Hi Roland,
Happy New Year!
Sadly, there is no error or info in the syslog while entering the master
password for the configuration.
I sat the log level to debug and got 10 times: "....apache2:... DEBUG:
Calling URL detected as http://xxxx/lam/templates/config/mainmanage.php";
while trying to enter the password.
Other ideas?
Best regards
Christian
2014-12-29 9:58 GMT+01:00 Roland Gruber <[email protected]>:
> Hi Christian,
>
> please check LAM's log file for any messages (LAM main configuration).
> Maybe a security check fails (e.g. because source IP changed).
>
>
> Best regards
>
> Roland
>
>
> On 19.12.2014 13:45, Christian Renardy wrote:
> > Hi Roland,
> >
> > does the session file from the log exist?
> >>
> > It gets deleted quite often.
> > Session settings in my php.ini is set to files.
> > Usually looks like:
> >
> >
> cfgMain|O:10:"LAMCfgMain":23:{s:7:"default";s:3:"lam";s:20:"LAMCfgMainpassword";s:43:"{SSHA}D6AaX93kPmck9wAxNlq3GF93S7A=
> >
> R7gkjQ==";s:14:"sessionTimeout";i:30;s:8:"logLevel";s:1:"4";s:14:"logDestination";s:6:"SYSLOG";s:12:"allowedHosts";s:0:"";s:23:"allowedHostsSelfService";s:0:"";s:14:"encryptSession";s:4:"true";s:17:"passwordMinLength";i:0;s:16:"passwordMinUpper";i:0;s:16:"passwordMinLower";i:0;s:18:"passwordMinNumeric";i:0;s:17:"passwordMinSymbol";i:0;s:18:"passwordMinClasses";i:0;s:17:"checkedRulesCount";i:-1;s:26:"passwordMustNotContainUser";s:5:"false";s:28:"passwordMustNotContain3Chars";s:5:"false";s:20:"LAMCfgMainconffile";s:49:"/usr/share/ldap-account-manager/config/config.cfg";s:29:"LAMCfgMainuploadedSSLCaCert";N;s:24:"LAMCfgMaindelSSLCaCert";b:0;s:7:"mailEOL";s:7:"default";s:14:"errorReporting";s:7:"default";s:20:"LAMCfgMainsettings";a:19:{i:0;s:8:"password";i:1;s:7:"default";i:2;s:14:"sessionTimeout";i:3;s:8:"logLevel";i:4;s:14:"logDestination";i:5;s:12:"allowedHosts";i:6;s:17:"passwordMinLength";i:7;s:16:"passwordMinUpper";i:8;s:16:"passwordMinLower";i:9;s:18:"passwordMinNumeric";i:10;s:18
>
> :"passwordMinClasses";i:11;s:17:"passwordMinSymbol";i:12;s:17:"checkedRulesCount";i:13;s:26:"passwordMustNotContainUser";i:14;s:28:"passwordMustNotContain3Chars";i:15;s:7:"mailEOL";i:16;s:14:"errorReporting";i:17;s:14:"encryptSession";i:18;s:23:"allowedHostsSelfService";}}config|O:9:"LAMConfig":32:{s:20:"LAMConfigServerURL";s:22:"ldap://localhost:10389";s:17:"LAMConfiguseTLS";N;s:26:"LAMConfigfollowReferrals";s:5:"false";s:23:"LAMConfigpagedResults";s:5:"false";s:17:"LAMConfigAdmins";s:19:"uid=admin,ou=system";s:17:"LAMConfigPasswd";s:43:"{SSHA}RjBruJcTxZEdcBjPQdRBkDaSQeY=
> >
> iueleA==";s:21:"LAMConfigtreesuffix";s:13:"dc=avmz,dc=de";s:26:"LAMConfigdefaultLanguage";s:40:"en_GB.utf8:UTF-8:English
> > (Great
> >
> Britain)";s:25:"LAMConfigmoduleSettings";a:8:{s:19:"posixAccount_minUID";a:1:{i:0;s:5:"10000";}s:19:"posixAccount_maxUID";a:1:{i:0;s:5:"30000";}s:23:"posixAccount_minMachine";a:1:{i:0;s:5:"50000";}s:23:"posixAccount_maxMachine";a:1:{i:0;s:5:"60000";}s:17:"posixGroup_minGID";a:1:{i:0;s:5:"10000";}s:17:"posixGroup_maxGID";a:1:{i:0;s:5:"20000";}s:18:"posixGroup_pwdHash";a:1:{i:0;s:4:"SSHA";}s:20:"posixAccount_pwdHash";a:1:{i:0;s:4:"SSHA";}}s:23:"LAMConfigtypeSettings";a:12:{s:11:"suffix_user";s:29:"ou=People,dc=my-domain,dc=com";s:9:"attr_user";s:41:"#uid;#givenName;#sn;#uidNumber;#gidNumber";s:12:"modules_user";s:56:"inetOrgPerson,posixAccount,shadowAccount,sambaSamAccount";s:12:"suffix_group";s:28:"ou=group,dc=my-domain,dc=com";s:10:"attr_group";s:38:"#cn;#gidNumber;#memberUID;#description";s:13:"modules_group";s:28:"posixGroup,sambaGroupMapping";s:11:"suffix_host";s:31:"ou=machines,dc=my-domain,dc=com";s:9:"attr_host";s:38:"#cn;#description;#uidNumber;#gidNumber";s:12:"modules_host"
>
> ;s:36:"account,posixAccount,sambaSamAccount";s:16:"suffix_smbDomain";s:19:"dc=my-domain,dc=com";s:14:"attr_smbDomain";s:47:"sambaDomainName:Domain
> > name;sambaSID:Domain
> >
> SID";s:17:"modules_smbDomain";s:11:"sambaDomain";}s:23:"LAMConfigtoolSettings";a:0:{}s:21:"LAMConfigscriptPath";s:0:"";s:23:"LAMConfigscriptRights";s:3:"750";s:23:"LAMConfigscriptServer";s:0:"";s:23:"LAMConfigcachetimeout";s:1:"5";s:22:"LAMConfigsearchLimit";s:1:"0";s:22:"LAMConfigactiveTypes";s:25:"user,group,host,smbDomain";s:15:"LAMConfigfile";s:3:"lam";s:22:"LAMConfigaccessLevel";i:100;s:22:"LAMConfigloginMethod";s:4:"list";s:28:"LAMConfigloginSearchSuffix";s:20:"dc=yourdomain,dc=org";s:28:"LAMConfigloginSearchFilter";s:10:"uid=%USER%";s:24:"LAMConfigloginSearchDN";s:0:"";s:30:"LAMConfigloginSearchPassword";s:0:"";s:29:"LAMConfighttpAuthentication";s:5:"false";s:25:"LAMConfiglamProMailFrom";s:0:"";s:28:"LAMConfiglamProMailReplyTo";s:0:"";s:28:"LAMConfiglamProMailSubject";s:23:"Your
> > password was
> >
> reset";s:27:"LAMConfiglamProMailIsHTML";s:5:"false";s:42:"LAMConfiglamProMailAllowAlternateAddress";s:4:"true";s:25:"LAMConfiglamProMailText";s:129:"Dear
> > @@givenName@@ @@sn@@,+::++::+your password was reset to:
> > @@newPassword@@+::++::++::+Best
> > regards+::++::+deskside
> >
> support+::+";s:19:"LAMConfigsettings";a:30:{i:0;s:9:"ServerURL";i:1;s:6:"useTLS";i:2;s:15:"followReferrals";i:3;s:12:"pagedResults";i:4;s:6:"Passwd";i:5;s:6:"Admins";i:6;s:10:"treesuffix";i:7;s:15:"defaultLanguage";i:8;s:10:"scriptPath";i:9;s:12:"scriptServer";i:10;s:12:"scriptRights";i:11;s:12:"cachetimeout";i:12;s:7:"modules";i:13;s:11:"activeTypes";i:14;s:5:"types";i:15;s:5:"tools";i:16;s:11:"accessLevel";i:17;s:11:"loginMethod";i:18;s:17:"loginSearchSuffix";i:19;s:17:"loginSearchFilter";i:20;s:11:"searchLimit";i:21;s:14:"lamProMailFrom";i:22;s:17:"lamProMailReplyTo";i:23;s:17:"lamProMailSubject";i:24;s:14:"lamProMailText";i:25;s:16:"lamProMailIsHTML";i:26;s:31:"lamProMailAllowAlternateAddress";i:27;s:18:"httpAuthentication";i:28;s:13:"loginSearchDN";i:29;s:19:"loginSearchPassword";}}language|s:10:"de_DE.utf8";header|s:286:"<!DOCTYPE
> > HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "
> > http://www.w3.org/TR/html4/loose.dtd";>
> >
> >
> > ls -l
> >>
> /usr/share/ldap-account-manager/templates/config/../../sess/sess_te8anxxxxxxxxxx
> >
> > I tried to understand the flow. From what I observed:
> >
> > 1. I go to /lam/ -> sess123 is created
> > 2. I set the lang to german (is saved in sess123-File)
> > 3. I click on LAM Einstellungen(LAM Settings) and Allgemeine
> > Einstellungen(General Settings) (sess123 file still in place) and get
> the
> > password prompt in German - sess123 is now sess234.
> > 4. I use lam as a password and get the same password prompt in German
> -
> > sess file disappears.
> > 5. I use lam again and get the password prompt in English - sess file
> > still not there.
> > 6. I use lam again and get the general settings page and no sess
> file. I
> > change some settings and get to the password prompt.
> > 7. I repeat steps 4-5 get another sess file, nothing really changes.
> >
> > I changed some the port of my ldap server and the dn for my user in the
> > config file.
> >
> > Do you have any special PHP settings (anything changed in php.ini or
> >> additional modules)?
> >> You can also try to upgrade PHP to 5.4.34 which is in stable security
> >> update repository.
> >>
> > Got the latest stable (php 5.4.35) and got the same issue.
> > Just some increased memory settings, nothing special...
> >
> >
> >> Anything like SELinux or AppArmor active?
> >>
> > Nothing like that.
> >
> > Best regards,
> > Chris
> >
> >
> >
> >
> ------------------------------------------------------------------------------
> > Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> > from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> > with Interactivity, Sharing, Native Excel Exports, App Integration & more
> > Get technology previously reserved for billion-dollar corporations, FREE
> >
> http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
> >
> >
> >
> > _______________________________________________
> > Lam-public mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/lam-public
> >
>
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is
> your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Lam-public mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/lam-public
>
>
------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Lam-public mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/lam-public
