2:04 p.m.
Cobbler 2.4.0.1 on RHEL 6.5
The cobbler web interface rejects my login via LDAP.
URL of pastebin file: http://pastebin.com/WXNQy17Z
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Stuart J. Newman
Engineer 4; Systems
Solar Dynamics Observatory (SDO)
Honeywell Technology Solutions Inc
NASA/Goddard Space Flight Center
Building 14, Room E222
Mail Stop 428.2
Greenbelt, MD 20771
Office: (301) 286-5145
Mobile: (443) 878-0280
E-Mail: Stuart.J.Newman@nasa.gov<mailto:Stuart.J.Newman@nasa.gov>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
NOTICE: This communication, including any attachment, contains information that may be
confidential or privileged, and is intended solely for the entity or individual to whom it
is addressed. If you are not the intended recipient, please notify the sender at once,
and you should delete this message and are hereby notified that any disclosure, copying,
or distribution of this message is strictly prohibited. Nothing in this email, including
any attachment, is intended to be a legally binding signature.
2:40 p.m.
On 15.01.2014 [20:04:21 +0000], Newman, Stuart J. (GSFC-444.0)[HONEYWELL TECHNOLOGY
SOLUTIONS INC] wrote:
Cobbler 2.4.0.1 on RHEL 6.5
The cobbler web interface rejects my login via LDAP.
URL of pastebin file: http://pastebin.com/WXNQy17Z
I remember hitting something similar when I reinstalled my server. Are
you sure that the LDAP server is reachable (for instance, I'm not sure
if putting in two servers like you have works?). You can put in some
debugging in the source, probably, to see where exactly it fails, but I
think that error code means it's unable to open the connection.
Oh, I might also have had to turn off TLS, not sure (ldap_tls: 0)
-Nish
8:40 a.m.
I tried both your suggestions without success.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Stuart J. Newman
Engineer 4; Systems
Solar Dynamics Observatory (SDO)
Honeywell Technology Solutions Inc
NASA/Goddard Space Flight Center
Building 14, Room E222
Mail Stop 428.2
Greenbelt, MD 20771
Office: (301) 286-5145
Mobile: (443) 878-0280
E-Mail: Stuart.J.Newman@nasa.gov
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
NOTICE: This communication, including any attachment, contains information that may be
confidential or privileged, and is intended solely for the entity or individual to whom it
is addressed. If you are not the intended recipient, please notify the sender at once,
and you should delete this message and are hereby notified that any disclosure, copying,
or distribution of this message is strictly prohibited. Nothing in this email, including
any attachment, is intended to be a legally binding signature.
-----Original Message-----
From: Nishanth Aravamudan [mailto:nacc@linux.vnet.ibm.com]
Sent: Wednesday, January 15, 2014 15:41
To: Newman, Stuart J. (GSFC-444.0)[HONEYWELL TECHNOLOGY SOLUTIONS INC]
Cc: cobbler mailing list
Subject: Re: [cobbler] Login issue
On 15.01.2014 [20:04:21 +0000], Newman, Stuart J. (GSFC-444.0)[HONEYWELL TECHNOLOGY
SOLUTIONS INC] wrote:
Cobbler 2.4.0.1 on RHEL 6.5
The cobbler web interface rejects my login via LDAP.
URL of pastebin file: http://pastebin.com/WXNQy17Z
I remember hitting something similar when I reinstalled my server. Are you sure that the
LDAP server is reachable (for instance, I'm not sure if putting in two servers like
you have works?). You can put in some debugging in the source, probably, to see where
exactly it fails, but I think that error code means it's unable to open the
connection.
Oh, I might also have had to turn off TLS, not sure (ldap_tls: 0)
-Nish
9:23 a.m.
I am not a python programmer, so I don't know how to debug this.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Stuart J. Newman
Engineer 4; Systems
Solar Dynamics Observatory (SDO)
Honeywell Technology Solutions Inc
NASA/Goddard Space Flight Center
Building 14, Room E222
Mail Stop 428.2
Greenbelt, MD 20771
Office: (301) 286-5145
Mobile: (443) 878-0280
E-Mail: Stuart.J.Newman@nasa.gov
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
NOTICE: This communication, including any attachment, contains information that may be
confidential or privileged, and is intended solely for the entity or individual to whom it
is addressed. If you are not the intended recipient, please notify the sender at once,
and you should delete this message and are hereby notified that any disclosure, copying,
or distribution of this message is strictly prohibited. Nothing in this email, including
any attachment, is intended to be a legally binding signature.
-----Original Message-----
From: cobbler-bounces(a)lists.fedorahosted.org
[mailto:cobbler-bounces@lists.fedorahosted.org] On Behalf Of Newman, Stuart J.
(GSFC-444.0)[HONEYWELL TECHNOLOGY SOLUTIONS INC]
Sent: Thursday, January 16, 2014 09:40
To: Nishanth Aravamudan
Cc: cobbler mailing list
Subject: Re: [cobbler] Login issue
I tried both your suggestions without success.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Stuart J. Newman
Engineer 4; Systems
Solar Dynamics Observatory (SDO)
Honeywell Technology Solutions Inc
NASA/Goddard Space Flight Center
Building 14, Room E222
Mail Stop 428.2
Greenbelt, MD 20771
Office: (301) 286-5145
Mobile: (443) 878-0280
E-Mail: Stuart.J.Newman@nasa.gov
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
NOTICE: This communication, including any attachment, contains information that may be
confidential or privileged, and is intended solely for the entity or individual to whom it
is addressed. If you are not the intended recipient, please notify the sender at once,
and you should delete this message and are hereby notified that any disclosure, copying,
or distribution of this message is strictly prohibited. Nothing in this email, including
any attachment, is intended to be a legally binding signature.
-----Original Message-----
From: Nishanth Aravamudan [mailto:nacc@linux.vnet.ibm.com]
Sent: Wednesday, January 15, 2014 15:41
To: Newman, Stuart J. (GSFC-444.0)[HONEYWELL TECHNOLOGY SOLUTIONS INC]
Cc: cobbler mailing list
Subject: Re: [cobbler] Login issue
On 15.01.2014 [20:04:21 +0000], Newman, Stuart J. (GSFC-444.0)[HONEYWELL TECHNOLOGY
SOLUTIONS INC] wrote:
Cobbler 2.4.0.1 on RHEL 6.5
The cobbler web interface rejects my login via LDAP.
URL of pastebin file: http://pastebin.com/WXNQy17Z
I remember hitting something similar when I reinstalled my server. Are you sure that the
LDAP server is reachable (for instance, I'm not sure if putting in two servers like
you have works?). You can put in some debugging in the source, probably, to see where
exactly it fails, but I think that error code means it's unable to open the
connection.
Oh, I might also have had to turn off TLS, not sure (ldap_tls: 0)
-Nish
_______________________________________________
cobbler mailing list
cobbler(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/cobbler
12:12 p.m.
On 16.01.2014 [15:23:50 +0000], Newman, Stuart J. (GSFC-444.0)[HONEYWELL TECHNOLOGY
SOLUTIONS INC] wrote:
I am not a python programmer, so I don't know how to debug this.
Here's my rough guide to what I'd look for:
The traceback.print_exc() call in
/usr/lib/python2.6/site-packages/cobbler/modules/authn_ldap.py::authenticate()
line 104 in v2.4, is:
tls = str(tls).lower()
if port != '636':
if tls in [ "on", "true", "yes", "1" ]:
try:
dir.start_tls_s()
except:
traceback.print_exc()
return False
Which I think means that tls is still on, but tls fails to connect. So
you might have changed the setting without restarting cobblerd.
Thanks,
Nish
9:01 a.m.
The problem was a sebool that needed to be set. Setsebool -P cobbler_can_network_connect
1.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Stuart J. Newman
Engineer 4; Systems
Solar Dynamics Observatory (SDO)
Honeywell Technology Solutions Inc
NASA/Goddard Space Flight Center
Building 14, Room E222
Mail Stop 428.2
Greenbelt, MD 20771
Office: (301) 286-5145
Mobile: (443) 878-0280
E-Mail: Stuart.J.Newman@nasa.gov
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
NOTICE: This communication, including any attachment, contains information that may be
confidential or privileged, and is intended solely for the entity or individual to whom it
is addressed. If you are not the intended recipient, please notify the sender at once,
and you should delete this message and are hereby notified that any disclosure, copying,
or distribution of this message is strictly prohibited. Nothing in this email, including
any attachment, is intended to be a legally binding signature.
-----Original Message-----
From: Nishanth Aravamudan [mailto:nacc@linux.vnet.ibm.com]
Sent: Thursday, January 16, 2014 13:13
To: Newman, Stuart J. (GSFC-444.0)[HONEYWELL TECHNOLOGY SOLUTIONS INC]
Cc: cobbler mailing list
Subject: Re: [cobbler] Login issue
On 16.01.2014 [15:23:50 +0000], Newman, Stuart J. (GSFC-444.0)[HONEYWELL TECHNOLOGY
SOLUTIONS INC] wrote:
I am not a python programmer, so I don't know how to debug this.
Here's my rough guide to what I'd look for:
The traceback.print_exc() call in
/usr/lib/python2.6/site-packages/cobbler/modules/authn_ldap.py::authenticate()
line 104 in v2.4, is:
tls = str(tls).lower()
if port != '636':
if tls in [ "on", "true", "yes", "1" ]:
try:
dir.start_tls_s()
except:
traceback.print_exc()
return False
Which I think means that tls is still on, but tls fails to connect. So you might have
changed the setting without restarting cobblerd.
Thanks,
Nish
12:08 p.m.
On 16.01.2014 [14:40:24 +0000], Newman, Stuart J. (GSFC-444.0)[HONEYWELL TECHNOLOGY
SOLUTIONS INC] wrote:
I tried both your suggestions without success.
To be clear, you attempted to manually use any of several LDAP clients
from the Cobbler server and they connected/searched correctly?
And after you turned off tls, you restarted cobblerd?
Thanks,
Nish
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Stuart J. Newman
Engineer 4; Systems
Solar Dynamics Observatory (SDO)
Honeywell Technology Solutions Inc
NASA/Goddard Space Flight Center
Building 14, Room E222
Mail Stop 428.2
Greenbelt, MD 20771
Office: (301) 286-5145
Mobile: (443) 878-0280
E-Mail: Stuart.J.Newman@nasa.gov
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
NOTICE: This communication, including any attachment, contains information that may be
confidential or privileged, and is intended solely for the entity or individual to whom it
is addressed. If you are not the intended recipient, please notify the sender at once,
and you should delete this message and are hereby notified that any disclosure, copying,
or distribution of this message is strictly prohibited. Nothing in this email, including
any attachment, is intended to be a legally binding signature.
-----Original Message-----
From: Nishanth Aravamudan [mailto:nacc@linux.vnet.ibm.com]
Sent: Wednesday, January 15, 2014 15:41
To: Newman, Stuart J. (GSFC-444.0)[HONEYWELL TECHNOLOGY SOLUTIONS INC]
Cc: cobbler mailing list
Subject: Re: [cobbler] Login issue
On 15.01.2014 [20:04:21 +0000], Newman, Stuart J. (GSFC-444.0)[HONEYWELL TECHNOLOGY
SOLUTIONS INC] wrote:
> Cobbler 2.4.0.1 on RHEL 6.5
>
> The cobbler web interface rejects my login via LDAP.
>
> URL of pastebin file: http://pastebin.com/WXNQy17Z
I remember hitting something similar when I reinstalled my server. Are you sure that the
LDAP server is reachable (for instance, I'm not sure if putting in two servers like
you have works?). You can put in some debugging in the source, probably, to see where
exactly it fails, but I think that error code means it's unable to open the
connection.
Oh, I might also have had to turn off TLS, not sure (ldap_tls: 0)
-Nish
3775
days inactive
3777
days old
cobbler@lists.fedorahosted.org
6 comments
2 participants
participants (2)
-
Newman, Stuart J. (GSFC-428.0)[HONEYWELL TECHNOLOGY SOLUTIONS INC] -
Nishanth Aravamudan