LDAP stopped finding users

I had LDAP (openLDAP) working for a few weeks and now it suddenly decided to stop working. Since the server is not live I have anonymous searches allowed. I am now getting an error of: [Thu Nov 21 16:27:30 2013][Notice][Kernel::System::Auth::LDAP::Auth] User: otrsAdmin@shinesystech.com authentication failed, no LDAP entry found!BaseDN='dc=shinesystech,dc=com', Filter='(uid=otrsAdmin@shinesystech.com)', (REMOTE_ADDR: 192.168.2.128). None of the Config.pm settings have been changed and I have not messed with the ldap config, so it's very strange. Any ideas on how I can best fix/debug this problem? - Matt

no ldap entry found means that the ldap server is unable to find an
entry in ldap for the given uid.
On Thu, Nov 21, 2013 at 4:38 PM, Matthew M. Mosteller
I had LDAP (openLDAP) working for a few weeks and now it suddenly decided to stop working. Since the server is not live I have anonymous searches allowed. I am now getting an error of:
[Thu Nov 21 16:27:30 2013][Notice][Kernel::System::Auth::LDAP::Auth] User: otrsAdmin@shinesystech.com authentication failed, no LDAP entry found!BaseDN='dc=shinesystech,dc=com', Filter='(uid=otrsAdmin@shinesystech.com)', (REMOTE_ADDR: 192.168.2.128).
None of the Config.pm settings have been changed and I have not messed with the ldap config, so it's very strange.
Any ideas on how I can best fix/debug this problem?
-Matt
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

I'm seeing the same thing with at least one use here. I can log in just fine, as well as a few others, but one user who has tried, gets this error. I have checked all the attributes - they are fine. No different from the rest of us. It's the same LDAP backend as before. On the OTRS 3.2 system, he can log in. On the 3.3 system, he cannot. User: ulh authentication failed, no LDAP entry found!BaseDN='ou=KBH,o=ITQ', Filter='(&(cn=ulh)(mail=*)) User: mmo (cn=mmo,ou=KBH,o=ITQ) authentication ok Very strange, from my point of view.. :) /Martin.
Gerald Young
22. november 2013 00:59 >>> no ldap entry found means that the ldap server is unable to find an entry in ldap for the given uid.
On Thu, Nov 21, 2013 at 4:38 PM, Matthew M. Mosteller
I had LDAP (openLDAP) working for a few weeks and now it suddenly decided to stop working. Since the server is not live I have anonymous searches allowed. I am now getting an error of:
[Thu Nov 21 16:27:30 2013][Notice][Kernel::System::Auth::LDAP::Auth] User: otrsAdmin@shinesystech.com authentication failed, no LDAP entry found!BaseDN='dc=shinesystech,dc=com', Filter='(uid=otrsAdmin@shinesystech.com)', (REMOTE_ADDR: 192.168.2.128).
None of the Config.pm settings have been changed and I have not messed with the ldap config, so it's very strange.
Any ideas on how I can best fix/debug this problem?
-Matt
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

Filter='(&(cn=ulh)(mail=*)) means ulh is a common name and has an
email address in ldap.
On Fri, Nov 22, 2013 at 9:01 AM, Martin Møller
I'm seeing the same thing with at least one use here.
I can log in just fine, as well as a few others, but one user who has tried, gets this error. I have checked all the attributes - they are fine. No different from the rest of us. It's the same LDAP backend as before. On the OTRS 3.2 system, he can log in. On the 3.3 system, he cannot. User: ulh authentication failed, no LDAP entry found!BaseDN='ou=KBH,o=ITQ', Filter='(&(cn=ulh)(mail=*)) User: mmo (cn=mmo,ou=KBH,o=ITQ) authentication ok
Very strange, from my point of view.. :)
/Martin.
Gerald Young
22. november 2013 00:59 >>> no ldap entry found means that the ldap server is unable to find an entry in ldap for the given uid. On Thu, Nov 21, 2013 at 4:38 PM, Matthew M. Mosteller
wrote: I had LDAP (openLDAP) working for a few weeks and now it suddenly decided to stop working. Since the server is not live I have anonymous searches allowed. I am now getting an error of:
[Thu Nov 21 16:27:30 2013][Notice][Kernel::System::Auth::LDAP::Auth] User: otrsAdmin@shinesystech.com authentication failed, no LDAP entry found!BaseDN='dc=shinesystech,dc=com', Filter='(uid=otrsAdmin@shinesystech.com)', (REMOTE_ADDR: 192.168.2.128).
None of the Config.pm settings have been changed and I have not messed with the ldap config, so it's very strange.
Any ideas on how I can best fix/debug this problem?
-Matt
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

Indeed, and that is certainly the case. I might drop the filter altogether, but there are pseudousers in that same container with no e-mail address that it would not make sense to validate... Like I said, with this filter I and 'mnm' have logged in just fine, but 'ulh' fails, and I can't really see the difference in an LDAP browser. I used to have objectClass=user as well, and it looks like he may fail that test (plus the filter was incorrectly set up at the time), but having an e-mail address should be a valid requirement... I'll know soon if the problem is more widespread that just this user..
Gerald Young
22. november 2013 15:04 >>> Filter='(&(cn=ulh)(mail=*)) means ulh is a common name and has an email address in ldap.
On Fri, Nov 22, 2013 at 9:01 AM, Martin Møller
I'm seeing the same thing with at least one use here.
I can log in just fine, as well as a few others, but one user who has tried, gets this error. I have checked all the attributes - they are fine. No different from the rest of us. It's the same LDAP backend as before. On the OTRS 3.2 system, he can log in. On the 3.3 system, he cannot. User: ulh authentication failed, no LDAP entry found!BaseDN='ou=KBH,o=ITQ', Filter='(&(cn=ulh)(mail=*)) User: mmo (cn=mmo,ou=KBH,o=ITQ) authentication ok
Very strange, from my point of view.. :)
/Martin.
Gerald Young
22. november 2013 00:59 >>> no ldap entry found means that the ldap server is unable to find an entry in ldap for the given uid. On Thu, Nov 21, 2013 at 4:38 PM, Matthew M. Mosteller
wrote: I had LDAP (openLDAP) working for a few weeks and now it suddenly decided to stop working. Since the server is not live I have anonymous searches allowed. I am now getting an error of:
[Thu Nov 21 16:27:30 2013][Notice][Kernel::System::Auth::LDAP::Auth] User: otrsAdmin@shinesystech.com authentication failed, no LDAP entry found!BaseDN='dc=shinesystech,dc=com', Filter='(uid=otrsAdmin@shinesystech.com)', (REMOTE_ADDR: 192.168.2.128).
None of the Config.pm settings have been changed and I have not messed with the ldap config, so it's very strange.
Any ideas on how I can best fix/debug this problem?
-Matt
OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
---------------------------------------------------------------------
OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
---------------------------------------------------------------------
OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
participants (3)
-
Gerald Young
-
Martin Møller
-
Matthew M. Mosteller