Re: dbserver_get: ldap_bind_s: Protocol error

Klemens Puritscher <[email protected]>
Newsgroups gmane.mail.perdition.user
Message-ID <[email protected]> 
> > it looks like you have some SSL enabled? and it cannot found the
> > certicicate files.
> 
> The configfile from the RPM should have the following SSL config options:
> 
> 
> ssl_ca_file /etc/pki/tls/certs/ca-bundle.crt
> ssl_ca_path /etc/pki/tls/certs/
> ssl_cert_file /etc/pki/perdition/perdition.pem
> ssl_key_file /etc/pki/perdition/perdition.pem
> ssl_no_cert_verify
> 
> Somehow I guess the config has been changed so perdition looks in the
> wrong place for the certs now.

Thx for your reply, but the main problem is not the SSL problem.

I've disabled all SSL options.

After that, I'm looking in the maillog:

Jun 19 16:45:39 lbmfim05 perdition[11657]: version=1.17.1, add_domain="", authenticate_in=off, bind_address="", capability="UIDL  USER", client_server_specification=off, config_file="/etc/perdition/perdition.conf", connection_limit=0, connection_logging=off, connect_relog=300, debug=on, domain_delimiter="@", explicit_domain="", group="nobody", inetd_mode=off, listen_port="110", log_facility="mail", login_disabled=off, lower_case="", map_library="/usr/lib/libperditiondb_ldap.so.0", map_library_opt="ldap://my-openldap.server/dc=.?uid,mailHost?sub?(uid=%s)", no_bind_banner=off, no_daemon=off, no_lookup=off, nodename="lbmfim05", ok_line="You are so in", outgoing_port="110", outgoing_server="", pid_file="/var/run/perdition/perdition.pop3", protocol="POP3", server_resp_line=off, strip_domain="", timeout=120, username="nobody", username_from_database=off, query_key="", quiet=off, ssl_mode="", ssl_ca_file="", ssl_ca_path="/etc/perdition/perdition.ca/", ssl_ca_accept_self_signed="off", ssl_cert_file="/etc/perd
Jun 19 16:45:39 lbmfim05 perdition[11657]: vanessa_socket_daemon_setid: uid=99 euid=99 gid=99 egid=99
Jun 19 16:46:01 lbmfim05 perdition[11662]: Connect: 127.0.0.1->127.0.0.1
Jun 19 16:46:08 lbmfim05 perdition[11662]: username_add_domain: username_add_domain 0 1 0x8a625dc
Jun 19 16:46:08 lbmfim05 perdition[11662]: dbserver_get: ldap_bind_s: Protocol error
Jun 19 16:46:08 lbmfim05 perdition[11662]: getserver: do_dbserver_get
Jun 19 16:46:11 lbmfim05 perdition[11662]: Auth: 127.0.0.1->127.0.0.1 user="puri_at__test" server="(null)" port="110" status="failed: Could not determine server"
Jun 19 16:46:12 lbmfim05 perdition[11662]: Closing NULL session: 127.0.0.1->127.0.0.1 username=(null)

The problem is the same: "dbserver_get: ldap_bind_s: Protocol error"

any ideas?

Klemens

Simon Matter schrieb:
> > Hi.
> >
> > it looks like you have some SSL enabled? and it cannot found the
> > certicicate files.
> 
> The configfile from the RPM should have the following SSL config options:
> 
> 
> ssl_ca_file /etc/pki/tls/certs/ca-bundle.crt
> ssl_ca_path /etc/pki/tls/certs/
> ssl_cert_file /etc/pki/perdition/perdition.pem
> ssl_key_file /etc/pki/perdition/perdition.pem
> ssl_no_cert_verify
> 
> Somehow I guess the config has been changed so perdition looks in the
> wrong place for the certs now.
> 
> Simon
> 
> >
> > my config looks like this:
> >
> > $ cat /etc/perdition/perdition.conf
> > map_library "/usr/lib/libperditiondb_ldap.so.0"
> > map_library_opt
> > "ldap://ldap-server.local/o=Internet?mailLocalAddress?sub?(mail=%25s)"
> > username_from_database
> >
> >
> > 	//Regards Nore
> >
> > On Thu, 2008-06-19 at 13:07 +0200, Klemens Puritscher wrote:
> >> Hello,
> >>
> >> I've a problem with perdition setup.
> >>
> >> I've set up it on a standard CentOS5 with the src-rpms from Simon
> >> Matter. (http://www.invoca.ch/pub/packages/perdition/)
> >>
> >> My Config:
> >>
> >> /etc/perdition/perdition.conf:
> >> M /usr/lib/libperditiondb_ldap.so.0
> >> m ldap://my-openldap.server/dc=.?uid,mailHost?sub?(uid=%s)
> >> t 120
> >> U
> >>
> >> /etc/sysconfig/perdition:
> >> POP3=yes
> >> POP3_FLAGS="--debug"
> >> IMAP4=yes
> >> IMAP4_FLAGS=
> >>
> >> Then I start the perdition and make a connect on port 110.
> >>
> >> After the POP3 PASS Command, I get "-ERR Could not determine server"
> >>
> >> In the maillog i see the following:
> >>
> >> Jun 19 14:56:26 lbmfim05 perdition[11320]: version=1.17.1,
> >> add_domain="", authenticate_in=off, bind_address="", capability="UIDL
> >> USER", client_server_specification=off,
> >> config_file="/etc/perdition/perdition.conf", connection_limit=0,
> >> connection_logging=off, connect_relog=300, debug=on,
> >> domain_delimiter="@", explicit_domain="", group="nobody",
> >> inetd_mode=off, listen_port="110", log_facility="mail",
> >> login_disabled=off, lower_case="",
> >> map_library="/usr/lib/libperditiondb_ldap.so.0",
> >> map_library_opt="ldap://my-openldap.server/dc=.?uid,
> mailHost?sub?(uid=%s)",
> >> no_bind_banner=off, no_daemon=off, no_lookup=off, nodename="lbmfim05",
> 
> >> ok_line="You are so in", outgoing_port="110", outgoing_server="",
> >> pid_file="/var/run/perdition/perdition.pop3", protocol="POP3",
> >> server_resp_line=off, strip_domain="", timeout=120, username="nobody",
> 
> >> username_from_database=off, query_key="", quiet=off, ssl_mode="",
> >> ssl_ca_file="", ssl_ca_path="/etc/perdition/perdition.ca/",
> >> ssl_ca_accept_self_signed="off"
> >>  , ssl_cert_file="/etc/perd
> >> Jun 19 14:56:26 lbmfim05 perdition[11320]: 
> vanessa_socket_daemon_setid:
> >> uid=99 euid=99 gid=99 egid=99
> >> Jun 19 14:56:26 lbmfim05 perdition[11324]: Error loading certificate
> >> chain file "/etc/perdition/perdition.crt.pem"
> >> Jun 19 14:56:26 lbmfim05 perdition[11324]: Fatal error establishing 
> SSL
> >> context for listening
> >> Jun 19 14:56:26 lbmfim05 perdition[11328]: version=1.17.1,
> >> add_domain="", authenticate_in=off, bind_address="", 
> capability="IMAP4
> >> IMAP4REV1", client_server_specification=off,
> >> config_file="/etc/perdition/perdition.conf", connection_limit=0,
> >> connection_logging=off, connect_relog=300, debug=off,
> >> domain_delimiter="@", explicit_domain="", group="nobody",
> >> inetd_mode=off, listen_port="143", log_facility="mail",
> >> login_disabled=off, lower_case="",
> >> map_library="/usr/lib/libperditiondb_ldap.so.0",
> >> map_library_opt="ldap://my-openldap.server/dc=.?uid,
> mailHost?sub?(uid=%s)",
> >> no_bind_banner=off, no_daemon=off, no_lookup=off, nodename="lbmfim05",
> 
> >> ok_line="You are so in", outgoing_port="143", outgoing_server="",
> >> pid_file="/var/run/perdition/perdition.imap4", protocol="IMAP4",
> >> server_resp_line=off, strip_domain="", timeout=120, username="nobody",
> 
> >> username_from_database=off, query_key="", quiet=off, ssl_mode="",
> >> ssl_ca_file="", ssl_ca_path="/etc/perdition/perdition.ca/",
> >> ssl_ca_accept_self_sign
> >>  ed="off", ssl_cert_file="/
> >> Jun 19 14:56:26 lbmfim05 perdition[11332]: Error loading certificate
> >> chain file "/etc/perdition/perdition.crt.pem"
> >> Jun 19 14:56:26 lbmfim05 perdition[11332]: Fatal error establishing 
> SSL
> >> context for listening
> >> Jun 19 14:56:29 lbmfim05 perdition[11335]: Connect: 127.0.0.1->127.0.
> 0.1
> >> Jun 19 14:56:37 lbmfim05 perdition[11335]: username_add_domain:
> >> username_add_domain 0 1 0xa04b5d4
> >> Jun 19 14:56:37 lbmfim05 perdition[11335]: dbserver_get: ldap_bind_s:
> >> Protocol error
> >> Jun 19 14:56:37 lbmfim05 perdition[11335]: getserver: do_dbserver_get
> >> Jun 19 14:56:40 lbmfim05 perdition[11335]: Auth: 127.0.0.1->127.0.0.1
> >> user="puri_at__test" server="(null)" port="110" status="failed: Could
> >> not determine server"
> >> Jun 19 14:56:41 lbmfim05 perdition[11335]: Closing NULL session:
> >> 127.0.0.1->127.0.0.1 username=(null)
> >>
> >>
> >> What did I wrong, that I get the "dbserver_get: ldap_bind_s: Protocol
> >> error"-Error???
> >>
> >> --
> >> Klemens
> >> ______________________________________________
> >> Perdition-users mailing list
> >> [email protected]
> >> http://lists.vergenet.net/listinfo/perdition-users
> >>
> > --
> > Digital Touch AB / Svensktbredband
> > Box 4045   SE-128 04 Bagarmossen
> > Växel:  +46(0)8-55 110 310   SBB växel: +46(0)8-55 110 300
> > Direkt: +46(0)8-55 110 314
> > Mobil:  +46(0)701-433143
> > Url: http:/digitaltouch.se  Url: http://svensktbredband.se
> >
> >
> > ______________________________________________
> > Perdition-users mailing list
> > [email protected]
> > http://lists.vergenet.net/listinfo/perdition-users
> >
> 
> 

______________________________________________
Perdition-users mailing list
[email protected]
http://lists.vergenet.net/listinfo/perdition-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.