Bug #97592 for RT-Extension-LDAPImport: LDAP bind failed, data 525

Tue Jul 29 08:52:17 2014 prostoadmin [...] litkk.com.ua - Ticket created

Subject:	LDAP bind failed, data 525
Date:	Tue, 29 Jul 2014 15:52:07 +0300
To:	bug-RT-Extension-LDAPImport [...] rt.cpan.org
From:	Oleg Deordiev <prostoadmin [...] litkk.com.ua>

Hello! Domain admin not able connect to server. My Config file RT_Config.pm: Show quoted text

______________________________________________________ Set($LDAPHost,'ldap://lit-server2m.niva.com'); Set($LDAPUser,'admin'); Set($LDAPPassword,'domainadminpassword'); Set($LDAPFilter,'(&(cn = users))'); Set($LDAPMapping, {Name => 'uid', EmailAddress => 'mail', RealName => 'cn', WorkPhone => 'telephoneNumber', Organization => 'departmentName'}); Set(@Plugins, qw(RT::Extension::LDAPImport)); Set($LDAPGroupBase, 'ou=Groups,o=Our Place'); Set($LDAPGroupFilter, '(&(cn = Groups))'); Set($LDAPGroupMapping, {Name => 'cn', Member_Attr => 'member', Member_Attr_Value => 'dn' });

______________________________________________________ Run: /opt/rt4/local/plugins/RT-Extension-LDAPImport/bin/rtldapimport --debug

______________________________________________________ And have output: Running test import, no data will be changed Rerun command with --import to perform the import Rerun command with --debug for more information connecting to ldap://lit-server2m.niva.com binding as admin [19094] [Tue Jul 29 12:49:36 2014] [error]: LDAP bind failed 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece (/opt/rt4/local/plu gins/RT-Extension-LDAPImport/lib/RT/Extension/LDAPImport.pm:1516) LDAP bind failed 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece [19094] [Tue Jul 29 12:49:36 2014] [error]: fetching an LDAP connection failed (/opt/rt4/local/plugins/RT-Extension-LDAPImport/lib/RT/Extension/LDAPImport.pm:1516) fetching an LDAP connection failed No results found, no import Testing group import connecting to ldap://lit-server2m.niva.com binding as admin [19094] [Tue Jul 29 12:49:36 2014] [error]: LDAP bind failed 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece (/opt/rt4/local/plu gins/RT-Extension-LDAPImport/lib/RT/Extension/LDAPImport.pm:1516) LDAP bind failed 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece [19094] [Tue Jul 29 12:49:36 2014] [error]: fetching an LDAP connection failed (/opt/rt4/local/plugins/RT-Extension-LDAPImport/lib/RT/Extension/LDAPImport.pm:1516) fetching an LDAP connection failed No results found, no group import Finished test

Tue Jul 29 15:52:23 2014 alexmv [...] bestpractical.com - Correspondence added

Subject:	Re: [rt.cpan.org #97592] LDAP bind failed, data 525
Date:	Tue, 29 Jul 2014 15:52:20 -0400
To:	bug-RT-Extension-LDAPImport [...] rt.cpan.org
From:	Alex Vandiver <alexmv [...] bestpractical.com>

On 07/29/2014 08:52 AM, prostoadmin@litkk.com.ua via RT wrote: Show quoted text

> Domain admin not able connect to server.

This is not an error in RT::Extension::LDAPImport, but your local configuration, which we cannot help with. Specifically: Show quoted text

> connecting to ldap://lit-server2m.niva.com > binding as admin > [19094] [Tue Jul 29 12:49:36 2014] [error]: LDAP bind failed 80090308: > LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, > vece

A quick search of this reveals "data 525" means "user not found": http://www-01.ibm.com/support/docview.wss?uid=swg21290631 The user you are attempting to bind as likely does not exist. - Alex

Tue Jul 29 15:52:23 2014 The RT System itself - Status changed from 'new' to 'open'

Tue Jul 29 15:52:54 2014 cpan [...] chmrr.net - Status changed from 'open' to 'rejected'

Thu Jul 31 02:14:02 2014 prostoadmin [...] litkk.com.ua - Correspondence added

Subject:	Re: [rt.cpan.org #97592] LDAP bind failed, data 525
Date:	Thu, 31 Jul 2014 09:13:54 +0300
To:	bug-RT-Extension-LDAPImport [...] rt.cpan.org
From:	Oleg Deordiev <prostoadmin [...] litkk.com.ua>

On 07/29/2014 10:52 PM, Alex Vandiver via RT wrote: Show quoted text

> <URL: https://rt.cpan.org/Ticket/Display.html?id=97592 > > > On 07/29/2014 08:52 AM, prostoadmin@litkk.com.ua via RT wrote:

>> Domain admin not able connect to server.

> > This is not an error in RT::Extension::LDAPImport, but your local > configuration, which we cannot help with. Specifically: >

>> connecting to ldap://lit-server2m.niva.com >> binding as admin >> [19094] [Tue Jul 29 12:49:36 2014] [error]: LDAP bind failed 80090308: >> LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, >> vece

> > A quick search of this reveals "data 525" means "user not found": > > http://www-01.ibm.com/support/docview.wss?uid=swg21290631 > > The user you are attempting to bind as likely does not exist. > - Alex > >

Thanks for you replay. Yes I read about this error, but this user exist. I think it is a wrong field with username. Please show example for right field. I trying use: 1) Set($LDAPUser,'admin'); 2) Set($LDAPUser, 'uid=admin,ou=users,dc=niva,dc=com'); and some other types, but not working. -- С уажением, Олег Деордиев, Системный администратор

Thu Jul 31 11:14:16 2014 alexmv [...] bestpractical.com - Correspondence added

Subject:	Re: [rt.cpan.org #97592] LDAP bind failed, data 525
Date:	Thu, 31 Jul 2014 11:14:12 -0400
To:	bug-RT-Extension-LDAPImport [...] rt.cpan.org
From:	Alex Vandiver <alexmv [...] bestpractical.com>

On 07/31/2014 02:14 AM, prostoadmin@litkk.com.ua via RT wrote: Show quoted text

> Thanks for you replay. > Yes I read about this error, but this user exist. > I think it is a wrong field with username. > Please show example for right field. > > I trying use: > 1) Set($LDAPUser,'admin'); > 2) Set($LDAPUser, 'uid=admin,ou=users,dc=niva,dc=com'); > and some other types, but not working.

I cannot tell you the correct value to use, because it depends on the LDAP server you are using, which I am not familiar with. Searching points to it likely wanting the full DN for the username; I suggest you try again starting there. It may also have temporarily denied you access due to too many incorrect login attempts. I suggest you speak to your LDAP administrator for assistance. I am rejecting this ticket. There is nothing further that I can do to assist. - Alex