Hello all

 

I have come across an issue  when I restart the dirsrv-admin process or the actual 389 server where  I am unable to login to the 389-console with my user ID  and get the following message:

 
Cannot logon because of an incorrect User ID, Incorrect Password or Directory problem
HttpException:
Response: HTTP/1.1 401 Authorization Required
Status: 401
URL: http://server:9830/admin-serv/authenticate

 

 

If I then login using the built-in admin account, close the console and then try to login using my user ID it now works. I have built 389 servers at multiple sites and they all have the same issue. Can people test if they have the same issue or if they have any ways that this can be solved?

 

Here are some extracts from /var/log/dirsrv/admin-serv/error (it has been altered slightly to remove ip’s and domain names.)

 

# failed login with my user account

[Thu Sep 17 11:16:08 2015] [notice] [client xxx.xxx.xxx.xxx] admserv_host_ip_check: ap_get_remote_host could not resolve xxx.xxx.xxx.xxx

[Thu Sep 17 11:16:08 2015] [error] [client xxx.xxx.xxx.xxx] user test1 not found: /admin-serv/authenticate         

# successful login as admin

[Thu Sep 17 11:33:50 2015] [notice] [client xxx.xxx.xxx.xxx] admserv_host_ip_check: ap_get_remote_host could not resolve xxx.xxx.xxx.xxx

[Thu Sep 17 11:33:50 2015] [notice] [client xxx.xxx.xxx.xxx] admserv_check_authz(): passing [/admin-serv/authenticate] to the userauth handler

# successful login with my user account

[Thu Sep 17 11:34:41 2015] [notice] [client xxx.xxx.xxx.xxx] admserv_host_ip_check: ap_get_remote_host could not resolve xxx.xxx.xxx.xxx

[Thu Sep 17 11:34:41 2015] [notice] [client xxx.xxx.xxx.xxx] admserv_check_authz(): passing [/admin-serv/authenticate] to the userauth handler

 

 

When starting the server the below lines appear in the  log

[Thu Sep 17 11:09:32 2015] [notice] caught SIGTERM, shutting down

[Thu Sep 17 11:10:05 2015] [notice] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0

[Thu Sep 17 11:10:06 2015] [notice] Access Host filter is: *.domain.com

[Thu Sep 17 11:10:06 2015] [notice] Access Address filter is: *

[Thu Sep 17 11:10:07 2015] [notice] Apache/2.2.15 (Unix) configured -- resuming normal operations

[Thu Sep 17 11:10:07 2015] [notice] Access Host filter is: *.domain.com

[Thu Sep 17 11:10:07 2015] [notice] Access Address filter is: *

 

 

 

389 packages installed

389-ds-console-doc-1.2.6-1.el6.noarch

389-console-1.1.7-1.el6.noarch

389-adminutil-1.1.19-1.el6.x86_64

389-admin-1.1.35-1.el6.x86_64

389-admin-console-1.1.8-1.el6.noarch

389-dsgw-1.1.11-1.el6.x86_64

389-ds-console-1.2.6-1.el6.noarch

389-ds-base-libs-1.2.11.15-48.el6_6.x86_64

389-ds-base-1.2.11.15-48.el6_6.x86_64

389-admin-console-doc-1.1.8-1.el6.noarch

389-ds-1.2.2-1.el6.noarch

 

Any help would be much appreciated

 

Regards

 

Rob

 

 


This message (and any attachments) is for the recipient only. NERC is subject to the Freedom of Information Act 2000 and the contents of this email and any reply you make may be disclosed by NERC unless it is exempt from release under the Act. Any material supplied to NERC may be stored in an electronic records management system.