LDAP authentication configured, but cannot login!

fishfree 2009-05-29 09:33:18 UTC #1

During the setup process, I chose the LDAP as authentication method, and configured the LDAP server connection sucessesfully(the eGroupware installer showed no eror, on the other hand, it would show the relevant error if the configuration of LDAP was wrong.)
The LDAP server connection configured as below:
LDAP host: .***.***.
LDAP accounts context:cn=Users,dc=***,dc=***,dc=***
LDAP search filter for accounts, default: “(uid=%user)”, %domain=eGW-domain: keep blank
LDAP groups context: cn=Groups,dc=***,dc=***,dc=***
LDAP rootdn (searching accounts and changing passwords): cn=orcladmin,cn=Users,dc=***,dc=***,dc=***
LDAP root password: *********
LDAP encryption type: MD5( and I had tried all other encrytion methos)
Do you want to manage homedirectory and loginshell attributes?: NO
LDAP Default homedirectory prefix (e.g. /home for /home/username):keep blank
LDAP Default shell (e.g. /bin/bash):keep blank.

But when I use the LDAP account to login EGW, It shows error as below:
wrong Username or password.

My EGW version: 1.6

Any help would be appreciated very much!

mane-fr 2009-06-10 12:27:47 UTC #2

Hi,
I’ve same problem.
My working config : egw 1.4.004, auth via OpenLDAP and storage info on mysql
everything works fine.

I’ve upgraded to 1.6 successfully (mysql database and website) but I cannot login anymore on user interface. Same message than fishfree : “wrong Username or password” on web login screen
I still can connect to setup pages so I’ve tried to update admin account via setup but without succes.

Here follow what I find in log file /var/log/messages :

Jun 9 16:34:45 server slapd[7358]: conn=68 fd=15 ACCEPT from IP=127.0.0.1:48373 (IP=0.0.0.0:389)
Jun 9 16:34:45 server slapd[7358]: conn=68 op=0 BIND dn=“cn=Manager,dc=" method=128
Jun 9 16:34:45 server slapd[7358]: conn=68 op=0 BIND dn="cn=Manager,dc=” mech=SIMPLE ssf=0
Jun 9 16:34:45 server slapd[7358]: conn=68 op=0 RESULT tag=97 err=0 text=
Jun 9 16:34:45 server slapd[7358]: conn=68 op=1 SRCH base="" scope=0 deref=0 filter="(objectClass=)“
Jun 9 16:34:45 server slapd[7358]: conn=68 op=1 SRCH attr=structuralObjectClass namingContexts supportedLDAPVersion subschemaSubentry
Jun 9 16:34:45 server slapd[7358]: conn=68 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Jun 9 16:34:45 server slapd[7358]: conn=68 op=2 SRCH base=“cn=Subschema” scope=0 deref=0 filter=”(objectClass=)“
Jun 9 16:34:45 server slapd[7358]: conn=68 op=2 SRCH attr=objectClasses
Jun 9 16:34:45 server slapd[7358]: conn=68 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text=
Jun 9 16:34:45 server slapd[7358]: conn=68 op=3 BIND anonymous mech=implicit ssf=0
Jun 9 16:34:45 server slapd[7358]: conn=68 op=3 BIND dn=“cn=Manager,dc=*********************” method=128
Jun 9 16:34:45 server slapd[7358]: conn=68 op=3 BIND dn=“cn=Manager,dc=*" mech=SIMPLE ssf=0
Jun 9 16:34:45 server slapd[7358]: conn=68 op=3 RESULT tag=97 err=0 text=
Jun 9 16:34:45 server slapd[7358]: conn=68 op=4 SRCH base="ou=People,dc=” scope=2 deref=0 filter=”(&(uid=test)(objectClass=posixAccount))"
Jun 9 16:34:45 server slapd[7358]: bdb_db_cache: db_open(objectClass) failed: Permission denied (13)
Jun 9 16:34:45 server slapd[7358]: <= bdb_equality_candidates: (objectClass) index_param failed (13)
Jun 9 16:34:45 server slapd[7358]: <= bdb_equality_candidates: (uid) not indexed
Jun 9 16:34:45 server slapd[7358]: bdb_db_cache: db_open(objectClass) failed: Permission denied (13)
Jun 9 16:34:45 server slapd[7358]: <= bdb_equality_candidates: (objectClass) index_param failed (13)
Jun 9 16:34:45 server slapd[7358]: conn=68 op=4 SEARCH RESULT tag=101 err=0 nentries=1 text=
Jun 9 16:34:45 server slapd[7358]: conn=68 op=5 UNBIND
Jun 9 16:34:45 server slapd[7358]: conn=68 fd=15 closed

Thanks all for your help

Ralf_Becker_6 2009-06-10 13:20:10 UTC #3

There have been many updates to sessions, accounts, auth:

http://svn.stylite.de/viewvc/egroupware/branches/1.6/phpgwapi/inc/class.egw_session.inc.php?view=log
http://svn.stylite.de/viewvc/egroupware/branches/1.6/phpgwapi/inc/class.accounts_ldap.inc.php?view=log
http://svn.stylite.de/viewvc/egroupware/branches/1.6/phpgwapi/inc/class.auth_ldap.inc.php?view=log

You might want to try it with a daily snapshot of 1.6 branch
(www.egroupware.org/download).

Ralf

mane-fr schrieb:

Hi,
I’ve same problem.
My working config : egw 1.4.004, auth via OpenLDAP and storage info on mysql
everything works fine.

I’ve upgraded to 1.6 successfully (mysql database and website) but I cannot
login anymore on user interface. Same message than fishfree : “wrong
Username or password” on web login screen
I still can connect to setup pages so I’ve tried to update admin account via
setup but without succes.

Here follow what I find in log file /var/log/messages :

Jun 9 16:34:45 server slapd[7358]: conn=68 fd=15 ACCEPT from
IP=127.0.0.1:48373 (IP=0.0.0.0:389)
Jun 9 16:34:45 server slapd[7358]: conn=68 op=0 BIND
dn=“cn=Manager,dc=" method=128
Jun 9 16:34:45 server slapd[7358]: conn=68 op=0 BIND
dn="cn=Manager,dc=” mech=SIMPLE ssf=0
Jun 9 16:34:45 server slapd[7358]: conn=68 op=0 RESULT tag=97 err=0 text=
Jun 9 16:34:45 server slapd[7358]: conn=68 op=1 SRCH base="" scope=0
deref=0 filter="(objectClass=)"
Jun 9 16:34:45 server slapd[7358]: conn=68 op=1 SRCH
attr=structuralObjectClass namingContexts supportedLDAPVersion
subschemaSubentry
Jun 9 16:34:45 server slapd[7358]: conn=68 op=1 SEARCH RESULT tag=101 err=0
nentries=1 text=
Jun 9 16:34:45 server slapd[7358]: conn=68 op=2 SRCH base=“cn=Subschema"
scope=0 deref=0 filter=”(objectClass=)“
Jun 9 16:34:45 server slapd[7358]: conn=68 op=2 SRCH attr=objectClasses
Jun 9 16:34:45 server slapd[7358]: conn=68 op=2 SEARCH RESULT tag=101 err=0
nentries=1 text=
Jun 9 16:34:45 server slapd[7358]: conn=68 op=3 BIND anonymous
mech=implicit ssf=0
Jun 9 16:34:45 server slapd[7358]: conn=68 op=3 BIND
dn=“cn=Manager,dc=*********************” method=128
Jun 9 16:34:45 server slapd[7358]: conn=68 op=3 BIND
dn=“cn=Manager,dc=*" mech=SIMPLE ssf=0
Jun 9 16:34:45 server slapd[7358]: conn=68 op=3 RESULT tag=97 err=0 text=
Jun 9 16:34:45 server slapd[7358]: conn=68 op=4 SRCH
base="ou=People,dc=” scope=2 deref=0
filter=”(&(uid=test)(objectClass=posixAccount))"
Jun 9 16:34:45 server slapd[7358]: bdb_db_cache: db_open(objectClass)
failed: Permission denied (13)
Jun 9 16:34:45 server slapd[7358]: <= bdb_equality_candidates:
(objectClass) index_param failed (13)
Jun 9 16:34:45 server slapd[7358]: <= bdb_equality_candidates: (uid) not
indexed
Jun 9 16:34:45 server slapd[7358]: bdb_db_cache: db_open(objectClass)
failed: Permission denied (13)
Jun 9 16:34:45 server slapd[7358]: <= bdb_equality_candidates:
(objectClass) index_param failed (13)
Jun 9 16:34:45 server slapd[7358]: conn=68 op=4 SEARCH RESULT tag=101 err=0
nentries=1 text=
Jun 9 16:34:45 server slapd[7358]: conn=68 op=5 UNBIND
Jun 9 16:34:45 server slapd[7358]: conn=68 fd=15 closed

Thanks all for your help

fishfree wrote:

During the setup process, I chose the LDAP as authentication method, and
configured the LDAP server connection sucessesfully(the eGroupware
installer showed no eror, on the other hand, it would show the relevant
error if the configuration of LDAP was wrong.)
…

–
Ralf Becker
Director Software Development

Stylite GmbH
[open style of IT]

Morschheimer Strasse 15
67292 Kirchheimbolanden

fon +49 (0) 6352 70629-0
fax +49 (0) 6352 70629-30
mailto: rb@stylite.de

www.stylite.de
www.egroupware.org

Geschäftsführer Andre Keller, Gudrun Müller,
Nigel Vickers und Ralf Becker
Registergericht Kaiserslautern HRB 30575
Umsatzsteuer-Id / VAT-Id: DE214280951

Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing
server and web deployment.
http://p.sf.net/sfu/businessobjects

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

mane-fr 2009-06-10 14:05:34 UTC #4

Hi Ralf,

Thank for your reply.
Unfortunatly same problem.

I’ve upgraded my egw 1.4 to 1.6-daily-snapshot freshly downloaded.
upgrade runs fine. But I cannot login on user screen (I still have access to setup screen)
I dont have anymore web screen message “wrong Username or password” but messages log file are the same than in my previous post.

thx for your help
Mane-fr