[Fedora-directory-users] New install, not authenticating

Rich Megginson rmeggins at redhat.com
Thu Feb 7 20:51:15 UTC 2008


Hendry, Chris wrote:
>
>         Upgraded Fedora-ds-1.1 from 1.0.
>
How?  What exactly did you do?
>
>         Version 1.0 worked great, no problems, I upgraded, ran the
>         setup-ds-admin.pl in the most default way.
>
setup-ds-admin.pl is only for new servers.  You should use 
migrate-ds-admin.pl to upgrade from 1.0.4 to 1.1.
>
>         Clients can not login when pointing to this new DS.
>
>          
>
>         Focus line in /var/log/dirsrv/slapd-servername/access
>
>          [07/Feb/2008:14:24:01 -0500] conn=172 op=1 RESULT err=49
>         tag=97 nentries=0 etime=0
>
>         |tag=97| for a result from a client bind operation
>
>         err=49 = invalid credentials
>
Invalid credentials means the given password is incorrect.
>
>          
>
>          
>
>         Entire log:
>
>          
>
>         [07/Feb/2008:14:24:01 -0500] conn=169 fd=71 slot=71 connection
>         from 10.188.49.187 to 10.188.135.186
>
>         [07/Feb/2008:14:24:01 -0500] conn=169 op=-1 fd=71 closed - B1
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 fd=71 slot=71 connection
>         from 10.188.49.187 to 10.188.135.186
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=0 BIND dn=""
>         method=128 version=3
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=0 RESULT err=0 tag=97
>         nentries=0 etime=0 dn=""
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=1 SRCH
>         base="dc=post,dc=cnn" scope=2
>         filter="(&(|(objectClass=posixAccount)(objectClass=inetOrgPerson)(objectClass=shadowAccount))(|(|(uid=dme))(|(cn=dme))))"
>         attrs="homeDirectory userPassword gidNumber cn uid cn
>         uidNumber loginShell"
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=1 RESULT err=0
>         tag=101 nentries=1 etime=0
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=2 SRCH
>         base="dc=post,dc=cnn" scope=2
>         filter="(&(|(objectClass=posixAccount)(objectClass=inetOrgPerson)(objectClass=shadowAccount))(|(uidNumber=8000)))"
>         attrs="uidNumber uid cn gidNumber"
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=2 RESULT err=0
>         tag=101 nentries=1 etime=0
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=3 SRCH
>         base="dc=post,dc=cnn" scope=2
>         filter="(&(|(objectClass=posixGroup))(|(gidNumber=8000)))"
>         attrs="cn gidNumber"
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=3 RESULT err=0
>         tag=101 nentries=0 etime=0
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=4 SRCH
>         base="dc=post,dc=cnn" scope=2
>         filter="(&(|(objectClass=posixGroup))(|(memberUid=dme)))"
>         attrs="cn gidNumber"
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=4 RESULT err=0
>         tag=101 nentries=0 etime=0
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=5 SRCH
>         base="dc=post,dc=cnn" scope=2
>         filter="(&(|(objectClass=posixGroup))(|(cn=FFFFEEEE-DDDD-CCCC-BBBB-AAAA00001F40)))"
>         attrs="cn gidNumber"
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=5 RESULT err=0
>         tag=101 nentries=0 etime=0
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=6 SRCH
>         base="dc=post,dc=cnn" scope=2
>         filter="(&(|(objectClass=posixAccount)(objectClass=inetOrgPerson)(objectClass=shadowAccount))(|(|(uid=dme))(|(cn=dme))))"
>         attrs="uid cn userPassword cn homeDirectory loginShell
>         uidNumber gidNumber shadowLastChange shadowExpire"
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=6 RESULT err=0
>         tag=101 nentries=1 etime=0
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=7 SRCH
>         base="dc=post,dc=cnn" scope=2
>         filter="(&(|(objectClass=posixAccount)(objectClass=inetOrgPerson)(objectClass=shadowAccount))(|(|(uid=dme))(|(cn=dme))))"
>         attrs="uid cn"
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=7 RESULT err=0
>         tag=101 nentries=1 etime=0
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=8 SRCH
>         base="dc=post,dc=cnn" scope=2
>         filter="(&(|(objectClass=posixAccount)(objectClass=inetOrgPerson)(objectClass=shadowAccount))(|(uid=dme)(cn=dme)))"
>         attrs="userPassword"
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=8 RESULT err=0
>         tag=101 nentries=1 etime=0
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=9 SRCH
>         base="dc=post,dc=cnn" scope=2
>         filter="(&(|(objectClass=posixAccount)(objectClass=inetOrgPerson)(objectClass=shadowAccount))(|(uid=dme)(cn=dme)))"
>         attrs=ALL
>
>         [07/Feb/2008:14:24:01 -0500] conn=170 op=9 RESULT err=0
>         tag=101 nentries=1 etime=0
>
>         [07/Feb/2008:14:24:01 -0500] conn=171 fd=72 slot=72 connection
>         from 10.188.49.187 to 10.188.135.186
>
>         [07/Feb/2008:14:24:01 -0500] conn=171 op=-1 fd=72 closed - B1
>
>         [07/Feb/2008:14:24:01 -0500] conn=172 fd=72 slot=72 connection
>         from 10.188.49.187 to 10.188.135.186
>
>         [07/Feb/2008:14:24:01 -0500] conn=172 op=0 BIND dn=""
>         method=sasl version=3 mech=CRAM-MD5
>
>         [07/Feb/2008:14:24:01 -0500] conn=172 op=0 RESULT err=14
>         tag=97 nentries=0 etime=0, SASL bind in progress
>
>         [07/Feb/2008:14:24:01 -0500] conn=172 op=1 BIND dn=""
>         method=sasl version=3 mech=CRAM-MD5
>
>         [07/Feb/2008:14:24:01 -0500] conn=172 op=1 RESULT err=49
>         tag=97 nentries=0 etime=0
>
>         [07/Feb/2008:14:24:01 -0500] conn=172 op=2 UNBIND
>
>         [07/Feb/2008:14:24:01 -0500] conn=172 op=2 fd=72 closed - U1
>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20080207/d6df2a4b/attachment.bin>


More information about the 389-users mailing list