This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

V7.303 with EDir-SSO: Authentication failed

Hi,

nearly every 3 hours I have to restart my ASG, because every user will get the message: Authentication Failed.

Since updated to V7.303 on last friday we had no problems with backend user authentication to Novell eDirectory.

Any hints?

Markus

This thread was automatically locked due to age.

Parents

0 SveN_01 over 17 years ago

What does the Netware Server say?
Cancel
Vote Up 0 Vote Down

Cancel
0 Markus S. over 17 years ago in reply to SveN_01

With Netware everything seems to be o.k.

Even when testing settings netware user name and password in astaro webmin, User, Authentication, E-Directory, I get the answer: Authentication test passed.
Cancel
Vote Up 0 Vote Down

Cancel
0 benneta over 17 years ago in reply to Markus S.

I increased the connlimit yesterday afternoon, and it seemed to work fine for a while.... However, I just had to restart the Astaro box because of the same AUA error
Cancel
Vote Up 0 Vote Down

Cancel
0 benneta over 17 years ago in reply to benneta

Restart again..same error message in the Content Filter (HTTP) log

2008:10:21-15:13:52 (none) httpproxy[3902]: [ 0x84c0900] edir_auth (auth_edir.c:59) max number of aua connections reached
2008:10:21-15:13:52 (none) httpproxy[3902]: [ 0x846cf18] edir_auth (auth_edir.c:59) max number of aua connections reached
2008:10:21-15:13:52 (none) httpproxy[3902]: [ 0x850b880] edir_auth (auth_edir.c:59) max number of aua connections reached
Cancel
Vote Up 0 Vote Down

Cancel
0 Jack Daniel over 17 years ago in reply to benneta

Restarting the Astaro will reload the config, the connlimit is probably back down to 512 now- and needs to be raised again.
Cancel
Vote Up 0 Vote Down

Cancel
0 RConnelly over 17 years ago in reply to Jack Daniel

Does the connlimit automatically reset to 512 following a restart?
Cancel
Vote Up 0 Vote Down

Cancel
0 Jack Daniel over 17 years ago in reply to RConnelly

Conn limit *appears* to reset to 512 are reboot per my limited experience with it.
Cancel
Vote Up 0 Vote Down

Cancel
0 benneta over 17 years ago in reply to Jack Daniel

That makes sense, I'll have to log back in and change it again. Is there a limit to how high I can set it? Astaro support said to set it to 1,000,000,000. And, that didn't seem to fix it.
Cancel
Vote Up 0 Vote Down

Cancel
0 Jack Daniel over 17 years ago in reply to benneta

I've been setting them to 1,000,000,000 and that has worked for the systems I am working on. I would suggest a reboot of the Astaro, then change the connlimit, and then restart the proxy so the new setting is active.
Cancel
Vote Up 0 Vote Down

Cancel
0 Markus S. over 17 years ago in reply to Jack Daniel

In the meantime I had to restart my Astaro twice, because I got the authentication failure again.
Clients without Novell Client do not get the basic authentication window, they get authentication failure at once.
Cancel
Vote Up 0 Vote Down

Cancel
0 dschmidl over 17 years ago in reply to Markus S.

Please contact Astaro Support, they can offer you a package which will fix this issue.

Best regards,
Dominic Schmidl
Cancel
Vote Up 0 Vote Down

Cancel
0 Kingbuzzo over 17 years ago in reply to dschmidl

I thought the package was busted and they are still working on a fix...
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Kingbuzzo over 17 years ago in reply to dschmidl

I thought the package was busted and they are still working on a fix...
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Jack Daniel over 17 years ago in reply to Kingbuzzo

We have the package available in support, I have successfully resolved cases with it this morning. If you need this addressed immediately, please open a support case via the my.astaro portal and provide SSH access and login info. PM me with a case number if you are really in a bind and I will try to get the patch applied for you quickly. (I cover US East Coast hours)

I think we will see an up2date later this week to address the issue.
Cancel
Vote Up 0 Vote Down

Cancel