[BSD] ldap auth problem

2014. Dec. 7., V, 13:23:27 CET

2014.12.07. 12:53 keltezéssel, Gabor HALASZ írta:
> On 12/7/2014 12:33 PM, Péchy Gáspár wrote:
>> Helli,
>> lenne valakinek ötlete, miért játszik Schrödinger macskáját az apache
>> ldap auth?
>> FreeBSD 10.1, Apache 2.4 Event, OpenLdap 2.4
>> ... itt kezdtem, merthogy hol autentikált hol nem.
>> Most végül olyasmit látok a debug.logban, mintha az LDAP (többnyire de
>> nem mindig) a sikeres auth után nem zárná le a kapcsolatot, hanem a
>> következő igényt az előző kapcsolatból próbálná ellenőrizni.
>>
>
> Ettől még nem döglik meg a macska.
>
>> Röviden:
>> ACCEPT (localhost)
>> BIND - BIND (a "kereső" DN-nel)
>> RESULT ok
>> SRCH cn = userA
>> SEARCH RESULT ok
>> BIND - BIND - BIND ( anon / userA DN)
>> RESULT ok
>> SRCH cn = userB
>> SEARCH RESULT no
>> SRCH cn = userC
>> SEARCH RESULT no
>> ..
>>
>> Nincs UNBIND, nincs "closed"
>>
>
> Ettől meg nem marad életben a dög. Másold már ide a logot, ebből semmi sem látszik. Mi authentikál ilyen nagyonprimitív módon?
>
> --
> Magyar BSD Levelezőlista
>


11:59:39 server slapd[474]: conn=47996 fd=33 ACCEPT from IP=127.0.0.1:48767 (IP=0.0.0.0:389)
11:59:39 server slapd[474]: conn=47996 op=0 BIND dn="cn=searchUser,ou=mgmt,o=ceg" method=128
11:59:39 server slapd[474]: conn=47996 op=0 BIND dn="cn=searchUser,ou=mgmt,o=ceg" mech=SIMPLE ssf=0
11:59:39 server slapd[474]: conn=47996 op=0 RESULT tag=97 err=0 text=
11:59:39 server slapd[474]: conn=47996 op=1 SRCH base="ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" scope=2 deref=3 filter="(&(objectClass=*)(cn=user0))"
11:59:39 server slapd[474]: conn=47996 op=1 SRCH attr=cn
11:59:39 server slapd[474]: conn=47996 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
11:59:39 server slapd[474]: conn=47996 op=2 BIND anonymous mech=implicit ssf=0
11:59:39 server slapd[474]: conn=47996 op=2 BIND dn="uid=root,ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" method=128
11:59:39 server slapd[474]: conn=47996 op=2 BIND dn="uid=root,ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" mech=SIMPLE ssf=0
11:59:39 server slapd[474]: conn=47996 op=2 RESULT tag=97 err=0 text=
12:09:09 server slapd[474]: conn=47996 op=3 SRCH base="ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" scope=2 deref=3 filter="(&(objectClass=*)(cn=userA))"
12:09:09 server slapd[474]: conn=47996 op=3 SRCH attr=cn
12:09:09 server slapd[474]: conn=47996 op=3 SEARCH RESULT tag=101 err=0 nentries=0 text=
12:09:51 server slapd[474]: conn=47996 op=4 SRCH base="ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" scope=2 deref=3 filter="(&(objectClass=*)(cn=userB))"
12:09:51 server slapd[474]: conn=47996 op=4 SRCH attr=cn
12:09:51 server slapd[474]: conn=47996 op=4 SEARCH RESULT tag=101 err=0 nentries=0 text=
12:10:15 server slapd[474]: conn=47996 op=5 SRCH base="ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" scope=2 deref=3 filter="(&(objectClass=*)(cn=userB))"
12:10:15 server slapd[474]: conn=47996 op=5 SRCH attr=cn
12:10:15 server slapd[474]: conn=47996 op=5 SEARCH RESULT tag=101 err=0 nentries=0 text=
12:10:20 server slapd[474]: conn=47996 op=6 SRCH base="ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" scope=2 deref=3 filter="(&(objectClass=*)(cn=userB))"
12:10:20 server slapd[474]: conn=47996 op=6 SRCH attr=cn
12:10:20 server slapd[474]: conn=47996 op=6 SEARCH RESULT tag=101 err=0 nentries=0 text=
12:10:25 server slapd[474]: conn=47996 op=7 SRCH base="ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" scope=2 deref=3 filter="(&(objectClass=*)(cn=userB))"
12:10:25 server slapd[474]: conn=47996 op=7 SRCH attr=cn
12:10:25 server slapd[474]: conn=47996 op=7 SEARCH RESULT tag=101 err=0 nentries=0 text=
user at server:/var/log #
user at server:/var/log #
user at server:/var/log #
user at server:/var/log # cat debug.log | grep 47991
11:58:57 server slapd[474]: conn=47991 fd=26 ACCEPT from IP=127.0.0.1:48766 (IP=0.0.0.0:389)
11:58:57 server slapd[474]: conn=47991 op=0 BIND dn="cn=searchUser,ou=mgmt,o=ceg" method=128
11:58:57 server slapd[474]: conn=47991 op=0 BIND dn="cn=searchUser,ou=mgmt,o=ceg" mech=SIMPLE ssf=0
11:58:57 server slapd[474]: conn=47991 op=0 RESULT tag=97 err=0 text=
11:58:57 server slapd[474]: conn=47991 op=1 SRCH base="ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" scope=2 deref=3 filter="(&(objectClass=*)(cn=userB))"
11:58:57 server slapd[474]: conn=47991 op=1 SRCH attr=cn
11:58:57 server slapd[474]: conn=47991 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
11:58:57 server slapd[474]: conn=47991 op=2 BIND anonymous mech=implicit ssf=0
11:58:57 server slapd[474]: conn=47991 op=2 BIND dn="uid=userB,ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" method=128
11:58:57 server slapd[474]: conn=47991 op=2 BIND dn="uid=userB,ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" mech=SIMPLE ssf=0
11:58:57 server slapd[474]: conn=47991 op=2 RESULT tag=97 err=0 text=
12:09:25 server slapd[474]: conn=47991 op=3 SRCH base="ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" scope=2 deref=3 filter="(&(objectClass=*)(cn=userC))"
12:09:25 server slapd[474]: conn=47991 op=3 SRCH attr=cn
12:09:25 server slapd[474]: conn=47991 op=3 SEARCH RESULT tag=101 err=0 nentries=0 text=
12:10:33 server slapd[474]: conn=47991 op=4 SRCH base="ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" scope=2 deref=3 filter="(&(objectClass=*)(cn=userB))"
12:10:33 server slapd[474]: conn=47991 op=4 SRCH attr=cn
12:10:33 server slapd[474]: conn=47991 op=4 SEARCH RESULT tag=101 err=0 nentries=1 text=
12:10:33 server slapd[474]: conn=47991 op=5 BIND anonymous mech=implicit ssf=0
12:10:33 server slapd[474]: conn=47991 op=5 BIND dn="uid=userB,ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" method=128
12:10:33 server slapd[474]: conn=47991 op=5 BIND dn="uid=userB,ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" mech=SIMPLE ssf=0
12:10:33 server slapd[474]: conn=47991 op=5 RESULT tag=97 err=0 text=
12:10:44 server slapd[474]: conn=47991 op=6 SRCH base="ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" scope=2 deref=3 filter="(&(objectClass=*)(cn=userA))"
12:10:44 server slapd[474]: conn=47991 op=6 SRCH attr=cn
12:10:44 server slapd[474]: conn=47991 op=6 SEARCH RESULT tag=101 err=0 nentries=0 text=
12:11:58 server slapd[474]: conn=47991 op=7 SRCH base="ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" scope=2 deref=3 filter="(&(objectClass=*)(?cn=))"
12:11:58 server slapd[474]: conn=47991 op=7 SRCH attr=cn
12:11:58 server slapd[474]: conn=47991 op=7 SEARCH RESULT tag=101 err=0 nentries=0 text=
user at server:/var/log #
user at server:/var/log #
user at server:/var/log #
user at server:/var/log # cat debug.log | grep 48096
12:10:33 server slapd[474]: conn=48096 fd=52 ACCEPT from PATH=/var/run/openldap/ldapi (PATH=/var/run/openldap/ldapi)
12:10:33 server slapd[474]: conn=48096 op=0 BIND dn="cn=searchUser,ou=mgmt,o=ceg" method=128
12:10:33 server slapd[474]: conn=48096 op=0 BIND dn="cn=searchUser,ou=mgmt,o=ceg" mech=SIMPLE ssf=0
12:10:33 server slapd[474]: conn=48096 op=0 RESULT tag=97 err=0 text=
12:10:33 server slapd[474]: conn=48096 op=1 SRCH base="ou=web,dc=domain,dc=server,ou=mgmt,o=ceg" scope=2 deref=0 filter="(uid=userB)"
12:10:33 server slapd[474]: conn=48096 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
12:10:33 server slapd[474]: conn=48096 op=2 UNBIND
12:10:33 server slapd[474]: conn=48096 fd=52 closed