Re: Auth gegen Novell eDirectory

Hi,
users-de-7882/jkIBneb7NEy/Hq5q9i2O/[email protected] wrote: 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hier das Debug - was mich bisher auch nicht schlauer machte:
> 
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: LDAP: check pwd of login 'FOO' on
> ldap.xxx.xx,389,ou=zznewuser,o=FOOBAR ...
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: LDAP:   use connection:
> <0x0x84a3d44[NGLdapConnection]:>
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x84a3d44[NGLdapConnection]>
> check pwd of login 'FOO' on ou=zznewuser,o=FOOBAR
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x84a3d44[NGLdapConnection]>
> dn for login 'FOO' on ou=zznewuser,o=FOOBAR
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x84a3d44[NGLdapConnection]>
>  attempt to do a simple, authenticated bind
> (dn=cn=BLAH,ou=admin,o=xxx,pwd=yes) ..
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x84a3d44[NGLdapConnection]>
>  bound.
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x84a3d44[NGLdapConnection]>
>  search: uid='FOO': '(uid=FOO)'
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x84a3d44[NGLdapConnection]>
>   return DN cn=FOO,ou=zzNewUser,o=FOOBAR
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x84a3d44[NGLdapConnection]>
>  attempting to bind login FOO DN: cn=FOO,ou=zzNewUser,o=FOOBAR (with
> password) !
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x84a3d44[NGLdapConnection]>
>  bound successfully !
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x40431fc0[LSCommandContext]>
> +[LSCommandContext(LDAPSupport) isLDAPLoginAuthorized:password:]: LDAP
> server 'ldap.xxx.xx:389' did authenticate user 'FOO'
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x84ac6ac[OGoHelpManager]>
> Note: no OGo documentation installed!
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x84ac6ac[OGoHelpManager]> SP:
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: |ogo-webui-1.1|
> <OpenGroupware[0x0x80ffcbc]: name=ogo-webui-1.1>: created session:
> <OGoSession[0x0x84ab70c]: id=418141810144E585AE>
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: ccaps:
> <WEClientCapabilities[0x0x84b8594]: type=Mozilla v5.0> os=Linux cpu=ix86
> fast-tbl css2 xul js>
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: LDAP: check pwd of login 'FOO' on
> ldap.xxx.xx,389,ou=zznewuser,o=FOOBAR ...
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: LDAP:   use connection:
> <0x0x84ba9ec[NGLdapConnection]:>
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x84ba9ec[NGLdapConnection]>
> check pwd of login 'FOO' on ou=zznewuser,o=FOOBAR
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x84ba9ec[NGLdapConnection]>
> dn for login 'FOO' on ou=zznewuser,o=FOOBAR
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x84ba9ec[NGLdapConnection]>
>  attempt to do a simple, authenticated bind
> (dn=cn=BLAH,ou=admin,o=FOOBAR,pwd=yes) ..
> Aug 18 09:17:34 ogo-webui-1.1 [16769]: <0x0x84ba9ec[NGLdapConnection]>
>  bound.
> Aug 18 09:17:35 ogo-webui-1.1 [16769]: -[LSLoginAccountCommand
> _executeInContext:]: login failed: 'FOOBAR'.
> Aug 18 09:17:35 ogo-webui-1.1 [16769]:
> <0x0x868cbf4[WOComponentDefinition]> Note: did not find component class
> with name 'WelcomeNewLDAPAccount'
> Aug 18 09:17:35 ogo-webui-1.1 [16769]:
> <0x0x868cbf4[WOComponentDefinition]> Note: missing class for component:
> 'WelcomeNewLDAPAccount'
> Aug 18 09:17:35 ogo-webui-1.1 [16769]: >DirectAction> Note: missing LDAP
> account welcome page!
> Aug 18 09:17:35 ogo-webui-1.1 [16769]: (418141810144E585AE) WARNING:
> missing defaults object in session!
> Aug 18 09:17:35 ogo-webui-1.1 [16769]: (418141810144E585AE) WARNING:
> missing defaults object in session!
> 129.0.17.231 - - [18/Aug/2006:09:17:35 GMT] "POST
> /OpenGroupware.woa/x/login?da=&o=1155892563 HTTP/1.1" 200 1496/139 0.277
> 5089 70% 2M
> 
> Defaults:
> LDAPInitialBindDN = "cn=BLAH,ou=admin,o=FOOBAR";
>         LDAPInitialBindPW = xxxxx;
>         LDAPInitialBindSpecific = YES;
>         LDAPLoginAttributeName = uid;
>         LSAuthLDAPServer = "ldap.xxx.xx";
>         LSAuthLDAPServerPort = 389;
>         LSAuthLDAPServerRoot = "ou=zznewuser,o=FOOBAR";
> 
> Passt laut Helge auch alles. Was fehlt ist die WelcomePage ...
> Hmm
generell scheint die authentifizierung ja zu klappen, keine ahnung ob es für 
die welcome page ein extra rpm, oder was auch immer für deine distri passend 
ist, gibt. Bei mir siehts im großen und ganzen genauso aus, sollte also 
funtzen.
kannst du dich als ogo administrator einloggen? bei dem sollte auf jeden fall 
keine welcomepage nötig sein, da der sowieso schon vorhanden sein sollte.

Sebastian