[rabbitmq-discuss] rabbit_auth_backend_ldap connect failed

[SAG - Jonathan Andrés]

Thank you again.

Today I have installed the last version of RabbitMQ (3.1.5), but I have the same problem (I had the 3.1.4 version before).

I don't see what you say in the logs. This is the complete log of:

---------------------------------------------------------------------------------------------------------------------------
=INFO REPORT==== 21-Aug-2013::14:16:36 ===
Starting RabbitMQ 3.1.5 on Erlang R16B01
Copyright (C) 2007-2013 GoPivotal, Inc.
Licensed under the MPL.  See http://www.rabbitmq.com/

=INFO REPORT==== 21-Aug-2013::14:16:36 ===
node           : rabbit at NWSCC01-PRB
home dir       : C:\Windows
cookie hash    : OgkcvIercV6wE+clHwQEMA==
log            : E:/Logs/rabbitmq/rabbit at NWSCC01-PRB.log
sasl log       : E:/Logs/rabbitmq/rabbit at NWSCC01-PRB-sasl.log
database dir   : c:/Users/serv_wm/AppData/Roaming/RabbitMQ/db/rabbit at NWSCC01-PRB-mnesia

=INFO REPORT==== 21-Aug-2013::14:16:40 ===
Limiting to approx 8092 file handles (7280 sockets)

=INFO REPORT==== 21-Aug-2013::14:16:40 ===
Memory limit set to 3276MB of 8191MB total.

=INFO REPORT==== 21-Aug-2013::14:16:40 ===
Disk free limit set to 1000MB

=INFO REPORT==== 21-Aug-2013::14:16:40 ===
msg_store_transient: using rabbit_msg_store_ets_index to provide index

=INFO REPORT==== 21-Aug-2013::14:16:40 ===
msg_store_persistent: using rabbit_msg_store_ets_index to provide index

=INFO REPORT==== 21-Aug-2013::14:16:40 ===
started TCP Listener on [::]:5672

=INFO REPORT==== 21-Aug-2013::14:16:40 ===
started TCP Listener on 0.0.0.0:5672

=INFO REPORT==== 21-Aug-2013::14:16:40 ===
started SSL Listener on [::]:5671

=INFO REPORT==== 21-Aug-2013::14:16:40 ===
started SSL Listener on 0.0.0.0:5671

=INFO REPORT==== 21-Aug-2013::14:16:41 ===
Management plugin started. Port: 15672

=INFO REPORT==== 21-Aug-2013::14:16:41 ===
Statistics database started.

=INFO REPORT==== 21-Aug-2013::14:16:41 ===
Server startup complete; 7 plugins started.
 * amqp_client
 * mochiweb
 * rabbitmq_auth_backend_ldap
 * rabbitmq_management
 * rabbitmq_management_agent
 * rabbitmq_web_dispatch
 * webmachine

=INFO REPORT==== 21-Aug-2013::14:17:17 ===
accepting AMQP connection <0.328.0> (194.224.33.160:51198 -> 194.224.33.245:5671)

=ERROR REPORT==== 21-Aug-2013::14:17:23 ===
closing AMQP connection <0.328.0> (194.224.33.160:51198 -> 194.224.33.245:5671):
{handshake_error,starting,0,
                 {amqp_error,access_refused,
                             "PLAIN login refused: rabbit_auth_backend_ldap failed authenticating userCC: \"connect failed\"\n",
                             'connection.start_ok'}}

=INFO REPORT==== 21-Aug-2013::14:17:24 ===
accepting AMQP connection <0.335.0> (194.224.33.160:51335 -> 194.224.33.245:5671)

=ERROR REPORT==== 21-Aug-2013::14:17:29 ===
closing AMQP connection <0.335.0> (194.224.33.160:51335 -> 194.224.33.245:5671):
{handshake_error,starting,0,
                 {amqp_error,access_refused,
                             "PLAIN login refused: rabbit_auth_backend_ldap failed authenticating userCC: \"connect failed\"\n",
                             'connection.start_ok'}}
---------------------------------------------------------------------------------------------------------------------------

And this is my rabbitmq.config:

---------------------------------------------------------------------------------------------------------------------------
[ 
	{rabbit, 
		[
			{ssl_listeners, [5671]}, 
			{ssl_options, [{cacertfile,"e:/RabbitMQ Server/certificados/ssl.ca/ca.cer"}, 
							{certfile,"e:/RabbitMQ Server/certificados/ssl.crt/apache.pem"}, 
							{keyfile,"e:/RabbitMQ Server/certificados/ssl.key/apache.pem"}, 
							{verify,verify_peer}, 
							{fail_if_no_peer_cert,true}, 
							{ssl_cert_login_from, common_name}, 
							{auth_mechanisms, ['EXTERNAL']}] 
			}, 
			{auth_backends, [rabbit_auth_backend_ldap]} 
		]
	}, 
	{rabbit_auth_backend_ldap, 
		[ 	{servers,               ["194.224.33.177"]}, 
			{port,                  389}, 
			{other_bind, {"UserXX", "PassXX"}}, 
			{user_dn_pattern,       "uid=${username}"}, 
			{use_ssl,               false}, 
			{log,                   network} 
		] 
	} 
].
--------------------------------------------------------------------------------------------------------------------------------

I don't know what is happening.

Thank you!






-----Mensaje original-----
De: Matthias Radestock [mailto:matthias at rabbitmq.com] 
Enviado el: lunes, 19 de agosto de 2013 9:09
Para: Discussions about RabbitMQ
CC: SAG - Jonathan Andrés
Asunto: Re: [rabbitmq-discuss] rabbit_auth_backend_ldap connect failed

On 14/08/13 10:09, jandres wrote:
> I use Microsoft Network Monitor to get the traffic between the server 
> and the LDAP, but I can't see the traffic of the RabbitMQ LDAP Plugin. 
> I can see the traffic between Apache and the LDAP, but not between 
> RabbitMQ and LDAP.
> So, I think I have something wrong in my config file, buy I don't know 
> what.

Your config looks fine.

You didn't say what version of RabbitMQ you are running. In >=3.0.0, when the LDAP plug-in has been configured with network-level logging (as you have done in your config), the rabbit log file should contain entries for all connection attempts, looking like this:

LDAP connecting to servers: ["ldap-server"]

Do you see these in the logs?

Regards,

Matthias.