From eric.donkersloot at surfnet.nl Tue Nov 30 09:06:49 2010 Content-Type: multipart/mixed; boundary="===============0761299923324041270==" MIME-Version: 1.0 From: Eric Donkersloot To: 389-users at lists.fedoraproject.org Subject: Re: [389-users] New 389 ds install - cannot logon to adm console Date: Tue, 30 Nov 2010 10:06:54 +0100 Message-ID: <4CF4BEAE.3050509@surfnet.nl> In-Reply-To: 4CF41FFA.90506@xs4all.nl --===============0761299923324041270== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Hi, This is indeed exactly the same issue I'm experiencing as well. I also already disabled SELinux and ip(6)tables. Kind regards, Eric Trisooma wrote: > Hi, > = > I am having the exact same issue: > = > - fresh install of 389-ds (version 1.2.1-1.fc14) > - server config: (as per = > http://directory.fedoraproject.org/wiki/Howto:AdminServerLDAPMgmt) > nsAdminAccessAddresses: * > nsAdminAccessHosts: > - servers are running (dirsrv/dirsrv-admin) > - firewall is disabled (all traffic is accepted) > - SELinux is disabled > - curl can access auth url locally, see below: > = > [shadowuser(a)icicle ~]$ curl http://localhost:9830/admin-serv/authentica= te > > > 401 Authorization Required > >

Authorization Required

>

This server could not verify that you > are authorized to access the document > requested. Either you supplied the wrong > credentials (e.g., bad password), or your > browser doesn't understand how to supply > the credentials required.

>
>
Apache/2.2 Server at localhost Port 9830
> > = > server log insists that access is denied for this ip, see below: > = > [Mon Nov 29 22:26:37 2010] [crit] openLDAPConnection(): util_ldap_init = > failed for ldap://:389 > [Mon Nov 29 22:26:37 2010] [warn] Unable to open initial LDAPConnection = > to populate LocalAdmin tasks into cache. > [Mon Nov 29 22:26:38 2010] [notice] Apache/2.2.17 (Unix) configured -- = > resuming normal operations > [Mon Nov 29 22:26:38 2010] [crit] openLDAPConnection(): util_ldap_init = > failed for ldap://:389 > [Mon Nov 29 22:26:38 2010] [warn] Unable to open initial LDAPConnection = > to populate LocalAdmin tasks into cache. > [Mon Nov 29 22:26:56 2010] [notice] [client 127.0.0.1] = > admserv_host_ip_check: Unauthorized host ip=3D127.0.0.1, connection rejec= ted > [Mon Nov 29 22:27:37 2010] [notice] [client 127.0.0.1] = > admserv_host_ip_check: Unauthorized host ip=3D127.0.0.1, connection rejec= ted > [Mon Nov 29 22:27:54 2010] [notice] [client 127.0.0.1] = > admserv_host_ip_check: Unauthorized host ip=3D127.0.0.1, connection rejec= ted > [Mon Nov 29 22:28:02 2010] [notice] [client 127.0.0.1] = > admserv_host_ip_check: Unauthorized host ip=3D127.0.0.1, connection rejec= ted > [Mon Nov 29 22:28:05 2010] [notice] [client 127.0.0.1] = > admserv_host_ip_check: Unauthorized host ip=3D127.0.0.1, connection rejec= ted > [Mon Nov 29 22:41:27 2010] [notice] [client 127.0.0.1] = > admserv_host_ip_check: Unauthorized host ip=3D127.0.0.1, connection rejec= ted > = > What could be wrong? > = > Regards > = > Trisooma -- = Eric Donkersloot SURFnet Radboudkwartier 273 3511 CK Utrecht M +31 6 4115 4547 eric.donkersloot(a)surfnet.nl --===============0761299923324041270==--