<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=iso-8859-1"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
span.Preacute1
{mso-style-name:"Pré1\,formaté1\,HTML Car1";
mso-style-priority:99;
mso-style-link:"Pré\,formaté\,HTML";
font-family:Consolas;
color:black;}
p.Preacute, li.Preacute, div.Preacute
{mso-style-name:"Pré\,formaté\,HTML";
mso-style-priority:99;
mso-style-link:"Pré1\,formaté1\,HTML Car1";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
p.Textedebulles, li.Textedebulles, div.Textedebulles
{mso-style-name:"Texte de bulles";
mso-style-link:"Texte de bulles Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
span.TextedebullesCar
{mso-style-name:"Texte de bulles Car";
mso-style-priority:99;
mso-style-link:"Texte de bulles";
font-family:"Tahoma","sans-serif";
color:black;}
span.EmailStyle26
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle27
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle28
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle29
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle30
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle33
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-GB link=blue vlink=purple><div class=WordSection1><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'> Rich Megginson [mailto:rmeggins@redhat.com] <br><b>Sent:</b> 08 February 2012 21:41<br><b>To:</b> MATON Brett<br><b>Cc:</b> General discussion list for the 389 Directory server project.<br><b>Subject:</b> Re: [389-users] admserv_host_ip_check: ap_get_remote_host could not resolve<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>On 02/08/2012 01:27 PM, MATON Brett wrote: <o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Hi Rich,</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'> I’ve got no nsAdminAccessHost lines in that config file, only a configuration.nsAdminAccessAddresses entry.</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>Ok. Looks like it will refuse to leave </span><span lang=EN-US style='font-size:12.0pt;font-family:"Times New Roman","serif"'>nsAdminAccessHost - if missing, it defaults to your local hostname.<br><br>The error message is coming because this is returning NULL:<br> const char *maxdns = ap_get_remote_host(r->connection, r->per_dir_config,<br> REMOTE_HOST, NULL);<br><br>Here is the documentation for <a href="http://www.rcbowen.com/httpd_api_docs/group__get__remote__host.html">http://www.rcbowen.com/httpd_api_docs/group__get__remote__host.html</a> that explains how/why this function returns NULL.<br><br></span><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Ok, so dirsrv is failing to resolve the host through that call, what I don’t understand is why.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>If I use nslookup/host on the </span><span lang=EN-US style='color:#1F497D'> </span><span lang=EN-US style='color:#1F497D'>ip address it can’t resolve it works fine?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>(Addresses anonymised)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>[Thu Feb 09 09:29:43 2012] [notice] [client 192.168.1.1] admserv_host_ip_check: ap_get_remote_host could not resolve 192.168.1.1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'># nslookup 192.168.1.1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>Server: 192.168.1.2<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>Address: 192.168.1.2#53<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>1.1.168.192.in-addr.arpa name = desktop.my.net.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'># nslookup desktop.my.net<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>Server: 192.168.1.2<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>Address: 192.168.1.2#53<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>Name: desktop.my.net<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>Address: 192.168.1.1<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>$ host desktop.my.net<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>Desktop.my.net has address 192.168.1.1<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>$ host 192.168.1.1<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>1.1.168.192.in-addr.arpa domain name pointer desktop.my.net.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid windowtext 1.0pt;padding:3.0pt 0cm 0cm 0cm;border-color:-moz-use-text-color -moz-use-text-color'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>De :</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'> Rich Megginson [</span><span lang=FR style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'><a href="mailto:rmeggins@redhat.com"><span lang=EN-GB>mailto:rmeggins@redhat.com</span></a></span><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>] <br><b>Envoyé :</b> mercredi 8 février 2012 21:15<br><b>À :</b> MATON Brett<br><b>Cc :</b> General discussion list for the 389 Directory server project.<br><b>Objet :</b> Re: [389-users] admserv_</span><span lang=FR style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>host_ip_check: ap_get_remote_host could not resolve</span><o:p></o:p></p></div></div><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>On 02/08/2012 12:09 PM, MATON Brett wrote: <o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'>Hi Rick,</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'> I restarted both dirsrv and dirsrv-admin, problem persists though.</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>ok - try this<br>service dirsrv-admin stop<br>edit /etc/dirsrv/admin-serv/local.conf - remove any nsAdminAccessHost lines<br>service dirsrv-admin start<br><br><br></span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'> </span><o:p></o:p></p><div><div style='border:none;border-top:solid windowtext 1.0pt;padding:3.0pt 0cm 0cm 0cm;border-color:-moz-use-text-color'><p class=MsoNormal><b><span lang=FR style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>De :</span></b><span lang=FR style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'> Rich Megginson [<a href="mailto:rmeggins@redhat.com">mailto:rmeggins@redhat.com</a>] <br><b>Envoyé :</b> mercredi 8 février 2012 16:39<br><b>À :</b> General discussion list for the 389 Directory server project.<br><b>Cc :</b> MATON Brett<br><b>Objet :</b> Re: [389-users] admserv_host_ip_check: ap_get_remote_host could not resolve</span><o:p></o:p></p></div></div><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>On 02/08/2012 08:19 AM, MATON Brett wrote: <o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'>Thanks the update to the wiki solved the “wrong attribute type” error on nsAdminAccessHosts.</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'>Configuration as it stands, with no nsAdminAccessHosts attribure:</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'># configuration, admin-serv-<host>, 389 Administration Server, Server Gro</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>up, <fqdn>, admins.unix, NetscapeRoot</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>dn: cn=configuration,cn=admin-serv-<host>,cn=389 Administration Server,cn=Server Group,cn=<fqdn>,ou=admins.unix,o=NetscapeRoot</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsServerPort: 9830</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>objectClass: nsConfig</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>objectClass: nsAdminConfig</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>objectClass: nsAdminObject</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>objectClass: nsDirectoryInfo</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>objectClass: top</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsClassname: <a href="mailto:com.netscape.management.admserv.AdminServer@389-admin-1.1.jar@cn=admin-serv-%3chost%3e,cn=389">com.netscape.management.admserv.AdminServer@389-admin-1.1.jar@cn=admin-serv-<host>,cn=389</a> Administration Server,cn=Server Group,cn=<fqdn>,ou=admins.unix,o=NetscapeRoot</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>cn: Configuration</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsDirectoryInfoRef: cn=Server Group,cn=<fqdn>,ou=admins.unix,o=NetscapeRoot</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsAdminAccessAddresses: *</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsSuiteSpotUser: nobody</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsAdminEnableDSGW: on</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsAdminCacheLifetime: 600</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsDefaultAcceptLanguage: en</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsServerAddress: 0.0.0.0</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsAdminOneACLDir: adminacl</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsErrorLog: /var/log/dirsrv/admin-serv/error</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsAdminUsers: /etc/dirsrv/admin-serv/admpw</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsPidLog: admin-serv.pid</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsAccessLog: /var/log/dirsrv/admin-serv/access</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsAdminEnableEnduser: on</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsServerSecurity: on</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'>admin-serv/error log after restarting admin-serv (also tried restarting dirsrv / dirsrv-admin):</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>[Wed Feb 08 07:02:35 2012] [notice] caught SIGTERM, shutting down</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>[Wed Feb 08 07:02:36 2012] [notice] SELinux policy enabled; httpd running as context unconfined_u:system_r:httpd_t:s0</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>[Wed Feb 08 07:02:37 2012] [notice] Access Host filter is: *</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>[Wed Feb 08 07:02:37 2012] [notice] Access Address filter is: *</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>[Wed Feb 08 07:02:38 2012] [notice] Apache/2.2.15 (Unix) mod_nss/2.2.15 NSS/3.12.9.0 configured -- resuming normal operations</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>[Wed Feb 08 07:02:38 2012] [notice] Access Host filter is: *</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>[Wed Feb 08 07:02:38 2012] [notice] Access Address filter is: *</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>[Wed Feb 08 07:03:07 2012] [notice] [client <client ip>] admserv_host_ip_check: ap_get_remote_host could not resolve <client ip></span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>[Wed Feb 08 07:03:07 2012] [notice] [client <client ip>] admserv_check_authz(): passing [/admin-serv/authenticate] to the userauth handler</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>[Wed Feb 08 07:17:10 2012] [notice] [client <client ip>] admserv_host_ip_check: ap_get_remote_host could not resolve <client ip></span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>[Wed Feb 08 07:17:10 2012] [notice] [client <client ip>] admserv_check_authz(): passing [/admin-serv/authenticate] to the userauth handler</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>[Wed Feb 08 07:17:17 2012] [notice] [client <client ip>] admserv_host_ip_check: ap_get_remote_host could not resolve <client ip></span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'>I’m still getting the could not resolve notices, and noticed that the Access Host filter is still ‘*’, picking up a default somewhere?</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'>(I don’t know why it can’t resolve either, nslookup / host can both resolve ip’s to hostnames and vice versa).</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>Did you restart the admin server after making this change?<br><br><br><br></span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'>Brett</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><div><div style='border:none;border-top:solid windowtext 1.0pt;padding:3.0pt 0cm 0cm 0cm;border-color:-moz-use-text-color'><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'> Rich Megginson [<a href="mailto:rmeggins@redhat.com">mailto:rmeggins@redhat.com</a>] <br><b>Sent:</b> 08 February 2012 00:57<br><b>To:</b> MATON Brett<br><b>Cc:</b> General discussion list for the 389 Directory server project.<br><b>Subject:</b> Re: [389-users] admserv_host_ip_check: ap_get_remote_host could not resolve</span><o:p></o:p></p></div></div><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>On 02/07/2012 03:23 PM, MATON Brett wrote: <o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Hi Rich,</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'> I tried this and got the following error :</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>Enter LDAP Password:</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>dn: cn=configuration,cn=admin-serv-<host>,cn=389 Administration Server,cn=</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'> Server Group,cn=<fqdn>,ou=admins.unix,o=NetscapeRoot</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>changetype: modify</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>replace: nsAdminAccessAddresses nsAdminAccessHosts</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsAdminAccessAddresses: *</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>nsAdminAccessHosts:</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#1F497D'>ldapmodify: wrong attributeType at line 4, entry "cn=configuration,cn=admin-serv-<host>,cn=389 Administration Server,cn=Server Group,cn=<fqdn>,ou=admins.unix,o=NetscapeRoot"</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Does this mean anything to you?</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>Yes, a typo on the wiki page. I've updated the page.<br><br><br><br><br></span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Thanks,</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Brett</span><o:p></o:p></p><div><div style='border:none;border-top:solid windowtext 1.0pt;padding:3.0pt 0cm 0cm 0cm;border-color:-moz-use-text-color'><p class=MsoNormal><b><span lang=FR style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>De :</span></b><span lang=FR style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'> Rich Megginson [<a href="mailto:rmeggins@redhat.com">mailto:rmeggins@redhat.com</a>] <br><b>Envoyé :</b> mardi 7 février 2012 15:18<br><b>À :</b> General discussion list for the 389 Directory server project.<br><b>Cc :</b> MATON Brett<br><b>Objet :</b> Re: [389-users] admserv_host_ip_check: ap_get_remote_host could not resolve</span><o:p></o:p></p></div></div><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>On 02/07/2012 01:05 AM, MATON Brett wrote: <o:p></o:p></p><p class=MsoNormal><span lang=EN-US>How can I stop admin server from logging theses messages?</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US>I realize from the console.conf file that the messages are created because HostnameLookups is Off.</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US>My /etc/dirsrv.admin-serv/httpd.conf file has LogLevel set to warn, so why is it logging notice messages?</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US>I’m probably overlooking some other configuration file somewhere.</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US>Any help appreciated</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US>As a side note, why is it whining about name resolution when the configuration specifically says Don’t do name lookups?</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><a href="http://directory.fedoraproject.org/wiki/Howto:AdminServerLDAPMgmt">http://directory.fedoraproject.org/wiki/Howto:AdminServerLDAPMgmt</a><br><br><br><br><br><br></span><o:p></o:p></p><p><span style='font-size:7.0pt;font-family:"Verdana","sans-serif";color:gray'>-------------------------------------------------------------------</span><o:p></o:p></p><p class=MsoNormal><strong><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#669933'>GreeNRB</span></strong><b><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'><br></span></b><em><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'>NRB considers its environmental responsibility and goes for green IT.</span></em><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'> <br><i>May we ask you to consider yours before printing this e-mail? </i><b> </b></span> <o:p></o:p></p><p class=MsoNormal><b><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#000066'>NRB, daring to commit <br></span></b><i><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'>This e-mail and any attachments, which may contain information that is confidential and/or protected by intellectual property rights, are intended for the exclusive use of the above-mentioned addressee(s). Any use (including reproduction, disclosure and whole or partial distribution in any form whatsoever) of their content is prohibited without prior authorization of NRB. If you have received this message by error, please contact the sender promptly by resending this e-mail back to him (her), or by calling the above number. Thank you for subsequently deleting this e-mail and any files attached thereto.</span></i><o:p></o:p></p><pre><span style='font-size:10.0pt;font-family:"Courier New"'> <o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'> <o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>--<o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>389 users mailing list<o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'><a href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'><a href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a><o:p></o:p></span></pre><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> </span><o:p></o:p></p><p><span style='font-size:7.0pt;font-family:"Verdana","sans-serif"'>-------------------------------------------------------------------</span><o:p></o:p></p><p class=MsoNormal><strong><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#669933'>GreeNRB</span></strong><b><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'><br></span></b><em><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'>NRB considers its environmental responsibility and goes for green IT.</span></em><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'> <br><i>May we ask you to consider yours before printing this e-mail? </i><b> </b></span> <o:p></o:p></p><p class=MsoNormal><b><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#000066'>NRB, daring to commit <br></span></b><i><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'>This e-mail and any attachments, which may contain information that is confidential and/or protected by intellectual property rights, are intended for the exclusive use of the above-mentioned addressee(s). Any use (including reproduction, disclosure and whole or partial distribution in any form whatsoever) of their content is prohibited without prior authorization of NRB. If you have received this message by error, please contact the sender promptly by resending this e-mail back to him (her), or by calling the above number. Thank you for subsequently deleting this e-mail and any files attached thereto.</span></i><o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> </span><o:p></o:p></p><p><span style='font-size:7.0pt;font-family:"Verdana","sans-serif"'>-------------------------------------------------------------------</span><o:p></o:p></p><p class=MsoNormal><strong><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#669933'>GreeNRB</span></strong><b><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'><br></span></b><em><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'>NRB considers its environmental responsibility and goes for green IT.</span></em><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'> <br><i>May we ask you to consider yours before printing this e-mail? </i><b> </b></span> <o:p></o:p></p><p class=MsoNormal><b><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#000066'>NRB, daring to commit <br></span></b><i><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'>This e-mail and any attachments, which may contain information that is confidential and/or protected by intellectual property rights, are intended for the exclusive use of the above-mentioned addressee(s). Any use (including reproduction, disclosure and whole or partial distribution in any form whatsoever) of their content is prohibited without prior authorization of NRB. If you have received this message by error, please contact the sender promptly by resending this e-mail back to him (her), or by calling the above number. Thank you for subsequently deleting this e-mail and any files attached thereto.</span></i><o:p></o:p></p><pre><span style='font-size:10.0pt;font-family:"Courier New"'> <o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'> <o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>--<o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'>389 users mailing list<o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'><a href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><o:p></o:p></span></pre><pre><span style='font-size:10.0pt;font-family:"Courier New"'><a href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a><o:p></o:p></span></pre><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> </span><o:p></o:p></p><p><span style='font-size:7.0pt;font-family:"Verdana","sans-serif"'>-------------------------------------------------------------------</span><o:p></o:p></p><p class=MsoNormal><strong><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#669933'>GreeNRB</span></strong><b><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'><br></span></b><em><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'>NRB considers its environmental responsibility and goes for green IT.</span></em><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#669933'> <br><i>May we ask you to consider yours before printing this e-mail? </i><b> </b></span> <o:p></o:p></p><p class=MsoNormal><b><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#000066'>NRB, daring to commit <br></span></b><i><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif"'>This e-mail and any attachments, which may contain information that is confidential and/or protected by intellectual property rights, are intended for the exclusive use of the above-mentioned addressee(s). Any use (including reproduction, disclosure and whole or partial distribution in any form whatsoever) of their content is prohibited without prior authorization of NRB. If you have received this message by error, please contact the sender promptly by resending this e-mail back to him (her), or by calling the above number. Thank you for subsequently deleting this e-mail and any files attached thereto.</span></i><o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> </span><o:p></o:p></p><p><span style='font-size:7.0pt;font-family:"Verdana","sans-serif"'>-------------------------------------------------------------------</span><o:p></o:p></p><p class=MsoNormal><strong><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#669933'>GreeNRB</span></strong><b><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#669933'><br></span></b><em><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#669933'>NRB considers its environmental responsibility and goes for green IT.</span></em><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#669933'> <br><i>May we ask you to consider yours before printing this e-mail? </i><b> </b></span> <o:p></o:p></p><p class=MsoNormal><b><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#000066'>NRB, daring to commit <br></span></b><i><span style='font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#000066'>This e-mail and any attachments, which may contain information that is confidential and/or protected by intellectual property rights, are intended for the exclusive use of the above-mentioned addressee(s). Any use (including reproduction, disclosure and whole or partial distribution in any form whatsoever) of their content is prohibited without prior authorization of NRB. If you have received this message by error, please contact the sender promptly by resending this e-mail back to him (her), or by calling the above number. Thank you for subsequently deleting this e-mail and any files attached thereto.</span></i><o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div><!--DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"--><meta name="GENERATOR" content="TX_HTML32 11.0.211.501" /><span style="FONT-FAMILY: 'Verdana'; COLOR: #808080; FONT-SIZE: 7pt"><p><span style="FONT-FAMILY: 'Verdana'; COLOR: #808080; FONT-SIZE: 7pt">-------------------------------------------------------------------</span></p><span style="FONT-FAMILY: 'Verdana'; COLOR: #808080; FONT-SIZE: 6pt"><p style="MARGIN: 0cm 0cm 0pt" class="MsoNormal"><font face="tahoma,arial,helvetica,sans-serif"><font size="1"><font color="#669933"><span style="FONT-FAMILY: " lang="EN-GB"><strong>GreeNRB<br /></strong><em>NRB considers its environmental responsibility and goes for green IT.</em> <br /></span><i><span style="FONT-FAMILY: " lang="EN-GB">May we ask you to consider yours before printing this e-mail? </span></i><b><span style="FONT-FAMILY: " lang="EN-GB"> </span></b></font></font></font> </p><p><font size="1"></font></p><p style="MARGIN: 0cm 0cm 0pt" class="MsoNormal"><font face="tahoma,arial,helvetica,sans-serif"><font size="1"><font color="#000066"><b><span style="FONT-FAMILY: " lang="EN-GB">NRB, daring to commit <br /></span></b><i><span style="FONT-FAMILY: " lang="EN-GB">This e-mail and any attachments, which may contain information that is confidential and/or protected by intellectual property rights, are intended for the exclusive use of the above-mentioned addressee(s). Any use (including reproduction, disclosure and whole or partial distribution in any form whatsoever) of their content is prohibited without prior authorization of NRB. If you have received this message by error, please contact the sender promptly by resending this e-mail back to him (her), or by calling the above number. Thank you for subsequently deleting this e-mail and any files attached thereto.</span></i></font></font></font></p></span></span>
</body></html>