Kolab2 stable: sasl-auth not working
Alfred Poschmann
aposch at gmx.net
Wed Aug 10 14:37:14 CEST 2005
I feel I need help with sasl/ldap.
Server is Suse 8.2/Kolab2.0, upgraded from Kolab RC1. When I installed RC1
according to http://activmedia.ch/groupware1.php, I could connect Kontact
(from KDE3.4) to Kolab-IMAP for a few days. When I suddenly received a login
error, I stopped investigating RC1 and decided to wait for the stable
release.
So a few days ago I upgraded with 2.0 stable, but I still can't connect from
KMail. Login to the administration-interface works, connecting to LDAP with a
LDAP-Browser (a java applet called lbe) and slapcat are working too. So the
problem seems to be sasl.
When auth'ing from Kontact, the sasl-log shows this:
---
Aug 10 14:23:45 videolan <error> saslauthd[14029]: user ldap_search_st()
failed: Can't contact LDAP server
Aug 10 14:23:45 videolan <info> saslauthd[14029]: Retrying authentication
Aug 10 14:23:45 videolan <error> saslauthd[14029]: user ldap_search_st()
failed: Size limit exceeded
Aug 10 14:23:45 videolan <debug> saslauthd[14029]: Authentication failed for
aposch/videolan.dakapo.home: Retry condition (ldap server connection reset or
broken) (-3)
Aug 10 14:23:45 videolan <info> saslauthd[14029]: do_auth : auth
failure: [user=aposch] [service=imap] [realm=videolan.dakapo.home]
[mech=ldap] [reason=Unknown]
---
Later, while not accessing, the is filled with this:
---
Aug 10 01:10:05 videolan <debug> saslauthd[14029]: Domain/Realm not available.
Aug 10 01:10:05 videolan <debug> saslauthd[14029]: Domain/Realm not available.
Aug 10 01:20:02 videolan <debug> saslauthd[14034]: Domain/Realm not available.
Aug 10 01:20:02 videolan <debug> saslauthd[14034]: Domain/Realm not available.
Aug 10 01:30:05 videolan <debug> saslauthd[14029]: Domain/Realm not available.
Aug 10 01:30:05 videolan <debug> saslauthd[14029]: Domain/Realm not available.
Aug 10 01:30:05 videolan <error> saslauthd[14029]: user ldap_search_st()
failed: Can't contact LDAP server
Aug 10 01:30:05 videolan <info> saslauthd[14029]: Retrying authentication
---
I have browsed this mailinglist, so I already restarted LDAP, checked the
Maildomains in postfix and slapcat, ran db_rebuild in the ldap-directory and
even rebooted the whole machine.
Things I can't explain and may be not connected to this issue:
- Running /kolab/sbin/slapindex hangs; i cancelled it after some hours (I have
just 2 test-accounts and one global address in LDAP).
- Running ps axu|grep slap gives
root 13606 0.0 1.5 62612 3884 ? S 00:52
0:00 /kolab/libexec/openldap/slapd -h ldap:// ldaps://
root 13613 0.0 1.5 62612 3884 ? S 00:52
0:00 /kolab/libexec/openldap/slapd -h ldap:// ldaps://
root 13615 0.0 1.5 62612 3884 ? S 00:52
0:00 /kolab/libexec/openldap/slapd -h ldap:// ldaps://
root 14036 0.0 1.5 62612 3884 ? S 00:54
0:00 /kolab/libexec/openldap/slapd -h ldap:// ldaps://
root 14037 0.0 1.5 62612 3884 ? S 00:54
0:00 /kolab/libexec/openldap/slapd -h ldap:// ldaps://
root 934 0.0 0.2 3872 660 pts/1 R 14:35 0:00 grep slap
So, now I have no clue. Can anyone give me a hint?
TIA,
Alfred
More information about the users
mailing list