debug Pass-Trough authentication with SASL

Thomas Peter via Cyrus-sasl <[email protected]>
Newsgroups gmane.comp.security.cyrus.sasl
Message-ID <[email protected]>
Hi,

I run
saslauthd 2.1.26
authentication mechanisms: getpwent kerberos5 rimap shadow ldap

and in my etc/saslauthd.conf I do have
ldap_servers: ldap://example.com:389
which is a round-robin dns (10 IPs behind)

Now I have the problem that sometimes the connection to example.com 
seems to hang:

Jan 18 17:06:15 uit-algo-p-11 slapd[130335]: conn=1410 op=0 BIND 
dn="cn=petert,dc=example,dc=com" method=128
Jan 18 17:06:15 uit-algo-p-11 slapd[130335]: conn=1410 op=0 BIND 
dn="cn=petert,dc=example,dc=com" mech=SIMPLE ssf=0
Jan 18 17:06:15 uit-algo-p-11 slapd[130335]: conn=1410 op=0 RESULT 
tag=97 err=0 text=
Jan 18 17:06:15 uit-algo-p-11 slapd[130335]: conn=1411 fd=15 ACCEPT from 
IP=127.0.0.1:54144 (IP=127.0.0.1:9389)
Jan 18 17:06:15 uit-algo-p-11 slapd[130335]: conn=1411 op=0 BIND 
dn="cn=petert,dc=example,dc=com" method=128
Jan 18 17:06:16 uit-algo-p-11 slapd[130335]: conn=1410 op=1 UNBIND
Jan 18 17:06:16 uit-algo-p-11 slapd[130335]: conn=1410 fd=14 closed
Jan 18 17:06:16 uit-algo-p-11 slapd[130335]: connection_read(14): no 
connection!
Jan 18 17:06:16 uit-algo-p-11 slapd[130335]: conn=1408 op=2 UNBIND
Jan 18 17:06:16 uit-algo-p-11 slapd[130335]: conn=1408 fd=13 closed
Jan 18 17:06:16 uit-algo-p-11 slapd[130335]: connection_read(13): no 
connection!
Jan 18 17:06:16 uit-algo-p-11 slapd[130335]: conn=1407 op=1 UNBIND
Jan 18 17:06:16 uit-algo-p-11 slapd[130335]: conn=1407 fd=10 closed
Jan 18 17:06:16 uit-algo-p-11 slapd[130335]: connection_read(10): no 
connection!
Jan 18 17:21:49 uit-algo-p-11 saslauthd[131005]: ldap_simple_bind() 
failed -1 (Can't contact LDAP server).
Jan 18 17:21:49 uit-algo-p-11 saslauthd[131005]: Retrying authentication
Jan 18 17:21:49 uit-algo-p-11 slapd[130335]: conn=1411 op=0 BIND 
dn="cn=petert,dc=example,dc=com" mech=SIMPLE ssf=0
Jan 18 17:21:49 uit-algo-p-11 slapd[130335]: conn=1411 op=0 RESULT 
tag=97 err=0 text=
Jan 18 17:21:49 uit-algo-p-11 slapd[130335]: conn=1411 op=1 SRCH 
base="dc=example,dc=com" scope=1 deref=3 filter="(&(uid=petert))"
Jan 18 17:21:49 uit-algo-p-11 slapd[130335]: <= mdb_equality_candidates: 
(uid) not indexed
Jan 18 17:21:49 uit-algo-p-11 slapd[130335]: conn=1411 op=1 SEARCH 
RESULT tag=101 err=0 nentries=1 text=
Jan 18 17:21:49 uit-algo-p-11 slapd[130335]: conn=1412 fd=10 ACCEPT from 
IP=127.0.0.1:54761 (IP=127.0.0.1:9389)
Jan 18 17:21:49 uit-algo-p-11 slapd[130335]: conn=1412 op=0 BIND 
dn="cn=petert,dc=example,dc=com" method=128
Jan 18 17:21:49 uit-algo-p-11 saslauthd[131009]: ldap_simple_bind() 
failed -1 (Can't contact LDAP server).
Jan 18 17:21:49 uit-algo-p-11 saslauthd[131009]: Retrying authentication
Jan 18 17:21:49 uit-algo-p-11 slapd[130335]: conn=1412 op=0 BIND 
dn="cn=petert,dc=example,dc=com" mech=SIMPLE ssf=0

The message "ldap_simple_bind() failed -1 (Can't contact LDAP server)." 
is quite common and it looks like I get it every bind.
What I'm now looking for is some help in diagnosis like "to which IP is 
saslauthd now connecting to and trying the bind"

Any hints?
btw: I can't run my openldap and saslauthd as root hence the portnumbers 
 > 1024.

Thanks
Thomas
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.