This one goes into the "Doh!" box, but I thought I'd blog it here (a) to aid me in the future and (b) perhaps to aid others.
One of my colleagues was finding that certain users were unable to log into a Lotus Connections 2.5.0.1 environment - the problem only appeared to affect a specific subset of users, added more recently via LDAP ( Tivoli Directory Server ).
The exceptions that we were seeing were: -
[8/25/10 10:40:38:368 GMT] 0000002f LTPAServerObj E SECJ0369E: Authentication failed when using LTPA. The exception is <null>
[8/25/10 10:40:38:369 GMT] 0000002f FormLoginExte E SECJ0118E: Authentication error during authentication for user hayd
with: -
Your user name and/or password does not match any existing accounts. Please check and try again
in the browser.
Being a techie, I immediately dived off into the depths of the "problem", looking at LDAP using Apache Directory Studio, DB2 database tables ( EMPINST.EMPLOYEE in PEOPLEDB ), TDI logs etc. I even re-ran the to-DB2 TDI assembly line, via the script ./populate_from_dn_file.sh in /home/idcuser/LC/Wizards/TDIPopulation/TDISOL/linux having manually added a DN to collect.dns.
Having done all this ....
Do you know what the solution was ?
We were using the wrong passwords :-)
Isn't it nice when a plan comes together ........................
Geeking in technology since 1985, with IBM Development, focused upon Docker and Kubernetes on the IBM Z LinuxONE platform In the words of Dr Cathy Ryan, "If you don't write it down, it never happened". To paraphrase one of my clients, "Every day is a school day". I do, I learn, I share. The postings on this site are my own and don’t necessarily represent IBM’s positions, strategies or opinions. Remember, YMMV https://infosec.exchange/@davehay
Subscribe to:
Post Comments (Atom)
Note to self - use kubectl to query images in a pod or deployment
In both cases, we use JSON ... For a deployment, we can do this: - kubectl get deployment foobar --namespace snafu --output jsonpath="{...
-
Why oh why do I forget this ? Running this command : - ldapsearch -h ad2012.uk.ibm.com -p 389 -D CN=bpmbind,CN=Users,DC=uk,DC=ibm,DC=com -w...
-
Error "ldap_sasl_interactive_bind_s: Unknown authentication method (-6)" on a LDAPSearch command ...Whilst building my mega Connections / Domino / Portal / Quickr / Sametime / WCM environment recently, I was using the LDAPSearch command tha...
-
Whilst building a new "vanilla" Kubernetes 1.25.4 cluster, I'd started the kubelet service via: - systemctl start kubelet.se...
No comments:
Post a Comment