Modoboa 2.4.3: Blank page on webmail

[ThePlouaxe]

Impacted versions: 2.4.3

• OS Type: Ubuntu
• OS Version: 22.04
• Database MariaDB
• Database version: 10.6.22
• Modoboa: 2.4.3
• installer used: Yes
• Webserver: Nginx

Steps to reproduce

Each time I am accessing to the webmail

Current behavior

After installation, everything is working well but I get a blank page while accessing to my webmail.
I got the following logs in my syslog from dovecot: auth: Error: oauth2 ..... oauth2 failed: Introspection failed: No username returned

Expected behavior

Webmail access.

[picheljitsu]

Same issue. Just sticks at the "attempting to log you in." It's been a nightmare trying to get this thing up.

[Spitfireap]

Hi, is it a new installation or an upgrade ?

Can you post the output of : cd /srv/modoboa/instance && /srv/modoboa/env/bin/python manage.py check --deploy ?

[Spitfireap]

Same issue. Just sticks at the "attempting to log you in." It's been a nightmare trying to get this thing up.

This seems like another issue. Please open another discussion or issue

[jserviceorg]

i have the same issue. login to the web interface works, calendar works, contacts works. but webmail gives a blank page.

Ubuntu 24.04, Modoboa installer, Postgres

root@mail:~# cd /srv/modoboa/instance && /srv/modoboa/env/bin/python manage.py check --deploy
System check identified some issues:

WARNINGS:
?: (security.W001) You do not have 'django.middleware.security.SecurityMiddleware' in your MIDDLEWARE so the SECURE_HSTS_SECONDS, SECURE_CONTENT_TYPE_NOSNIFF, SECURE_REFERRER_POLICY, SECURE_CROSS_ORIGIN_OPENER_POLICY, and SECURE_SSL_REDIRECT settings will have no effect.

System check identified 1 issue (1 silenced).

[ThePlouaxe]

This is an update, as it failed with dependencies I reinstalled it keeping my database. from version 2.3.9

Here is the output:

/srv/modoboa/env/bin/python manage.py check --deploy
System check identified some issues:

WARNINGS:
?: (security.W001) You do not have 'django.middleware.security.SecurityMiddleware' in your MIDDLEWARE so the SECURE_HSTS_SECONDS, SECURE_CONTENT_TYPE_NOSNIFF, SECURE_REFERRER_POLICY, SECURE_CROSS_ORIGIN_OPENER_POLICY, and SECURE_SSL_REDIRECT settings will have no effect.

System check identified 1 issue (1 silenced).

[picheljitsu]

I had the same issue. Used that string to replace the one in MIDDLEWARE tuple inside settings.py which fixed it for me. But now I'm back to the introspection error, which I assume is something to do w/ the CA chain?

2025-07-21T20:45:08.555882+00:00 mail dovecot: auth: Error: oauth2([redacted],127.0.0.1,<gqoejXY6aKZ/AAAB>): oauth2 failed: Introspection failed: SSL handshaking with 10.240.3.167:443 failed: read(SSL (conn:10.240.3.167:443,id=1)) failed: Received invalid SSL certificate: self-signed certificate: /CN=[redacted] (check ssl_client_ca_* settings?)

[ThePlouaxe]

@picheljitsu What string did you replace in the MIDDLEWARE?

[tonioo]

@ThePlouaxe Check this: https://modoboa.readthedocs.io/en/latest/upgrade.html#required-changes-to-settings-py
@picheljitsu It won't work with self-signed certificate...

[picheljitsu]

@picheljitsu What string did you replace in the MIDDLEWARE?

If you look close in settings.py you'll notice the output string from performing check is slightly different (sorry don't have the previous value)

MIDDLEWARE = (
    'django.contrib.sessions.middleware.SessionMiddleware',
    ....

I also made sure the django-secure library was installed

sudo -u modoboa -i bash
. env/bin/activate
pip install django-secure

[safiullahtariq]

i have the same issue. login to the web interface works, calendar works, contacts works. but webmail gives a blank page.

Ubuntu 24.04, Modoboa installer, Postgres

root@mail:~# cd /srv/modoboa/instance && /srv/modoboa/env/bin/python manage.py check --deploy System check identified some issues:

WARNINGS: ?: (security.W001) You do not have 'django.middleware.security.SecurityMiddleware' in your MIDDLEWARE so the SECURE_HSTS_SECONDS, SECURE_CONTENT_TYPE_NOSNIFF, SECURE_REFERRER_POLICY, SECURE_CROSS_ORIGIN_OPENER_POLICY, and SECURE_SSL_REDIRECT settings will have no effect.

System check identified 1 issue (1 silenced).

I have the same issue. Exact same error and no webmail.

[ThePlouaxe]

@ThePlouaxe Check this: https://modoboa.readthedocs.io/en/latest/upgrade.html#required-changes-to-settings-py @picheljitsu It won't work with self-signed certificate...

@tonioo Everything is okay especially as I made a new install and not an upgrade. I am using a letsencrypt certificate, not a self-signed one

[safiullahtariq]

@ThePlouaxe Check this: https://modoboa.readthedocs.io/en/latest/upgrade.html#required-changes-to-settings-py @picheljitsu It won't work with self-signed certificate...

@tonioo Everything is okay especially as I made a new install and not an upgrade. I am using a letsencrypt certificate, not a self-signed one

were you able to solve the issue ?

[ThePlouaxe]

@safiullahtariq No, tried to disable oauth2 in settings.py but if I do so I have been unable to log into admin...
Also tried to disable oauth2 in dovecot, I then got the oauthbearer error (and nothing if i disable it in dovecot)

Still looking for a solution to solve the problem.

[safiullahtariq]

@safiullahtariq No, tried to disable oauth2 in settings.py but if I do so I have been unable to log into admin... Also tried to disable oauth2 in dovecot, I then got the oauthbearer error (and nothing if i disable it in dovecot)

Still looking for a solution to solve the problem.

I uninstalled iredmail and installed this, now i am stuck with no webmail.

[Spitfireap]

What's the content of /etc/dovecot/conf.d/dovecot-oauth2.conf.ext ? Be aware to remove the client secret for introspection_url, ie : https://dovecot:<client_secret>@.....