Re: [courier-users] ldap problem - authldap: TEMPFAIL

Amol Kulkarni Fri, 16 Jun 2006 23:28:18 -0700

actually this seems to be a problem with authldap module. i've also experienced same problem. it looks like for whatever reason the ldap connection has terminated from ldap side, but authldap module cannot determine from the connection pointer whether the connection is open or not so it uses the connection and fails. in my particular case the problem was the ldap connection was idle for more time than idle timeout of ldap so ldap terminated it. i've not yet found a satisfactory soln to the problem. though mr. sam has suggested on the list that we should increase ldap idle timeout to be large i.e 1 or 2 hours.

hope i'm right.
amol

On 6/16/06, Robert Penz <[EMAIL PROTECTED]> wrote:

On Wednesday 14 June 2006 00:29, Sam Varshavchik wrote:
> This looks like OpenLDAP is complaining that the LDAP database is
> corrupted.

the database was ok, but I added an index for that field so I don't get that warning.

I've now some more detailed log entries. Whats interesting is that the first authentication works, but just some seconds later the second doesn't work. I hope you can help me as I don't have any clue anymore.

mail.log:

Jun 16 19:36:44 ox imaplogin: Connection, ip=[::ffff:127.0.0.1]
Jun 16 19:36:44 ox authdaemond.ldap : received auth request, service=imap, authtype=login
Jun 16 19:36:44 ox authdaemond.ldap: authldap: trying this module
Jun 16 19:36:44 ox authdaemond.ldap: selected ldap protocol version 3
Jun 16 19:36:44 ox authdaemond.ldap : binding to LDAP server as DN 'cn=admin,dc=hitt,dc=at', password 'xxxxxxxxxxxxxxxxxxxxx'
Jun 16 19:36:44 ox authdaemond.ldap: using search filter: (uid=robert.penz)
Jun 16 19:36:44 ox authdaemond.ldap: one entry returned, DN: uid= robert.penz,ou=Users,ou=OxObjects,dc=hitt,dc=at
Jun 16 19:36:44 ox authdaemond.ldap: raw ldap entry returned:
Jun 16 19:36:44 ox authdaemond.ldap: | homeDirectory: /home/robert.penz/
Jun 16 19:36:44 ox authdaemond.ldap : | cn: Robert Penz
Jun 16 19:36:44 ox authdaemond.ldap: | uid: robert.penz
Jun 16 19:36:44 ox authdaemond.ldap: | userPassword: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Jun 16 19:36:44 ox authdaemond.ldap: authldaplib: sysusername=robert.penz, sysuserid=1001, sysgroupid=1001, homedir=/home/vmail//home/robert.penz/, address=robert.penz, fullname=Robert Penz, maildir=<null>, quota=<null>, options=<null>
Jun 16 19:36:44 ox authdaemond.ldap: authldaplib: clearpasswd=<null>, passwd=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Jun 16 19:36:44 ox authdaemond.ldap: rebinding with DN 'uid=robert.penz,ou=Users,ou=OxObjects,dc=hitt,dc=at' to validate password
Jun 16 19:36:44 ox authdaemond.ldap: authentication bind successful
Jun 16 19:36:44 ox authdaemond.ldap: authldap: ACCEPT, username robert.penz
Jun 16 19:36:44 ox imaplogin: LOGIN, user=robert.penz, ip=[::ffff:127.0.0.1], protocol=IMAP
Jun 16 19:36:44 ox imaplogin: LOGOUT, user= robert.penz, ip=[::ffff:127.0.0.1], headers=0, body=0, time=0
Jun 16 19:39:03 ox imaplogin: Connection, ip=[::ffff:127.0.0.1]
Jun 16 19:39:03 ox authdaemond.ldap : received auth request, service=imap, authtype=login
Jun 16 19:39:03 ox authdaemond.ldap: authldap: trying this module
Jun 16 19:39:03 ox authdaemond.ldap: using search filter: (uid=robert.penz)
Jun 16 19:39:03 ox authdaemond.ldap: ldap_search_st() failed
Jun 16 19:39:03 ox authdaemond.ldap: authldap: TEMPFAIL - no more modules will be tried
Jun 16 19:39:08 ox imaplogin: LOGIN FAILED, ip=[::ffff:127.0.0.1 ]
Jun 16 19:39:08 ox imaplogin: DISCONNECTED, ip=[::ffff:127.0.0.1], time=5

ldap.log:

Jun 16 19:38:48 ox slapd[12229]: conn=7 fd=10 ACCEPT from IP= 127.0.0.1:39126 (IP=0.0.0.0:389)
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=0 BIND dn="" method=128
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=0 RESULT tag=97 err=0 text=
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=1 BIND dn="uid=robert.penz,ou=Users,ou=OxObjects,dc=hitt,dc=at" method=128
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=1 BIND dn="uid=robert.penz,ou=Users,ou=OxObjects,dc=hitt,dc=at" mech=SIMPLE ssf=0
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=1 RESULT tag=97 err=0 text=
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=2 SRCH base="ou=Groups,ou=OxObjects,dc=hitt,dc=at" scope=1 deref=3 filter="(&(objectClass=posixGroup)(memberUid= robert.penz))"
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=2 SRCH attr=cn
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=3 BIND anonymous mech=implicit ssf=0
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=3 BIND dn="" method=128
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=3 RESULT tag=97 err=0 text=
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=4 BIND dn="uid= robert.penz,ou=Users,ou=OxObjects,dc=hitt,dc=at" method=128
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=4 BIND dn="uid=robert.penz,ou=Users,ou=OxObjects,dc=hitt,dc=at" mech=SIMPLE ssf=0
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=4 RESULT tag=97 err=0 text=
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=5 SRCH base="ou=Groups,ou=OxObjects,dc=hitt,dc=at" scope=1 deref=3 filter="(&(objectClass=posixGroup)(memberUid=robert.penz))"
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=5 SRCH attr=cn
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=5 SEARCH RESULT tag=101 err=0 nentries=1 text=
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=6 BIND anonymous mech=implicit ssf=0
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=6 BIND dn="" method=128
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=6 RESULT tag=97 err=0 text=
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=7 BIND dn="uid=robert.penz,ou=Users,ou=OxObjects,dc=hitt,dc=at" method=128
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=7 BIND dn="uid= robert.penz,ou=Users,ou=OxObjects,dc=hitt,dc=at" mech=SIMPLE ssf=0
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=7 RESULT tag=97 err=0 text=
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=8 SRCH base="ou=Users,ou=OxObjects,dc=hitt,dc=at" scope=1 deref=3 filter="(&(objectClass=posixAccount)(objectClass=OXUserObject)(objectClass=inetOrgPerson)(|(uid= kurt.kofler)))"
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=8 SRCH attr=uid
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=8 SEARCH RESULT tag=101 err=0 nentries=1 text=
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=9 BIND anonymous mech=implicit ssf=0
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=9 BIND dn="" method=128
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=9 RESULT tag=97 err=0 text=
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=10 BIND dn="uid= robert.penz,ou=Users,ou=OxObjects,dc=hitt,dc=at" method=128
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=10 BIND dn="uid=robert.penz,ou=Users,ou=OxObjects,dc=hitt,dc=at" mech=SIMPLE ssf=0
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=10 RESULT tag=97 err=0 text=
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=11 SRCH base="ou=Users,ou=OxObjects,dc=hitt,dc=at" scope=1 deref=3 filter="(&(objectClass=posixAccount)(objectClass=OXUserObject)(objectClass=inetOrgPerson)(|(uid= kurt.kofler)))"
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=11 SRCH attr=uid
Jun 16 19:38:48 ox slapd[12229]: conn=7 op=11 SEARCH RESULT tag=101 err=0 nentries=1 text=
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=12 BIND anonymous mech=implicit ssf=0
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=12 BIND dn="" method=128
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=12 RESULT tag=97 err=0 text=
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=13 BIND dn="uid= robert.penz,ou=Users,ou=OxObjects,dc=hitt,dc=at" method=128
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=13 BIND dn="uid=robert.penz,ou=Users,ou=OxObjects,dc=hitt,dc=at" mech=SIMPLE ssf=0
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=13 RESULT tag=97 err=0 text=
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=14 SRCH base="ou=Groups,ou=OxObjects,dc=hitt,dc=at" scope=1 deref=3 filter="(&(objectClass=posixGroup)(memberUid=robert.penz))"
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=14 SRCH attr=cn
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=14 SEARCH RESULT tag=101 err=0 nentries=1 text=
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=15 BIND anonymous mech=implicit ssf=0
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=15 BIND dn="" method=128
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=15 RESULT tag=97 err=0 text=
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=16 BIND dn="uid=robert.penz,ou=Users,ou=OxObjects,dc=hitt,dc=at" method=128
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=16 BIND dn="uid= robert.penz,ou=Users,ou=OxObjects,dc=hitt,dc=at" mech=SIMPLE ssf=0
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=16 RESULT tag=97 err=0 text=
Jun 16 19:38:50 ox slapd[12229]: conn=8 fd=16 ACCEPT from IP= 127.0.0.1:39136 (IP=0.0.0.0:389)
Jun 16 19:38:50 ox slapd[12229]: conn=7 op=17 SRCH base="ou=Groups,ou=OxObjects,dc=hitt,dc=at" scope=1 deref=3 filter="(&(objectClass=posixGroup)(memberUid= robert.penz))"
Jun 16 19:38:50 ox slapd[12229]: conn=8 op=2 SRCH attr=cn
Jun 16 19:38:50 ox slapd[12229]: conn=8 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
Jun 16 19:38:57 ox slapd[12229]: conn=4 fd=14 closed
Jun 16 19:38:57 ox slapd[12229]: conn=7 op=18 BIND anonymous mech=implicit ssf=0
Jun 16 19:38:57 ox slapd[12229]: conn=7 op=18 BIND dn="" method=128
Jun 16 19:38:57 ox slapd[12229]: conn=7 op=18 RESULT tag=97 err=0 text=
Jun 16 19:38:57 ox slapd[12229]: conn=8 op=3 BIND anonymous mech=implicit ssf=0
Jun 16 19:38:57 ox slapd[12229]: conn=8 op=3 BIND dn="" method=128
Jun 16 19:38:57 ox slapd[12229]: conn=8 op=3 RESULT tag=97 err=0 text=
Jun 16 19:39:14 ox slapd[12229]: conn=6 op=15 BIND anonymous mech=implicit ssf=0
Jun 16 19:39:14 ox slapd[12229]: conn=6 op=15 BIND dn="" method=128
Jun 16 19:39:14 ox slapd[12229]: conn=6 op=15 RESULT tag=97 err=0 text=
Jun 16 19:39:57 ox slapd[12229]: conn=7 op=19 BIND dn="" method=128
Jun 16 19:39:57 ox slapd[12229]: conn=7 op=19 RESULT tag=97 err=0 text=
Jun 16 19:39:57 ox slapd[12229]: conn=8 op=4 BIND dn="" method=128
Jun 16 19:39:57 ox slapd[12229]: conn=8 op=4 RESULT tag=97 err=0 text=

--
Regards,
Robert
----------------
Robert Penz
robert DOT penz AT outertech DOT com

_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Re: [courier-users] ldap problem - authldap: TEMPFAIL

Reply via email to