0.0.1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1' [2025-11-15 10:48:09 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug [2025-11-15 10:48:09 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale' [2025-11-15 10:48:09 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test' [2025-11-15 10:48:09 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching [2025-11-15 10:48:09 +0100] [350661/Thread-22 (process_request_thread)] [INFO] Authentication request (dovecot): 'user@example.nl' [2025-11-15 10:48:09 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Dovecot server version: '1.3' [2025-11-15 10:48:10 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Asking client for authentication [2025-11-15 10:48:10 +0100] [350661/Thread-20 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug [2025-11-15 10:48:10 +0100] [350661/Thread-20 (process_request_thread)] [INFO] PROPFIND response status for '/user@example.nl/test' with depth '0' in 7.420 seconds: 401 Unauthorized [2025-11-15 10:48:15 +0100] [350661/Thread-22 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: timed out [2025-11-15 10:48:15 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Failed login constant exection time alignment, sleeping: 0.529063462 sec [2025-11-15 10:48:15 +0100] [350661/Thread-22 (process_request_thread)] [WARNING] Failed login attempt from 127.0.0.1 (forwarded for '2a0d::'): 'user@example.nl' (radicale_modoboa_auth_oauth2) [2025-11-15 10:48:15 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Failed login, sleeping random: 1.366 sec [2025-11-15 10:48:16 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Asking client for authentication [2025-11-15 10:48:16 +0100] [350661/Thread-22 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug [2025-11-15 10:48:16 +0100] [350661/Thread-22 (process_request_thread)] [INFO] GET response status for '/user@example.nl/test' in 7.422 seconds: 401 Unauthorized [2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [INFO] PROPFIND request for '/user@example.nl/test' with depth '0' received from ::1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1' [2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug [2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale' [2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test' [2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching [2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug [2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl/test' doesn't match any section [2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug [2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Rights: '':'user@example.nl' doesn't match any section [2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [INFO] Access to '/user@example.nl/test' denied for anonymous user [2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Asking client for authentication [2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug [2025-11-15 10:48:16 +0100] [350661/Thread-23 (process_request_thread)] [INFO] PROPFIND response status for '/user@example.nl/test' with depth '0' in 0.003 seconds: 401 Unauthorized [2025-11-15 10:48:16 +0100] [350661/Thread-24 (process_request_thread)] [INFO] PROPFIND request for '/user@example.nl/test' with depth '0' received from 127.0.0.1 (forwarded for '2a0d::') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Thunderbird/144.0.1' [2025-11-15 10:48:16 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Request header: suppressed by config/option [logging] request_header_on_debug [2025-11-15 10:48:16 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Base prefix (from HTTP_X_SCRIPT_NAME): '/radicale' [2025-11-15 10:48:16 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Sanitized path: '/user@example.nl/test' [2025-11-15 10:48:16 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Called by reverse proxy, cannot remove base prefix '/radicale' from path: '/user@example.nl/test' as not matching [2025-11-15 10:48:17 +0100] [350661/Thread-24 (process_request_thread)] [INFO] Authentication request (dovecot): 'user@example.nl' [2025-11-15 10:48:17 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Dovecot server version: '1.3' [2025-11-15 10:48:22 +0100] [350661/Thread-24 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: timed out [2025-11-15 10:48:22 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Failed login constant exection time alignment, sleeping: 0.526197233 sec [2025-11-15 10:48:22 +0100] [350661/Thread-24 (process_request_thread)] [WARNING] Failed login attempt from 127.0.0.1 (forwarded for '2a0d::'): 'user@example.nl' (radicale_modoboa_auth_oauth2) [2025-11-15 10:48:22 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Failed login, sleeping random: 1.088 sec [2025-11-15 10:48:24 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Asking client for authentication [2025-11-15 10:48:24 +0100] [350661/Thread-24 (process_request_thread)] [DEBUG] Response content: suppressed by config/option [logging] response_content_on_debug [2025-11-15 10:48:24 +0100] [350661/Thread-24 (process_request_thread)] [INFO] PROPFIND response status for '/user@example.nl/test' with depth '0' in 7.144 seconds: 401 Unauthorized ```
Author
Owner

@tonioo commented on GitHub (Nov 15, 2025):

Can you check dovecot config? (10-master.conf, look for radicale socket)

<!-- gh-comment-id:3536722155 --> @tonioo commented on GitHub (Nov 15, 2025): Can you check dovecot config? (10-master.conf, look for radicale socket)
Author
Owner

@FutureCow commented on GitHub (Nov 15, 2025):

This is the part from 10-master.conf:

service auth {
  unix_listener auth-userdb {
    #mode = 0666
    user = vmail
    #group =
  }

  unix_listener /var/spool/postfix/private/auth {
    mode = 0666
    user = postfix
    group = postfix
  }

  unix_listener auth-radicale {
    mode = 0666
    user = radicale
    group = radicale
    type = auth-legacy
  }
}
<!-- gh-comment-id:3536723766 --> @FutureCow commented on GitHub (Nov 15, 2025): This is the part from 10-master.conf: ``` service auth { unix_listener auth-userdb { #mode = 0666 user = vmail #group = } unix_listener /var/spool/postfix/private/auth { mode = 0666 user = postfix group = postfix } unix_listener auth-radicale { mode = 0666 user = radicale group = radicale type = auth-legacy } } ```
Author
Owner

@tonioo commented on GitHub (Nov 15, 2025):

Can you try to remove the "type = auth-legacy" line and reload dovecot?

<!-- gh-comment-id:3536724767 --> @tonioo commented on GitHub (Nov 15, 2025): Can you try to remove the "type = auth-legacy" line and reload dovecot?
Author
Owner

@FutureCow commented on GitHub (Nov 15, 2025):

Yep, that was the problem!

[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Dovecot server version: '1.3'
[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Supported auth methods: 'PLAIN', 'LOGIN', 'OAUTHBEARER', 'XOAUTH2'
[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Sending auth handshake
[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Authenticating with request id: '2'
[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Processing auth response
[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Auth response: result='OK', id='2', parameters={}
[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [INFO] Successful login: 'user@example.com' (radicale_modoboa_auth_oauth2)
[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug
[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Rule 'user@example.com':'user@example.com/test' matches '.+':'{user}/[^/]+' from section 'calendars' permission 'RrWw'
[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Request content (XML): suppressed by config/option [logging] request_content_on_debug
[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug
[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Rule 'user@example.com':'user@example.com/test' matches '.+':'{user}/[^/]+' from section 'calendars' permission 'RrWw'
[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] 'user@example.com' has write access to collection with tag 'user@example.com/test'
[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Response content (XML): suppressed by config/option [logging] response_content_on_debug
[2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [INFO] PROPFIND response status for '/user@example.com/test' with depth '0' in 0.594 seconds: 207 Multi-Status

github.com/modoboa/modoboa-installer@b95bf58488

<!-- gh-comment-id:3536733751 --> @FutureCow commented on GitHub (Nov 15, 2025): Yep, that was the problem! ``` [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Dovecot server version: '1.3' [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Supported auth methods: 'PLAIN', 'LOGIN', 'OAUTHBEARER', 'XOAUTH2' [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Sending auth handshake [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Authenticating with request id: '2' [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Processing auth response [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Auth response: result='OK', id='2', parameters={} [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [INFO] Successful login: 'user@example.com' (radicale_modoboa_auth_oauth2) [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Rule 'user@example.com':'user@example.com/test' matches '.+':'{user}/[^/]+' from section 'calendars' permission 'RrWw' [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Request content (XML): suppressed by config/option [logging] request_content_on_debug [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] logging of rules which doesn't match suppressed by config/option [logging] rights_rule_doesnt_match_on_debug [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Rule 'user@example.com':'user@example.com/test' matches '.+':'{user}/[^/]+' from section 'calendars' permission 'RrWw' [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] 'user@example.com' has write access to collection with tag 'user@example.com/test' [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [DEBUG] Response content (XML): suppressed by config/option [logging] response_content_on_debug [2025-11-15 19:01:55 +0100] [350661/Thread-63 (process_request_thread)] [INFO] PROPFIND response status for '/user@example.com/test' with depth '0' in 0.594 seconds: 207 Multi-Status ``` https://github.com/modoboa/modoboa-installer/commit/b95bf5848897730e825459282bc688494af713d1
Author
Owner

@FutureCow commented on GitHub (Nov 16, 2025):

After updating to 2.6.3 I got a new problem...

[2025-11-16 13:07:54 +0100] [4068/Thread-6 (process_request_thread)] [INFO] GET request for '/frans@fhettinga.nl/test' received from 127.0.0.1 (fo          rwarded for '192.168.1.1, 192.168.1.110') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Thunderbird/145.0'
[2025-11-16 13:07:54 +0100] [4068/Thread-6 (process_request_thread)] [INFO] Authentication request (dovecot): 'frans@fhettinga.nl'
[2025-11-16 13:07:54 +0100] [4068/Thread-6 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: [Errno 13] Permission denied
[2025-11-16 13:07:55 +0100] [4068/Thread-6 (process_request_thread)] [WARNING] Failed login attempt from 127.0.0.1 (forwarded for '192.168.1.1, 19          2.168.1.110'): 'frans@fhettinga.nl' (radicale_modoboa_auth_oauth2)
[2025-11-16 13:07:56 +0100] [4068/Thread-6 (process_request_thread)] [INFO] GET response status for '/frans@fhettinga.nl/test' in 1.563 seconds: 4          01 Unauthorized

It's also not possible to connect to the calendar with the webui:

[2025-11-16 13:06:00 +0100] [4068/Thread-3 (process_request_thread)] [INFO] REPORT request for '/frans@fhettinga.nl/test' with depth '1' received           from ::1 (forwarded for '192.168.1.64') using 'python-caldav/2.1.2'
[2025-11-16 13:06:00 +0100] [4068/Thread-3 (process_request_thread)] [INFO] Access to '/frans@fhettinga.nl/test' denied for anonymous user
[2025-11-16 13:06:00 +0100] [4068/Thread-3 (process_request_thread)] [INFO] REPORT response status for '/frans@fhettinga.nl/test' with depth '1' i          n 0.000 seconds: 401 Unauthorized

Or create a new calendar

[2025-11-16 13:06:18 +0100] [4068/Thread-5 (process_request_thread)] [INFO] MKCALENDAR request for '/frans@fhettinga.nl/test' received from ::1 (f          orwarded for '192.168.1.64') using 'python-caldav/2.1.2'
[2025-11-16 13:06:18 +0100] [4068/Thread-5 (process_request_thread)] [INFO] Access to '/frans@fhettinga.nl/test' denied for anonymous user
[2025-11-16 13:06:18 +0100] [4068/Thread-5 (process_request_thread)] [INFO] MKCALENDAR response status for '/frans@fhettinga.nl/test' in 0.000 sec          onds: 401 Unauthorized

But this is a new issue from version 2.6.3 (i can also create a new one if you want?)

<!-- gh-comment-id:3538684819 --> @FutureCow commented on GitHub (Nov 16, 2025): After updating to 2.6.3 I got a new problem... ``` [2025-11-16 13:07:54 +0100] [4068/Thread-6 (process_request_thread)] [INFO] GET request for '/frans@fhettinga.nl/test' received from 127.0.0.1 (fo rwarded for '192.168.1.1, 192.168.1.110') using 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Thunderbird/145.0' [2025-11-16 13:07:54 +0100] [4068/Thread-6 (process_request_thread)] [INFO] Authentication request (dovecot): 'frans@fhettinga.nl' [2025-11-16 13:07:54 +0100] [4068/Thread-6 (process_request_thread)] [CRITICAL] Failed to communicate with Dovecot: [Errno 13] Permission denied [2025-11-16 13:07:55 +0100] [4068/Thread-6 (process_request_thread)] [WARNING] Failed login attempt from 127.0.0.1 (forwarded for '192.168.1.1, 19 2.168.1.110'): 'frans@fhettinga.nl' (radicale_modoboa_auth_oauth2) [2025-11-16 13:07:56 +0100] [4068/Thread-6 (process_request_thread)] [INFO] GET response status for '/frans@fhettinga.nl/test' in 1.563 seconds: 4 01 Unauthorized ``` It's also not possible to connect to the calendar with the webui: ``` [2025-11-16 13:06:00 +0100] [4068/Thread-3 (process_request_thread)] [INFO] REPORT request for '/frans@fhettinga.nl/test' with depth '1' received from ::1 (forwarded for '192.168.1.64') using 'python-caldav/2.1.2' [2025-11-16 13:06:00 +0100] [4068/Thread-3 (process_request_thread)] [INFO] Access to '/frans@fhettinga.nl/test' denied for anonymous user [2025-11-16 13:06:00 +0100] [4068/Thread-3 (process_request_thread)] [INFO] REPORT response status for '/frans@fhettinga.nl/test' with depth '1' i n 0.000 seconds: 401 Unauthorized ``` Or create a new calendar ``` [2025-11-16 13:06:18 +0100] [4068/Thread-5 (process_request_thread)] [INFO] MKCALENDAR request for '/frans@fhettinga.nl/test' received from ::1 (f orwarded for '192.168.1.64') using 'python-caldav/2.1.2' [2025-11-16 13:06:18 +0100] [4068/Thread-5 (process_request_thread)] [INFO] Access to '/frans@fhettinga.nl/test' denied for anonymous user [2025-11-16 13:06:18 +0100] [4068/Thread-5 (process_request_thread)] [INFO] MKCALENDAR response status for '/frans@fhettinga.nl/test' in 0.000 sec onds: 401 Unauthorized ``` But this is a new issue from version 2.6.3 (i can also create a new one if you want?)
Author
Owner

@tonioo commented on GitHub (Nov 16, 2025):

Might be caused by the caldav library update: https://github.com/modoboa/modoboa/pull/3788

<!-- gh-comment-id:3538703043 --> @tonioo commented on GitHub (Nov 16, 2025): Might be caused by the caldav library update: https://github.com/modoboa/modoboa/pull/3788
Author
Owner

@tonioo commented on GitHub (Nov 20, 2025):

@FutureCow Could you close this issue and open a new one please?

<!-- gh-comment-id:3557587506 --> @tonioo commented on GitHub (Nov 20, 2025): @FutureCow Could you close this issue and open a new one please?
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/modoboa-modoboa#1908
No description provided.