Problems with authentication using MS 2005Q4

Hi everyone

I am new to SJS and trying to configure messaging server. I have a SJS cluster 3.1 running Messaging Server and Calendar Server.

I have a seperate system running the DS and the cluster MS server stores it's config in this DS. (also all the user/group settings). The root suffix for this installation is dc=xxx,dc=co,dc=uk. When I installed the MS I told it to create a mail domain called students.xxx.co.uk. This created the entry o=students.xxx.co.uk,dc=xxx,dc=co,dc=uk in the DS.

The MS services starts with no problems.

I then wanted to install MEM and UWC on another system. I installed Access Manager in legacy mode on the DS machine, and also DA. I can log in to the DA using the admin account, and I can see the domain name students.xxx.co.uk. I also see the students.xxx.co.uk entry in the Access Manager. I can create users in the AM server.

I installed the 3rd system with AppServer 8.1 (2005Q4), and installed UWC on port 80. I installed MS on the same server and configured just the Messenger Express component.

NOW all my problems:

1. I can connect to my cluster using telnetcluster 143 and 110

I can't authenticate. The error log on the cluster shows:

[18/Oct/2006:18:34:36 +0200] venus imapd[3729]: General Error: ldappool: new connection failed: No such object (Error 0)

[18/Oct/2006:18:34:36 +0200] venus imapd[3729]: Account Error: [146.141.13.14:37192] Cannot get namespace for domain students.xxx.co.uk: No entry

[18/Oct/2006:18:34:36 +0200] venus imapd[3729]: Account Notice: [146.141.13.14:37192] domain not found

[18/Oct/2006:18:34:36 +0200] venus imapd[3729]: Account Notice: badlogin: [146.141.13.14:37192] plaintext admin user not found

[18/Oct/2006:18:35:00 +0200] venus imapd[3729]: Account Notice: close [146.141.13.11:34452] [unauthenticated] 2006/10/18 18:35:00 0:00:00 32 461 0

[18/Oct/2006:18:45:00 +0200] venus imapd[3729]: Account Notice: close [146.141.13.11:34465] [unauthenticated] 2006/10/18 18:45:00 0:00:00 32 461 0

I tried to keep the config the same on the cluster and MEM, and I see on both:

/opt/SUNWmsgsr/sbin/configutil -o local.defdomain

students.xxx.co.uk

/opt/SUNWmsgsr/sbin/configutil -o service.defaultdomain

students.xxx.co.uk

On the MEM server, the Messenger Express login also fails, and I get this error:

Server internal error. Administrator, check server log for details.

This is the log:

[18/Oct/2006:18:58:25 +0200] aphrodite httpd[822]: General Error: ldappool: new connection failed: Invalid DN syntax (Error 0)

[18/Oct/2006:18:58:25 +0200] aphrodite httpd[822]: General Error: ldappool: new connection failed: Invalid DN syntax (Error 0)

[18/Oct/2006:18:58:25 +0200] aphrodite httpd[822]: General Error: ldappool: new connection failed: Invalid DN syntax (Error 0)

[18/Oct/2006:18:58:25 +0200] aphrodite httpd[822]: Account Error: [146.141.77.227:3530] Cannot get namespace for domain students.xxx.co.uk: invalid DN syntax

[18/Oct/2006:18:58:25 +0200] aphrodite httpd[822]: Account Notice: [146.141.77.227:3530] domain not found

[18/Oct/2006:18:58:25 +0200] aphrodite httpd[822]: Account Notice: badlogin: [146.141.77.227:3530] plaintext admin : generic failure

[18/Oct/2006:18:58:27 +0200] aphrodite httpd[822]: Account Notice: close [146.141.77.227:3530] [unauthenticated] 2006/10/18 18:58:18 0:00:09 1065 2588 0

[18/Oct/2006:18:58:27 +0200] aphrodite httpd[822]: General Error: ldappool: new connection failed: Invalid DN syntax (Error 0)

[18/Oct/2006:18:58:27 +0200] aphrodite httpd[822]: General Error: ldappool: new connection failed: Invalid DN syntax (Error 0)

[18/Oct/2006:18:58:27 +0200] aphrodite httpd[822]: General Error: ldappool: new connection failed: Invalid DN syntax (Error 0)

I can see that the domain name is the problem, but how can I fix it?

Thanks

PS: Let me know if there is any more info required...

I just checked the LDAP access and error logs, but there's no events.

Please, if anyone can help....

[4147 byte] By [dgww] at [2007-11-26 10:53:51]
# 1
It looks like it's not able to find ldap. Sounds like a bad entry for the ldap server.on the MEM box, check configutil output for the several ldap settings, and correct as needed.
jay_plesset at 2007-7-7 3:06:44 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 2

Hi Jay

Thanks for the reply. Here is the output from my MEM and backend store (cluster):

FROTEND MEM:

local.ldapbasedn = o=NetscapeRoot

local.ldapcachefile = /opt/SUNWmsgsr/config/local.conf

local.ldaphost = 146.141.13.20

local.ldapport = 389

local.ldapsiecred = i?C{3397ci

local.ldapsiedn = "cn=msg-config, cn=Sun ONE Messaging Suite, cn=Server Group, cn=aphrodite.xxx.co.uk, ou=xxx.co.uk, o=NetscapeRoot"

local.ldapusessl = False

local.service.pab.ldapbasedn = o=pab

local.service.pab.ldapbinddn = "uid=msg-admin-aphrodite.xxx.co.uk-20061017135201Z, ou=People, o=students.xxx.co.uk,dc=xxx,dc=co,dc=uk"

local.service.pab.ldaphost = saturn.xxx.co.uk

local.service.pab.ldappasswd = X;NZ?SH_lw

local.service.pab.ldapport = 389

local.ugldapbasedn = "dc=xxx,dc=co,dc=uk"

local.ugldapbindcred = f9pBWF1:=W

local.ugldapbinddn = "uid=msg-admin-studentmail.xxx.co.uk-20061005093347Z,"

local.ugldapdeforgdn = "o=students.xxx.co.uk,dc=xxx,dc=co,dc=uk"

local.ugldaphost = 146.141.13.20

local.ugldapport = 389

local.ugldapuselocal = yes

service.ldapmemcache = no

service.ldapmemcachesize = 131072

service.ldapmemcachettl = 30

BACKEND STORE

local.ldapbasedn = o=NetscapeRoot

local.ldapcachefile = /jes/opt/SUNWmsgsr/config/local.conf

local.ldaphost = 146.141.13.20

local.ldapport = 389

local.ldapsiecred = ptEn}>3A``

local.ldapsiedn = "cn=msg-config, cn=Sun ONE Messaging Suite, cn=Server Group, cn=studentmail.xxx.co.uk, ou=xxx.co.uk, o=NetscapeRoot"

local.ldapusessl = False

local.service.pab.ldapbasedn = o=pab

local.service.pab.ldapbinddn = "uid=msg-admin-studentmail.xxx.co.uk-20061005093347Z, ou=People, o=students.xxx.co.uk,dc=xxx,dc=co,dc=uk"

local.service.pab.ldaphost = 146.141.13.20

local.service.pab.ldappasswd = f9pBWF1:=W

local.service.pab.ldapport = 389

local.ugldapbasedn = "dc=xxx,dc=co,dc=uk"

local.ugldapbindcred = f9pBWF1:=W

local.ugldapbinddn = "uid=msg-admin-studentmail.xxx.co.uk-20061005093347Z, ou=People, o=students.xxx.co.uk,dc=xxx,dc=co,dc=uk"

local.ugldapdeforgdn = "o=students.xxx.co.uk,dc=xxx,dc=co,dc=uk"

local.ugldaphost = 146.141.13.20

local.ugldapport = 389

local.ugldapuselocal = yes

service.ldapmemcache = no

service.ldapmemcachesize = 131072

service.ldapmemcachettl = 30

The backend store server name is studentmail.xxx.co.uk, (146.141.13.25)

The frontend MEM server name is aphrodite.xxx.co.uk, (146.141.13.14)

The DS name is saturn.xxx.co.uk (146.141.13.20)

Thanks

dgww at 2007-7-7 3:06:44 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 3
Are the two DS servers @ Front end and backend in Master-2-Master replication setup?Please ensure that.ThanksRamya
ramya_ravi at 2007-7-7 3:06:44 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 4
Hi RamyaI don't have DS installed on the Front end and Back end It is a seperate system. Regards
dgww at 2007-7-7 3:06:44 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 5

Ok, I have not tried on that kind of setup where the DS is a thrid machine,usally we have the DS on the backend and th two are replicated in M-2-M.

You can try looking into the docs mentioned in the bug 6411628.

http://docs.sun.com/source/816-6738-10/general.html#wp23469

thanks

Ramya

ramya_ravi at 2007-7-7 3:06:44 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 6
Sorry ,sent you the worng link : http://docs.sun.com/source/816-6738-10/mmp.html#wp17954-Ramya
ramya_ravi at 2007-7-7 3:06:44 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 7

Looking at the config, I wonder.

I typically don't put the ip address of the ldap server, but insead use the fully qualified domain name.

If I remember correctly, if you want to use ip address, you need to enclose it in square brackets [1.2.3.4]

You might try either fqdn or square brackets.

jay_plesset at 2007-7-7 3:06:44 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...