[Fedora-directory-users] admserv_host_ip_check

[Richard Megginson]

Michael Montgomery wrote:

>Actually, I'll clarify, it's still not allowing a remote admin client
>instance to connect to it, and these are the errors it's spitting out.
>
>The error from 'startconsole' is this:
>
>"Cannot logon because of an incorrect User ID, Incorrect password, or
>Directory problem.  
>HttpException:
>Response HTTP/1.1 401 Authorization Required
>Status: 401
>URL: http://ldap02:43845/admin-serv/authenticate"
>
>I've gotten this error before, and it seems quite generic, and I've
>found it to be a sign of dns issues, among other things.  These are the
>last lines in any of the log files for slapd, or admin.
>
>[Thu Dec 15 13:52:56 2005] [warn] [client 10.5.1.202] admserv_host_ip_check: failed to get host by ip addr [10.5.1.202] - check your host and DNS configuration
>[Thu Dec 15 13:52:56 2005] [notice] [client 10.5.1.202] admserv_host_ip_check: Unauthorized host ip=10.5.1.202, connection rejected
>
>Any help would certainly be greatly appreciated.
>
>On Thu, 2005-12-15 at 10:48 -0600, Michael Montgomery wrote:
>  
>
>>Ok, I've tried for the "Host Names to allow", * and *.*, neither work.
>>    
>>
You need to set hostnames to allow to NULL or empty - if there is 
anything there, it will assume you want to do access based on 
host/domain name, which must have the correct DNS /etc/nsswitch.conf or 
/etc/hosts configuration.

>>I've tried for the "Ips to allow", * and 10.*.*.*
>>    
>>
This should work if you're not using Host Names to allow.

>
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users at redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20051215/f41573f1/attachment.bin>