Hi Jean, I've done a restart of the cache daemons and a fresh start of sogo to see all messages in the syslog and sogo.log. Marked all slapd output in green. I cannot identify a BIND operation with the configured DN 'cn=admin,dc=daheim,dc=at'.
root@srv1:/var/log# /etc/init.d/nscd restart; /etc/init.d/nslcd restart; /etc/init.d/sogo start Restarting Name Service Cache Daemon: nscd. Restarting LDAP connection daemon: nslcdMay 5 21:00:47 srv1 slapd[3039]: conn=1001 op=3 UNBIND May 5 21:00:47 srv1 nslcd[3083]: caught signal SIGTERM (15), shutting down May 5 21:00:47 srv1 slapd[3039]: conn=1001 fd=18 closed May 5 21:00:47 srv1 slapd[3039]: conn=1000 op=2 UNBIND May 5 21:00:47 srv1 nslcd[3083]: version 0.7.15 bailing out May 5 21:00:47 srv1 slapd[3039]: conn=1000 fd=13 closed . May 5 21:00:47 srv1 nslcd[3274]: version 0.7.15 starting May 5 21:00:47 srv1 nslcd[3274]: accepting connections . Starting SOGo: sogo May 5 21:00:48 srv1 slapd[3039]: conn=1002 fd=13 ACCEPT from IP=127.0.0.1:44763 (IP=0.0.0.0:389) May 5 21:00:48 srv1 slapd[3039]: conn=1002 op=0 BIND dn="" method=128 May 5 21:00:48 srv1 slapd[3039]: conn=1002 op=0 RESULT tag=97 err=0 text= May 5 21:00:48 srv1 slapd[3039]: conn=1002 op=1 SRCH base="dc=daheim,dc=at" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=sogo))" May 5 21:00:48 srv1 slapd[3039]: conn=1002 op=1 SRCH attr=userPassword cn gidNumber uidNumber loginShell objectClass gecos uid homeDirectory May 5 21:00:48 srv1 slapd[3039]: conn=1002 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= May 5 21:00:49 srv1 slapd[3039]: conn=1003 fd=18 ACCEPT from IP=127.0.0.1:44764 (IP=0.0.0.0:389) May 5 21:00:49 srv1 slapd[3039]: conn=1003 op=0 BIND dn="" method=128 May 5 21:00:49 srv1 slapd[3039]: conn=1003 op=0 RESULT tag=97 err=0 text= May 5 21:00:49 srv1 slapd[3039]: conn=1003 op=1 SRCH base="dc=daheim,dc=at" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=sogo))" May 5 21:00:49 srv1 slapd[3039]: conn=1003 op=1 SRCH attr=uid May 5 21:00:49 srv1 slapd[3039]: conn=1003 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= May 5 21:00:49 srv1 slapd[3039]: conn=1003 op=2 SRCH base="dc=daheim,dc=at" scope=2 deref=0 filter="(&(objectClass=posixGroup)(|(memberUid=sogo)(uniqueMember=cn=sogo user,ou=users,dc=daheim,dc=at)))" May 5 21:00:49 srv1 slapd[3039]: conn=1003 op=2 SRCH attr=cn userPassword memberUid gidNumber uniqueMember May 5 21:00:49 srv1 slapd[3039]: conn=1003 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= May 05 21:00:49 sogod [3351]: version 2.0.0 (build @vizzini.inverse.ca 201205050637) -- starting May 05 21:00:49 sogod [3351]: vmem size check enabled: shutting down app when vmem > 384 MB May 05 21:00:49 sogod [3351]: <0x0x14f48a0[SOGoProductLoader]> SOGo products loaded from '/usr/lib/GNUstep/SOGo': May 05 21:00:49 sogod [3351]: <0x0x14f48a0[SOGoProductLoader]> Appointments.SOGo, ContactsUI.SOGo, AdministrationUI.SOGo, CommonUI.SOGo, MailerUI.SOGo, Contacts.SOGo, MailPartViewers.SOGo, SchedulerUI.SOGo, Mailer.SOGo, MainUI.SOGo, PreferencesUI.SOGo . root@srv1:/var/log# May 05 21:00:49 sogod [3351]: <0x0x169b900[WOWatchDog]> listening on *:20000 May 05 21:00:49 sogod [3351]: <0x0x169b900[WOWatchDog]> watchdog process pid: 3351 May 05 21:00:49 sogod [3351]: <0x0x7fc39f06b940[WOWatchDogChild]> watchdog request timeout set to 10 minutes May 05 21:00:49 sogod [3351]: <0x0x169b900[WOWatchDog]> preparing 1 children May 05 21:00:49 sogod [3351]: <0x0x169b900[WOWatchDog]> child spawned with pid 3357 --> now called the sogo webbage and tried to logon as user "aschlager": May 05 21:00:58 sogod [3357]: <0x0x139f580[SOGoCache]> Cache cleanup interval set every 300.000000 seconds May 05 21:00:58 sogod [3357]: <0x0x139f580[SOGoCache]> Using host(s) 'localhost' as server(s) 2012-05-05 21:00:58.029 sogod[3357] Note(SoObject): SoDebugKeyLookup is enabled! 2012-05-05 21:00:58.030 sogod[3357] Note(SoObject): SoDebugBaseURL is enabled! 2012-05-05 21:00:58.030 sogod[3357] Note(SoObject): relative base URLs are enabled. 2012-05-05 21:00:58.039 sogod[3357] ERROR(-[NGBundleManager bundleWithPath:]): could not create bundle for path: '/usr/share/GNUstep/Libraries/gnustep-base/Versions/1.20/Resources/SSL.bundle' 2012-05-05 21:00:58.057 sogod[3357] WOCompoundElement: pool embedding is on. 2012-05-05 21:00:58.057 sogod[3357] WOCompoundElement: id logging is on. 2012-05-05 21:00:58.076 sogod[3357] WARNING(-[NSNull(misc) count]): called NSNull -count (returns 0) !!! localhost - - [05/May/2012:21:00:58 GMT] "GET /SOGo/ HTTP/1.1" 200 4245/0 0.076 11795 64% 3M May 5 21:01:01 srv1 slapd[3039]: conn=1004 fd=21 ACCEPT from IP=127.0.0.1:44769 (IP=0.0.0.0:389) May 5 21:01:01 srv1 slapd[3039]: conn=1004 op=0 BIND dn="uid=aschlager,ou=users,dc=daheim,dc=at" method=128 May 5 21:01:01 srv1 slapd[3039]: conn=1004 op=0 RESULT tag=97 err=49 text= May 5 21:01:01 srv1 slapd[3039]: conn=1004 op=1 UNBIND May 05 21:01:01 sogod [3357]: SOGoRootPage Login for user 'aschlager' might not have worked - password policy: 65535 grace: -1 expire: -1 bound: 0 localhost - - [05/May/2012:21:01:01 GMT] "POST /SOGo/connect HTTP/1.1" 403 34/43 0.013 - - 512K May 5 21:01:01 srv1 slapd[3039]: conn=1004 fd=21 closed Am 2012-05-05 19:15, schrieb Jean Raby: > On 12-05-05 11:02 AM, Andreas Schlager wrote: >> [snip] > This is strange, you don't see any ldap bind for > 'cn=admin,dc=daheim,dc=at' in the slapd logs? > I find it surprising that sogo tries to bind as > "uid=aschlager,dc=daheim,dc=at" since the config file sets a baseDN of > 'ou=users,dc=daheim,dc=at' ... something is fishy here. >
signature.asc
Description: OpenPGP digital signature