Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 294350 - mail-client/evolution: ldap authentication fails after net-dns/openldap upgrade to 2.4.19
Summary: mail-client/evolution: ldap authentication fails after net-dns/openldap upgra...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: AMD64 Linux
: High normal (vote)
Assignee: Gentoo LDAP project
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-11-24 08:56 UTC by Clemente Aguiar
Modified: 2012-02-12 21:12 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Clemente Aguiar 2009-11-24 08:56:45 UTC
mail server is an Exchange server, and mail client is mail-client/evolution-2.26.3

After I upgraded net-dns/openldap from 2.3.43 to 2.4.19, evolution contact queries as well as the access to Global Address List stopped working.

If I run evolution from the command line I get the following error:
** (evolution:27275): WARNING **: LDAP authentication failed (0x31 (Invalid credentials))

When composing an email, email addresses are no longer automatically suggested and if I go to Contacts and select Global Address List I get an error which goes something like this (translated from Portuguese):
-------
Error reading address book

Unable to open address book. This means that the URI is incorrect or that the server is inaccessible.
-------

If I just go back to net-dns/openldap-2.3.43 I do not get the errors and everything works fine.


Reproducible: Always




emerge --info
Portage 2.1.6.13 (default/linux/amd64/10.0/desktop, gcc-4.3.4, glibc-2.9_p20081201-r2, 2.6.30-gentoo-r5 x86_64)
=================================================================
System uname: Linux-2.6.30-gentoo-r5-x86_64-Intel-R-_Core-TM-2_Duo_CPU_E6750_@_2.66GHz-with-gentoo-1.12.13
Timestamp of tree: Mon, 23 Nov 2009 23:45:01 +0000
app-shells/bash:     4.0_p28
dev-java/java-config: 2.1.9-r1
dev-lang/python:     2.6.2-r1
dev-python/pycrypto: 2.0.1-r8
dev-util/cmake:      2.6.4-r3
sys-apps/baselayout: 1.12.13
sys-apps/sandbox:    1.6-r2
sys-devel/autoconf:  2.13, 2.63-r1
sys-devel/automake:  1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6a
virtual/os-headers:  2.6.27-r2
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -march=nocona -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/config /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/udev/rules.d"
CXXFLAGS="-O2 -march=nocona -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="buildpkg distlocks fixpackages parallel-fetch protect-owned sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo"
LANG="pt_PT.utf8"
LDFLAGS="-Wl,-O1"
LINGUAS="pt_PT pt en"
MAKEOPTS="-j4"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage/layman/sunrise /usr/local/portage"
SYNC="rsync://mero.madeiratecnopolo.pt/gentoo-portage"
USE="X a52 aac acl acpi ads alsa amd64 avahi berkdb bluetooth branding bzip2 cairo cdda cddb cdio cdparanoia cdr cli consolekit cracklib crypt cups dbus dri dts dvd dvdr eds emboss encode evo exif fam ffmpeg firefox flac fortran gdbm gif gnome gnome-print gpm gstreamer gtk hal iconv id3tag ipv6 ithreads java jpeg kerberos lame lcms ldap libnotify live logrotate mad matroska mikmod mmx modules mp3 mp4 mpeg mudflap multilib musepac musepack nautilus ncurses network networkmanager nls nptl nptlonly nsplugin nvidia ogg opengl openmp pam pcre pdf perl png ppds pppd pulseaudio python qt3support quicktime readline reflection samba sdl session sip smp spell spl sse sse2 ssl ssse3 startup-notification svg sysfs tcpd theora threads thunar tiff truetype tta unicode usb vorbis wav wavpack wma wmf x264 xml xorg xulrunner xv xvid xvmc zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="pt_PT pt en" USERLAND="GNU" VIDEO_CARDS="nvidia vga"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 Gilles Dartiguelongue (RETIRED) gentoo-dev 2009-11-24 09:58:19 UTC
Two possible issues:
 * stricter with self-signed certificates (you must check your ldap.conf settings)
 * suppression of the ldap database backend you were using previously (I had to migrate mine to hdb iirc)
Comment 2 Clemente Aguiar 2009-11-24 16:25:46 UTC
Regarding the two issues you pointed out, maybe I don't understand, but here are my comments:

 * stricter with self-signed certificates (you must check your ldap.conf
settings)

The /etc/openldap/ldap.conf is the default, I never changed it in any version of openldap.

I actually think that evolution does not use this file, but uses the details that are set in the account configuration under "Global Address Book / Active Directory".

 * suppression of the ldap database backend you were using previously (I had to
migrate mine to hdb iirc)

If by the backend you mean the LDAP server, well it is an Active Directory, I don't have a choice.
Comment 3 Gilles Dartiguelongue (RETIRED) gentoo-dev 2009-11-28 09:35:38 UTC
Active directory ??? Are you actually using evolution-exchange ?
Comment 4 Clemente Aguiar 2009-11-30 15:46:14 UTC
Yes.

Here are a list of "evolution" the packages that are installed.

$ eix -I evolution
[I] dev-python/evolution-python
     Available versions:  2.24.1!t 2.26.0!t ~2.28.0!t {debug}
     Installed versions:  2.26.0!t(10:24:37 09-10-2009)(-debug)
     Homepage:            http://pygtk.org/
     Description:         Python bindings for Evolution and Evolution Data Server

[I] gnome-extra/evolution-data-server
     Available versions:  2.24.5-r3 2.26.3 ~2.28.1 {debug doc gnome-keyring ipv6 kerberos krb4 ldap ssl}
     Installed versions:  2.26.3(15:13:24 24-11-2009)(ipv6 kerberos ldap ssl -debug -doc -gnome-keyring -krb4)
     Homepage:            http://www.gnome.org/projects/evolution/
     Description:         Evolution groupware backend

[I] gnome-extra/evolution-exchange
     Available versions:  (2.0)  *2.24.4 2.24.5 2.26.3 ~2.28.1
	{debug doc static}
     Installed versions:  2.26.3(2.0)(15:49:24 24-11-2009)(-debug -doc -static)
     Homepage:            http://www.novell.com/products/desktop/features/evolution.html
     Description:         Evolution module for connecting to Microsoft Exchange

[I] gnome-extra/evolution-webcal
     Available versions:  *2.21.92 2.24.0 2.26.0 ~2.28.0 {debug}
     Installed versions:  2.26.0(09:29:40 07-10-2009)(-debug)
     Homepage:            http://www.gnome.org/
     Description:         A GNOME URL handler for web-published ical calendar files

[I] mail-client/evolution
     Available versions:  (2.0)  2.24.5 2.26.3 ~2.28.1 ~2.28.1-r1
	{crypt dbus debug exchange gstreamer hal kerberos krb4 ldap mono networkmanager nntp pda profile python ssl}
     Installed versions:  2.26.3(2.0)(15:48:15 24-11-2009)(crypt dbus exchange gstreamer hal kerberos ldap networkmanager python ssl -debug -krb4 -mono -nntp -pda -profile)
     Homepage:            http://www.gnome.org/projects/evolution/
     Description:         Integrated mail, addressbook and calendaring functionality

Found 5 matches.
Comment 5 Pacho Ramos gentoo-dev 2010-04-14 16:39:54 UTC
Do you get the same with net-nds/openldap-2.4.19-r1 ?
Comment 6 Clemente Aguiar 2010-04-15 09:11:58 UTC
(In reply to comment #5)
> Do you get the same with net-nds/openldap-2.4.19-r1 ?
> 

The situation is exactly the same.
Comment 7 Pacho Ramos gentoo-dev 2010-04-15 21:12:20 UTC
Could you test with mail-client/evolution-2.28.3.1? It includes a lot of upstream fixes over current stable one

Good luck!
Comment 9 Clemente Aguiar 2010-04-16 11:51:27 UTC
(In reply to comment #7)
> Could you test with mail-client/evolution-2.28.3.1? It includes a lot of
> upstream fixes over current stable one
> 

I have tested with latest evolution ebuilds:
gnome-extra/evolution-data-server-2.28.3.1
gnome-extra/evolution-exchange-2.28.3
gnome-extra/evolution-webcal-2.28.1
mail-client/evolution-2.28.3.1

The situation is exactly the same.

Comment 10 Clemente Aguiar 2010-04-16 11:56:32 UTC
(In reply to comment #8)
> Maybe an openldap problem:
> http://cvs.fedoraproject.org/viewvc/devel/openldap/README.evolution?view=markup
> http://cvs.fedoraproject.org/viewvc/devel/openldap/openldap-2.4.6-evolution-ntlm.patch?view=markup
> 

You are probably right, it has something to do with the problem.

Actually the ebuild for openldap-2.3.43, which as I mentioned works, includes a patch named "openldap-2.2.6-ntlm.patch" which seems to be the patch mentioned by you.

The ebuild for openldap-2.4.19-r1 does not include this patch.

Comment 11 Doug 2010-05-05 03:16:55 UTC
(In reply to comment #10)
> (In reply to comment #8)
> > Maybe an openldap problem:
> > http://cvs.fedoraproject.org/viewvc/devel/openldap/README.evolution?view=markup
> > http://cvs.fedoraproject.org/viewvc/devel/openldap/openldap-2.4.6-evolution-ntlm.patch?view=markup
> > 
> 
> You are probably right, it has something to do with the problem.
> 
> Actually the ebuild for openldap-2.3.43, which as I mentioned works, includes a
> patch named "openldap-2.2.6-ntlm.patch" which seems to be the patch mentioned
> by you.
> 
> The ebuild for openldap-2.4.19-r1 does not include this patch.
> 

Now that Gnome 2.28 is stable, I have been bitten by this bug.  Any thoughts on what happens next?  I'm wondering if there is going to slew of others who get bit by this as well now.
Comment 12 Doug 2010-05-05 04:25:05 UTC
> Now that Gnome 2.28 is stable, I have been bitten by this bug.  Any thoughts on
> what happens next?  I'm wondering if there is going to slew of others who get
> bit by this as well now.
> 

Downgrading to openldap-2.3.43-r1 got me working again.  No known side effects yet...
Comment 13 Doug 2010-06-30 02:25:26 UTC
(In reply to comment #12)
> > Now that Gnome 2.28 is stable, I have been bitten by this bug.  Any thoughts on
> > what happens next?  I'm wondering if there is going to slew of others who get
> > bit by this as well now.
> > 
> 
> Downgrading to openldap-2.3.43-r1 got me working again.  No known side effects
> yet...
> 

This issue appears to have manifested itself for me again.  Has anything taken place with this bug or is everyone working just fine except me?
Comment 14 Clemente Aguiar 2010-06-30 08:27:29 UTC
(In reply to comment #13)
> (In reply to comment #12)
> > > Now that Gnome 2.28 is stable, I have been bitten by this bug.  Any thoughts on
> > > what happens next?  I'm wondering if there is going to slew of others who get
> > > bit by this as well now.
> > > 
> > 
> > Downgrading to openldap-2.3.43-r1 got me working again.  No known side effects
> > yet...
> > 
> 
> This issue appears to have manifested itself for me again.  Has anything taken
> place with this bug or is everyone working just fine except me?
> 

with openldap-2.4.19-r1 problem remains.
Comment 15 Doug 2010-06-30 18:53:27 UTC
(In reply to comment #14)
> (In reply to comment #13)
> > (In reply to comment #12)
> > > > Now that Gnome 2.28 is stable, I have been bitten by this bug.  Any thoughts on
> > > > what happens next?  I'm wondering if there is going to slew of others who get
> > > > bit by this as well now.
> > > > 
> > > 
> > > Downgrading to openldap-2.3.43-r1 got me working again.  No known side effects
> > > yet...
> > > 
> > 
> > This issue appears to have manifested itself for me again.  Has anything taken
> > place with this bug or is everyone working just fine except me?
> > 
> 
> with openldap-2.4.19-r1 problem remains.
> 

I've tried using some of the methods from this page (http://projects.gnome.org/evolution/bugs.shtml) to debug the problem more, but I get no useful output or debugging information.  I'm not sure if this is really an openldap problem or an evolution/exchange-connector problem, but regardless, I cannot get evolution working with my company Exchange server.  I'll take suggestions, or am I really in the wrong place asking for help?
Comment 16 Doug 2010-06-30 19:35:56 UTC
(In reply to comment #15)
> (In reply to comment #14)
> > (In reply to comment #13)
> > > (In reply to comment #12)
> > > > > Now that Gnome 2.28 is stable, I have been bitten by this bug.  Any thoughts on
> > > > > what happens next?  I'm wondering if there is going to slew of others who get
> > > > > bit by this as well now.
> > > > > 
> > > > 
> > > > Downgrading to openldap-2.3.43-r1 got me working again.  No known side effects
> > > > yet...
> > > > 
> > > 
> > > This issue appears to have manifested itself for me again.  Has anything taken
> > > place with this bug or is everyone working just fine except me?
> > > 
> > 
> > with openldap-2.4.19-r1 problem remains.
> > 
> 
> I've tried using some of the methods from this page
> (http://projects.gnome.org/evolution/bugs.shtml) to debug the problem more, but
> I get no useful output or debugging information.  I'm not sure if this is
> really an openldap problem or an evolution/exchange-connector problem, but
> regardless, I cannot get evolution working with my company Exchange server. 
> I'll take suggestions, or am I really in the wrong place asking for help?
> 

...and after doing some more digging, I discovered this bug 307343.  This was my problem.  I guess everyone can ignore my last couple of comments :).
Comment 17 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2012-02-12 21:12:14 UTC
In 2.4.28-r1.