Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

User Prefetch fails to create user

Hello, 
last week I noticed that 1 users cannot login in userportals. Today I have seen this entries in User Prefetch log file:

2010:12:20-00:00:13 *** user_prefetch[30094]:  # 30  Updating user user-ok

2010:12:20-00:00:13 *** user_prefetch[30094]:  # 31  Creating user user-not-ok


Every night, when prefetch occurs, ASG tries to create user-not-ok. Some rows after I see the reason:
2010:12:20-00:00:13 *** user_prefetch[30094]:  # 30  Updating user userok

2010:12:20-00:00:13 *** user_prefetch[30094]:  # 31  Creating user usernotok


2010:12:20-00:00:14 *** user_prefetch[30094]: $VAR1 = [
2010:12:20-00:00:14 *** user_prefetch[30094]:           'ALREADY_IN_USE_OBJECT',
2010:12:20-00:00:14 *** user_prefetch[30094]:           {
2010:12:20-00:00:14 *** user_prefetch[30094]:             'objclass' => 'aaa',
2010:12:20-00:00:14 *** user_prefetch[30094]:             'attrs' => [
2010:12:20-00:00:14 *** user_prefetch[30094]:                          'value',
2010:12:20-00:00:14 *** user_prefetch[30094]:                          'objattr',
2010:12:20-00:00:14 *** user_prefetch[30094]:                          'objclass',
2010:12:20-00:00:14 *** user_prefetch[30094]:                          'objtype',
2010:12:20-00:00:14 *** user_prefetch[30094]:                          'objname'
2010:12:20-00:00:14 *** user_prefetch[30094]:                        ],
2010:12:20-00:00:14 *** user_prefetch[30094]:             'objname' => 'ipsec.username',
2010:12:20-00:00:14 *** user_prefetch[30094]:             'value' => 'user-not-ok@mycompany.com',
2010:12:20-00:00:14 *** user_prefetch[30094]:             'objattr' => 'email_primary',
2010:12:20-00:00:14 *** user_prefetch[30094]:             'name' => 'The Email address \'user-not-ok@mycompany.com\' is already in use by the \'email_primary\' attribute of the aaa->user object \'ipsec.username\'.',
2010:12:20-00:00:14 *** user_prefetch[30094]:             'external' => 'set_object',
2010:12:20-00:00:14 *** user_prefetch[30094]:             'msgtype' => 'ALREADY_IN_USE_OBJECT',
2010:12:20-00:00:14 *** user_prefetch[30094]:             'format' => 'The Email address \'%s\' is already in use by the \'%s\' attribute of the %s->%s object \'%s\'.',
2010:12:20-00:00:14 *** user_prefetch[30094]:             'objtype' => 'user',
2010:12:20-00:00:14 *** user_prefetch[30094]:             'user' => 'Object:REF_SqjLNEdQIq->email_primary',
2010:12:20-00:00:14 *** user_prefetch[30094]:             'fatal' => 1,
2010:12:20-00:00:14 *** user_prefetch[30094]:             'class' => 'email_user'
2010:12:20-00:00:14 *** user_prefetch[30094]:           }
2010:12:20-00:00:14 *** user_prefetch[30094]:         ];


The email address (it is a system email address) is used for a ipsec connection for a "Locally authenticated" user (ipsec.username). 

So? He cannot use userportal for user-not-ok@mycompany.com? He receives the quarantine reports via mail, but he cannot access to spam quarantine portal.

Any solution? I would try to temporary change Primary email address for ipsec.username, prefetch, then re-change to the original address, but I am afraid that this operation could cause issues...

any ideas, opinion?

Thanks


This thread was automatically locked due to age.
Parents Reply Children
No Data