On 07/31/2015 10:23 AM, Steve Ankeny wrote:
In '/var/log/auth.log' there are a series of authentication errors --
Jul 27 08:33:04 sogo auth: pam_unix(dovecot:auth): check pass; user
unknown
Jul 27 08:33:04 sogo auth: pam_unix(dovecot:auth): authentication
failure; logname= uid=0 euid=0 tty=dovecot ruser=michael rhost=127.0.0.1
Jul 27 08:33:04 sogo auth: pam_winbind(dovecot:auth): getting password
(0x00000388)
Jul 27 08:33:04 sogo auth: pam_winbind(dovecot:auth): pam_get_item
returned a password
These were logged during an attempt to login to Samba AD
It appears there's an issue with Dovecot authentication (or "pam") but
it may be elsewhere.
This is the instance where "dcerpc" calls from 'smb.conf' --
### Configuration required by OpenChange server ###
dsb:schema update allowed = true
dcerpc endpoint servers = +mapiproxy
dcerpc_mapiproxy:server = true
dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp,
exchange_ds_rfr
### Configuration required by OpenChange server ###
When I uncomment those "dcerpc" calls, Samba AD allows the first few
users to login then gives "Access denied" to the next users. Curiously
enough, even in that instance, Samba services are STILL running.
*Looking further in '/var/log/samba/log.samba'* --
[2015/07/27 10:17:14.598525, 0]
../source4/smbd/server.c:370(binary_smbd_main)
samba version 4.1.18-Debian started.
Copyright Andrew Tridgell and the Samba Team 1992-2013
[2015/07/27 10:17:17.689989, 0]
../source4/smbd/server.c:488(binary_smbd_main)
samba: using 'standard' process model
samba: setproctitle not initialized, please either call
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call
setproctitle_init() or link against libbsd-ctor.
samba: setproctitle not initialized, please either call
setproctitle_init() or link against libbsd-ctor.
[2015/07/27 10:17:18.257922, 0]
../lib/util/become_daemon.c:136(daemon_ready)
[2015/07/27 10:17:19.731517, 0] libmapi/oc_log.c:52(oc_logv)
*MAPIPROXY server mode enabled*
[2015/07/27 10:17:19.735772, 0] libmapi/oc_log.c:54(oc_logv)
Using MySQL backend for openchangedb:
mysql://openchange-user:$passwd@localhost/openchange
[2015/07/27 10:17:19.849272, 0]
mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)
===============================================================
[2015/07/27 10:17:19.849708, 0]
mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)
*OPENCHANGE INTERNAL ERROR: pid 1486*
[2015/07/27 10:17:19.850012, 0]
mapiproxy/servers/default/emsmdb/dcesrv_exchange_emsmdb.c:2012(dcesrv_exchange_emsmdb_init)
*[exchange_emsmdb] Unable to initialize openchangedb*
[2015/07/27 10:17:19.955017, 0]
mapiproxy/libmapiproxy/fault_util.c:53(debug_print_backtrace)
BACKTRACE: 14 stack frames:
#00
/usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(debug_print_backtrace+0x96)
[0x7f6634c36368]
#01
/usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(openchange_abort+0x75)
[0x7f6634c364d6]
#02
/usr/lib/x86_64-linux-gnu/openchange/dcerpc_mapiproxy_server/exchange_emsmdb.so(+0x1087f)
[0x7f66333fe87f]
#03 /usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(+0x9aca)
[0x7f6634c1caca]
#04
/usr/lib/x86_64-linux-gnu/libmapiproxy.so.0(mapiproxy_server_init+0x89)
[0x7f6634c1cb7c]
#05
/usr/lib/x86_64-linux-gnu/samba/dcerpc_server/dcesrv_mapiproxy.so(+0x162ce)
[0x7f6634e6c2ce]
#06
/usr/lib/x86_64-linux-gnu/libdcerpc-server.so.0(dcesrv_init_context+0x79) [0x7f6640052069]
#07 /usr/lib/x86_64-linux-gnu/samba/service/dcerpc.so(+0xc99)
[0x7f66402c7c99]
#08
/usr/lib/x86_64-linux-gnu/samba/process_model/standard.so(+0x1656)
[0x7f6645046656]
#09
/usr/lib/x86_64-linux-gnu/samba/libservice.so.0(task_server_startup+0x4a) [0x7f6652c28eda]
#10
/usr/lib/x86_64-linux-gnu/samba/libservice.so.0(server_service_startup+0x93)
[0x7f6652c27b83]
#11 samba(+0x9a35) [0x7f6653f31a35]
#12 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5)
[0x7f664fa82ec5]
#13 samba(+0x5e4e) [0x7f6653f2de4e]
[2015/07/27 10:17:19.957226, 0]
../source4/rpc_server/dcerpc_server.c:1194(dcesrv_init_context)
*dcesrv_init_context: failed to init endpoint server = 'mapiproxy':
NT_STATUS_INTERNAL_ERROR*
[2015/07/27 10:17:19.957543, 0]
../source4/smbd/service_task.c:35(task_server_terminate)
*task_server_terminate: [Failed to startup dcerpc server task]*
STATUS=daemon 'samba' finished starting up and ready to serve
connections*samba_terminate: Failed to startup dcerpc server task*
I've *emboldened* the lines showing 'openchangedb' is not initiating.
It appears to err on '*exchange_emsmdb*' That's one of the "dcerpc"
calls in 'smb.conf'
--------------------------------------------------------------------------------------------------------------------------------------
Earlier in the log file I see the following --
[2015/07/25 10:14:51.950211, 0] libmapi/oc_log.c:52(oc_logv)
MAPIPROXY server mode enabled
[2015/07/25 10:14:52.313094, 0] libmapi/oc_log.c:54(oc_logv)
Using MySQL backend for openchangedb:
mysql://openchange-user:$passwd@localhost/openchange
*[so-category-info] did not find exported SoClass 'SOGo' in product*
<0x0x7f9b2b52bb78[SoProduct]: loaded code-loaded
bundle=/usr/lib/GNUstep/SOGo/MainUI.SOGo #classes=8 #categories=4 rm=$
<0x0x7f9b2a08dec8[SOGoCache]> Cache cleanup interval set every
300.000000 seconds
<0x0x7f9b2a08dec8[SOGoCache]> Using host(s) '127.0.0.1' as server(s)
*Note*: This error is logged two days BEFORE my failed logins (though I
was experimenting then)
However, it may provide a clue to my OpenChange setup (or the failure of
the "decrpc" calls)
I can login to MariaDB as 'openchange-user' with its password but I'm
unsure if the configuration is right.
*Do I need to reprovision OpenChange?* What are the issues with
reprovisioning OpenChange?
Thanks for any suggestions. I'll look at the database next.
--
users@sogo.nu
https://inverse.ca/sogo/lists
