Openldap 2.4.x log details for error 49

To: "openldap-technical@openldap.org" <openldap-technical@openldap.org>

Subject: Openldap 2.4.x log details for error 49

From: François Pernet <Francois.Pernet@idsa.ch>

Date: Wed, 11 Sep 2019 12:08:36 +0000

Accept-language: fr-FR, en-US

Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=idsa.ch; dmarc=pass action=none header.from=idsa.ch; dkim=pass header.d=idsa.ch; arc=none

Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TEp8SnDX9oHoB7+hStuTxsFyDxj3adfFTwlX3IlootQ=; b=nmRDAGPDuqflJNfBKVmG7x5g4rKzHnCGaMuLTVHjNx4J/bNN+CZ0oawUV8tWG6cX2E/U/YfJtAE6Jo+ACCn96VBTUV70CHhAKMHYa2ttfgSRFIpfEiO83gfRhjqCfkXRKl84klWqWlue8ftFvpwW+ucrej4ntIWAzq3+4Ga8yTN2GuZwmdgP3JPJqpQsI/WrkNns4ZDpHrTDHiqbFr/7LVdI9Z+GbMw9jlZdCqNr27rxDB5omzW/5M2WyH4VS2kFLfv3F+PWvZGjUjrikZSg5VVpTrk0VeVF/Ne9Kk9vR8d3FPPmYBVaQYorZnVmZVzZ+7k/+D6nCEPlgF7KafHBKg==

Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=YShCDpPL9lJdipmoYkuGYhiHVUr6SJTRLB8tPoIVQAa6hX0tRBb9Vqu1TzIeIpIGzUin+MMVZLEMxW5VJpRR0dgvBvAuUVqiYBghvnC8nksaW+RzfvPW5cv9mzATDdnRVOZCq/1maht1bQue6V77oCZYV936JLra2mKJEc1JpaD+5+JznXhqXmX0JsL+Yj4HZoseLMJivRSUNydgZ8oGwE8sbAMHxIDrBr03q+Xh2Cydd9zMI85ujTOAex7eOe0hwfFgXMpMbsHytCPxmhPp13Bytei9zJQnipVwhk6Uc8+qS296qi6TRqsUkMOvDAYhglvJOslGbCmrvUr92F3N4A==

Authentication-results: spf=none (sender IP is ) smtp.mailfrom=Francois.Pernet@idsa.ch;

Content-language: fr-FR

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=IDCloud365.onmicrosoft.com; s=selector2-IDCloud365-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TEp8SnDX9oHoB7+hStuTxsFyDxj3adfFTwlX3IlootQ=; b=WpF27ozzDRkxS4taRzcpUS0rtAMzPdoT6k1YEn3agaLkwOXHReU41y/cnekUWuQRaJ4g0/xFkBQf5+WCjPIEQPS9FoDbX73KuD2HCuXkGeak1O+0CVb84mcifT6t4RwR0xTKGVor8C3H+SW5oe5sj3TYXcH2Pp6NPVDKCmc0uIk=

Thread-index: AdVnFGZwYPc1vNjQR16ewcrTRRs36w==

Thread-topic: Openldap 2.4.x log details for error 49

Hi all,

We have a solution running on which openldap is the identity repository.

OpenLDAP 2.4 is installed (on CentOS) also with policy.

The system is able to send traps when authentication problem occurs, based on the slapd generated logs.

Unfortunatly the log contains such error: “Jun 5 11:27:16 vms slapd[32101]: conn=1174 op=0 RESULT tag=97 err=49 text=” when the password entered generates an “invalid crendentials” message.

This is fine, but the error could mean the following:

Wrong user or password
Expired account
Account locked or disabled
User must change its password

Question is : is it possible to find a way to have the details for error 49 ? (this error message is far too generic)

Many thanks in advance

FPernet

Follow-Ups:

Re: Openldap 2.4.x log details for error 49
- From: Dieter Klünter <dieter@dkluenter.de>