Send mail create account

Hi everyone,

On my PB installation I have a SMTP account with Sendinblue whose working fine when I test my smtp server, but when I create a new account no mail is send to the user, I don’t see anything on my Sendinblue console, it seems like the email didn’t sent at all.
It worked fine some weeks ago (maybe after an upgrade?).
Do you have some tips for me?
thanks in advance.
Regards,

The best way to check on the passbolt side here will be to connect to your database and run the following query:

 select email, subject, error, created, sent from email_queue;

This will show if it is attempting to send and any errors from sending

Hi clayton,

I don’t have any mail since one week (last at novembre 28th) I don’t see all the mails sent for user creation.

Regards

what was returned from that query? be sure to remove the email addresses before posting here though.

The other place to check would be under the Email Notifications section of the Administration workspace just to make sure it is actually turned on

All the mails sent before, the last one was on november 28th, instead of create and resent emails to users to create their accounts, and from the users to add theirs email addresses and wait to receive anything from passbolt.
I’ve checked before on the administration workplace to be sure ^^

Glad you’ve checked in the interface.

What is the output from the query?

 select email, subject, error, created, sent from email_queue;

Without seeing the errors listed there it will be hard to help you find the issue here

The problem is I don’t have any errors, I see lot of mails

You see the end of the query.

Thanks, if there are no errors listed and the sent shows 1 then you’ll need to take a look on your mail server to see why these are getting stopped as from the passbolt side they are sent

my mail server is Sendinblue, I don’t have any errors on my console, I don’t even see any sent mails. But when I test my server I receive the test mail…

Just noticed that it actually isn’t even creating entries in the database to try to send emails. So, could you run the status-report and share the output? Feel free to censor anything sensitive

The status report on systems installed with the deb package is:
sudo su -s /bin/bash -c "/usr/share/php/passbolt/bin/status-report" www-data

First of all, thanks for your support ^^

/ __ \____  _____ ____/ /_  ____  / / /_

/ // / __ `/ / / __ / __ / / _/
/ / // ( |
) /
/ / /
/ / / /
/
/ _
,
/
//./_//__/

Open source password manager for teams

Passbolt CE 4.4.0
Cakephp 4.4.17
Linux pb 6.1.0-11-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.38-4 (2023-08-08) x86_ 64 GNU/Linux
PHP 8.2.7 (cli) (built: Jun 9 2023 19:37:27) (NTS)
mysql Ver 15.1 Distrib 10.11.4-MariaDB, for debian-linux-gnu (x86_64) using Ed itLine wrapper
gpg (GnuPG) 2.2.40
libgcrypt 1.10.1
ERROR: /usr/share/php/passbolt/bin/utils.sh: ligne 64: composer : commande intr ouvable

 ____                  __          ____
/ __ \____  _____ ____/ /_  ____  / / /_

/ // / __ `/ / / __ / __ / / _/
/ / // ( |
) /
/ / /
/ / / /
/
/ _
,
/
//./_//__/

Open source password manager for teams

Healthcheck shell

Environment

[PASS] PHP version 8.2.7.
[PASS] PHP version is 8.1 or above.
[PASS] PCRE compiled with unicode support.
[PASS] The temporary directory and its content are writable and not executable.
[PASS] The logs directory and its content are writable.
[PASS] GD or Imagick extension is installed.
[PASS] Intl extension is installed.
[PASS] Mbstring extension is installed.

Config files

[PASS] The application config file is present
[PASS] The passbolt config file is present

Core config

[PASS] Debug mode is off.
[PASS] Cache is working.
[PASS] Unique value set for security.salt
[PASS] Full base url is set to https://xxx
[PASS] App.fullBaseUrl validation OK.
[PASS] /healthcheck/status is reachable.

SSL Certificate

[PASS] SSL peer certificate validates
[PASS] Hostname is matching in SSL certificate.
[PASS] Not using a self-signed certificate

Database

[PASS] The application is able to connect to the database
[PASS] 32 tables found
[PASS] Some default content is present
[PASS] The database schema up to date.

GPG Configuration

[PASS] PHP GPG Module is installed and loaded.
[PASS] The environment variable GNUPGHOME is set to /var/lib/passbolt/.gnupg.
[PASS] The directory /var/lib/passbolt/.gnupg containing the keyring is writabl e by the webserver user.
[PASS] The server OpenPGP key is not the default one
[PASS] The public key file is defined in /etc/passbolt/passbolt.php and readabl e.
[PASS] The private key file is defined in /etc/passbolt/passbolt.php and readab le.
[PASS] The server key fingerprint matches the one defined in /etc/passbolt/pass bolt.php.
[PASS] The server public key defined in the /etc/passbolt/passbolt.php (or envi ronment variables) is in the keyring.
[PASS] There is a valid email id defined for the server key.
[PASS] The public key can be used to encrypt a message.
[PASS] The private key can be used to sign a message.
[PASS] The public and private keys can be used to encrypt and sign a message.
[PASS] The private key can be used to decrypt a message.
[PASS] The private key can be used to decrypt and verify a message.
[PASS] The public key can be used to verify a signature.
[PASS] The server public key format is Gopengpg compatible.
[PASS] The server private key format is Gopengpg compatible.

Application configuration

[FAIL] This installation is not up to date. Currently using 4.4.0 and it should be 4.4.2.
[HELP] See. Passbolt Help | Update
[FAIL] Passbolt is not configured to force SSL use.
[HELP] Set passbolt.ssl.force to true in /etc/passbolt/passbolt.php.
[PASS] App.fullBaseUrl is set to HTTPS.
[PASS] Selenium API endpoints are disabled.
[PASS] Search engine robots are told not to index content.
[INFO] The Self Registration plugin is enabled.
[INFO] Registration is closed, only administrators can add users.
[WARN] The deprecated self registration public setting was found in /etc/passbo lt/passbolt.php.
[HELP] You may remove the “passbolt.registration.public” setting.
[WARN] Host availability checking is disabled.
[HELP] Make sure this instance is not publicly available on the internet.
[HELP] Or set the PASSBOLT_EMAIL_VALIDATE_MX environment variable to true.
[HELP] Or set passbolt.email.validate.mx to true in /etc/passbolt/passbolt.php.
[PASS] Serving the compiled version of the javascript app.
[WARN] Some email notifications are disabled by the administrator.

JWT Authentication

[PASS] The JWT Authentication plugin is enabled
[PASS] The /etc/passbolt/jwt/ directory is not writable.
[PASS] A valid JWT key pair was found

SMTP Settings

[PASS] The SMTP Settings plugin is enabled.
[PASS] SMTP Settings coherent. You may send a test email to validate them.
[PASS] The SMTP Settings source is: database.
[WARN] The SMTP Settings plugin endpoints are enabled.
[HELP] It is recommended to disable the plugin endpoints.
[HELP] Set the PASSBOLT_SECURITY_SMTP_SETTINGS_ENDPOINTS_DISABLED environment v ariable to true.
[HELP] Or set passbolt.security.smtpSettings.endpointsDisabled to true in /etc/ passbolt/passbolt.php.

[FAIL] 2 error(s) found. Hang in there!

 ____                  __          ____
/ __ \____  _____ ____/ /_  ____  / / /_

/ // / __ `/ / / __ / __ / / _/
/ / // ( |
) /
/ / /
/ / / /
/
/ _
,
/
//./_//__/

Open source password manager for teams

Cleanup shell (dry-run)

1 issues found in table Comments (soft deleted resources)
1 issues detected, please re-run without --dry-run to fix.

 ____                  __          ____
/ __ \____  _____ ____/ /_  ____  / / /_

/ // / __ `/ / / __ / __ / / _/
/ / // ( |
) /
/ / /
/ / / /
/
/ _
,
/
//./_//__/

Open source password manager for teams

Data check shell
[PASS] Data integrity for AuthenticationTokens.
[PASS] Can validate: 4197/4197
[PASS] Data integrity for Comments.
[PASS] Can validate: 6/6
[PASS] Data integrity for Favorites.
[PASS] Can validate: 0/0
[PASS] Data integrity for Gpgkeys.
[PASS] Can encrypt: 51/51
[PASS] Pass validation service checks: 51/51
[PASS] Entity data and armored key data matches: 51/51
[PASS] Is not expired: 51/51
[PASS] Is armored key format valid: 51/51
[PASS] Data integrity for Groups.
[PASS] Can validate: 15/15
[PASS] Data integrity for Profiles.
[PASS] Can validate: 103/103
[PASS] Data integrity for Resources.
[PASS] Can validate: 1435/1435
[PASS] Data integrity for Secrets.
[PASS] Can validate: 4128/4128
[PASS] Data integrity for Users.
[PASS] Can validate: 103/103
2023-12-06 07:17:02 error: [Authentication\Authenticator\UnauthenticatedException] Authentication is required to continue in /usr/share/php/passbolt/vendor/cakephp/authentication/src/Controller/Component/AuthenticationComponent.php on line 177
Request URL: /auth/is-authenticated.json

Thanks!

From your output there is one issue that is likely unrelated but can be sorted out by running:
sudo su -s /bin/bash -c "/usr/share/php/passbolt/bin/cake passbolt cleanup" www-data

Otherwise could you update to the latest version to see if we can get emails going again? The two latest releases do have some work on emails so it is worth getting those in

Yeah, I don’t know if it’s the cleanup or the update, but now it’s working fine, thank you so much @clayton