Hi there,
I know one should not push to get an answer but I am really lost
about the reason for my defunct ftp domain account. More and more
digging - nothing. So sorry for being a nuisance :-)
No one here willing to share an insight into this problem?
thx, MIchael
the old message:
we use the current cvs version of ispman. Now, without any changes to
the ldap data we have the problem that ftp login to one subdomain is no
longer working (authentification failed). testsaslauth does not work
either. The other subdomains do work as expected.
Any ideas, what might be the reason for this problem? Below I attached
ldap logs for ftp logins to the defunct and to a working virtual host.
The ldap data for two subdomains / virtual hosts is attached below.
As far as I understand the ldap log the user is not found upon connect (
conn=1114 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text= ). But
why? The information stored in the ldap server is nearly identical for
both virtual hosts?
Any help is appreciated!
Michael
Ldap Log for defunct account:
Nov 30 17:49:44 localhost slapd[10297]: conn=1114 fd=50 ACCEPT from
IP=127.0.0.1:56096 (IP=0.0.0.0:389)
Nov 30 17:49:44 localhost slapd[10357]: conn=1114 op=0 BIND dn=""
method=128
Nov 30 17:49:44 localhost slapd[10357]: conn=1114 op=0 RESULT tag=97
err=0 text=
Nov 30 17:49:44 localhost slapd[10328]: conn=1114 op=1 SRCH
base="o=ispman" scope=2 deref=0
filter="(&(objectClass=posixAccount)(uid=www.erlebnistour-mv.de))"
Nov 30 17:49:44 localhost slapd[10328]: conn=1114 op=1 SRCH
attr=homeDirectory uidNumber FTPuid gidNumber FTPgid userPassword
loginShell FTPStatus FTPQuotaFiles FTPQuotaMBytes FTPDownloadRatio
FTPUploadRatio FTPDownloadBandwidth FTPUploadBandwidth
Nov 30 17:49:44 localhost slapd[10328]: conn=1114 op=1 SEARCH RESULT
tag=101 err=0 nentries=0 text=
Nov 30 17:49:44 localhost slapd[10837]: conn=1114 op=2 UNBIND
Nov 30 17:49:44 localhost slapd[10837]: conn=1114 fd=50 closed
Ldap Log for functional account:
Nov 30 17:52:11 localhost slapd[10297]: conn=1128 fd=16 ACCEPT from
IP=127.0.0.1:56120 (IP=0.0.0.0:389)
Nov 30 17:52:11 localhost slapd[11727]: conn=1128 op=0 BIND dn=""
method=128
Nov 30 17:52:11 localhost slapd[11727]: conn=1128 op=0 RESULT tag=97
err=0 text=
Nov 30 17:52:11 localhost slapd[10832]: conn=1128 op=1 SRCH
base="o=ispman" scope=2 deref=0
filter="(&(objectClass=posixAccount)(uid=www.incunabulum.de) )"
Nov 30 17:52:13 localhost slapd[10832]: conn=1128 op=1 SRCH
attr=homeDirectory uidNumber FTPuid gidNumber FTPgid userPassword
loginShell FTPStatus FTPQuotaFiles FTPQuotaMBytes FTPDownloadRatio
FTPUploadRatio FTPDownloadBandwidth FTPUploadBandwidth
Nov 30 17:52:13 localhost slapd[10832]: conn=1128 op=1 SEARCH RESULT
tag=101 err=0 nentries=1 text=
Nov 30 17:52:13 localhost slapd[10328]: conn=1128 op=2 UNBIND
Nov 30 17:52:13 localhost slapd[10328]: conn=1128 fd=16 closed
Nov 30 17:52:13 localhost slapd[10357]: conn=3 op=174 SRCH
base="o=ispman" scope=2 deref=0
filter="(&(objectClass=posixAccount)(uidNumber=1022))"
Nov 30 17:52:13 localhost slapd[10357]: conn=3 op=174 SRCH attr=uid
userPassword uidNumber gidNumber cn homeDirectory loginShell gecos
description objectClass
Nov 30 17:52:13 localhost slapd[10357]: conn=3 op=174 SEARCH RESULT
tag=101 err=0 nentries=1 text=
Nov 30 17:52:13 localhost slapd[10297]: conn=1129 fd=16 ACCEPT from
IP=127.0.0.1:56121 (IP=0.0.0.0:389)
Nov 30 17:52:13 localhost slapd[10837]: conn=1129 op=0 BIND dn=""
method=128
Nov 30 17:52:13 localhost slapd[10837]: conn=1129 op=0 RESULT tag=97
err=0 text=
Nov 30 17:52:13 localhost slapd[10318]: conn=1129 op=1 SRCH
base="o=ispman" scope=2 deref=0
filter="(&(objectClass=posixAccount)(uid=www.incunabulum.de) )"
Nov 30 17:52:13 localhost slapd[10318]: conn=1129 op=1 SEARCH RESULT
tag=101 err=0 nentries=1 text=
Nov 30 17:52:13 localhost slapd[10302]: conn=1129 op=2 SRCH
base="o=ispman" scope=2 deref=0
filter="(&(objectClass=posixGroup)(|(memberUid=www.incunabul um.de)(,ou=httpdata,ispmanDomain=incunabulum.de,o= ispman)))"
Nov 30 17:52:13 localhost slapd[10302]: conn=1129 op=2 SRCH attr=gidNumber
Nov 30 17:52:13 localhost slapd[10302]: conn=1129 op=2 SEARCH RESULT
tag=101 err=0 nentries=0 text=
Nov 30 17:52:13 localhost slapd[11727]: conn=3 op=175 SRCH
base="o=ispman" scope=2 deref=0
filter="(&(objectClass=posixGroup)(gidNumber=1006))"
Nov 30 17:52:13 localhost slapd[11727]: conn=3 op=175 SRCH attr=cn
userPassword memberUid uniqueMember gidNumber
Nov 30 17:52:13 localhost slapd[11727]: conn=3 op=175 SEARCH RESULT
tag=101 err=0 nentries=0 text=
ldif dump for defunct account
dn: ispmanVhostName=www,ou=httpdata,,o=ispman
ispmanVhostName: www
cn: www.erlebnistour-mv.de
uidNumber: 1066
gidNumber: 1013
ispmanDomain: erlebnistour-mv.de
uid: www.erlebnistour-mv.de
homeDirectory: /
ispmanStatus: active
fileHost: anna
DestinationAddress: anna
webHost: anna
Class: PureFTPdUser
entryUUID:
creatorsName: cn=Directory Administrator,o=ispman
createTimestamp: 20040831151232Z
loginShell: /bin/false
ispmanVhostIpAddress: *
ispmanVhostExtraConf::
EaXJlY3RvcnkmZ3Q7
objectClass: ispmanVirtualHost
objectClass: posixAccount
objectClass: PureFTPdUser
ispmanVhostLogdir: /ispman/logs
ispmanVhostScriptDir: cgi-bin
FTPStatus: enabled
ispmanVhostStats: enable
FTPQuotaMBytes: 1000
ispmanVhostDocumentRoot: htdocs
ispmanVhostStatdir: /ispman/domain
userPassword:: <>
entryCSN: 20051130161814Z#000001#00#000000
modifiersName: cn=Directory Administrator,o=ispman
modifyTimestamp: 20051130161814Z
ldif dump for working account
dn: ispmanVhostName=ttt,ou=httpdata,ispmanDomain=incun abulum.de,o=ispman
ispmanVhostName: ttt
cn: ttt.incunabulum.de
uidNumber: 1131
gidNumber: 1006
ispmanDomain: incunabulum.de
uid: ttt.incunabulum.de
homeDirectory: /
ispmanStatus: active
fileHost: anna
DestinationAddress: anna
webHost: anna
Class: PureFTPdUser
entryUUID:
creatorsName: cn=Directory Administrator,o=ispman
createTimestamp: 20051130161243Z
ispmanVhostIpAddress: *
objectClass: ispmanVirtualHost
objectClass: posixAccount
objectClass: PureFTPdUser
ispmanVhostLogdir: /ispman/logs
ispmanVhostScriptDir: cgi-bin
FTPStatus: enabled
ispmanVhostStats: enable
FTPQuotaMBytes: 1000
ispmanVhostDocumentRoot: htdocs
ispmanVhostStatdir: /ispman/domain
userPassword:: <>
entryCSN: 20051130161243Z#000002#00#000000
modifiersName: cn=Directory Administrator,o=ispman
modifyTimestamp: 20051130161243Z

J Delker wrote:

J,

* Your LDAP index on uid is messed up. Although the entry exists
physically in LDAP, your index reports it inexistent.
Try to rebuild your indexes (LDAP: slapindex).

thanks a lot. After rebuilding the indexes the log in is working again.

For me ldap is still some mystery (happy that it works) therefore I
didn't know about indexes