Bug#702116: exim4-daemon-heavy: LDAP for SMTP auth not working

[Paul Muster]

On 07.03.2013 19:18, Andreas Metzler wrote:
> On 2013-03-06 Paul Muster <paul at muster.dyndns.info> wrote:
>> Debug-mode information
> 
>>> "exim -d -bdf -oX 2525"
> [...]
> 
> -d+all might be more helpful.

ok, there it is:

19:23:32 29767 SMTP<< AUTH PLAIN <auth_data>=
19:23:32 29767 plain_server_ldap authenticator server_condition:
19:23:32 29767   $auth1 =
19:23:32 29767   $auth2 = paul
19:23:32 29767   $auth3 = <password>
19:23:32 29767   $1 =
19:23:32 29767   $2 = paul
19:23:32 29767   $3 = <password>
19:23:32 29767 expanding:
19:23:32 29767    result:
19:23:32 29767 expanding: $auth2
19:23:32 29767    result: paul
19:23:32 29767 expanding: $auth2
19:23:32 29767    result: paul
19:23:32 29767 expanding: $auth3
19:23:32 29767    result: <password>
19:23:32 29767 expanding:
user="uid=${quote_ldap_dn:$auth2},ou=Users,dc=BASIS"
pass=${quote:$auth3} ldap://ldap/
19:23:32 29767    result: user="uid=paul,ou=Users,dc=BASIS"
pass="<password>" ldap://ldap/
19:23:32 29767 LDAP parameters: user=uid=paul,ou=Users,dc=BASIS
pass=<password> size=0 time=0 connect=0 dereference=0 referrals=on
19:23:32 29767 perform_ldap_search: ldapauth URL = "ldap://ldap/"
server=NULL port=0 sizelimit=0 timelimit=0 tcplimit=0
19:23:32 29767 after ldap_url_parse: host=ldap port=389
19:23:32 29767 ldap_initialize with URL ldap://ldap:389/
19:23:32 29767 initialized for LDAP (v3) server ldap:389
19:23:32 29767 LDAP_OPT_X_TLS_TRY set
19:23:32 29767 binding with user=uid=paul,ou=Users,dc=BASIS
password=<password>
19:23:32 29767 failed to bind the LDAP connection to server ldap:389 -
ldap_bind() returned -1
19:23:32 29767 failed to expand: ${if and{{ !eq{}{$auth2} }{
ldapauth{user="uid=${quote_ldap_dn:$auth2},ou=Users,dc=BASIS"
pass=${quote:$auth3} ldap://ldap/} }} }
19:23:32 29767    error message: failed to bind the LDAP connection to
server ldap:389 - ldap_bind() returned -1 inside "and{...}" condition
19:23:32 29767 expansion failed: failed to bind the LDAP connection to
server ldap:389 - ldap_bind() returned -1 inside "and{...}" condition
19:23:32 29767 expanding: $auth2
19:23:32 29767    result: paul
19:23:32 29767 SMTP>> 435 Unable to authenticate at present
19:23:32 29767 tls_do_write(0xb8b33840, 39)
19:23:32 29767 gnutls_record_send(SSL, 0xb8b33840, 39)
19:23:32 29767 outbytes=39
19:23:32 29767 LOG: MAIN REJECT
19:23:32 29767   plain_server_ldap authenticator failed for <client>:
435 Unable to authenticate at present (set_id=paul): failed to bind the
LDAP connection to server ldap:389 - ldap_bind() returned -1 inside
"and{...}" condition
19:23:32 29767 Calling gnutls_record_recv(0xb8b55570, 0xb8cf01a8, 4096)


On the LDAP server no connection comes in.


Thanks & greetings,

Paul