ERROR[66176:32772] Unknown user error:sysadmin.

[Fernando Carpani]

Hello Matthew (and every one !). I came from other error !!!
The following is a summary of my situation (my comments are preceded
by '===>'):

===>OpenAnzo: 3.1.0-Snapshot downloaded on November 5.
===>OS: Fedora 9 - 2.6.25-14.fc9.i686
===>JVM: OpenJDK Runtime Environment (build 1.6.0-b09)

===>The exception:


Welcome to OpenAnzo running in Felix.
=========================================

-> 2008-11-06 10:18:31,852 3 [ERROR]
[ServiceInitializer:org.openanzo.security.ldap.LdapAuthentication]
[OpName=] [OpId=] [OpUser=] [RunAs=] [UserDesc=]
org.openanzo.security.ldap.LdapAuthenticationProvider - Error
connecting to ldap server
org.openanzo.exceptions.AnzoException: ErrorCode[66176:32772]
[SECURITY_ERROR] [INTERNAL_ERROR] Unknown user error:sysadmin. Root
Cause: javax.naming.CommunicationException localhost:10389
at
org.openanzo.security.ldap.LdapAuthenticationProvider.searchForUser(LdapAuthenticationProvider.java:
366)
....

===>The port 10389 is running:
# netstat -lnp | grep 10389
tcp 0 0 :::
10389 :::* LISTEN 4323/
java

===> and is the correct process....
# ps -ef | grep 4323
root 4323 4319 11 10:17 pts/1 00:00:39 /usr/bin/java -server -
classpath /var/Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../lib/
org.apache.felix.main-1.2.1.jar:/var/Soft/OpenAnzo/openanzo-3.1.0-
SNAPSHOT/bin/../lib/org.openanzo.launcher-3.1.0-SNAPSHOT.jar -
Dfelix.config.properties=file:/var/Soft/OpenAnzo/openanzo-3.1.0-
SNAPSHOT/bin/../conf/config.properties -Dfelix.cache.dir=/var/Soft/
OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../conf/cache -DANZO_HOME=/var/
Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/.. -
Dorg.openanzo.osgi.bootstrap.path=/var/Soft/OpenAnzo/openanzo-3.1.0-
SNAPSHOT/bin/../conf/config -
Dorg.ops4j.pax.logging.DefaultServiceLog.level=ERROR
org.openanzo.launcher.Launcher dir:/var/Soft/OpenAnzo/openanzo-3.1.0-
SNAPSHOT/bin/../lib/core@1 dir:/var/Soft/OpenAnzo/openanzo-3.1.0-
SNAPSHOT/bin/../lib/dependencies@1 dir:/var/Soft/OpenAnzo/
openanzo-3.1.0-SNAPSHOT/bin/../lib/openanzo dir:/var/Soft/OpenAnzo/
openanzo-3.1.0-SNAPSHOT/bin/../lib/addons@5

===>The ps in Felix:
-> ps
START LEVEL 5
ID State Level Name
[ 0] [Active ] [ 0] System Bundle (1.2.1)
[ 1] [Active ] [ 5] org.openanzo.exceptions (3.1.0.SNAPSHOT)
[ 2] [Active ] [ 5] org.openanzo.js (3.1.0.SNAPSHOT)
[ 3] [Active ] [ 5] org.openanzo.combus.endpoint
(3.1.0.SNAPSHOT)
[ 4] [Active ] [ 5] org.openanzo.security.ldap
(3.1.0.SNAPSHOT)
....
[ 36] [Active ] [ 4] org.openanzo.ldap (3.1.0.SNAPSHOT)
....

===>All appears as active.

===> I don't understand too much the following but may be useful (ds
waiting in felix).
-> ds waiting
**********************************************************
Bundle: [30] file:/var/Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../
lib/openanzo/5/org.openanzo.servlet-3.1.0-SNAPSHOT.jar
Service: [org.openanzo.servlet.Servlets]
State:CREATED
Available Required Services:
org.osgi.service.cm.ConfigurationAdmin
org.ops4j.pax.web.service.WebContainer
org.openanzo.security.keystore.ISecretKeystore
Waiting for Required Services:
org.openanzo.services.IAuthenticationService
Are Configuration properties set? true

**********************************************************
Bundle: [21] file:/var/Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../
lib/openanzo/5/org.openanzo.client.pool-3.1.0-SNAPSHOT.jar
Service: [org.openanzo.client.ClientPool]
State:CREATED
Available Required Services:
org.openanzo.services.IExecutionService
Waiting for Required Services:
org.openanzo.services.IAuthenticationService

Extra Status Info:
Not Running Client Pools:
http://openanzo.org/clientPools/defaultSystemDatasource
http://openanzo.org/clientPools/unrestrictedClients
http://openanzo.org/clientPools/restrictedClients


**********************************************************
Bundle: [34] file:/var/Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../
lib/openanzo/5/org.openanzo.combus.bayeux-3.1.0-SNAPSHOT.jar
Service: [org.openanzo.combus.BayeuxBridge]
State:CREATED
Available Required Services:
org.ops4j.pax.web.service.WebContainer
org.openanzo.security.keystore.ISecretKeystore
org.openanzo.datasource.IDatasource
Waiting for Required Services:
org.openanzo.services.IAuthenticationService
org.openanzo.combus.IJmsProvider
Are Configuration properties set? true

**********************************************************
Bundle: [15] file:/var/Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../
lib/openanzo/5/org.openanzo.execution.java-3.1.0-SNAPSHOT.jar
Service: [org.openanzo.execution.java.JavaServiceExecutor]
State:STOPPED
Waiting for Required Services:
org.openanzo.osgi.registry.IRegistryProvider
org.openanzo.client.pool.AnzoClientPool
Are Configuration properties set? true

**********************************************************
Bundle: [33] file:/var/Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../
lib/openanzo/5/org.openanzo.combus.realtime-3.1.0-SNAPSHOT.jar
Service: [org.openanzo.combus.RealtimePublisher]
State:CREATED
Available Required Services:
org.openanzo.datasource.IDatasource
Waiting for Required Services:
org.openanzo.services.IAuthenticationService
org.openanzo.combus.IJmsProvider
org.openanzo.combus.endpoint.CombusEndpoint
Are Configuration properties set? true

**********************************************************
Bundle: [14] file:/var/Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../
lib/openanzo/5/org.openanzo.datasource.manager-3.1.0-SNAPSHOT.jar
Service: [org.openanzo.datasource.DatasourceManager]
State:STOPPED
Waiting for Required Services:
org.openanzo.osgi.registry.IRegistryProvider
Are Configuration properties set? true
Extra Status Info:
Registered Datasources:


**********************************************************
Bundle: [37] file:/var/Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../
lib/openanzo/3/org.openanzo.osgi.registry-3.1.0-SNAPSHOT.jar
Service: [org.openanzo.osgi.RegistryProvider]
State:STOPPED
Waiting for Required Services:
org.openanzo.client.pool.AnzoClientPool
Are Configuration properties set? true

**********************************************************
Bundle: [3] file:/var/Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../lib/
openanzo/5/org.openanzo.combus.endpoint-3.1.0-SNAPSHOT.jar
Service: [org.openanzo.combus.Endpoint]
State:STOPPED
Waiting for Required Services:
org.openanzo.combus.IJmsProvider
Are Configuration properties set? true

**********************************************************
Bundle: [23] file:/var/Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../
lib/openanzo/5/org.openanzo.binarystore-3.1.0-SNAPSHOT.jar
Service: [org.openanzo.binarystore.Servlet]
State:STOPPED
Waiting for Required Services:
org.openanzo.client.pool.AnzoClientPool
Are Configuration properties set? true

**********************************************************
Bundle: [12] file:/var/Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../
lib/openanzo/5/org.openanzo.execution.javascript-3.1.0-SNAPSHOT.jar
Service:
[org.openanzo.execution.javascript.JavascriptServiceExecutor]
State:STOPPED
Waiting for Required Services:
org.openanzo.osgi.registry.IRegistryProvider
org.openanzo.client.pool.AnzoClientPool
Are Configuration properties set? true

**********************************************************
Bundle: [24] file:/var/Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../
lib/openanzo/5/org.openanzo.activemq-3.1.0-SNAPSHOT.jar
Service: [org.openanzo.activemq.EmbeddedActiveMQServer]
State:STOPPED
Available Required Services:
org.openanzo.datasource.IDatasource
Waiting for Required Services:
org.openanzo.services.IAuthenticationService
Are Configuration properties set? true

**********************************************************
Bundle: [4] file:/var/Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../lib/
openanzo/5/org.openanzo.security.ldap-3.1.0-SNAPSHOT.jar
Service: [org.openanzo.security.ldap.LdapAuthentication]
State:STOPPED
Are Configuration properties set? true

->

===> I try to restart org.openanzo.security.ldap because is stopped
and the was generated by this process...
-> stop 4
-> start 4

===> The next ds waiting the status of org.openanzo.security.ldap is
different :
Bundle: [4] file:/var/Soft/OpenAnzo/openanzo-3.1.0-SNAPSHOT/bin/../lib/
openanzo/5/org.openanzo.security.ldap-3.1.0-SNAPSHOT.jar
Service: [org.openanzo.security.ldap.LdapAuthentication]
State:CREATED
Are Configuration properties set? false

===> This is my state now... I suppose that is only a trivial
configuration error (made by me... of course.. :-) ) but... I don't
know how to trace.

Thanks.
Fernando Carpani.

[Matthew Roy]

>From what you've sent it seems like things should work. For some reason
the authentication provider is having a communication error connecting
to the ldap server. On my fedora9 box I've been trying to figure out
how to debug this problem you're having. One idea is to install an ldap
tool outside of openanzo, ie I did a "yum install ldapvi". Start the
server, and once you get the excepion run "ldapvi --host
localhost:10389 --user uid=sysadmin,ou=users,dc=openanzo,dc=org --base
ou=users,dc=openanzo,dc=org" which asks for a password,123, and returns
a document containing the ldap users the system knows about. This will
atleast show if the ldap server is starting correctly.

Matt

[Fernando Carpani]

Hello.
OK. I run de ldapvi command and get the base in a vi document....
This is the record for uid=sysadmin...

1 uid=sysadmin,ou=users,dc=openanzo,dc=org
uid: sysadmin
sn: Admin
userpassword: 123
cn: System Admin
description: System admin user
objectClass: organizationalPerson
objectClass: person
objectClass: inetOrgPerson
objectClass: top


So, the connection might be right ?


I made other test: tcpdump on port 10389.... and something curious happend....

At startup of the server, each pair of packets has different source (or destination) port ! ....
This is an extract:

17:46:51.682268 IP 127.0.0.1.39277 > 127.0.0.1.10389: S 1512157409:1512157409(0) win 32792 <mss 16396,sackOK,timestamp 29084214 0,nop,wscale 6>
17:46:51.682442 IP 127.0.0.1.10389 > 127.0.0.1.39277: R 0:0(0) ack 1512157410 win 0
17:46:52.248116 IP 127.0.0.1.39278 > 127.0.0.1.10389: S 1521262206:1521262206(0) win 32792 <mss 16396,sackOK,timestamp 29084780 0,nop,wscale 6>
17:46:52.248190 IP 127.0.0.1.10389 > 127.0.0.1.39278: R 0:0(0) ack 1521262207 win 0
17:46:53.249973 IP 127.0.0.1.39280 > 127.0.0.1.10389: S 1537848100:1537848100(0) win 32792 <mss 16396,sackOK,timestamp 29085782 0,nop,wscale 6>
17:46:53.250040 IP 127.0.0.1.10389 > 127.0.0.1.39280: R 0:0(0) ack 1537848101 win 0
17:46:54.751848 IP 127.0.0.1.39281 > 127.0.0.1.10389: S 1554457836:1554457836(0) win 32792 <mss 16396,sackOK,timestamp 29087284 0,nop,wscale 6>
17:46:54.751914 IP 127.0.0.1.10389 > 127.0.0.1.39281: R 0:0(0) ack 1554457837 win 0
17:46:56.753746 IP 127.0.0.1.39282 > 127.0.0.1.10389: S 1591006567:1591006567(0) win 32792 <mss 16396,sackOK,timestamp 29089286 0,nop,wscale 6>
17:46:56.753816 IP 127.0.0.1.10389 > 127.0.0.1.39282: R 0:0(0) ack 1591006568 win 0
17:46:59.602257 IP 127.0.0.1.39284 > 127.0.0.1.10389: S 1629271339:1629271339(0) win 32792 <mss 16396,sackOK,timestamp 29092134 0,nop,wscale 6>
17:46:59.602327 IP 127.0.0.1.10389 > 127.0.0.1.39284: R 0:0(0) ack 1629271340 win 0
17:47:02.603937 IP 127.0.0.1.39286 > 127.0.0.1.10389: S 1684653375:1684653375(0) win 32792 <mss 16396,sackOK,timestamp 29095136 0,nop,wscale 6>
17:47:02.603999 IP 127.0.0.1.10389 > 127.0.0.1.39286: R 0:0(0) ack 1684653376 win 0

It is something wierd... isn't it?


Of course that this not happend with ldapvi...

Well for today, this is enough !!!! ( :-) )

Bye.

FDO.

2008/11/6 Matthew Roy <moos...@gmail.com>

--
=================================
Visitá nuestro blog: http://lambdablogandroll.blogspot.com