How to debug LDAP

older
Forgot password mechanism doesn't...

Marty Hillman

27 Aug 2013 27 Aug '13

8:55 p.m.

Anyone know how to debug LDAP configurations? I had it all configured, but my network administrator decided to reorganize Active Directory and move everything around in new OUs. I changed the strings in Config.pm to point to the new DN, but it is still not allowing logins and shows Login Failed. Trying to figure out what log files I can look at or how to manually test to get an actual error rather than a failed login. Marty Hillman - IT Manager of Network Infrastructure [cid:image001.png@01CEA336.6AABF9A0] 5801 Clearwater Drive, Minnetonka, MN 55343 P 612.617.4333 | E mhillman@equuscs.commailto:mhillman@equuscs.com

Attachments:

attachment.html (text/html — 9.2 KB)
image001.png (image/png — 7.8 KB)

Show replies by date

Gerald Young

27 Aug 27 Aug

9:22 p.m.

http://forums.otterhub.org/viewtopic.php?f=60&t=16543 On Tue, Aug 27, 2013 at 4:55 PM, Marty Hillman wrote:

...

Anyone know how to debug LDAP configurations? I had it all configured, but my network administrator decided to reorganize Active Directory and move everything around in new OUs. I changed the strings in Config.pm to point to the new DN, but it is still not allowing logins and shows Login Failed. Trying to figure out what log files I can look at or how to manually test to get an actual error rather than a failed login.****

** **

Marty Hillman – IT Manager of Network Infrastructure****

[image: Description: http://intranet.equuscs.com/mishelp/Faq/email-signature/logo.png]****

****

5801 Clearwater Drive, Minnetonka, MN 55343 ****

****

*P** * 612.617.4333 | *E** mhillman@equuscs.com* ****

** **

** **

--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

Marty Hillman

10:49 p.m.

Thanks, but it did not help me. I found the error.log and found the following error. I traced the error codes on Google, but all of the PERL modules are installed. otrs.CheckModules.pl comes back clean. I have double-checked the DN strings and everything traces fine. And the username below exists because I am logged in to AD using that account. ERROR: OTRS-CGI-10 Perl: 5.14.2 OS: linux Time: Tue Aug 27 17:42:28 2013 Message: First bind failed! 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece^@ RemoteAddress: 172.18.3.20 RequestURI: /otrs/index.pl Traceback (6687): Module: Kernel::System::Auth::LDAP::Auth (OTRS 3.2.10) Line: 182 Module: Kernel::System::Auth::Auth (OTRS 3.2.10) Line: 186 Module: Kernel::System::Web::InterfaceAgent::Run (OTRS 3.2.10) Line: 201 Module: ModPerl::ROOT::ModPerl::Registry::opt_otrs_bin_cgi_2dbin_index_2epl::handler (unknown version) Line: 41 Module: (eval) (v1.99) Line: 204 Module: ModPerl::RegistryCooker::run (v1.99) Line: 204 Module: ModPerl::RegistryCooker::default_handler (v1.99) Line: 170 Module: ModPerl::Registry::handler (v1.99) Line: 31 ERROR: OTRS-CGI-10 Perl: 5.14.2 OS: linux Time: Tue Aug 27 17:42:28 2013 Message: No UserID found for 'mhillman'! RemoteAddress: 172.18.3.20 RequestURI: /otrs/index.pl Traceback (6687): Module: Kernel::System::User::UserLookup (OTRS 3.2.10) Line: 795 Module: Kernel::System::Auth::Auth (OTRS 3.2.10) Line: 243 Module: Kernel::System::Web::InterfaceAgent::Run (OTRS 3.2.10) Line: 201 Module: ModPerl::ROOT::ModPerl::Registry::opt_otrs_bin_cgi_2dbin_index_2epl::handler (unknown version) Line: 41 Module: (eval) (v1.99) Line: 204 Module: ModPerl::RegistryCooker::run (v1.99) Line: 204 Module: ModPerl::RegistryCooker::default_handler (v1.99) Line: 170 Module: ModPerl::Registry::handler (v1.99) Line: 31 From: Gerald Young [mailto:crythias@gmail.com] Sent: Tuesday, August 27, 2013 4:23 PM To: User questions and discussions about OTRS. Subject: Re: [otrs] How to debug LDAP http://forums.otterhub.org/viewtopic.php?f=60&t=16543 On Tue, Aug 27, 2013 at 4:55 PM, Marty Hillman mailto:mhillman@equuscs.com> wrote: Anyone know how to debug LDAP configurations? I had it all configured, but my network administrator decided to reorganize Active Directory and move everything around in new OUs. I changed the strings in Config.pm to point to the new DN, but it is still not allowing logins and shows Login Failed. Trying to figure out what log files I can look at or how to manually test to get an actual error rather than a failed login. Marty Hillman - IT Manager of Network Infrastructure [cid:image001.png@01CEA34D.B9310590] 5801 Clearwater Drive, Minnetonka, MN 55343 P 612.617.4333tel:612.617.4333 | E mhillman@equuscs.commailto:mhillman@equuscs.com --------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

Gerald Young

11:15 p.m.

First bind failed = search user and password not working. On Tue, Aug 27, 2013 at 6:49 PM, Marty Hillman wrote:

...

Thanks, but it did not help me. I found the error.log and found the following error. I traced the error codes on Google, but all of the PERL modules are installed. otrs.CheckModules.pl comes back clean. I have double-checked the DN strings and everything traces fine. And the username below exists because I am logged in to AD using that account.****

** **

ERROR: OTRS-CGI-10 Perl: 5.14.2 OS: linux Time: Tue Aug 27 17:42:28 2013** **

** **

Message: First bind failed! 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece^@****

** **

RemoteAddress: 172.18.3.20****

RequestURI: /otrs/index.pl****

** **

Traceback (6687):****

Module: Kernel::System::Auth::LDAP::Auth (OTRS 3.2.10) Line: 182****

Module: Kernel::System::Auth::Auth (OTRS 3.2.10) Line: 186****

Module: Kernel::System::Web::InterfaceAgent::Run (OTRS 3.2.10) Line: 201 ****

Module: ModPerl::ROOT::ModPerl::Registry::opt_otrs_bin_cgi_2dbin_index_2epl::handler (unknown version) Line: 41****

Module: (eval) (v1.99) Line: 204****

Module: ModPerl::RegistryCooker::run (v1.99) Line: 204****

Module: ModPerl::RegistryCooker::default_handler (v1.99) Line: 170****

Module: ModPerl::Registry::handler (v1.99) Line: 31****

** **

ERROR: OTRS-CGI-10 Perl: 5.14.2 OS: linux Time: Tue Aug 27 17:42:28 2013** **

** **

Message: No UserID found for 'mhillman'!****

** **

RemoteAddress: 172.18.3.20****

RequestURI: /otrs/index.pl****

** **

Traceback (6687):****

Module: Kernel::System::User::UserLookup (OTRS 3.2.10) Line: 795****

Module: Kernel::System::Auth::Auth (OTRS 3.2.10) Line: 243****

Module: Kernel::System::Web::InterfaceAgent::Run (OTRS 3.2.10) Line: 201 ****

Module: ModPerl::ROOT::ModPerl::Registry::opt_otrs_bin_cgi_2dbin_index_2epl::handler (unknown version) Line: 41****

Module: (eval) (v1.99) Line: 204****

Module: ModPerl::RegistryCooker::run (v1.99) Line: 204****

Module: ModPerl::RegistryCooker::default_handler (v1.99) Line: 170****

Module: ModPerl::Registry::handler (v1.99) Line: 31****

** **

** **

*From:* Gerald Young [mailto:crythias@gmail.com] *Sent:* Tuesday, August 27, 2013 4:23 PM *To:* User questions and discussions about OTRS. *Subject:* Re: [otrs] How to debug LDAP****

** **

http://forums.otterhub.org/viewtopic.php?f=60&t=16543****

** **

On Tue, Aug 27, 2013 at 4:55 PM, Marty Hillman wrote:****

Anyone know how to debug LDAP configurations? I had it all configured, but my network administrator decided to reorganize Active Directory and move everything around in new OUs. I changed the strings in Config.pm to point to the new DN, but it is still not allowing logins and shows Login Failed. Trying to figure out what log files I can look at or how to manually test to get an actual error rather than a failed login.****

****

Marty Hillman – IT Manager of Network Infrastructure****

[image: Description: http://intranet.equuscs.com/mishelp/Faq/email-signature/logo.png]****

****

5801 Clearwater Drive, Minnetonka, MN 55343 ****

****

*P** * 612.617.4333 | *E mhillman@equuscs.com* ****

****

****

--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs****

** **

--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

Marty Hillman

11:26 p.m.

Could not figure those out because the DN string was correct. But I did find references that I could use the user@domain.commailto:user@domain.com instead if I did not feel like typing the full DN. Once I did that and added sscope='sub'; to the parameters, I got it working. Just tested it successfully within 30 seconds of your email. :) Thanks for your help! From: Gerald Young [mailto:crythias@gmail.com] Sent: Tuesday, August 27, 2013 6:16 PM To: User questions and discussions about OTRS. Subject: Re: [otrs] How to debug LDAP First bind failed = search user and password not working. On Tue, Aug 27, 2013 at 6:49 PM, Marty Hillman mailto:mhillman@equuscs.com> wrote: Thanks, but it did not help me. I found the error.log and found the following error. I traced the error codes on Google, but all of the PERL modules are installed. otrs.CheckModules.plhttp://otrs.CheckModules.pl comes back clean. I have double-checked the DN strings and everything traces fine. And the username below exists because I am logged in to AD using that account. ERROR: OTRS-CGI-10 Perl: 5.14.2 OS: linux Time: Tue Aug 27 17:42:28 2013 Message: First bind failed! 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece^@ RemoteAddress: 172.18.3.20 RequestURI: /otrs/index.plhttp://index.pl Traceback (6687): Module: Kernel::System::Auth::LDAP::Auth (OTRS 3.2.10) Line: 182 Module: Kernel::System::Auth::Auth (OTRS 3.2.10) Line: 186 Module: Kernel::System::Web::InterfaceAgent::Run (OTRS 3.2.10) Line: 201 Module: ModPerl::ROOT::ModPerl::Registry::opt_otrs_bin_cgi_2dbin_index_2epl::handler (unknown version) Line: 41 Module: (eval) (v1.99) Line: 204 Module: ModPerl::RegistryCooker::run (v1.99) Line: 204 Module: ModPerl::RegistryCooker::default_handler (v1.99) Line: 170 Module: ModPerl::Registry::handler (v1.99) Line: 31 ERROR: OTRS-CGI-10 Perl: 5.14.2 OS: linux Time: Tue Aug 27 17:42:28 2013 Message: No UserID found for 'mhillman'! RemoteAddress: 172.18.3.20 RequestURI: /otrs/index.plhttp://index.pl Traceback (6687): Module: Kernel::System::User::UserLookup (OTRS 3.2.10) Line: 795 Module: Kernel::System::Auth::Auth (OTRS 3.2.10) Line: 243 Module: Kernel::System::Web::InterfaceAgent::Run (OTRS 3.2.10) Line: 201 Module: ModPerl::ROOT::ModPerl::Registry::opt_otrs_bin_cgi_2dbin_index_2epl::handler (unknown version) Line: 41 Module: (eval) (v1.99) Line: 204 Module: ModPerl::RegistryCooker::run (v1.99) Line: 204 Module: ModPerl::RegistryCooker::default_handler (v1.99) Line: 170 Module: ModPerl::Registry::handler (v1.99) Line: 31 From: Gerald Young [mailto:crythias@gmail.commailto:crythias@gmail.com] Sent: Tuesday, August 27, 2013 4:23 PM To: User questions and discussions about OTRS. Subject: Re: [otrs] How to debug LDAP http://forums.otterhub.org/viewtopic.php?f=60&t=16543 On Tue, Aug 27, 2013 at 4:55 PM, Marty Hillman mailto:mhillman@equuscs.com> wrote: Anyone know how to debug LDAP configurations? I had it all configured, but my network administrator decided to reorganize Active Directory and move everything around in new OUs. I changed the strings in Config.pm to point to the new DN, but it is still not allowing logins and shows Login Failed. Trying to figure out what log files I can look at or how to manually test to get an actual error rather than a failed login. Marty Hillman - IT Manager of Network Infrastructure [cid:image001.png@01CEA353.00553400] 5801 Clearwater Drive, Minnetonka, MN 55343 P 612.617.4333tel:612.617.4333 | E mhillman@equuscs.commailto:mhillman@equuscs.com --------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs --------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

4343

Age (days ago)

4343

Last active (days ago)

List overview

Download

4 comments

2 participants

participants (2)

Gerald Young
Marty Hillman

How to debug LDAP

Marty Hillman

Gerald Young

Marty Hillman

Gerald Young

Marty Hillman

tags

participants (2)