Steven Jones wrote:
The clue here is that err=0 but nentries=0. This to me indicates some sort of ACI problem. If you ran the setup program, and you specified dc=vuw,dc=ac,dc=nz as your suffix, setup should have added an ACI which would allow this search to return entries. This, coupled with the fact that you cannot view these entries using the console (assuming you meant while logged in as the admin user), suggests that you added this data after setup and that you did not specify dc=vuw,dc=ac,dc=nz as your suffix. If you want to see what the suggested ACIs are, you should be able to view the ACIs that were added to the suffix that you did specify when you ran setup. The console will show you the ACIs. If you want to see what they are without using the console, you can use ldapsearch e.g.looking in the wrong place would be my guess, based on the err=32 in the previous logs you posted. I seem to have been able to stop the err=32 by reconfiguring ldap.conf a bit and cleaning out FDS and I assume putting the user in the right place but still no login. [11/Sep/2007:16:21:47 +1200] conn=30 fd=78 slot=78 connection from 130.195.87.246 to 130.195.87.249 [11/Sep/2007:16:21:47 +1200] conn=30 op=0 BIND dn="" method=128 version=3 [11/Sep/2007:16:21:47 +1200] conn=30 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="" [11/Sep/2007:16:21:47 +1200] conn=30 op=1 SRCH base="ou=People,dc=vuw,dc=ac,dc=nz" scope=2 filter="(&(objectClass=posixAccount)(uid=jonesst1))" attrs=ALL [11/Sep/2007:16:21:47 +1200] conn=30 op=1 RESULT err=0 tag=101 nentries=0 etime=0
ldapsearch -x -D "cn=directory manager" -w password -b "dc=vuw,dc=ac,dc=nz" "aci=*" aci
[11/Sep/2007:16:21:47 +1200] conn=30 op=2 BIND dn="" method=128 version=3 [11/Sep/2007:16:21:47 +1200] conn=30 op=2 RESULT err=0 tag=97 nentries=0 etime=0 dn="" [11/Sep/2007:16:21:47 +1200] conn=30 op=3 SRCH base="ou=People,dc=vuw,dc=ac,dc=nz" scope=2 filter="(&(objectClass=posixAccount)(uid=jonesst1))" attrs=ALL [11/Sep/2007:16:21:47 +1200] conn=30 op=3 RESULT err=0 tag=101 nentries=0 etime=0 [11/Sep/2007:16:21:51 +1200] conn=30 op=4 BIND dn="" method=128 version=3 [11/Sep/2007:16:21:51 +1200] conn=30 op=4 RESULT err=0 tag=97 nentries=0 etime=0 dn="" [11/Sep/2007:16:21:51 +1200] conn=30 op=5 SRCH base="ou=People,dc=vuw,dc=ac,dc=nz" scope=2 filter="(&(objectClass=posixAccount)(uid=jonesst1))" attrs=ALL [11/Sep/2007:16:21:51 +1200] conn=30 op=5 RESULT err=0 tag=101 nentries=0 etime=0 [11/Sep/2007:16:21:51 +1200] conn=30 op=6 BIND dn="" method=128 version=3 [11/Sep/2007:16:21:51 +1200] conn=30 op=6 RESULT err=0 tag=97 nentries=0 etime=0 dn="" [11/Sep/2007:16:21:51 +1200] conn=30 op=7 SRCH base="ou=People,dc=vuw,dc=ac,dc=nz" scope=2 filter="(&(objectClass=posixAccount)(uid=jonesst1))" attrs=ALL [11/Sep/2007:16:21:51 +1200] conn=30 op=7 RESULT err=0 tag=101 nentries=0 etime=0 [11/Sep/2007:16:21:56 +1200] conn=30 op=8 BIND dn="" method=128 version=3 [11/Sep/2007:16:21:56 +1200] conn=30 op=8 RESULT err=0 tag=97 nentries=0 etime=0 dn="" [11/Sep/2007:16:21:56 +1200] conn=30 op=9 SRCH base="ou=People,dc=vuw,dc=ac,dc=nz" scope=2 filter="(&(objectClass=posixAccount)(uid=jonesst1))" attrs=ALL [11/Sep/2007:16:21:56 +1200] conn=30 op=9 RESULT err=0 tag=101 nentries=0 etime=0 [11/Sep/2007:16:21:56 +1200] conn=30 op=10 BIND dn="" method=128 version=3 [11/Sep/2007:16:21:56 +1200] conn=30 op=10 RESULT err=0 tag=97 nentries=0 etime=0 dn="" [11/Sep/2007:16:21:56 +1200] conn=30 op=11 SRCH base="ou=People,dc=vuw,dc=ac,dc=nz" scope=2 filter="(&(objectClass=posixAccount)(uid=jonesst1))" attrs=ALL [11/Sep/2007:16:21:56 +1200] conn=30 op=11 RESULT err=0 tag=101 nentries=0 etime=0 [11/Sep/2007:16:21:58 +1200] conn=30 op=13 UNBIND [11/Sep/2007:16:21:58 +1200] conn=30 op=13 fd=78 closed - U1 [11/Sep/2007:16:22:46 +1200] conn=31 fd=78 slot=78 connection from 130.195.87.246 to 130.195.87.249 [11/Sep/2007:16:22:46 +1200] conn=31 op=0 BIND dn="uid=jonesst1,ou=People,dc=vuw,dc=ac,dc=nz" method=128 version=3 [11/Sep/2007:16:22:46 +1200] conn=31 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="uid=jonesst1,ou=people,dc=vuw,dc=ac,dc=nz" [11/Sep/2007:16:22:46 +1200] conn=31 op=1 SRCH base="" scope=0 filter="(objectClass=*)" attrs=ALL [11/Sep/2007:16:22:46 +1200] conn=31 op=1 RESULT err=0 tag=101 nentries=1 etime=0 [11/Sep/2007:16:22:46 +1200] conn=31 op=2 UNBIND [11/Sep/2007:16:22:46 +1200] conn=31 op=2 fd=78 closed - U1 [11/Sep/2007:16:22:52 +1200] conn=32 fd=78 slot=78 connection from 130.195.87.246 to 130.195.87.249 [11/Sep/2007:16:22:52 +1200] conn=32 op=0 BIND dn="" method=128 version=3 [11/Sep/2007:16:22:52 +1200] conn=32 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="" [11/Sep/2007:16:22:52 +1200] conn=32 op=1 SRCH base="uid=jonesst1,ou=People,dc=vuw,dc=ac,dc=nz" scope=2 filter="(objectClass=*)" attrs=ALL [11/Sep/2007:16:22:52 +1200] conn=32 op=1 RESULT err=0 tag=101 nentries=1 etime=0 [11/Sep/2007:16:22:52 +1200] conn=32 op=2 UNBIND [11/Sep/2007:16:22:52 +1200] conn=32 op=2 fd=78 closed - U1-- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature
-- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users
