Re: Authentication failed.

Hi,

A further test on Openldap with ldapsearch commands does not reveal any
error. It shown the following result:
# ldapsearch -x -b 'dc=authtec,dc=com' '(objectclass=*)'
# extended LDIF
#
# LDAPv3
# base <dc=authtec,dc=com> with scope sub
# filter: (objectclass=*)
# requesting: ALL
#

# authtec.com
dn: dc=authtec,dc=com
objectClass: dcObject
objectClass: organization
dc: authtec
o: Corporation

# mail02, authtec.com
dn: ou=mail02,dc=authtec,dc=com
ou: mail02
objectClass: top
objectClass: organizationalUnit

# mailadmin, mail02, authtec.com
dn: cn=mailadmin,ou=mail02,dc=authtec,dc=com
cn: mailadmin
mail: mailadmin@authtec.com
uid: mailadmin
displayName: mail admin
gidNumber: 800
uidNumber: 800
userStatus: 1
mailMessageStore: authtec.com/mailadmin/Maildir/
mailQuota: 1000000
userPassword:: bWFpbDAycGFzcw==
objectClass: mailUser
objectClass: top
homeDirectory: /usr/local/vmail

# test, mail02, authtec.com
dn: uid=test,ou=mail02,dc=authtec,dc=com
cn: test
uid: test
displayName: test user
uidNumber: 80
gidNumber: 80
userPassword:: dGVzdA==
userStatus: 1
objectClass: mailUser
objectClass: top
mail: test@authtec.com
mailMessageStore: authtec.com/test/Maildir/
homeDirectory: /usr/local/vmail

# search result
search: 2
result: 0 Success

# numResponses: 5
# numEntries: 4

Sam.

sam wun wrote:

> Hi,
>
> I have removed all ACLs in the slapd.conf file, and fixed some errors
> in the slapd.conf wiht mail02 assigned to the dn (the mailadmin was
> assigned to admin host which is none exist in my network, so this fix
> is reasonable). I also fixed some configuraiton option in the
> /usr/local/etc/authlib/authldaprc file.
> Now the authldaprc file becomes:
>
> root@mail02 [1:38pm] [...etc/authlib]# cat authldaprc
> LDAP_SERVER localhost
> LDAP_PORT 389
> LDAP_PROTOCOL_VERSION 3
> LDAP_BASEDN ou=mail02, dc=authtec, dc=com
> LDAP_BINDDN cn=mailadmin, ou=mail02, dc=authtec, dc=com
> LDAP_BINDPW mail02pass
> LDAP_TIMEOUT 10
> LDAP_AUTHBIND 1
> LDAP_MAIL mail02
> LDAP_DOMAIN authtec.com
> LDAP_GLOB_UID www
> LDAP_GLOB_GID www
> LDAP_HOMEDIR homeDirectory
> LDAP_MAILDIR mailMessageStore
> LDAP_MAILDIRQUOTA mailQuota
> LDAP_CLEARPW userPassword
> LDAP_DEREF never
> LDAP_TLS 0
>
> slapd.conf file:
> include /usr/local/etc/openldap/schema/core.schema
> include /usr/local/etc/openldap/schema/cosine.schema
> include /usr/local/etc/openldap/schema/inetorgperson.schema
> include /usr/local/etc/openldap/schema/nis.schema
> include /usr/local/etc/openldap/schema/misc.schema
> include /usr/local/etc/openldap/schema/mail.schema
> pidfile /var/run/openldap/slapd.pid
> argsfile /var/run/openldap/slapd.args
> database bdb
> suffix "dc=authtec,dc=com"
> rootdn "cn=sam,dc=authtec,dc=com"
> rootpw passpass
> directory /var/db/openldap-data
> index objectClass eq
>
> The permission of this file is :
>
> # ls -l authldaprc
> -rw-r--r-- 1 root wheel 430 May 30 13:17 authldaprc
>
> I also use phpldapadmin login ldap server and change mailadmin's
> password make sure the password is matched with the exist one.
>
> But when I execute the same test on user test@authtec.com, I got a
> smiliar problem (with slightly different) in the maillog file:
> troot@mail02 [1:34pm] [~]# telnet localhost 110
> Trying ::1...
> Connected to localhost.authtec.com.
> Escape character is '^]'.
> +OK Hello there.
> user test@authtec.com
> +OK Password required.
> pass testtest
> -ERR Login failed.
>
> Log message in maillog file:
> May 30 13:34:15 mail02 pop3d: LOGIN FAILED, user=test@authtec.com,
> ip=[::1]
> May 30 13:34:56 mail02 postfix/trivial-rewrite[742]: warning:
> dict_ldap_lookup: Search error -7: Bad search filter
> May 30 13:34:56 mail02 postfix/trivial-rewrite[742]: fatal:
> ldap:mailuser(0,100): table lookup problem
> May 30 13:34:57 mail02 postfix/qmgr[567]: warning: premature
> end-of-input on private/rewrite socket while reading input at
> tribute name
> May 30 13:34:57 mail02 postfix/qmgr[567]: warning: problem talking to
> service rewrite: Unknown error: 0
> May 30 13:34:57 mail02 postfix/master[565]: warning: process
> /usr/local/libexec/postfix/trivial-rewrite pid 742 exit statu
> s 1
> May 30 13:34:57 mail02 postfix/master[565]: warning:
> /usr/local/libexec/postfix/trivial-rewrite: bad command startup -- th
> rottling
>
> message in debug.log:
> May 30 13:47:09 mail02 slapd[483]: conn=27 fd=10 ACCEPT from
> IP=127.0.0.1:62342 (IP=0.0.0.0:389)
> May 30 13:47:09 mail02 slapd[483]: conn=27 op=0 BIND
> dn="cn=mailadmin,ou=mail02,dc=authtec,dc=com" method=128
> May 30 13:47:09 mail02 slapd[483]: conn=27 op=0 BIND
> dn="cn=mailadmin,ou=mail02,dc=authtec,dc=com" mech=SIMPLE ssf=0
> May 30 13:47:09 mail02 slapd[483]: conn=27 op=0 RESULT tag=97 err=0 text=
> May 30 13:47:09 mail02 slapd[483]: conn=27 op=1 UNBIND
> May 30 13:47:09 mail02 slapd[483]: conn=27 fd=10 closed
>
> Thanks
> Sam
> sam wun wrote:
>
>> sam wun wrote:
>>
>>> Hi,
>>>
>>> I installed openldap22 with courier-imap, courier-auth-lib and
>>> postfix 22 in freebsd 5.4. But when I test pop3, I got the following
>>> error in the log:
>>>
>>> May 30 12:05:52 mail02 postfix/postfix-script: starting the Postfix
>>> mail system
>>> May 30 12:05:53 mail02 postfix/master[7678]: daemon started --
>>> version 2.2.3, configuration /usr/local/etc/postfix
>>> May 30 12:06:51 mail02 authdaemond: authldaplib: error in LDAP
>>> configuration file, aborting
>>> May 30 12:06:51 mail02 pop3d: LOGIN FAILED, user=test@authtec.com,
>>> ip=[::1]
>>> May 30 12:06:51 mail02 pop3d: authentication error: Input/output error
>>>
>> After rebooted the system, and executed the same test, the log shown
>> more error;
>> May 30 12:25:50 mail02 pop3d: authentication error: Input/output error
>> May 30 12:26:20 mail02 postfix/trivial-rewrite[749]: warning:
>> dict_ldap_connect: Unable to bind to server ldap://localhost:389 as
>> cn=mailadmin,ou=admin,dc=authtec,dc=com: 49 (Invalid credentials)
>> May 30 12:26:20 mail02 postfix/trivial-rewrite[749]: fatal:
>> ldap:mailuser(0,100): table lookup problem
>> May 30 12:26:21 mail02 postfix/qmgr[569]: warning: premature
>> end-of-input on private/rewrite socket while reading input attribute
>> name
>> May 30 12:26:21 mail02 postfix/qmgr[569]: warning: problem talking to
>> service rewrite: Unknown error: 0
>> May 30 12:26:21 mail02 postfix/master[559]: warning: process
>> /usr/local/libexec/postfix/trivial-rewrite pid 749 exit status 1
>> May 30 12:26:21 mail02 postfix/master[559]: warning:
>> /usr/local/libexec/postfix/trivial-rewrite: bad command startup --
>> throttling
>>
>>> How can I track down the problem in detail?
>>>
>>> Thanks
>>> Sam
>>>
>>>