Build 8.1 and Directory Connector Problem

SolveIT · 02-08-2011, 06:11 AM

Hi there

We're currently experiencing a problem with the Directory Connector since a couple of our Untangle boxes were updated to Build 8.1.0. Basically what is happening is that no users are getting authenticated. No settings have changed but now when i click the 'Active Directory Users' button to generate a list of users the only thing that comes up is [ANY]. Like i said, no settings have changed and the settings are the same as the other Untangle boxes we have that still work, only difference is, is they havent been updated to build 8.1.0, they are still running 8.0.0

The directory connector test still passes on the problem boxes. Ive tried disabling the directory connector and re-enabling it, made no difference. Ive tried uninstalling and reinstalling, also made no difference

Can anyone shed any light on this?

Thanks for your time

mrunkel · 02-08-2011, 06:58 AM

If you haven't done so, please contact support either @+1 650-425-3300 or support <at> untangle.com.

The forum is not the place for resolving problems with paid products.

dmorris · 02-08-2011, 09:06 AM

welcome to the forums!

Yep, I'd give support a call.
(btw, there were no changes to directory connector in 8.1)

Big D · 02-08-2011, 09:13 AM

Would like to know the outcome once support gets done with ya.

SolveIT · 02-08-2011, 09:31 AM

Thanks for the replies.

Ill give support a call in the morning. Just tried rebooting the box (only thing i hadn't tried) but it made no difference

Ill report back once ive spoken to support

Thanks again

mrunkel · 02-10-2011, 10:15 AM

It appears that this happens when using an account without admin rights to query LDAP. We are speculating that this is a result of a MS update, because we haven't changed that code.

We are able to replicate in house with a non-admin user, switching to an admin user resolves the issue.

Let us know if that doesn't resolve it for you.

Big D · 02-10-2011, 10:32 AM

evil microsoft
Wonder if thats one of those ass backwards security issues in vista/7/08 vs xp/2003.

What kinda OS was your AD server you used for testing?

jrice · 02-10-2011, 02:10 PM

Having the same issue here and was told that the issue was the same(account wasn't an admin). The problem is that no MS updates have been applied to our servers this week and directory connector didn't stop working until this morning(after the 8.1 update was applied). Directory Connector was already using an account with admin rights, but in good faith I created another account with admin rights and it did the same thing.

dmorris · 02-10-2011, 02:18 PM

You can reinstall 8.0, change the sources.list, and download the directory connector trial for 8.0 and you will have the same issue.

jrice · 02-10-2011, 02:24 PM

So where is the issue? If 8.1 does not work , and 8.0 will not work....what options are there?

02-08-2011, 06:11 AM	#1 (permalink)
SolveIT Newbie Join Date: Feb 2011 Posts: 7	Build 8.1 and Directory Connector Problem Hi there We're currently experiencing a problem with the Directory Connector since a couple of our Untangle boxes were updated to Build 8.1.0. Basically what is happening is that no users are getting authenticated. No settings have changed but now when i click the 'Active Directory Users' button to generate a list of users the only thing that comes up is [ANY]. Like i said, no settings have changed and the settings are the same as the other Untangle boxes we have that still work, only difference is, is they havent been updated to build 8.1.0, they are still running 8.0.0 The directory connector test still passes on the problem boxes. Ive tried disabling the directory connector and re-enabling it, made no difference. Ive tried uninstalling and reinstalling, also made no difference Can anyone shed any light on this? Thanks for your time

02-08-2011, 06:58 AM	#2 (permalink)
mrunkel Join Date: Jul 2008 Posts: 2,766	If you haven't done so, please contact support either @+1 650-425-3300 or support <at> untangle.com. The forum is not the place for resolving problems with paid products. __________________ m. Big Frickin Disclaimer: While I'm pretty sure, I can't guarantee that I know what I'm doing. There might be a better way to do this, and this way might actually suck. Make sure you understand the implications of what you're doing before trying to follow these directions. It often helps troubleshooting if you have a good network map. Look here if you want my advice on how to draw one. Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself. If you need Untangle support please call or email support@untangle.com

02-08-2011, 09:06 AM	#3 (permalink)
dmorris Untangle Junkie Join Date: Nov 2006 Location: San Mateo, CA URLs submitted: 10 Posts: 10,611	welcome to the forums! Yep, I'd give support a call. (btw, there were no changes to directory connector in 8.1) __________________ Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself. If you need Untangle support please call or email support@untangle.com

02-08-2011, 09:13 AM	#4 (permalink)
Big D Master Untangler Join Date: Nov 2008 Posts: 691	Would like to know the outcome once support gets done with ya. __________________ The beatings shall continue until morale improves!

02-10-2011, 10:15 AM	#6 (permalink)
mrunkel Join Date: Jul 2008 Posts: 2,766	It appears that this happens when using an account without admin rights to query LDAP. We are speculating that this is a result of a MS update, because we haven't changed that code. We are able to replicate in house with a non-admin user, switching to an admin user resolves the issue. Let us know if that doesn't resolve it for you. __________________ m. Big Frickin Disclaimer: While I'm pretty sure, I can't guarantee that I know what I'm doing. There might be a better way to do this, and this way might actually suck. Make sure you understand the implications of what you're doing before trying to follow these directions. It often helps troubleshooting if you have a good network map. Look here if you want my advice on how to draw one. Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself. If you need Untangle support please call or email support@untangle.com

Protect

Filter

Perform

Connect

Manage

Add-Ons

02-08-2011, 09:31 AM	#5 (permalink)
SolveIT Newbie Join Date: Feb 2011 Posts: 7	Thanks for the replies. Ill give support a call in the morning. Just tried rebooting the box (only thing i hadn't tried) but it made no difference Ill report back once ive spoken to support Thanks again

02-10-2011, 10:32 AM	#7 (permalink)
Big D Master Untangler Join Date: Nov 2008 Posts: 691	evil microsoft Wonder if thats one of those ass backwards security issues in vista/7/08 vs xp/2003. What kinda OS was your AD server you used for testing? __________________ The beatings shall continue until morale improves!

02-10-2011, 02:10 PM	#8 (permalink)
jrice Untanglit Join Date: Dec 2010 Posts: 15	Having the same issue here and was told that the issue was the same(account wasn't an admin). The problem is that no MS updates have been applied to our servers this week and directory connector didn't stop working until this morning(after the 8.1 update was applied). Directory Connector was already using an account with admin rights, but in good faith I created another account with admin rights and it did the same thing.

02-10-2011, 02:18 PM	#9 (permalink)
dmorris Untangle Junkie Join Date: Nov 2006 Location: San Mateo, CA URLs submitted: 10 Posts: 10,611	You can reinstall 8.0, change the sources.list, and download the directory connector trial for 8.0 and you will have the same issue. __________________ Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself. If you need Untangle support please call or email support@untangle.com

02-10-2011, 02:24 PM	#10 (permalink)
jrice Untanglit Join Date: Dec 2010 Posts: 15	So where is the issue? If 8.1 does not work , and 8.0 will not work....what options are there?