Your message dated Mon, 14 Jul 2014 09:03:25 -0700
with message-id 
<CAMXH3QAPtfej2h-ahv5bqEpJyxTY+Vz=-pj9zsxgjf+yry7...@mail.gmail.com>
and subject line Re: Bug#584133: slapd: Fails to lookup client hostname in 
hosts.allow and rejects connection]
has caused the Debian Bug report #584133,
regarding slapd: Fails to lookup client hostname in hosts.allow and rejects 
connection
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
584133: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584133
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: slapd
Version: 2.4.11-1+lenny1
Severity: normal


When attempting to connect to slapd with an ldap client, the connection
is refused. But if I add a slapd: 172.21. entry to hosts.allow the
problem is fixed. However hosts.allow already contains this matching
entry ALL: .goco.net  sshd matches this line fine allowing me to login,
but slapd does not. DNS forward and reverse mapping tested and working.

hosts.allow:
ALL: 127.
ALL: .goco.net
identd: ALL

hosts.deny:
ALL: ALL

resolf.conf:
nameserver 127.0.0.1

ldapsearch -x
ldap_result: Can't contact LDAP server (-1)

syslog:
Jun  1 10:23:18 aragorn slapd[4443]: >>> slap_listener(ldap:///)
Jun  1 10:23:18 aragorn slapd[4443]: daemon: listen=9, new connection on 
17
Jun  1 10:23:18 aragorn slapd[4443]: fd=17 DENIED from unknown 
(172.21.3.65)
Jun  1 10:23:18 aragorn slapd[4443]: daemon: closing 17


-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.24-etchnhalf.1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages slapd depends on:
ii  adduser           3.110                  add and remove users and groups
ii  coreutils         6.10-6                 The GNU core utilities
ii  debconf [debconf- 1.5.24                 Debian configuration management sy
ii  libc6             2.7-18lenny2           GNU C Library: Shared libraries
ii  libdb4.2          4.2.52+dfsg-5          Berkeley v4.2 Database Libraries [
ii  libgnutls26       2.4.2-6+lenny2         the GNU TLS library - runtime libr
ii  libldap-2.4-2     2.4.11-1+lenny1        OpenLDAP libraries
ii  libltdl3          1.5.26-4+lenny1        A system independent dlopen wrappe
ii  libperl5.10       5.10.0-19lenny2        Shared Perl library
ii  libsasl2-2        2.1.22.dfsg1-23+lenny1 Cyrus SASL - authentication abstra
ii  libslp1           1.2.1-7.5              OpenSLP libraries
ii  libwrap0          7.6.q-16               Wietse Venema's TCP wrappers libra
ii  perl [libmime-bas 5.10.0-19lenny2        Larry Wall's Practical Extraction 
ii  psmisc            22.6-1                 Utilities that use the proc filesy
ii  unixodbc          2.2.11-16              ODBC tools libraries

Versions of packages slapd recommends:
pn  libsasl2-modules              <none>     (no description available)

Versions of packages slapd suggests:
ii  ldap-utils               2.4.11-1+lenny1 OpenLDAP utilities

-- debconf information:
  slapd/password_mismatch:
  slapd/tlsciphersuite:
  slapd/invalid_config: true
  shared/organization: london.goco.net
  slapd/upgrade_slapcat_failure:
  slapd/slurpd_obsolete:
  slapd/backend: HDB
  slapd/dump_database: when needed
  slapd/allow_ldap_v2: false
  slapd/no_configuration: false
  slapd/move_old_database: true
  slapd/suffix_change: false
  slapd/dump_database_destdir: /var/backups/slapd-VERSION
  slapd/purge_database: false
  slapd/domain: london.goco.net



--- End Message ---
--- Begin Message ---
On Mon, Jul 14, 2014 at 6:55 AM, Peter McGill <[email protected]> wrote:
> As Ryan has reported it working in the current version, and as I no longer 
> have openldap installed to test with.
> I conclude this is resolved and the bug should be closed.

Thanks for answering. Closing the bug now.

--- End Message ---

Reply via email to