Re: Authentication failed.

Hi,

I have removed all ACLs in the slapd.conf file, and fixed some errors in
the slapd.conf wiht mail02 assigned to the dn (the mailadmin was
assigned to admin host which is none exist in my network, so this fix is
reasonable). I also fixed some configuraiton option in the
/usr/local/etc/authlib/authldaprc file.
Now the authldaprc file becomes:

root@mail02 [1:38pm] [...etc/authlib]# cat authldaprc
LDAP_SERVER localhost
LDAP_PORT 389
LDAP_PROTOCOL_VERSION 3
LDAP_BASEDN ou=mail02, dc=authtec, dc=com
LDAP_BINDDN cn=mailadmin, ou=mail02, dc=authtec, dc=com
LDAP_BINDPW mail02pass
LDAP_TIMEOUT 10
LDAP_AUTHBIND 1
LDAP_MAIL mail02
LDAP_DOMAIN authtec.com
LDAP_GLOB_UID www
LDAP_GLOB_GID www
LDAP_HOMEDIR homeDirectory
LDAP_MAILDIR mailMessageStore
LDAP_MAILDIRQUOTA mailQuota
LDAP_CLEARPW userPassword
LDAP_DEREF never
LDAP_TLS 0

slapd.conf file:
include /usr/local/etc/openldap/schema/core.schema
include /usr/local/etc/openldap/schema/cosine.schema
include /usr/local/etc/openldap/schema/inetorgperson.schema
include /usr/local/etc/openldap/schema/nis.schema
include /usr/local/etc/openldap/schema/misc.schema
include /usr/local/etc/openldap/schema/mail.schema
pidfile /var/run/openldap/slapd.pid
argsfile /var/run/openldap/slapd.args
database bdb
suffix "dc=authtec,dc=com"
rootdn "cn=sam,dc=authtec,dc=com"
rootpw passpass
directory /var/db/openldap-data
index objectClass eq

The permission of this file is :

# ls -l authldaprc
-rw-r--r-- 1 root wheel 430 May 30 13:17 authldaprc

I also use phpldapadmin login ldap server and change mailadmin's
password make sure the password is matched with the exist one.

But when I execute the same test on user test@authtec.com, I got a
smiliar problem (with slightly different) in the maillog file:
troot@mail02 [1:34pm] [~]# telnet localhost 110
Trying ::1...
Connected to localhost.authtec.com.
Escape character is '^]'.
+OK Hello there.
user test@authtec.com
+OK Password required.
pass testtest
-ERR Login failed.

Log message in maillog file:
May 30 13:34:15 mail02 pop3d: LOGIN FAILED, user=test@authtec.com, ip=[::1]
May 30 13:34:56 mail02 postfix/trivial-rewrite[742]: warning:
dict_ldap_lookup: Search error -7: Bad search filter
May 30 13:34:56 mail02 postfix/trivial-rewrite[742]: fatal:
ldap:mailuser(0,100): table lookup problem
May 30 13:34:57 mail02 postfix/qmgr[567]: warning: premature
end-of-input on private/rewrite socket while reading input at
tribute name
May 30 13:34:57 mail02 postfix/qmgr[567]: warning: problem talking to
service rewrite: Unknown error: 0
May 30 13:34:57 mail02 postfix/master[565]: warning: process
/usr/local/libexec/postfix/trivial-rewrite pid 742 exit statu
s 1
May 30 13:34:57 mail02 postfix/master[565]: warning:
/usr/local/libexec/postfix/trivial-rewrite: bad command startup -- th
rottling

message in debug.log:
May 30 13:47:09 mail02 slapd[483]: conn=27 fd=10 ACCEPT from
IP=127.0.0.1:62342 (IP=0.0.0.0:389)
May 30 13:47:09 mail02 slapd[483]: conn=27 op=0 BIND
dn="cn=mailadmin,ou=mail02,dc=authtec,dc=com" method=128
May 30 13:47:09 mail02 slapd[483]: conn=27 op=0 BIND
dn="cn=mailadmin,ou=mail02,dc=authtec,dc=com" mech=SIMPLE ssf=0
May 30 13:47:09 mail02 slapd[483]: conn=27 op=0 RESULT tag=97 err=0 text=
May 30 13:47:09 mail02 slapd[483]: conn=27 op=1 UNBIND
May 30 13:47:09 mail02 slapd[483]: conn=27 fd=10 closed

Thanks
Sam
sam wun wrote:

> sam wun wrote:
>
>> Hi,
>>
>> I installed openldap22 with courier-imap, courier-auth-lib and
>> postfix 22 in freebsd 5.4. But when I test pop3, I got the following
>> error in the log:
>>
>> May 30 12:05:52 mail02 postfix/postfix-script: starting the Postfix
>> mail system
>> May 30 12:05:53 mail02 postfix/master[7678]: daemon started --
>> version 2.2.3, configuration /usr/local/etc/postfix
>> May 30 12:06:51 mail02 authdaemond: authldaplib: error in LDAP
>> configuration file, aborting
>> May 30 12:06:51 mail02 pop3d: LOGIN FAILED, user=test@authtec.com,
>> ip=[::1]
>> May 30 12:06:51 mail02 pop3d: authentication error: Input/output error
>>
> After rebooted the system, and executed the same test, the log shown
> more error;
> May 30 12:25:50 mail02 pop3d: authentication error: Input/output error
> May 30 12:26:20 mail02 postfix/trivial-rewrite[749]: warning:
> dict_ldap_connect: Unable to bind to server ldap://localhost:389 as
> cn=mailadmin,ou=admin,dc=authtec,dc=com: 49 (Invalid credentials)
> May 30 12:26:20 mail02 postfix/trivial-rewrite[749]: fatal:
> ldap:mailuser(0,100): table lookup problem
> May 30 12:26:21 mail02 postfix/qmgr[569]: warning: premature
> end-of-input on private/rewrite socket while reading input attribute name
> May 30 12:26:21 mail02 postfix/qmgr[569]: warning: problem talking to
> service rewrite: Unknown error: 0
> May 30 12:26:21 mail02 postfix/master[559]: warning: process
> /usr/local/libexec/postfix/trivial-rewrite pid 749 exit status 1
> May 30 12:26:21 mail02 postfix/master[559]: warning:
> /usr/local/libexec/postfix/trivial-rewrite: bad command startup --
> throttling
>
>> How can I track down the problem in detail?
>>
>> Thanks
>> Sam
>>
>>
>