The cron_mailgate deletes the profile of super-admin from users who have it

[LucianaCabrera]

Code of Conduct

• I agree to follow this project's Code of Conduct

Is there an existing issue for this?

• I have searched the existing issues

Version

10.0.15

Bug description

We have detected that cron_mailgate automatically removes super-admin authorization from users who have it, including profiles other than this one.

(We do not have rules configured that remove authorizations from said users)

We check the cron.log folder at the times where the action is executed and we find these actions:

Relevant log output

No response

Page URL

No response

Steps To reproduce

No response

Your GLPI setup information

No response

Anything else?

No response

[cconard96]

Is the mailgate Automatic Action set for GLPI or CLI run mode?
Also, please test with the latest GLPI version in case this is a bug that was already fixed.

[LucianaCabrera]

It is configured as CLI

[trasher]

You did not provide all requested information, so no idea if you use plugins, and which ones.
Along with testing with latest stable version, also try if you reproduce without any plugin.

[LucianaCabrera]

We have the following plugins active:
-alerts
-additional fields
-behaviors
-dashboard
-form creator
-glpi saml
-data injection
-oauth IMAP
-Reports
In the latest version, these modifications do not occur automatically on user permissions.

[CHCH069]

Hi LucianaCabrera

I encounter the same problem with the mailgate which deletes user profiles when it collects emails from these people

For my part, I have 2 collector tasks:
1 on the inbox of an exchange shared mailbox which works well, and 1 other on a specific folder of this same shared mailbox, which collects specific emails from 2 users

The deletion of profiles is systematic each time one of their emails is collected.
The 1st incident date of the 06/06/2024
GLPI v10.0.15
Mailgate in CLI
my plugins:
Adressage IP addressing 3.0.2
Alertes news 1.12.1
Camera Input camerainput 2.0.2
centreon centreon 1.0.0
Champs supplémentaires fields 1.21.5
Comportements behaviors 2.7.2
Cycle de vie des matériels (uninstall) uninstall 2.9.0
Data Injection datainjection 2.13.3
Database Inventory databaseinventory 1.0.0
Escalades escalade 2.9.9
Form Creator formcreator 2.13.9
GLPI Inventory glpiinventory 1.4.0
Glpisaml glpisaml 1.1.4
Impression pdf pdf 3.0.0
Oauth IMAP oauthimap 1.4.3
PHP SAML

[LucianaCabrera]

Hello, I have reported in the glpi github forum that the cron_mailgate problem that eliminates super-admin profiles for users who have it continues to persist,
It happens in version 14 to 16, two clients with different versions reported the same profile deletion problem to us

V14 plugins:
object management
additional fields
behaviors
escalation
form creator
data injection
more reporting
webhooks

v16:
-alerts
-additional fields
-behaviors
-dashboard
-form creator
-glpi saml
-data injection
-oauth IMAP
-information

[ftoledo]

Hi LucianaCabrera

I encounter the same problem with the mailgate which deletes user profiles when it collects emails from these people

For my part, I have 2 collector tasks: 1 on the inbox of an exchange shared mailbox which works well, and 1 other on a specific folder of this same shared mailbox, which collects specific emails from 2 users

@CHCH069 are you using oauthimap for your receptors?

[CHCH069]

Hi,
Yes, the receptors are configured with Oauthimap (Azure AD IMAP Office 365)

Oauthimap 1.4.3

[LucianaCabrera]

Any news about this problem?

[CHCH069]

Hello, We updated to GLPI v10.0.17 on november 8, and the incident has not happened again since.

Problem solved for us