Re: Can't log in from Solaris (9) Client(s)

[Igor Brezac <igor@ipass.net>]

Are your passwords crypt() hashes (userPassword: {crypt}xxxxxxxxxxxxx)?

-Igor


On Thu, 11 Sep 2003, Tibbetts, Ric wrote:

> All;
> Well, the new OpenLDAP server is working pretty good for my Linux boxes.
> So with that accomplished, it's time to try to hang the Solaris 9
> clients on it.
>
> I've followed a couple of different "How-Tos" on the subject, but I
> cannot get them to connect. I'm hoping I'm just missing something obvious.
>
> The response I get from the log file (loglevel=128) is:
>
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 848112 local4.debug] conn=44
> fd=12 ACCEPT from IP=132.228.132.44:39395 (IP=0.0.0.0:389)
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 347666 local4.debug] conn=44
> op=0 BIND dn="cn=proxyagent,ou=Profile,dc=ldap-test,dc=com" method=128
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 237057 local4.debug] conn=44
> op=0 BIND dn="cn=proxyagent,ou=Profile,dc=ldap-test,dc=com" mech=simple
> ssf=0
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 217296 local4.debug] conn=44
> op=0 RESULT tag=97 err=0 text=
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 902418 local4.debug] conn=44
> op=1 SRCH base="ou=people,dc=ldap-test,dc=com" scope=2
> filter="(&(objectClass=posixAccount)(uid=tibberi))"
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 706578 local4.debug] conn=44
> op=1 SRCH attr=cn uid uidnumber gidnumber gecos description
> homedirectory loginshell
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 362707 local4.debug] conn=44
> op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 338319 local4.debug] conn=44
> op=2 UNBIND
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 952275 local4.debug] conn=44
> fd=12 closed
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 848112 local4.debug] conn=45
> fd=12 ACCEPT from IP=132.228.132.44:39396 (IP=0.0.0.0:389)
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 347666 local4.debug] conn=45
> op=0 BIND dn="cn=proxyagent,ou=Profile,dc=ldap-test,dc=com" method=128
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 237057 local4.debug] conn=45
> op=0 BIND dn="cn=proxyagent,ou=Profile,dc=ldap-test,dc=com" mech=simple
> ssf=0
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 217296 local4.debug] conn=45
> op=0 RESULT tag=97 err=0 text=
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 902418 local4.debug] conn=45
> op=1 SRCH base="ou=people,dc=ldap-test,dc=com" scope=2
> filter="(&(objectClass=shadowAccount)(uid=tibberi))"
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 706578 local4.debug] conn=45
> op=1 SRCH attr=uid userpassword shadowflag
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 362707 local4.debug] conn=45
> op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 338319 local4.debug] conn=45
> op=2 UNBIND
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 952275 local4.debug] conn=45
> fd=12 closed
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 848112 local4.debug] conn=46
> fd=12 ACCEPT from IP=132.228.132.44:39397 (IP=0.0.0.0:389)
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 347666 local4.debug] conn=46
> op=0 BIND dn="cn=proxyagent,ou=Profile,dc=ldap-test,dc=com" method=128
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 237057 local4.debug] conn=46
> op=0 BIND dn="cn=proxyagent,ou=Profile,dc=ldap-test,dc=com" mech=simple
> ssf=0
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 217296 local4.debug] conn=46
> op=0 RESULT tag=97 err=0 text=
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 902418 local4.debug] conn=46
> op=1 SRCH base="ou=people,dc=ldap-test,dc=com" scope=2
> filter="(&(objectClass=posixAccount)(uid=tibberi))"
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 706578 local4.debug] conn=46
> op=1 SRCH attr=cn uid uidnumber gidnumber gecos description
> homedirectory loginshell
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 362707 local4.debug] conn=46
> op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 338319 local4.debug] conn=46
> op=2 UNBIND
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 952275 local4.debug] conn=46
> fd=12 closed
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 848112 local4.debug] conn=47
> fd=12 ACCEPT from IP=132.228.132.44:39398 (IP=0.0.0.0:389)
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 347666 local4.debug] conn=47
> op=0 BIND dn="cn=proxyagent,ou=Profile,dc=ldap-test,dc=com" method=128
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 237057 local4.debug] conn=47
> op=0 BIND dn="cn=proxyagent,ou=Profile,dc=ldap-test,dc=com" mech=simple
> ssf=0
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 217296 local4.debug] conn=47
> op=0 RESULT tag=97 err=0 text=
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 902418 local4.debug] conn=47
> op=1 SRCH base="ou=people,dc=ldap-test,dc=com" scope=2
> filter="(&(objectClass=shadowAccount)(uid=tibberi))"
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 706578 local4.debug] conn=47
> op=1 SRCH attr=uid userpassword shadowflag
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 362707 local4.debug] conn=47
> op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 338319 local4.debug] conn=47
> op=2 UNBIND
> Sep 11 11:31:44 meeng3 slapd[15712]: [ID 952275 local4.debug] conn=47
> fd=12 closed
>
> In short:
> If logged into a client as root, I can identify a user:
>
> #> id [user-name]
>
> works, and it returns the expected values.
> But trying login fails with "Login Incorrect"
> So it's recognises the ueser, but is not getting the password?
>
> I can put the config file on a web site, if anyone needs to see those.
> But I'm hoping that the above output will provide enough clues.
>
> The setup:
>
> OpenLDAP 2.1.22
> Server OS: Solaris 9
>
> Client OS:
> 	RedHat 9
> 	Solaris 9
>
>
> Any assistance will, as always, be greatly appreciated.
> I've come a long way with this installation. Just a little more to go!
>
> Thankx again!
>
> -Ric
>
>

-- 
Igor