<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 02/09/2012 01:38 AM, MATON Brett wrote:
<blockquote cite="mid:201202090838.q198ckSq012834@mx1.redhat.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 12 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
span.Preacute1
{mso-style-name:"Pré1\,formaté1\,HTML Car1";
mso-style-priority:99;
mso-style-link:"Pré\,formaté\,HTML";
font-family:Consolas;
color:black;}
p.Preacute, li.Preacute, div.Preacute
{mso-style-name:"Pré\,formaté\,HTML";
mso-style-priority:99;
mso-style-link:"Pré1\,formaté1\,HTML Car1";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
p.Textedebulles, li.Textedebulles, div.Textedebulles
{mso-style-name:"Texte de bulles";
mso-style-link:"Texte de bulles Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
span.TextedebullesCar
{mso-style-name:"Texte de bulles Car";
mso-style-priority:99;
mso-style-link:"Texte de bulles";
font-family:"Tahoma","sans-serif";
color:black;}
span.EmailStyle26
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle27
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle28
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle29
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle30
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle33
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<div>
<div style="border-right: medium none; border-width: 1pt
medium medium; border-style: solid none none; border-color:
rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color;
padding: 3pt 0cm 0cm;">
<p class="MsoNormal"><b><span style="font-size: 10pt;
font-family:
"Tahoma","sans-serif"; color:
windowtext;" lang="EN-US">From:</span></b><span
style="font-size: 10pt; font-family:
"Tahoma","sans-serif"; color:
windowtext;" lang="EN-US"> Rich Megginson
[<a class="moz-txt-link-freetext" href="mailto:rmeggins@redhat.com">mailto:rmeggins@redhat.com</a>] <br>
<b>Sent:</b> 08 February 2012 21:41<br>
<b>To:</b> MATON Brett<br>
<b>Cc:</b> General discussion list for the 389 Directory
server project.<br>
<b>Subject:</b> Re: [389-users] admserv_host_ip_check:
ap_get_remote_host could not resolve<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">On 02/08/2012 01:27 PM, MATON Brett wrote:
<o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US">Hi Rich,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US"> I’ve got no nsAdminAccessHost lines in that
config file, only a configuration.nsAdminAccessAddresses
entry.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 12pt; font-family:
"Times New Roman","serif";">Ok. Looks
like it will refuse to leave </span><span style="font-size:
12pt; font-family: "Times New
Roman","serif";" lang="EN-US">nsAdminAccessHost
- if missing, it defaults to your local hostname.<br>
<br>
The error message is coming because this is returning NULL:<br>
const char *maxdns =
ap_get_remote_host(r->connection, r->per_dir_config,<br>
REMOTE_HOST,
NULL);<br>
<br>
Here is the documentation for <a moz-do-not-send="true"
href="http://www.rcbowen.com/httpd_api_docs/group__get__remote__host.html">http://www.rcbowen.com/httpd_api_docs/group__get__remote__host.html</a>
that explains how/why this function returns NULL.<br>
<br>
</span><span style="font-size: 12pt; font-family: "Times
New Roman","serif";"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US">Ok, so dirsrv is failing to resolve the host
through that call, what I don’t understand is why.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US">If I use nslookup/host on the </span><span
style="color: rgb(31, 73, 125);" lang="EN-US"> </span><span
style="color: rgb(31, 73, 125);" lang="EN-US">ip address it
can’t resolve it works fine?</span></p>
</div>
</blockquote>
I don't know.<br>
<blockquote cite="mid:201202090838.q198ckSq012834@mx1.redhat.com"
type="cite">
<div class="WordSection1">
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US">(Addresses anonymised)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US">[Thu Feb 09 09:29:43 2012] [notice] [client
192.168.1.1] admserv_host_ip_check: ap_get_remote_host could
not resolve 192.168.1.1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US"># nslookup 192.168.1.1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US">Server: 192.168.1.2<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US">Address: 192.168.1.2#53<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US">1.1.168.192.in-addr.arpa name =
desktop.my.net.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US"># nslookup desktop.my.net<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US">Server: 192.168.1.2<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US">Address: 192.168.1.2#53<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">Name:
desktop.my.net<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">Address:
192.168.1.1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">$ host
desktop.my.net<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">Desktop.my.net
has address 192.168.1.1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">$ host
192.168.1.1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">1.1.168.192.in-addr.arpa
domain name pointer desktop.my.net.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<div>
<div style="border-right: medium none; border-width: 1pt
medium medium; border-style: solid none none; padding: 3pt
0cm 0cm; border-color: -moz-use-text-color;">
<p class="MsoNormal"><b><span style="font-size: 10pt;
font-family:
"Tahoma","sans-serif"; color:
windowtext;">De :</span></b><span style="font-size:
10pt; font-family:
"Tahoma","sans-serif"; color:
windowtext;"> Rich Megginson [</span><span
style="font-size: 10pt; font-family:
"Tahoma","sans-serif"; color:
windowtext;" lang="FR"><a moz-do-not-send="true"
href="mailto:rmeggins@redhat.com"><span lang="EN-GB">mailto:rmeggins@redhat.com</span></a></span><span
style="font-size: 10pt; font-family:
"Tahoma","sans-serif"; color:
windowtext;">] <br>
<b>Envoyé :</b> mercredi 8 février 2012 21:15<br>
<b>À :</b> MATON Brett<br>
<b>Cc :</b> General discussion list for the 389
Directory server project.<br>
<b>Objet :</b> Re: [389-users] admserv_</span><span
style="font-size: 10pt; font-family:
"Tahoma","sans-serif"; color:
windowtext;" lang="FR">host_ip_check: ap_get_remote_host
could not resolve</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">On 02/08/2012 12:09 PM, MATON Brett wrote:
<o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);">Hi
Rick,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US"> I restarted both dirsrv and dirsrv-admin,
problem persists though.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 12pt; font-family:
"Times New Roman","serif";">ok - try
this<br>
service dirsrv-admin stop<br>
edit /etc/dirsrv/admin-serv/local.conf - remove any
nsAdminAccessHost lines<br>
service dirsrv-admin start<br>
<br>
<br>
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US"> </span><o:p></o:p></p>
<div>
<div style="border-right: medium none; border-width: 1pt
medium medium; border-style: solid none none; padding: 3pt
0cm 0cm; border-color: -moz-use-text-color;">
<p class="MsoNormal"><b><span style="font-size: 10pt;
font-family:
"Tahoma","sans-serif"; color:
windowtext;" lang="FR">De :</span></b><span
style="font-size: 10pt; font-family:
"Tahoma","sans-serif"; color:
windowtext;" lang="FR"> Rich Megginson [<a
moz-do-not-send="true"
href="mailto:rmeggins@redhat.com">mailto:rmeggins@redhat.com</a>]
<br>
<b>Envoyé :</b> mercredi 8 février 2012 16:39<br>
<b>À :</b> General discussion list for the 389 Directory
server project.<br>
<b>Cc :</b> MATON Brett<br>
<b>Objet :</b> Re: [389-users] admserv_host_ip_check:
ap_get_remote_host could not resolve</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">On 02/08/2012 08:19 AM, MATON Brett wrote:
<o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);">Thanks
the update to the wiki solved the “wrong attribute type”
error on nsAdminAccessHosts.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);">Configuration
as it stands, with no nsAdminAccessHosts attribure:</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">#
configuration, admin-serv-<host>, 389 Administration
Server, Server Gro</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">up,
<fqdn>, admins.unix, NetscapeRoot</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">dn:
cn=configuration,cn=admin-serv-<host>,cn=389
Administration Server,cn=Server
Group,cn=<fqdn>,ou=admins.unix,o=NetscapeRoot</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsServerPort:
9830</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">objectClass:
nsConfig</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">objectClass:
nsAdminConfig</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">objectClass:
nsAdminObject</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">objectClass:
nsDirectoryInfo</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">objectClass:
top</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsClassname:
<a moz-do-not-send="true"
href="mailto:com.netscape.management.admserv.AdminServer@389-admin-1.1.jar@cn=admin-serv-%3chost%3e,cn=389">com.netscape.management.admserv.AdminServer@389-admin-1.1.jar@cn=admin-serv-<host>,cn=389</a>
Administration Server,cn=Server
Group,cn=<fqdn>,ou=admins.unix,o=NetscapeRoot</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">cn:
Configuration</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsDirectoryInfoRef:
cn=Server
Group,cn=<fqdn>,ou=admins.unix,o=NetscapeRoot</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsAdminAccessAddresses:
*</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsSuiteSpotUser:
nobody</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsAdminEnableDSGW:
on</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsAdminCacheLifetime:
600</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsDefaultAcceptLanguage:
en</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsServerAddress:
0.0.0.0</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsAdminOneACLDir:
adminacl</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsErrorLog:
/var/log/dirsrv/admin-serv/error</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsAdminUsers:
/etc/dirsrv/admin-serv/admpw</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsPidLog:
admin-serv.pid</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsAccessLog:
/var/log/dirsrv/admin-serv/access</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsAdminEnableEnduser:
on</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">nsServerSecurity:
on</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);">admin-serv/error
log after restarting admin-serv (also tried restarting
dirsrv / dirsrv-admin):</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">[Wed Feb
08 07:02:35 2012] [notice] caught SIGTERM, shutting down</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">[Wed Feb
08 07:02:36 2012] [notice] SELinux policy enabled; httpd
running as context unconfined_u:system_r:httpd_t:s0</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">[Wed Feb
08 07:02:37 2012] [notice] Access Host filter is: *</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">[Wed Feb
08 07:02:37 2012] [notice] Access Address filter is: *</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">[Wed Feb
08 07:02:38 2012] [notice] Apache/2.2.15 (Unix)
mod_nss/2.2.15 NSS/3.12.9.0 configured -- resuming normal
operations</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">[Wed Feb
08 07:02:38 2012] [notice] Access Host filter is: *</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">[Wed Feb
08 07:02:38 2012] [notice] Access Address filter is: *</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">[Wed Feb
08 07:03:07 2012] [notice] [client <client ip>]
admserv_host_ip_check: ap_get_remote_host could not resolve
<client ip></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">[Wed Feb
08 07:03:07 2012] [notice] [client <client ip>]
admserv_check_authz(): passing [/admin-serv/authenticate] to
the userauth handler</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">[Wed Feb
08 07:17:10 2012] [notice] [client <client ip>]
admserv_host_ip_check: ap_get_remote_host could not resolve
<client ip></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">[Wed Feb
08 07:17:10 2012] [notice] [client <client ip>]
admserv_check_authz(): passing [/admin-serv/authenticate] to
the userauth handler</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);">[Wed Feb
08 07:17:17 2012] [notice] [client <client ip>]
admserv_host_ip_check: ap_get_remote_host could not resolve
<client ip></span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);">I’m
still getting the could not resolve notices, and noticed
that the Access Host filter is still ‘*’, picking up a
default somewhere?</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);">(I
don’t know why it can’t resolve either, nslookup / host can
both resolve ip’s to hostnames and vice versa).</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 12pt; font-family:
"Times New Roman","serif";">Did you
restart the admin server after making this change?<br>
<br>
<br>
<br>
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);">Brett</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"> </span><o:p></o:p></p>
<div>
<div style="border-right: medium none; border-width: 1pt
medium medium; border-style: solid none none; padding: 3pt
0cm 0cm; border-color: -moz-use-text-color;">
<p class="MsoNormal"><b><span style="font-size: 10pt;
font-family:
"Tahoma","sans-serif"; color:
windowtext;" lang="EN-US">From:</span></b><span
style="font-size: 10pt; font-family:
"Tahoma","sans-serif"; color:
windowtext;" lang="EN-US"> Rich Megginson [<a
moz-do-not-send="true"
href="mailto:rmeggins@redhat.com">mailto:rmeggins@redhat.com</a>]
<br>
<b>Sent:</b> 08 February 2012 00:57<br>
<b>To:</b> MATON Brett<br>
<b>Cc:</b> General discussion list for the 389 Directory
server project.<br>
<b>Subject:</b> Re: [389-users] admserv_host_ip_check:
ap_get_remote_host could not resolve</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">On 02/07/2012 03:23 PM, MATON Brett wrote:
<o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US">Hi Rich,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US"> I tried this and got the following error :</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US">Enter LDAP Password:</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US">dn:
cn=configuration,cn=admin-serv-<host>,cn=389
Administration Server,cn=</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US"> Server
Group,cn=<fqdn>,ou=admins.unix,o=NetscapeRoot</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US">changetype: modify</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US">replace: nsAdminAccessAddresses
nsAdminAccessHosts</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US">nsAdminAccessAddresses: *</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US">nsAdminAccessHosts:</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 10pt; font-family:
"Courier New"; color: rgb(31, 73, 125);"
lang="EN-US">ldapmodify: wrong attributeType at line 4,
entry "cn=configuration,cn=admin-serv-<host>,cn=389
Administration Server,cn=Server
Group,cn=<fqdn>,ou=admins.unix,o=NetscapeRoot"</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US">Does this mean anything to you?</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 12pt; font-family:
"Times New Roman","serif";">Yes, a typo
on the wiki page. I've updated the page.<br>
<br>
<br>
<br>
<br>
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US">Thanks,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color: rgb(31, 73, 125);"
lang="EN-US">Brett</span><o:p></o:p></p>
<div>
<div style="border-right: medium none; border-width: 1pt
medium medium; border-style: solid none none; padding: 3pt
0cm 0cm; border-color: -moz-use-text-color;">
<p class="MsoNormal"><b><span style="font-size: 10pt;
font-family:
"Tahoma","sans-serif"; color:
windowtext;" lang="FR">De :</span></b><span
style="font-size: 10pt; font-family:
"Tahoma","sans-serif"; color:
windowtext;" lang="FR"> Rich Megginson [<a
moz-do-not-send="true"
href="mailto:rmeggins@redhat.com">mailto:rmeggins@redhat.com</a>]
<br>
<b>Envoyé :</b> mardi 7 février 2012 15:18<br>
<b>À :</b> General discussion list for the 389 Directory
server project.<br>
<b>Cc :</b> MATON Brett<br>
<b>Objet :</b> Re: [389-users] admserv_host_ip_check:
ap_get_remote_host could not resolve</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">On 02/07/2012 01:05 AM, MATON Brett wrote:
<o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">How can I stop admin
server from logging theses messages?</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">I realize from the
console.conf file that the messages are created because
HostnameLookups is Off.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">My
/etc/dirsrv.admin-serv/httpd.conf file has LogLevel set to
warn, so why is it logging notice messages?</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">I’m probably overlooking
some other configuration file somewhere.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">Any help appreciated</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">As a side note, why is
it whining about name resolution when the configuration
specifically says Don’t do name lookups?</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 12pt; font-family:
"Times New Roman","serif";"><a
moz-do-not-send="true"
href="http://directory.fedoraproject.org/wiki/Howto:AdminServerLDAPMgmt">http://directory.fedoraproject.org/wiki/Howto:AdminServerLDAPMgmt</a><br>
<br>
<br>
<br>
<br>
<br>
</span><o:p></o:p></p>
<p><span style="font-size: 7pt; font-family:
"Verdana","sans-serif"; color: gray;">-------------------------------------------------------------------</span><o:p></o:p></p>
<p class="MsoNormal"><strong><span style="font-size: 7.5pt;
font-family: "Tahoma","sans-serif";
color: rgb(102, 153, 51);">GreeNRB</span></strong><b><span
style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";"><br>
</span></b><em><span style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";">NRB considers
its environmental responsibility and goes for green IT.</span></em><span
style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";"> <br>
<i>May we ask you to consider yours before printing this
e-mail? </i><b> </b></span> <o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size: 7.5pt;
font-family: "Tahoma","sans-serif";
color: rgb(0, 0, 102);">NRB, daring to commit <br>
</span></b><i><span style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";">This e-mail
and any attachments, which may contain information that is
confidential and/or protected by intellectual property
rights, are intended for the exclusive use of the
above-mentioned addressee(s). Any use (including
reproduction, disclosure and whole or partial distribution
in any form whatsoever) of their content is prohibited
without prior authorization of NRB. If you have received
this message by error, please contact the sender promptly
by resending this e-mail back to him (her), or by calling
the above number. Thank you for subsequently deleting this
e-mail and any files attached thereto.</span></i><o:p></o:p></p>
<pre><span style="font-size: 10pt; font-family: "Courier New";"> <o:p></o:p></span></pre>
<pre><span style="font-size: 10pt; font-family: "Courier New";"> <o:p></o:p></span></pre>
<pre><span style="font-size: 10pt; font-family: "Courier New";">--<o:p></o:p></span></pre>
<pre><span style="font-size: 10pt; font-family: "Courier New";">389 users mailing list<o:p></o:p></span></pre>
<pre><span style="font-size: 10pt; font-family: "Courier New";"><a moz-do-not-send="true" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><o:p></o:p></span></pre>
<pre><span style="font-size: 10pt; font-family: "Courier New";"><a moz-do-not-send="true" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a><o:p></o:p></span></pre>
<p class="MsoNormal"><span style="font-size: 12pt; font-family:
"Times New Roman","serif";"> </span><o:p></o:p></p>
<p><span style="font-size: 7pt; font-family:
"Verdana","sans-serif";">-------------------------------------------------------------------</span><o:p></o:p></p>
<p class="MsoNormal"><strong><span style="font-size: 7.5pt;
font-family: "Tahoma","sans-serif";
color: rgb(102, 153, 51);">GreeNRB</span></strong><b><span
style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";"><br>
</span></b><em><span style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";">NRB considers
its environmental responsibility and goes for green IT.</span></em><span
style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";"> <br>
<i>May we ask you to consider yours before printing this
e-mail? </i><b> </b></span> <o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size: 7.5pt;
font-family: "Tahoma","sans-serif";
color: rgb(0, 0, 102);">NRB, daring to commit <br>
</span></b><i><span style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";">This e-mail
and any attachments, which may contain information that is
confidential and/or protected by intellectual property
rights, are intended for the exclusive use of the
above-mentioned addressee(s). Any use (including
reproduction, disclosure and whole or partial distribution
in any form whatsoever) of their content is prohibited
without prior authorization of NRB. If you have received
this message by error, please contact the sender promptly
by resending this e-mail back to him (her), or by calling
the above number. Thank you for subsequently deleting this
e-mail and any files attached thereto.</span></i><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 12pt; font-family:
"Times New Roman","serif";"> </span><o:p></o:p></p>
<p><span style="font-size: 7pt; font-family:
"Verdana","sans-serif";">-------------------------------------------------------------------</span><o:p></o:p></p>
<p class="MsoNormal"><strong><span style="font-size: 7.5pt;
font-family: "Tahoma","sans-serif";
color: rgb(102, 153, 51);">GreeNRB</span></strong><b><span
style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";"><br>
</span></b><em><span style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";">NRB considers
its environmental responsibility and goes for green IT.</span></em><span
style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";"> <br>
<i>May we ask you to consider yours before printing this
e-mail? </i><b> </b></span> <o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size: 7.5pt;
font-family: "Tahoma","sans-serif";
color: rgb(0, 0, 102);">NRB, daring to commit <br>
</span></b><i><span style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";">This e-mail
and any attachments, which may contain information that is
confidential and/or protected by intellectual property
rights, are intended for the exclusive use of the
above-mentioned addressee(s). Any use (including
reproduction, disclosure and whole or partial distribution
in any form whatsoever) of their content is prohibited
without prior authorization of NRB. If you have received
this message by error, please contact the sender promptly
by resending this e-mail back to him (her), or by calling
the above number. Thank you for subsequently deleting this
e-mail and any files attached thereto.</span></i><o:p></o:p></p>
<pre><span style="font-size: 10pt; font-family: "Courier New";"> <o:p></o:p></span></pre>
<pre><span style="font-size: 10pt; font-family: "Courier New";"> <o:p></o:p></span></pre>
<pre><span style="font-size: 10pt; font-family: "Courier New";">--<o:p></o:p></span></pre>
<pre><span style="font-size: 10pt; font-family: "Courier New";">389 users mailing list<o:p></o:p></span></pre>
<pre><span style="font-size: 10pt; font-family: "Courier New";"><a moz-do-not-send="true" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><o:p></o:p></span></pre>
<pre><span style="font-size: 10pt; font-family: "Courier New";"><a moz-do-not-send="true" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a><o:p></o:p></span></pre>
<p class="MsoNormal"><span style="font-size: 12pt; font-family:
"Times New Roman","serif";"> </span><o:p></o:p></p>
<p><span style="font-size: 7pt; font-family:
"Verdana","sans-serif";">-------------------------------------------------------------------</span><o:p></o:p></p>
<p class="MsoNormal"><strong><span style="font-size: 7.5pt;
font-family: "Tahoma","sans-serif";
color: rgb(102, 153, 51);">GreeNRB</span></strong><b><span
style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";"><br>
</span></b><em><span style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";">NRB considers
its environmental responsibility and goes for green IT.</span></em><span
style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif"; color: rgb(102,
153, 51);"> <br>
<i>May we ask you to consider yours before printing this
e-mail? </i><b> </b></span> <o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size: 7.5pt;
font-family: "Tahoma","sans-serif";
color: rgb(0, 0, 102);">NRB, daring to commit <br>
</span></b><i><span style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif";">This e-mail
and any attachments, which may contain information that is
confidential and/or protected by intellectual property
rights, are intended for the exclusive use of the
above-mentioned addressee(s). Any use (including
reproduction, disclosure and whole or partial distribution
in any form whatsoever) of their content is prohibited
without prior authorization of NRB. If you have received
this message by error, please contact the sender promptly
by resending this e-mail back to him (her), or by calling
the above number. Thank you for subsequently deleting this
e-mail and any files attached thereto.</span></i><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 12pt; font-family:
"Times New Roman","serif";"> </span><o:p></o:p></p>
<p><span style="font-size: 7pt; font-family:
"Verdana","sans-serif";">-------------------------------------------------------------------</span><o:p></o:p></p>
<p class="MsoNormal"><strong><span style="font-size: 7.5pt;
font-family: "Tahoma","sans-serif";
color: rgb(102, 153, 51);">GreeNRB</span></strong><b><span
style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif"; color: rgb(102,
153, 51);"><br>
</span></b><em><span style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif"; color: rgb(102,
153, 51);">NRB considers its environmental responsibility
and goes for green IT.</span></em><span style="font-size:
7.5pt; font-family:
"Tahoma","sans-serif"; color: rgb(102,
153, 51);"> <br>
<i>May we ask you to consider yours before printing this
e-mail? </i><b> </b></span> <o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size: 7.5pt;
font-family: "Tahoma","sans-serif";
color: rgb(0, 0, 102);">NRB, daring to commit <br>
</span></b><i><span style="font-size: 7.5pt; font-family:
"Tahoma","sans-serif"; color: rgb(0,
0, 102);">This e-mail and any attachments, which may
contain information that is confidential and/or protected
by intellectual property rights, are intended for the
exclusive use of the above-mentioned addressee(s). Any use
(including reproduction, disclosure and whole or partial
distribution in any form whatsoever) of their content is
prohibited without prior authorization of NRB. If you have
received this message by error, please contact the sender
promptly by resending this e-mail back to him (her), or by
calling the above number. Thank you for subsequently
deleting this e-mail and any files attached thereto.</span></i><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size: 12pt; font-family:
"Times New Roman","serif";"><o:p> </o:p></span></p>
</div>
<!--DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"-->
<meta name="GENERATOR" content="TX_HTML32 11.0.211.501">
<span style="font-family: 'Verdana'; color: rgb(128, 128, 128);
font-size: 7pt;">
<p><span style="font-family: 'Verdana'; color: rgb(128, 128,
128); font-size: 7pt;">-------------------------------------------------------------------</span></p>
<span style="font-family: 'Verdana'; color: rgb(128, 128, 128);
font-size: 6pt;">
<p style="margin: 0cm 0cm 0pt;" class="MsoNormal"><font
face="tahoma,arial,helvetica,sans-serif"><font size="1"><font
color="#669933"><span style="" lang="EN-GB"><strong>GreeNRB<br>
</strong><em>NRB considers its environmental
responsibility and goes for green IT.</em> <br>
</span><i><span style="" lang="EN-GB">May we ask you
to consider yours before printing this e-mail? </span></i><b><span
style="" lang="EN-GB"> </span></b></font></font></font>
</p>
<p style="margin: 0cm 0cm 0pt;" class="MsoNormal"><font
face="tahoma,arial,helvetica,sans-serif"><font size="1"><font
color="#000066"><b><span style="" lang="EN-GB">NRB,
daring to commit <br>
</span></b><i><span style="" lang="EN-GB">This
e-mail and any attachments, which may contain
information that is confidential and/or protected
by intellectual property rights, are intended for
the exclusive use of the above-mentioned
addressee(s). Any use (including reproduction,
disclosure and whole or partial distribution in
any form whatsoever) of their content is
prohibited without prior authorization of NRB. If
you have received this message by error, please
contact the sender promptly by resending this
e-mail back to him (her), or by calling the above
number. Thank you for subsequently deleting this
e-mail and any files attached thereto.</span></i></font></font></font></p>
</span></span>
</blockquote>
<br>
</body>
</html>