Re: ftp login no longer working > no one?

Michael,

my only explanation for such behavior is

* you have trailing spaces in your uid attribute (like
"www.erlebnistour-mv.de ") stored in LDAP.
Thus your search filter doesn't fit and the entry isn't found.
Try those searches manually with ldapsearch to  figure this out.

* Your LDAP index on uid is messed up. Although the entry exists
physically in LDAP, your index reports it inexistent.
Try to rebuild your indexes (OpenLDAP: slapindex).

Hope that helps,
Joerg


Michael Zimmermann wrote:
> Hi there,
> 
> I know one should not push to get an answer.... but I am really lost
> about the reason for my defunct ftp domain account. More and more
> digging - nothing. So sorry for being a nuisance :-)
> 
> No one here willing to share an insight into this problem?
> 
> thx, MIchael
> 
> 
> the old message:
> ----------------->>>>
> 
> we use the current cvs version of ispman. Now, without any changes to
> the ldap data we have the problem that ftp login to one subdomain is no
> longer working (authentification failed). testsaslauth does not work
> either. The other subdomains do work as expected.
> 
> Any ideas, what might be the reason for this problem? Below I attached
> ldap logs for ftp logins to the defunct and to a working virtual host.
> The ldap data for two subdomains / virtual hosts is attached below.
> 
> As far as I understand the ldap log the user is not found upon connect (
> 
>> conn=1114 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text= ). But 
> 
> why? The information stored in the ldap server is nearly identical for
> both virtual hosts????
> 
> Any help is appreciated!
> 
> Michael
> 
> 
> Ldap Log for defunct account:
> -----------------------------
> Nov 30 17:49:44 localhost slapd[10297]: conn=1114 fd=50 ACCEPT from
> IP=127.0.0.1:56096 (IP=0.0.0.0:389)
> Nov 30 17:49:44 localhost slapd[10357]: conn=1114 op=0 BIND dn=""
> method=128
> Nov 30 17:49:44 localhost slapd[10357]: conn=1114 op=0 RESULT tag=97
> err=0 text=
> Nov 30 17:49:44 localhost slapd[10328]: conn=1114 op=1 SRCH
> base="o=ispman" scope=2 deref=0
> filter="(&(objectClass=posixAccount)(uid=www.erlebnistour-mv.de))"
> Nov 30 17:49:44 localhost slapd[10328]: conn=1114 op=1 SRCH
> attr=homeDirectory uidNumber FTPuid gidNumber FTPgid userPassword
> loginShell FTPStatus FTPQuotaFiles FTPQuotaMBytes FTPDownloadRatio
> FTPUploadRatio FTPDownloadBandwidth FTPUploadBandwidth
> Nov 30 17:49:44 localhost slapd[10328]: conn=1114 op=1 SEARCH RESULT
> tag=101 err=0 nentries=0 text=
> Nov 30 17:49:44 localhost slapd[10837]: conn=1114 op=2 UNBIND
> Nov 30 17:49:44 localhost slapd[10837]: conn=1114 fd=50 closed
> 
> Ldap Log for functional account:
> -----------------------------
> Nov 30 17:52:11 localhost slapd[10297]: conn=1128 fd=16 ACCEPT from
> IP=127.0.0.1:56120 (IP=0.0.0.0:389)
> Nov 30 17:52:11 localhost slapd[11727]: conn=1128 op=0 BIND dn=""
> method=128
> Nov 30 17:52:11 localhost slapd[11727]: conn=1128 op=0 RESULT tag=97
> err=0 text=
> Nov 30 17:52:11 localhost slapd[10832]: conn=1128 op=1 SRCH
> base="o=ispman" scope=2 deref=0
> filter="(&(objectClass=posixAccount)(uid=www.incunabulum.de))"
> Nov 30 17:52:13 localhost slapd[10832]: conn=1128 op=1 SRCH
> attr=homeDirectory uidNumber FTPuid gidNumber FTPgid userPassword
> loginShell FTPStatus FTPQuotaFiles FTPQuotaMBytes FTPDownloadRatio
> FTPUploadRatio FTPDownloadBandwidth FTPUploadBandwidth
> Nov 30 17:52:13 localhost slapd[10832]: conn=1128 op=1 SEARCH RESULT
> tag=101 err=0 nentries=1 text=
> Nov 30 17:52:13 localhost slapd[10328]: conn=1128 op=2 UNBIND
> Nov 30 17:52:13 localhost slapd[10328]: conn=1128 fd=16 closed
> Nov 30 17:52:13 localhost slapd[10357]: conn=3 op=174 SRCH
> base="o=ispman" scope=2 deref=0
> filter="(&(objectClass=posixAccount)(uidNumber=1022))"
> Nov 30 17:52:13 localhost slapd[10357]: conn=3 op=174 SRCH attr=uid
> userPassword uidNumber gidNumber cn homeDirectory loginShell gecos
> description objectClass
> Nov 30 17:52:13 localhost slapd[10357]: conn=3 op=174 SEARCH RESULT
> tag=101 err=0 nentries=1 text=
> Nov 30 17:52:13 localhost slapd[10297]: conn=1129 fd=16 ACCEPT from
> IP=127.0.0.1:56121 (IP=0.0.0.0:389)
> Nov 30 17:52:13 localhost slapd[10837]: conn=1129 op=0 BIND dn=""
> method=128
> Nov 30 17:52:13 localhost slapd[10837]: conn=1129 op=0 RESULT tag=97
> err=0 text=
> Nov 30 17:52:13 localhost slapd[10318]: conn=1129 op=1 SRCH
> base="o=ispman" scope=2 deref=0
> filter="(&(objectClass=posixAccount)(uid=www.incunabulum.de))"
> Nov 30 17:52:13 localhost slapd[10318]: conn=1129 op=1 SEARCH RESULT
> tag=101 err=0 nentries=1 text=
> Nov 30 17:52:13 localhost slapd[10302]: conn=1129 op=2 SRCH
> base="o=ispman" scope=2 deref=0
> filter="(&(objectClass=posixGroup)(|(memberUid=www.incunabulum.de)(uniqueMember=ispmanVhostName=www,ou=httpdata,ispmanDomain=incunabulum.de,o=ispman)))"
> 
> 
> Nov 30 17:52:13 localhost slapd[10302]: conn=1129 op=2 SRCH attr=gidNumber
> Nov 30 17:52:13 localhost slapd[10302]: conn=1129 op=2 SEARCH RESULT
> tag=101 err=0 nentries=0 text=
> Nov 30 17:52:13 localhost slapd[11727]: conn=3 op=175 SRCH
> base="o=ispman" scope=2 deref=0
> filter="(&(objectClass=posixGroup)(gidNumber=1006))"
> Nov 30 17:52:13 localhost slapd[11727]: conn=3 op=175 SRCH attr=cn
> userPassword memberUid uniqueMember gidNumber
> Nov 30 17:52:13 localhost slapd[11727]: conn=3 op=175 SEARCH RESULT
> tag=101 err=0 nentries=0 text=
> 
> 
> ldif dump for defunct account
> --------------------------------
> dn:
> ispmanVhostName=www,ou=httpdata,ispmanDomain=erlebnistour-mv.de,o=ispman
> ispmanVhostName: www
> cn: www.erlebnistour-mv.de
> uidNumber: 1066
> gidNumber: 1013
> ispmanDomain: erlebnistour-mv.de
> uid: www.erlebnistour-mv.de
> homeDirectory: /ispman/domains/erlebnistour-mv.de/vhosts/www
> ispmanStatus: active
> fileHost: anna
> DestinationAddress: anna
> webHost: anna
> structuralObjectClass: PureFTPdUser
> entryUUID: ed72a64a-8fab-1028-8596-a6dd9114fccd
> creatorsName: cn=Directory Administrator,o=ispman
> createTimestamp: 20040831151232Z
> loginShell: /bin/false
> ispmanVhostIpAddress: *
> ispmanVhostExtraConf::
> Jmx0O0RpcmVjdG9yeSAvaXNwbWFuL2RvbWFpbnMvZXJsZWJuaXN0b3V
> 
> yLW12LmRlL3Zob3N0cy93d3cvaHRkb2NzJmd0Ow0KQWxsb3dPdmVycmlkZSBGaWxlSW5mbw0KJmx0
> 
>  Oy9EaXJlY3RvcnkmZ3Q7
> objectClass: ispmanVirtualHost
> objectClass: posixAccount
> objectClass: PureFTPdUser
> ispmanVhostLogdir: /ispman/logs
> ispmanVhostScriptDir: cgi-bin
> FTPStatus: enabled
> ispmanVhostStats: enable
> FTPQuotaMBytes: 1000
> ispmanVhostDocumentRoot: htdocs
> ispmanVhostStatdir: /ispman/domain
> userPassword:: <----->
> entryCSN: 20051130161814Z#000001#00#000000
> modifiersName: cn=Directory Administrator,o=ispman
> modifyTimestamp: 20051130161814Z
> 
> ldif dump for working account
> -----------------------
> dn: ispmanVhostName=ttt,ou=httpdata,ispmanDomain=incunabulum.de,o=ispman
> ispmanVhostName: ttt
> cn: ttt.incunabulum.de
> uidNumber: 1131
> gidNumber: 1006
> ispmanDomain: incunabulum.de
> uid: ttt.incunabulum.de
> homeDirectory: /ispman/domains/incunabulum.de/vhosts/ttt
> ispmanStatus: active
> fileHost: anna
> DestinationAddress: anna
> webHost: anna
> structuralObjectClass: PureFTPdUser
> entryUUID: e20daa70-f607-1029-9aca-c70fd3911a10
> creatorsName: cn=Directory Administrator,o=ispman
> createTimestamp: 20051130161243Z
> 
> ispmanVhostIpAddress: *
> 
> 
> 
> objectClass: ispmanVirtualHost
> objectClass: posixAccount
> objectClass: PureFTPdUser
> ispmanVhostLogdir: /ispman/logs
> ispmanVhostScriptDir: cgi-bin
> FTPStatus: enabled
> ispmanVhostStats: enable
> FTPQuotaMBytes: 1000
> ispmanVhostDocumentRoot: htdocs
> ispmanVhostStatdir: /ispman/domain
> userPassword:: <----->
> entryCSN: 20051130161243Z#000002#00#000000
> modifiersName: cn=Directory Administrator,o=ispman
> modifyTimestamp: 20051130161243Z
> 
>