March 2005 - SUSE Proxy Suite - openSUSE Mailing Lists

RE: [proxy-suite] LDAP auth not working
by Nina Eichler 04 Mar '05

04 Mar '05

Hello, I have compiled proxy-suite with ldap support. Now I can see that proxy-suite will contact the server. But he doesn't can: ftp-child [21458] <03/04-09:10:39> TECH-DBG LDAP server 10.106.64.3:636: initialized for 10.104.1.163 ftp-child [21458] <03/04-09:10:39> USER-ERR can't bind LDAP dn='cn=squidsso,ou=groupwise,ou=rz,o=gkdvz' for 10.104.1.163: Can't contact LDAP ser ver With a ldapsearch I can contact LDAP. The LDAP-Server is a Novell Netware 6.5 Server. Nina

1 0

Re: [proxy-suite] LDAP auth not working
by Nina Eichler 03 Mar '05

03 Mar '05

Hi Frédéric, whein I execute strace I didn't see open("/usr/lib/libldap.so.2", O_RDONLY) = 3 And with the command lsof | grep ftp-proxy I see: ftp-proxy 2807 root cwd DIR 104,3 4096 2 / ftp-proxy 2807 root rtd DIR 104,3 4096 2 / ftp-proxy 2807 root txt REG 104,3 62040 368894 /usr/sbin/ftp-proxy ftp-proxy 2807 root mem REG 104,3 90088 160353 /lib/ld-2.3.2.so ftp-proxy 2807 root mem REG 104,3 24328 160430 /lib/libwrap.so.0.7.6 ftp-proxy 2807 root mem REG 104,3 1244016 160362 /lib/libc-2.3.2.so ftp-proxy 2807 root mem REG 104,3 73528 161054 /lib/libnsl-2.3.2.so ftp-proxy 2807 root 0r CHR 1,3 64278 /dev/null ftp-proxy 2807 root 1w CHR 1,3 64278 /dev/null ftp-proxy 2807 root 2w CHR 1,3 64278 /dev/null ftp-proxy 2807 root 3u IPv4 93318053 TCP intern:2121 (LISTEN) ftp-proxy 2807 root 4u REG 104,3 2899 289583 /var/log/ftp-proxy.log Well, I think I must compile the ftp-proxy. What do you think?

3 2

Re: [proxy-suite] LDAP auth not working
by Nina Eichler 03 Mar '05

03 Mar '05

I have install the libldap2 package dpkg -l | grep ldap ii ldap-utils 2.1.30-3 OpenLDAP utilities ii libldap2 2.1.30-3 OpenLDAP libraries

1 0

Re: [proxy-suite] LDAP auth not working
by Nina Eichler 03 Mar '05

03 Mar '05

Thanks for your answer Frédéric! I didn't have compile it. I have installed a debian-packet with the tool apt-get. As I can now check this?

3 2

RE: [proxy-suite] LDAP auth not working
by Nina Eichler 03 Mar '05

03 Mar '05

It's not working. I see the same in the Logfile. Nina

2 1

LDAP auth not working
by Nina Eichler 03 Mar '05

03 Mar '05

Hello, I have install proxy-suite Version 1.9.2.4 on a debian woody Server. I'am trying to configure an LDAP authetification, but ist doesen't work. In the Logfile I see no reference about LDAP. But I use the attitude UserAuthType = 'ldap' USER-INF connect from 10.104.1.163 TECH-DBG socket name address is 172.16.3.152:2121 TECH-DBG iptables transparent destination 172.16.3.152:2121 is local TECH-DBG no transparent proxy destination found USER-INF 'USER anonymous' dest 213.129.251.200:21 from 10.104.1.163 USER-INF connect from 172.16.3.147 USER-INF closing connect from 172.16.3.147 after 0 secs - read 0/0, sent 0/0 byte/sec USER-INF connect from 172.16.3.146 USER-INF closing connect from 172.16.3.146 after 0 secs - read 0/0, sent 0/0 byte/sec USER-INF 'PASS XXXX' from 10.104.1.163 TECH-DBG compiling UserNameRule: '^[[:alnum:]]+([%20@/\._-][[:alnum:]]+)*$' TECH-DBG DeHTMLized UserNameRule: '^[[:alnum:]]+([ @/\._-][[:alnum:]]+)*$' USER-INF reading data for 'neichler' from cfg-file Here my proxy-suite configuration: Config-Section ------ '(-global-)' Config: AllowMagicUser = 'yes' Config: AllowTransProxy = 'yes' Config: DestinationTransferMode = 'passive' Config: LDAPAuthDN = 'o=gkdvz' Config: LDAPAuthOKFlag = 'employeestatus=Internet-mit-ftp' Config: LDAPBaseDN = 'o=gkdvz' Config: LDAPBindDN = 'cn=squidsso,ou=groupwise,ou=rz,o=gkdvz' Config: LDAPBindPW = 'xxxxx'' Config: LDAPIdentifier = 'cn' Config: LDAPObjectClass = 'person' Config: LDAPServer = 'rz-ds.regioit-aachen.de:636' Config: Listen = '172.16.3.152' Config: LogDestination = '/var/log/ftp-proxy.log' Config: LogLevel = 'DBG' Config: PassiveMaxDataPort = '41999' Config: PassiveMinDataPort = '41000' Config: Port = '2121' Config: ServerType = 'standalone' Config: UserAuthMagic = '@auth' Config: UserAuthType = 'ldap' Config: UserMagicChar = '@' Without LDAP all is working fine. Can everyone help me? Which wrong I made? regards, Nina

2 1