[Fedora-directory-users] New install, not authenticating
Rich Megginson
rmeggins at redhat.com
Thu Feb 7 21:29:29 UTC 2008
Hendry, Chris wrote:
> Just did a yum install fedora-ds
>
> My thinking was that I did not care about the data, this was considered
> the backup anyway.
>
Just doing yum install fedora-ds should break just about everything
until migrate-ds-admin.pl is run - or at least, if you use the old
scripts and such to start and manage fedora ds, you won't be using the
1.1 software.
> I made sure the passwords would match, I several times set the password
> using the gui console.
>
I'm not sure what's going on, but error 49 very clearly means invalid
password.
> Chris
>
>
> -----Original Message-----
> From: Rich Megginson [mailto:rmeggins at redhat.com]
> Sent: Thursday, February 07, 2008 3:51 PM
> To: General discussion list for the Fedora Directory server project.
> Subject: Re: [Fedora-directory-users] New install, not authenticating
>
> Hendry, Chris wrote:
>
>> Upgraded Fedora-ds-1.1 from 1.0.
>>
>>
> How? What exactly did you do?
>
>> Version 1.0 worked great, no problems, I upgraded, ran the
>> setup-ds-admin.pl in the most default way.
>>
>>
> setup-ds-admin.pl is only for new servers. You should use
> migrate-ds-admin.pl to upgrade from 1.0.4 to 1.1.
>
>> Clients can not login when pointing to this new DS.
>>
>>
>>
>> Focus line in /var/log/dirsrv/slapd-servername/access
>>
>> [07/Feb/2008:14:24:01 -0500] conn=172 op=1 RESULT err=49
>> tag=97 nentries=0 etime=0
>>
>> |tag=97| for a result from a client bind operation
>>
>> err=49 = invalid credentials
>>
>>
> Invalid credentials means the given password is incorrect.
>
>>
>>
>>
>>
>> Entire log:
>>
>>
>>
>> [07/Feb/2008:14:24:01 -0500] conn=169 fd=71 slot=71 connection
>> from 10.188.49.187 to 10.188.135.186
>>
>> [07/Feb/2008:14:24:01 -0500] conn=169 op=-1 fd=71 closed - B1
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 fd=71 slot=71 connection
>> from 10.188.49.187 to 10.188.135.186
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=0 BIND dn=""
>> method=128 version=3
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=0 RESULT err=0 tag=97
>> nentries=0 etime=0 dn=""
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=1 SRCH
>> base="dc=post,dc=cnn" scope=2
>>
>>
> filter="(&(|(objectClass=posixAccount)(objectClass=inetOrgPerson)(object
> Class=shadowAccount))(|(|(uid=dme))(|(cn=dme))))"
>
>> attrs="homeDirectory userPassword gidNumber cn uid cn
>> uidNumber loginShell"
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=1 RESULT err=0
>> tag=101 nentries=1 etime=0
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=2 SRCH
>> base="dc=post,dc=cnn" scope=2
>>
>>
> filter="(&(|(objectClass=posixAccount)(objectClass=inetOrgPerson)(object
> Class=shadowAccount))(|(uidNumber=8000)))"
>
>> attrs="uidNumber uid cn gidNumber"
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=2 RESULT err=0
>> tag=101 nentries=1 etime=0
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=3 SRCH
>> base="dc=post,dc=cnn" scope=2
>> filter="(&(|(objectClass=posixGroup))(|(gidNumber=8000)))"
>> attrs="cn gidNumber"
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=3 RESULT err=0
>> tag=101 nentries=0 etime=0
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=4 SRCH
>> base="dc=post,dc=cnn" scope=2
>> filter="(&(|(objectClass=posixGroup))(|(memberUid=dme)))"
>> attrs="cn gidNumber"
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=4 RESULT err=0
>> tag=101 nentries=0 etime=0
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=5 SRCH
>> base="dc=post,dc=cnn" scope=2
>>
>>
> filter="(&(|(objectClass=posixGroup))(|(cn=FFFFEEEE-DDDD-CCCC-BBBB-AAAA0
> 0001F40)))"
>
>> attrs="cn gidNumber"
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=5 RESULT err=0
>> tag=101 nentries=0 etime=0
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=6 SRCH
>> base="dc=post,dc=cnn" scope=2
>>
>>
> filter="(&(|(objectClass=posixAccount)(objectClass=inetOrgPerson)(object
> Class=shadowAccount))(|(|(uid=dme))(|(cn=dme))))"
>
>> attrs="uid cn userPassword cn homeDirectory loginShell
>> uidNumber gidNumber shadowLastChange shadowExpire"
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=6 RESULT err=0
>> tag=101 nentries=1 etime=0
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=7 SRCH
>> base="dc=post,dc=cnn" scope=2
>>
>>
> filter="(&(|(objectClass=posixAccount)(objectClass=inetOrgPerson)(object
> Class=shadowAccount))(|(|(uid=dme))(|(cn=dme))))"
>
>> attrs="uid cn"
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=7 RESULT err=0
>> tag=101 nentries=1 etime=0
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=8 SRCH
>> base="dc=post,dc=cnn" scope=2
>>
>>
> filter="(&(|(objectClass=posixAccount)(objectClass=inetOrgPerson)(object
> Class=shadowAccount))(|(uid=dme)(cn=dme)))"
>
>> attrs="userPassword"
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=8 RESULT err=0
>> tag=101 nentries=1 etime=0
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=9 SRCH
>> base="dc=post,dc=cnn" scope=2
>>
>>
> filter="(&(|(objectClass=posixAccount)(objectClass=inetOrgPerson)(object
> Class=shadowAccount))(|(uid=dme)(cn=dme)))"
>
>> attrs=ALL
>>
>> [07/Feb/2008:14:24:01 -0500] conn=170 op=9 RESULT err=0
>> tag=101 nentries=1 etime=0
>>
>> [07/Feb/2008:14:24:01 -0500] conn=171 fd=72 slot=72 connection
>> from 10.188.49.187 to 10.188.135.186
>>
>> [07/Feb/2008:14:24:01 -0500] conn=171 op=-1 fd=72 closed - B1
>>
>> [07/Feb/2008:14:24:01 -0500] conn=172 fd=72 slot=72 connection
>> from 10.188.49.187 to 10.188.135.186
>>
>> [07/Feb/2008:14:24:01 -0500] conn=172 op=0 BIND dn=""
>> method=sasl version=3 mech=CRAM-MD5
>>
>> [07/Feb/2008:14:24:01 -0500] conn=172 op=0 RESULT err=14
>> tag=97 nentries=0 etime=0, SASL bind in progress
>>
>> [07/Feb/2008:14:24:01 -0500] conn=172 op=1 BIND dn=""
>> method=sasl version=3 mech=CRAM-MD5
>>
>> [07/Feb/2008:14:24:01 -0500] conn=172 op=1 RESULT err=49
>> tag=97 nentries=0 etime=0
>>
>> [07/Feb/2008:14:24:01 -0500] conn=172 op=2 UNBIND
>>
>> [07/Feb/2008:14:24:01 -0500] conn=172 op=2 fd=72 closed - U1
>>
>>
>>
> ------------------------------------------------------------------------
>
>> --
>> Fedora-directory-users mailing list
>> Fedora-directory-users at redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20080207/93206da3/attachment.bin>
More information about the 389-users
mailing list