5.1.1 unknown or illegal user
Can anyone tell me what I'm doing wrong here? First off, I'm doing direct LDAP rather than the dirsync stuff. I'm getting the following when doing an 'imsimta test -rewrite -debug [email protected]':
Initializing mm_.
Initializing mm_ submission.
Checking identifiers.
*** Debug output from initializing MM for submission:
13:06:49.67: mmc_winit('l','[email protected]','[email protected]') called.
13:06:49.67: Queue area size 23798402, temp area size 23798402
13:06:49.67: 5949600 blocks of effective free queue space available; setting disk limit accordingly.
13:06:49.67: Rewriting: Mbox = "postmaster", host = "isotope.rootprompt.net", domain = "$*", literal = "", tag = ""
13:06:49.67: Rewrite: "$*", position 0, hash table -
13:06:49.67: Found: "$E$F$U%[email protected]$V$H"
13:06:49.67: Rewrite failed, not forward.
13:06:49.67: Rewrite: "$*", position 1, hash table -
13:06:49.67: Failed.
13:06:49.67: Rewrite: "$*", position 0, rewrite database -
13:06:49.67: Failed
13:06:49.67: Rewriting: Mbox = "postmaster", host = "isotope", domain = "isotope.rootprompt.net", literal = "", tag = ""
13:06:49.67: Rewrite: "isotope.rootprompt.net", position 0, hash table -
13:06:49.67: Found: "$U%[email protected]"
13:06:49.67: New mailbox: "postmaster".
13:06:49.67: New host: "isotope.rootprompt.net".
13:06:49.67: New route: "isotope.rootprompt.net".
13:06:49.67: New channel system: "isotope.rootprompt.net".
13:06:49.67: Looking up host "isotope.rootprompt.net".
13:06:49.67: - found on channel l
13:06:49.67: Routelocal flag set; scanning for % and !
13:06:49.67: Rewriting: Mbox = "postmaster", host = "isotope.rootprompt.net", domain = "$*", literal = "", tag = ""
13:06:49.67: Rewrite: "$*", position 0, hash table -
13:06:49.67: Found: "$E$F$U%[email protected]$V$H"
13:06:49.67: Rewrite failed, not forward.
13:06:49.67: Rewrite: "$*", position 1, hash table -
13:06:49.67: Failed.
13:06:49.67: Rewrite: "$*", position 0, rewrite database -
13:06:49.67: Failed
13:06:49.67: Rewriting: Mbox = "postmaster", host = "isotope", domain = "isotope.rootprompt.net", literal = "", tag = ""
13:06:49.67: Rewrite: "isotope.rootprompt.net", position 0, hash table -
13:06:49.67: Found: "$U%[email protected]"
13:06:49.67: New mailbox: "postmaster".
13:06:49.67: New host: "isotope.rootprompt.net".
13:06:49.67: New route: "isotope.rootprompt.net".
13:06:49.67: New channel system: "isotope.rootprompt.net".
13:06:49.67: Looking up host "isotope.rootprompt.net".
13:06:49.67: - found on channel l
13:06:49.67: Routelocal flag set; scanning for % and !
13:06:49.67: Mapped return address: [email protected]
*** Debug output from rewriting a forward header address:
13:06:49.67: Rewriting: Mbox = "rbanniza", host = "rootprompt.net", domain = "$*", literal = "", tag = ""
13:06:49.67: Rewrite: "$*", position 0, hash table -
13:06:49.67: Found: "$E$F$U%[email protected]$V$H"
13:06:49.67: Rewrite failed, not envelope.
13:06:49.67: Rewrite: "$*", position 1, hash table -
13:06:49.67: Failed.
13:06:49.67: Rewrite: "$*", position 0, rewrite database -
13:06:49.67: Failed
13:06:49.67: Rewriting: Mbox = "rbanniza", host = "rootprompt", domain = "rootprompt.net", literal = "", tag = ""
13:06:49.67: Rewrite: "rootprompt.net", position 0, hash table -
13:06:49.67: Found: "$U%[email protected]"
13:06:49.67: New mailbox: "rbanniza".
13:06:49.67: New host: "rootprompt.net".
13:06:49.67: New route: "isotope.rootprompt.net".
13:06:49.67: New channel system: "isotope.rootprompt.net".
13:06:49.67: Looking up host "isotope.rootprompt.net".
13:06:49.67: - found on channel l
13:06:49.67: Routelocal flag set; scanning for % and !
13:06:49.67: Rewrite rules result: [email protected]
13:06:49.68: Checking reverse URL cache for: [email protected]
13:06:49.68: Applying reverse URL pattern ldap:///$V?mail?sub?$Q to: [email protected]
13:06:49.70: Resulting URL: ldap:///o%3Drootprompt.net%2Cdc%3Drootprompt%2Cdc%3Dnet?mail?sub?(|([email protected])([email protected]))
13:06:49.71: mmc_open_url called to open ldap:///o%3Drootprompt.net%2Cdc%3Drootprompt%2Cdc%3Dnet?mail?sub?(|([email protected])([email protected])), flags = 256
13:06:49.71: URL with quotes stripped: ldap:///o%3Drootprompt.net%2Cdc%3Drootprompt%2Cdc%3Dnet?mail?sub?(|([email protected])([email protected]))
13:06:49.71: LDAP URL identified
13:06:49.71: URL context #1 will be used
13:06:49.71: Performing URL search on: ldap:///o%3Drootprompt.net%2Cdc%3Drootprompt%2Cdc%3Dnet?mail?sub?(|([email protected])([email protected]))
13:06:49.71: mmc_read_url result: [email protected]
13:06:49.71: URL resolution returned: [email protected]
forward channel = l
channel description =
channel user filter =
dest channel filter =
source channel filter =
channel flags #0 = BIDIRECTIONAL MULTIPLE IMMNONURGENT NOSERVICEALL
channel flags #1 = NOSMTP DEFAULT
channel flags #2 = COPYSENDPOST COPYWARNPOST POSTHEADONLY HEADERINC NOEXPROUTE
channel flags #3 = NOLOGGING NOGREY NORESTRICTED RETAINSECURITMULTIPARTS
channel flags #4 = EIGHTBIT NOHEADERTRIM NOHEADERREAD RULES
channel flags #5 =
channel flags #6 = LOCALUSER REPORTHEADER
channel flags #7 = NOSWITCHCHANNEL NOREMOTEHOST DATEFOUR DAYOFWEEK
channel flags #8 = NODEFRAGMENT EXQUOTA REVERSE NOCONVERT_OCTET_STREAM
channel flags #9 = NOTHURMAN INTERPRETENCODING USEINTERMEDIATE RECEIVEDFROM VALIDATELOCALSYSTEM NOTURN
defaulthost = rootprompt.net rootprompt.net
linelength = 1023
channel env addr type = SOURCEROUTE
channel hdr addr type = SOURCEROUTE
channel official host = isotope.rootprompt.net
channel queue 0 name = LOCAL_POOL
channel queue 1 name = LOCAL_POOL
channel queue 2 name = LOCAL_POOL
channel queue 3 name = LOCAL_POOL
channel after params =
channel user name =
urgentnotices = 1 2 4 7
normalnotices = 1 2 4 7
nonurgentnotices = 1 2 4 7
channel rightslist ids =
local behavior flags = %x7
backward channel = l
header To: address = [email protected]
header From: address = [email protected]
envelope To: address = [email protected] (route (isotope.rootprompt.net,isotope.rootprompt.net)) (host rootprompt.net)
envelope From: address = [email protected]
name =
mbox = rbanniza
Extracted address action list:
[email protected]
Extracted 733 address action list:
[email protected]
Address list expansion:
[email protected]
1 expansion total.
*** Debug output from submitting an envelope address:
13:06:49.73: mmc_wadr(0x0005d758,'[email protected]','[email protected]') called.
13:06:49.73: Copy estimate before address addition is 1
13:06:49.73: Parsing address [email protected]
13:06:49.73: Rewriting: Mbox = "rbanniza", host = "rootprompt.net", domain = "$*", literal = "", tag = ""
13:06:49.73: Rewrite: "$*", position 0, hash table -
13:06:49.73: Found: "$E$F$U%[email protected]$V$H"
13:06:49.73: Match, pattern = "rootprompt.net", current = "(*domaincheck*)"
13:06:49.73: old state = not checked.
13:06:49.73: Using result 1 from domain match cache.
13:06:49.73: new state = succeeded.
13:06:49.73: New mailbox: "rbanniza".
13:06:49.73: New host: "rootprompt.net".
13:06:49.73: New route: "isotope.rootprompt.net".
13:06:49.73: New channel system: "isotope.rootprompt.net".
13:06:49.73: Looking up host "isotope.rootprompt.net".
13:06:49.73: - found on channel l
13:06:49.73: Routelocal flag set; scanning for % and !
13:06:49.73: Address [email protected] requires local processing.
13:06:49.73: Variant #1 = [email protected]
13:06:49.73: Variant #2 = *@rootprompt.net
13:06:49.73: Checking for [email protected] in the system alias file
13:06:49.73: - not found
13:06:49.73: Checking for *@rootprompt.net in the system alias file
13:06:49.73: - not found
13:06:49.73: Checking [email protected] with URL template ldap:///$V?*?sub?$R
13:06:49.73: LDAP URL template identified
13:06:49.73: URL determined to be: ldap:///o%3Drootprompt.net%2Cdc%3Drootprompt%2Cdc%3Dnet?*?sub?(|([email protected])([email protected])([email protected]))
13:06:49.73: URL context #1 will be used
13:06:49.73: Using cached LDAP result for URL info: ldap:///$V?*?sub?$R|[email protected]|[email protected]
13:06:49.73: Scanning LDAP result.
13:06:49.73: Attribute: objectclass
13:06:49.73: Attribute index: 0
13:06:49.73: Attribute: inetuserstatus
13:06:49.73: Attribute index: 1
13:06:49.73: Attribute: mailuserstatus
13:06:49.73: Attribute index: 2
13:06:49.73: Attribute: uid
13:06:49.73: Attribute index: 4
13:06:49.73: Attribute: mail
13:06:49.73: Attribute index: 5
13:06:49.73: Attribute: mailhost
13:06:49.73: Attribute index: 9
13:06:49.73: Attribute: mailDeliveryOption
13:06:49.73: Attribute index: 18
13:06:49.73: Scanning complete, begin actions
13:06:49.73: Object class: top
13:06:49.73: Object class: person
13:06:49.73: Object class: organizationalPerson
13:06:49.73: Object class: inetorgperson
13:06:49.74: Object class: inetUser
13:06:49.74: Object class: inetSubscriber
13:06:49.74: Object class: ipUser
13:06:49.74: Object class: nsManagedPerson
13:06:49.74: Object class: inetmailuser
13:06:49.74: Object class: inetlocalmailrecipient
13:06:49.74: Object class: userpresenceprofile
13:06:49.74: User status = active
13:06:49.74: Mail user status = active
13:06:49.74: User UID RBanniza found.
13:06:49.74: Processing mailhost attribute isotope
13:06:49.74: Mailhost references remote system.
13:06:49.74: Status for this entry = -3
13:06:49.74: - URL match for [email protected]
13:06:49.74: - [email protected]
13:06:49.74: Alias loop; URL alias expansion disabled.
13:06:49.74: Parsing address @isotope:[email protected]
13:06:49.74: Rewriting: Mbox = "rbanniza", host = "isotope", domain = "$*", literal = "", tag = ""
13:06:49.74: Rewrite: "$*", position 0, hash table -
13:06:49.74: Found: "$E$F$U%[email protected]$V$H"
13:06:49.74: Match, pattern = "isotope", current = "(*domaincheck*)"
13:06:49.74: old state = not checked.
13:06:49.74: Using result 0 from domain match cache.
13:06:49.74: new state = fail pending.
13:06:49.74: Rewrite failed due to channel mismatch.
13:06:49.74: Rewrite: "$*", position 1, hash table -
13:06:49.74: Failed.
13:06:49.74: Rewrite: "$*", position 0, rewrite database -
13:06:49.74: Failed
13:06:49.74: Rewriting: Mbox = "rbanniza", host = "isotope", domain = "isotope", literal = "", tag = ""
13:06:49.74: Rewrite: "isotope", position 0, hash table -
13:06:49.74: Failed.
13:06:49.74: Rewrite: "isotope", position 0, rewrite database -
13:06:49.74: Failed
13:06:49.74: Looking up host "isotope".
13:06:49.74: - Not found
13:06:49.74: Rewriting: Mbox = "rbanniza", host = "isotope", domain = ".", literal = "", tag = ""
13:06:49.74: Rewrite: "*", position 0, hash table -
13:06:49.74: Found: "$U%$&0.rootprompt.net"
13:06:49.74: New mailbox: "rbanniza".
13:06:49.74: New host: "isotope.rootprompt.net".
13:06:49.74: New route: "isotope.rootprompt.net".
13:06:49.74: New channel system: "isotope.rootprompt.net".
13:06:49.74: Rescanning on.
13:06:49.74: Rewriting: Mbox = "rbanniza", host = "isotope", domain = "isotope.rootprompt.net", literal = "", tag = ""
13:06:49.74: Rewrite: "isotope.rootprompt.net", position 0, hash table -
13:06:49.74: Found: "$U%[email protected]"
13:06:49.74: New mailbox: "rbanniza".
13:06:49.74: New host: "isotope.rootprompt.net".
13:06:49.74: New route: "isotope.rootprompt.net".
13:06:49.74: New channel system: "isotope.rootprompt.net".
13:06:49.74: Looking up host "isotope.rootprompt.net".
13:06:49.74: - found on channel l
13:06:49.74: Rewriting: Mbox = "rbanniza", host = "rootprompt.net", domain = "$*", literal = "", tag = ""
13:06:49.74: Rewrite: "$*", position 0, hash table -
13:06:49.74: Found: "$E$F$U%[email protected]$V$H"
13:06:49.74: Match, pattern = "rootprompt.net", current = "(*domaincheck*)"
13:06:49.74: old state = not checked.
13:06:49.74: Using result 1 from domain match cache.
13:06:49.74: new state = succeeded.
13:06:49.74: New mailbox: "rbanniza".
13:06:49.74: New host: "rootprompt.net".
13:06:49.74: New route: "isotope.rootprompt.net".
13:06:49.74: New channel system: "isotope.rootprompt.net".
13:06:49.74: Looking up host "isotope.rootprompt.net".
13:06:49.74: - found on channel l
13:06:49.74: Routelocal flag set; scanning for % and !
13:06:49.74: Address [email protected] requires local processing.
13:06:49.74: Variant #1 = [email protected]
13:06:49.74: Variant #2 = *@rootprompt.net
13:06:49.74: Checking for [email protected] in the system alias file13:06:49.74: - not found
13:06:49.74: Checking for *@rootprompt.net in the system alias file
13:06:49.74: - not found
13:06:49.74: - orig_send_access mapping check: l|[email protected]|l|[email protected]
13:06:49.74: - passed.
13:06:49.74: - send_access mapping check: l|[email protected]|l|[email protected]
13:06:49.75: - passed.
13:06:49.75: - user rbanniza unknown.
13:06:49.75: Reenabling URL alias expansion.
13:06:49.75: - adding address [email protected] to headers.
13:06:49.75: Copy estimate after address addition is 1
Expanded address:
[email protected]
Submitted address list:
Address list error -- 5.1.1 unknown or illegal user: [email protected]
Submitted notifications list:
[rbanniza@groomlake:~]$
Found the answer, the culprit was someone must have accidentally deleted dirsync.opt
Similar Messages
-
When trying to send an e-mail to my @me.com i get this error: unknown or illegal alias. I never get the mail on my @me.com address. Is it because of _ in the accountname?
I'm getting the same error! I'm quite frustrated that there's no where to actually report this issue.
-
What is "unknown or illegal alias"
Mail to my iMac account comes back stating that it was returned because of an unknown or illegal alias. What do I do to change that? There is no other accounts. I'm the only one, and my computer/software was purchased legitimately.
Obviously, this means you sent mail to a non existing address. Make sure you did not misspell the recipients address.
-
My external HD has 2 partitions and is shared via an AP Extreme base station. I'm having difficulty trashing files. Each time it asks me for my system password. Once I enter it the file is handled normally. All attempts to put me as admin in the Get Info window for either partition rejects me as an acceptable name when I try to add me as a user. How do I change "unknown" user to to me as admin for the HD and all the contained files and folders?
Check the Ignore ownership on this volume box in the volume's Get Info panel.
-
MII 12.1 Unknown Java AS user with permissions of deploy
hi,
I have to update a PRODUCTION Environment with Support Packages (unfortunately without a ready Quality one as mirror for testing them).
So, I'm trying to install again the same software someone else used for PRODUCTION, in a Quality server.
on
SO: Microsoft Windows Server 2003 R2 Standard x64 Edition SP2
I installed successfully SAP NetWeaver CE 7.1 EHP1, but after launching JSPM to install SAP MII 12.1, I'm requested to insert login of an
Java AS user with deployment permissions.
In details I undestrood that the path to be followed, after activating Java AS and checking read rights of OS user on JSPM packages folder,
it should be:
1- launch the JSPM with OS <SAPSID>adm user;
2- insert Java AS user credentials with deployment permissions when requested (to log in to JSPM Server).
3- ...
n- ...
on step 2, even inserting user administrator and master password of NetWeaver installation, I cannot proceed.
Shouldn't it have those rights. How are them called and where can I assign them?
Looking at the logs of JSPM I found something like this:
Info: Connecting to Deploy Controller on host localhost port 50004 with user ce1adm.
Error: com.sap.engine.services.dc.api.ConnectionException: ERROR CODE DPL.DCAPI.1144 NamingException.Cannot get initial context.
Reason: Exception during getInitialContext operation. Cannot establish connection to the remote server.
Info:DC API is trying to connect to 'localhost:50004'
Error: Exception ::SessionImpl::getContext():get ctx. NamingException,cause=Exception during getInitialContext operation. Cannot establish connection to the remote server.
Even if I try to "add" components starting from NetWeaver installation, I'm requested with a Java EE Administrator I cannot identify.
any ideas of what's happening?
regardsI solved the issue.
Simply, if you don't assign to the server an host name, it gets standard "localhost" and during jspm login system is somehow confused.
The problem it was related to a not reachable AS java and not to users rights.
regards -
Unable to integrate the mail channel and "5.1.1 Unknown or Illegal Alias" SMTP error...
Thanks in advance for your assistance.
When I to integrate the mail channFailed to log into mail server el provided by iPlanet, the channel to be displyed with the following message: "Failed to log into mail server".
I look at /var/opt/SUNWips/debug/iwtMailProvider logs:
WARNING: MailProvider.getClientURL():clientURL attr. misconfigured
Authenticate.getRelativeSsoUrl(): Cannot Authenticate! .. returning null
Authenticate.getWebmailURL(): Returning NULL single signon uri
MailProvider.getContent(): login failure
javax.mail.AuthenticationFailedException
at java.lang.Throwable.fillInStackTrace(Native Method)
at java.lang.Throwable.fillInStackTrace(Compiled Code)
at java.lang.Throwable.<init>(Compiled Code)
at java.lang.Exception.<init>(Compiled Code)
at javax.mail.MessagingException.<init>(MessagingException.java:34)
at javax.mail.AuthenticationFailedException.<init>(AuthenticationFailedException.java:27)
at javax.mail.Service.connect(Service.java:252)
at javax.mail.Service.connect(Service.java:131)
at com.iplanet.portalserver.mail.Authenticate.isStoreValid(Authenticate.java:419)
at com.iplanet.portalserver.mail.Authenticate.isStoreValid(Authenticate.java:359)
at com.iplanet.portalserver.providers.mail.MailProvider.getContent(MailProvider.java:164)
at com.iplanet.portalserver.providers.ProviderAdapter.getContent(Compiled Code)
at com.iplanet.portalserver.desktop.ProviderCaller.run(Compiled Code)
6/12/02 10:42:25 AM GMT+04:00: Thread[iwtSession.Thread#30,5,main]
AuthCache.sessionChanged(): Got a session changed event .. processing..
6/12/02 10:42:25 AM GMT+04:00: Thread[iwtSession.Thread#30,5,main]
sessionChanged(): Session invalid ... clearing auth object at 8443829qrssnnstripnaaegyvrgn4nr31or5@[email protected]@8080@/gryrvasb
What do I do ?
Thanks in advance
Best regardsDid you add a new client type ?
If you added a new client type the providers for that client type should be defined in the
Client Specific Available Providers list. You can get there by clicking on your Domain Name/ expand desktop and then show advanced options.
HTH .. -
Why do I get a an unknown or illegal alias message...
when forwarding to my @icloud.com email account?
Solved it. I had to reduce Thunderbird's security. Thanks, christ1.
-
Sending mail to local local account name...
imsimta version:
SunOS mars 5.10 Generic_125100-08 sun4u sparc SUNW,Sun-Fire-V240
Sun Java(tm) System Messaging Server 6.3-3.01 (built Jul 12 2007; 32bit)
libimta.so 6.3-3.01 (built 20:10:10, Jul 12 2007; 32bit)
We are tying to send email on our mail server to a local username using the /usr/lib/sendmail -Am command. (We were trying to use "mailx" but we kept getting "savemail panic" error messages saying that postmaster couldn't be found.) Our objective is to get the output of our backups sent to a local account which is a username in messaging server.
We consistently get "user unknown" errors. I've tried Mail, mailx and the sendmail program to get the messages sent. Here is an example of a local delivery case. We get similar results if we send to "[email protected]".
=====
# Mail -v backups
Subject: asdf
asd
EOT
# backups... Connecting to [127.0.0.1] via relay...
220 host.company.com -- Server ESMTP (Sun Java(tm) System Messaging Server 6.3-3.01 (built Jul 12 2007; 32bit))
EHLO host.company.com250-host.company.com
250-8BITMIME
250-PIPELINING
250-CHUNKING
250-DSN
250-ENHANCEDSTATUSCODES
250-EXPN
250-HELP
250-XADR
250-XSTA
250-XCIR
250-XGEN
250-XLOOP CFD464A5630A2B67F8E19F470E7B2A1F
250-STARTTLS
250-ETRN
250-NO-SOLICITING
250 SIZE 0
STARTTLS220 2.5.0 Go ahead with TLS negotiation.
EHLO host.company.com250-host.company.com
250-8BITMIME
250-PIPELINING
250-CHUNKING
250-DSN
250-ENHANCEDSTATUSCODES
250-EXPN
250-HELP
250-XADR
250-XSTA
250-XCIR
250-XGEN
250-XLOOP CFD464A5630A2B67F8E19F470E7B2A1F
250-ETRN
250-NO-SOLICITING
250 SIZE 0
MAIL From:<[email protected]> SIZE=49
250 2.5.0 Address and options OK.
RCPT To:<[email protected]>
DATA550 5.1.1 unknown or illegal alias: [email protected]
554 5.5.0 No recipients have been specified.
RSET250 2.5.0 Ok.
RSET250 2.5.0 Ok.
hal... Using cached ESMTP connection to [127.0.0.1] via relay...
MAIL From:<> SIZE=1073250 2.5.0 Address and options OK.
RCPT To:<[email protected]>
DATA550 5.1.1 unknown or illegal alias: [email protected]
554 5.5.0 No recipients have been specified.
RSET250 2.5.0 Ok.
RSET250 2.5.0 Ok.
postmaster... Using cached ESMTP connection to [127.0.0.1] via relay...
MAIL From:<> SIZE=2097250 2.5.0 Address and options OK.
RCPT To:<[email protected]>
DATA550 5.1.1 unknown or illegal user: [email protected]
554 5.5.0 No recipients have been specified.
RSET250 2.5.0 Ok.
Closing connection to [127.0.0.1]
QUIT221 2.3.0 Bye received. Goodbye.
=====
I am guessing that this problem is related to another issue where I cannot create a user called "root" in the mail server user base. (maybe not, though).
Is there a way to use the local mail programs (that depend on sendmail) to send to a Sun Messaging Server account on that same machine?
Hal Huntleyhalsri wrote:
Is there a way to use the local mail programs (that depend on sendmail) to send to a Sun Messaging Server account on that same machine?The approach I have taken with this in the past is to add system-specific aliases to the Messaging Server aliases file e.g.
<snip /opt/SUNWmsgsr/config/aliases>
[email protected]: [email protected]
[email protected]: [email protected]
</snip>
Then run ./imsimta cnbuild;./imsimta restart
Regards,
Shane. -
The member of the Postmaster group, [email protected] gets email when it's sent to [email protected] (an automatically created alternate address).
But mail sent to [email protected] doesn't get sent to me...
This domain's users receive e-mail at [email protected] rather than [email protected], via associateddomain and sunpreferreddomain.
The postmaster's mail attribute was changed to be [email protected] from [email protected] - but either did not work. The base dn however remains "that.the.otter.com."
adding another alternate address (additional to postmast) as [email protected] (with the mail attribute in either state mentioned above) also resulted in:
Address list error -- 5.1.1 unknown or illegal user: [email protected]
# /opt/SUNWmsgsr/sbin/imsimta version
Sun Java(tm) System Messaging Server 6.3-5.02 (built Oct 12 2007; 32bit)
libimta.so 6.3-5.02 (built 17:09:30, Oct 12 2007; 32bit)
SunOS this 5.10 Generic_120012-14 i86pc i386 i86pc
here's the rewrite test debug:
# ./test-rewrte
Initializing mm_.
Initializing mm_ submission.
Checking identifiers.
*** Debug output from initializing MM for submission:
22:02:19.46: Debug output enabled, system this.that.the.otter.com, process 3c55.1, message enqueue routines version V6.3 compiled Oct 12 2007 17:09:36
22:02:19.46: mmc_winit('l','[email protected]','[email protected]') called.
22:02:19.46: address reversal invoked on [email protected], force reverse URL 1, capture 1
22:02:19.46: Rewriting: Mbox = "postmaster", host = "this.that.the.otter.com", domain = "$*", literal = "", tag = ""
22:02:19.46: Rewrite: "$*", position 0, hash table -
22:02:19.46: Found: "$A$E$F$U%[email protected]"
22:02:19.46: Rewrite failed, not forward.
22:02:19.46: Rewrite: "$*", position 1, hash table -
22:02:19.46: Failed.
22:02:19.46: Rewrite: "$*", position 0, rewrite database -
22:02:19.46: Failed
22:02:19.46: Rewriting: Mbox = "postmaster", host = "this", domain = "this.that.the.otter.com", literal = "", tag = ""
22:02:19.46: Rewrite: "this.that.the.otter.com", position 0, hash table -
22:02:19.46: Found: "$U%[email protected]"
22:02:19.46: New mailbox: "postmaster".
22:02:19.46: New host: "this.that.the.otter.com".
22:02:19.46: New route: "this.that.the.otter.com".
22:02:19.46: New channel system: "this.that.the.otter.com".
22:02:19.46: Looking up host "this.that.the.otter.com".
22:02:19.46: - found on channel l
22:02:19.46: Routelocal flag set; scanning for % and !
22:02:19.46: Checking reverse URL cache for: [email protected]
22:02:19.46: Applying reverse URL pattern ldap:///$V?$N?sub?$R to: [email protected]
22:02:19.47: Resulting URL: ldap:///o%3Dthat.the.otter.com%2Co%3Disp?preferredlanguage,mailmsgmaxblocks,mail,mailalternateaddress,
mailequivalentaddress?sub?(|([email protected])([email protected])([email protected]))
22:02:19.47: mmc_open_url called to open ldap:///o%3Dthat.the.otter.com%2Co%3Disp?preferredlanguage,mailmsgmaxblocks,mail,mailalternateaddress,
mailequivalentaddress?sub?(|([email protected])([email protected])([email protected])), flags = 384
22:02:19.47: URL with quotes stripped: ldap:///o%3Dthat.the.otter.com%2Co%3Disp?preferredlanguage,mailmsgmaxblocks,mail,mailalternateaddress,
mailequivalentaddress?sub?(|([email protected])([email protected])([email protected]))
22:02:19.47: LDAP URL identified
22:02:19.47: URL context #1 will be used
22:02:19.47: Performing URL search on: ldap:///o%3Dthat.the.otter.com%2Co%3Disp?preferredlanguage,mailmsgmaxblocks,mail,mailalternateaddress,
mailequivalentaddress?sub?(|([email protected])([email protected])([email protected]))
22:02:19.48: mmc_read_url result: [cn=Postmaster,ou=Groups,o=that.the.otter.com,o=isp]
22:02:19.48: URL resolution returned: [cn=Postmaster,ou=Groups,o=that.the.otter.com,o=isp]
22:02:19.48: mmc_read_url result: [mail] [email protected]
22:02:19.48: URL resolution returned: [mail] [email protected]
22:02:19.48: Attribute index: 0
22:02:19.48: LDAP URL produced address [email protected]
22:02:19.48: mmc_read_url result: [mailalternateaddress] [email protected]
22:02:19.48: URL resolution returned: [mailalternateaddress] [email protected]
22:02:19.48: Attribute index: 0
22:02:19.48: Alternate address [email protected]
22:02:19.48: No more results to return
22:02:19.48: Override postmaster: [email protected]
22:02:19.48: Mapped return address: [email protected]
22:02:19.48: from_access mapping check: ||MAIL|l|[email protected]|
22:02:19.48: Queue area size 130679556, temp area size 1015086
22:02:19.48: 32669889 blocks of effective free queue space available; setting disk limit accordingly.
22:02:19.48: 507543 blocks of free temporary space available; setting disk limit accordingly.
22:02:19.48: - passed.
22:02:19.48: Rewriting: Mbox = "postmaster", host = "this.that.the.otter.com", domain = "$*", literal = "", tag = ""
22:02:19.48: Rewrite: "$*", position 0, hash table -
22:02:19.48: Found: "$A$E$F$U%[email protected]"
22:02:19.48: Rewrite failed, not forward.
22:02:19.48: Rewrite: "$*", position 1, hash table -
22:02:19.48: Failed.
22:02:19.48: Rewrite: "$*", position 0, rewrite database -
22:02:19.48: Failed
22:02:19.48: Rewriting: Mbox = "postmaster", host = "this", domain = "this.that.the.otter.com", literal = "", tag = ""
22:02:19.48: Rewrite: "this.that.the.otter.com", position 0, hash table -
22:02:19.48: Found: "$U%[email protected]"
22:02:19.48: New mailbox: "postmaster".
22:02:19.48: New host: "this.that.the.otter.com".
22:02:19.48: New route: "this.that.the.otter.com".
22:02:19.48: New channel system: "this.that.the.otter.com".
22:02:19.48: Looking up host "this.that.the.otter.com".
22:02:19.48: - found on channel l
22:02:19.48: Routelocal flag set; scanning for % and !
*** Debug output from rewriting a forward header address:
22:02:19.48: Rewriting: Mbox = "postmaster", host = "this.that.the.otter.com", domain = "$*", literal = "", tag = ""
22:02:19.48: Rewrite: "$*", position 0, hash table -
22:02:19.48: Found: "$A$E$F$U%[email protected]"
22:02:19.48: Rewrite failed, not envelope.
22:02:19.48: Rewrite: "$*", position 1, hash table -
22:02:19.48: Failed.
22:02:19.48: Rewrite: "$*", position 0, rewrite database -
22:02:19.48: Failed
22:02:19.48: Rewriting: Mbox = "postmaster", host = "this", domain = "this.that.the.otter.com", literal = "", tag = ""
22:02:19.48: Rewrite: "this.that.the.otter.com", position 0, hash table -
22:02:19.48: Found: "$U%[email protected]"
22:02:19.48: New mailbox: "postmaster".
22:02:19.48: New host: "this.that.the.otter.com".
22:02:19.49: New route: "this.that.the.otter.com".
22:02:19.49: New channel system: "this.that.the.otter.com".
22:02:19.49: Looking up host "this.that.the.otter.com".
22:02:19.49: - found on channel l
22:02:19.49: Routelocal flag set; scanning for % and !
22:02:19.49: Rewriting: Mbox = "postmaster", host = "this.that.the.otter.com", domain = "$*", literal = "", tag = ""
22:02:19.49: Rewrite: "$*", position 0, hash table -
22:02:19.49: Found: "$A$E$F$U%[email protected]"
22:02:19.49: Rewrite failed, not envelope.
22:02:19.49: Rewrite: "$*", position 1, hash table -
22:02:19.49: Failed.
22:02:19.49: Rewrite: "$*", position 0, rewrite database -
22:02:19.49: Failed
22:02:19.49: Rewriting: Mbox = "postmaster", host = "this", domain = "this.that.the.otter.com", literal = "", tag = ""
22:02:19.49: Rewrite: "this.that.the.otter.com", position 0, hash table -
22:02:19.49: Found: "$U%[email protected]"
22:02:19.49: New mailbox: "postmaster".
22:02:19.49: New host: "this.that.the.otter.com".
22:02:19.49: New route: "this.that.the.otter.com".
22:02:19.49: New channel system: "this.that.the.otter.com".
22:02:19.49: Looking up host "this.that.the.otter.com".
22:02:19.49: - found on channel l
22:02:19.49: Routelocal flag set; scanning for % and !
22:02:19.49: Rewrite rules result: [email protected]
22:02:19.49: Checking reverse URL cache for: [email protected]
22:02:19.49: Found in cache, result: <[email protected]>
*** Debug output from rewriting a forward envelope address:
22:02:19.49: Rewriting: Mbox = "postmaster", host = "this.that.the.otter.com", domain = "$*", literal = "", tag = ""
22:02:19.49: Rewrite: "$*", position 0, hash table -
22:02:19.49: Found: "$A$E$F$U%[email protected]"
22:02:19.49: Match, pattern = "this.that.the.otter.com", current = "(*domaincheck*)"
22:02:19.49: old state = not checked.
22:02:19.49: Domain check on this.that.the.otter.com.
22:02:19.49: Added domain result 1 to cache for this.that.the.otter.com.
22:02:19.49: new state = succeeded.
22:02:19.49: New mailbox: "postmaster".
22:02:19.49: New host: "this.that.the.otter.com".
22:02:19.49: New route: "this.that.the.otter.com".
22:02:19.49: New channel system: "this.that.the.otter.com".
22:02:19.49: Looking up host "this.that.the.otter.com".
22:02:19.49: - found on channel l
22:02:19.49: Routelocal flag set; scanning for % and !
address channel = l
forward channel = l
channel description =
channel caption =
channel user filter =
dest channel filter =
source channel filter =
channel flags #0 = BIDIRECTIONAL MULTIPLE IMMNONURGENT NOSERVICEALL
channel flags #1 = NOSMTP DEFAULT
channel flags #2 = COPYSENDPOST COPYWARNPOST POSTHEADONLY HEADERINC NOEXPROUTE
channel flags #3 = LOGGING NORESTRICTED RETAINSECURITYMULTIPARTS
channel flags #4 = EIGHTBIT HEADERKEEPORDER NOHEADERREAD RULES
channel flags #5 = TRUNCATESMTPLONGLINES
channel flags #6 = LOCALUSER REPORTNOTARY
channel flags #7 = NOSWITCHCHANNEL NOREMOTEHOST DATEFOUR DAYOFWEEK
channel flags #8 = NODEFRAGMENT EXQUOTA REVERSE NOCONVERT_OCTET_STREAM
channel flags #9 = NOTHURMAN INTERPRETENCODING USEINTERMEDIATE RECEIVEDFROM VALIDATELOCALSYSTEM NOTURN
defaulthost = that.the.otter.com that.the.otter.com
linelength = 1023
channel env addr type = SOURCEROUTE
channel hdr addr type = SOURCEROUTE
channel official host = this.that.the.otter.com
channel after params =
channel user name =
urgentnotices =
normalnotices =
nonurgentnotices =
channel rightslist ids =
local behavior flags = %x7
expandchannel =
notificationchannel =
dispositionchannel =
saslswitchchannel =
tlsswitchchannel =
backward channel = l
unique identifier = [email protected]
header forward address = [email protected] (route (this.that.the.otter.com,this.that.the.otter.com)) (host this.that.the.otter.com)
header reverse address = [email protected]
envelope forw address = [email protected] (route (this.that.the.otter.com,this.that.the.otter.com)) (host this.that.the.otter.com)
envelope rev address = [email protected] (route (this.that.the.otter.com,this.that.the.otter.com)) (host this.that.the.otter.com)
name =
mbox = postmaster
Extracted address action list:
[email protected]
Extracted 733 address action list:
[email protected]
address list expansion:
*** Debug output from alias expansion:
22:02:19.49: Inner expand, level = 0, mailbox = [email protected]
22:02:19.49: Rewriting: Mbox = "postmaster", host = "this.that.the.otter.com", domain = "$*", literal = "", tag = ""
22:02:19.49: Rewrite: "$*", position 0, hash table -
22:02:19.49: Found: "$A$E$F$U%[email protected]"
22:02:19.49: Match, pattern = "this.that.the.otter.com", current = "(*domaincheck*)"
22:02:19.49: old state = not checked.
22:02:19.49: Using result 1 from domain match cache.
22:02:19.49: new state = succeeded.
22:02:19.49: New mailbox: "postmaster".
22:02:19.49: New host: "this.that.the.otter.com".
22:02:19.49: New route: "this.that.the.otter.com".
22:02:19.49: New channel system: "this.that.the.otter.com".
22:02:19.49: Looking up host "this.that.the.otter.com".
22:02:19.49: - found on channel l
22:02:19.49: Routelocal flag set; scanning for % and !
22:02:19.49: Reparsed mailbox: postmaster
22:02:19.49: Reparsed host: this.that.the.otter.com
22:02:19.49: Variant #1 = [email protected]
22:02:19.49: Variant #2 = *@this.that.the.otter.com
22:02:19.49: Variant #3 = postmaster
22:02:19.49: Alias magic value 8764
22:02:19.49: Initial pool address: postmast
22:02:19.49: Inner expand, level = 1, mailbox = postmast
22:02:19.49: Rewriting: Mbox = "postmast", host = "that.the.otter.com", domain = "$*", literal = "", tag = ""
22:02:19.49: Rewrite: "$*", position 0, hash table -
22:02:19.49: Found: "$A$E$F$U%[email protected]"
22:02:19.49: Match, pattern = "that.the.otter.com", current = "(*domaincheck*)"
22:02:19.49: old state = not checked.
22:02:19.49: Domain check on that.the.otter.com.
22:02:19.49: Added domain result 1 to cache for that.the.otter.com.
22:02:19.49: new state = succeeded.
22:02:19.49: New mailbox: "postmast".
22:02:19.49: New host: "that.the.otter.com".
22:02:19.49: New route: "this.that.the.otter.com".
22:02:19.49: New channel system: "this.that.the.otter.com".
22:02:19.49: Looking up host "this.that.the.otter.com".
22:02:19.49: - found on channel l
22:02:19.49: Routelocal flag set; scanning for % and !
22:02:19.49: Reparsed mailbox: postmast
22:02:19.49: Reparsed host: that.the.otter.com
22:02:19.49: Variant #1 = [email protected]
22:02:19.49: Variant #2 = *@that.the.otter.com
22:02:19.49: Alias magic value 8764
22:02:19.49: LDAP URL template identified
22:02:19.49: URL determined to be: ldap:///o%3Dthat.the.otter.com%2Co%3Disp?*?sub?(|([email protected])(mailAlternateaddress=
[email protected])([email protected]))
22:02:19.49: URL context #1 will be used
22:02:19.49: Performing URL search on: ldap:///o%3Dthat.the.otter.com%2Co%3Disp?objectclass,inetuserstatus,mailuserstatus,inetMailGroupStatus,
uid,preferredLanguage,mailRoutingaddress,mailMsgMaxBlocks,mail,mailAlternateaddress,
mailEquivalentaddress,mailDeliveryOption,vacationStartDate,vacationEndDate,mailConversionTag,mailhost,mailQuota,
mailMsgQuota,mailProgramDeliveryInfo,mailDeliveryFileURL,mailDeliveryFile,
mailAutoReplyMode,mailAutoReplySubject,mailAutoReplyText,mailAutoReplyTextInternal,mailAutoReplyTimeOut,
mailSieveRultesource,mailForwardingaddress,mailDeferprocessing,mgrpMsgRejectAction,
mgrpRejectText,mgrpMsgRejectText,mgrpBroadcasterPolicy,mgrpDisallowedBroadcaster,
mgrpAllowedBroadcaster,mgrpDisallowedDomain,mgrpAllowedDomain,mgrpMsgMaxSize,mgrpAuthPassword,
mgrpModerator,mgrpDeliverTo,memberURL,UniqueMember,mgrpRFC822MailMember,rfc822MailMember,
mgrpErrorsTo,mgrpAddHeader,mgrpRemoveHeader,mgrpMsgPrefixText,mgrpMsgSuffixText,
mgmanMemberVisibility,expandable?sub?(|([email protected])(mailAlternateaddress=postm22:02:19.49: Search succeeded but 0 entries returned
22:02:19.49: No matching entries were found that were valid
22:02:19.49: Status for this address = 0
[email protected]
1 expansion total.
*** Debug output from submitting an envelope address:
22:02:19.49: mmc_wadr(0x08102850,'[email protected]','[email protected]') called.
22:02:19.49: Copy estimate before address addition is 1
22:02:19.49: Parsing address [email protected]
22:02:19.49: Rewriting: Mbox = "postmaster", host = "this.that.the.otter.com", domain = "$*", literal = "", tag = ""
22:02:19.49: Rewrite: "$*", position 0, hash table -
22:02:19.49: Found: "$A$E$F$U%[email protected]"
22:02:19.49: Match, pattern = "this.that.the.otter.com", current = "(*domaincheck*)"
22:02:19.49: old state = not checked.
22:02:19.49: Using result 1 from domain match cache.
22:02:19.49: new state = succeeded.
22:02:19.49: New mailbox: "postmaster".
22:02:19.49: New host: "this.that.the.otter.com".
22:02:19.49: New route: "this.that.the.otter.com".
22:02:19.49: New channel system: "this.that.the.otter.com".
22:02:19.49: Looking up host "this.that.the.otter.com".
22:02:19.49: - found on channel l
22:02:19.49: Routelocal flag set; scanning for % and !
22:02:19.49: address [email protected] requires local processing.
22:02:19.49: Variant #1 = [email protected]
22:02:19.49: Variant #2 = *@this.that.the.otter.com
22:02:19.49: Variant #3 = postmaster
22:02:19.49: Alias magic value 8764
22:02:19.49: Checking for [email protected] in the system alias file
22:02:19.49: - system alias file match for [email protected]
22:02:19.49: Initial pool address: postmast
22:02:19.49: - postmast
22:02:19.49: Parsing address postmast
22:02:19.49: Rewriting: Mbox = "postmast", host = "that.the.otter.com", domain = "$*", literal = "", tag = ""
22:02:19.49: Rewrite: "$*", position 0, hash table -
22:02:19.49: Found: "$A$E$F$U%[email protected]"
22:02:19.49: Match, pattern = "that.the.otter.com", current = "(*domaincheck*)"
22:02:19.49: old state = not checked.
22:02:19.49: Using result 1 from domain match cache.
22:02:19.49: new state = succeeded.
22:02:19.49: New mailbox: "postmast".
22:02:19.49: New host: "that.the.otter.com".
22:02:19.49: New route: "this.that.the.otter.com".
22:02:19.49: New channel system: "this.that.the.otter.com".
22:02:19.49: Looking up host "this.that.the.otter.com".
22:02:19.49: - found on channel l
22:02:19.50: Routelocal flag set; scanning for % and !
22:02:19.50: address [email protected] requirthat local processing.
22:02:19.50: Variant #1 = [email protected]
22:02:19.50: Variant #2 = *@that.the.otter.com
22:02:19.50: Alias magic value 8764
22:02:19.50: Checking for [email protected] in the system alias file
22:02:19.50: - not found
22:02:19.50: Checking for *@that.the.otter.com in the system alias file
22:02:19.50: - not found
22:02:19.50: Checking [email protected] with URL template ldap:///$V?*?sub?$R
22:02:19.50: LDAP URL template identified
22:02:19.50: URL determined to be: ldap:///o%3Dthat.the.otter.com%2Co%3Disp?*?sub?(|([email protected])(mailAlternateaddress=
[email protected])([email protected]))
22:02:19.50: URL context #1 will be used
22:02:19.50: Performing URL search on: ldap:///o%3Dthat.the.otter.com%2Co%3Disp?objectclass,inetuserstatus,mailuserstatus,inetMailGroupStatus,
uid,preferredLanguage,mailRoutingaddress,mailMsgMaxBlocks,mail,mailAlternateaddress,mailEquivalentaddress,
mailDeliveryOption,vacationStartDate,vacationEndDate,
mailConversionTag,mailhost,mailQuota,mailMsgQuota,mailProgramDeliveryInfo,mailDeliveryFileURL,
mailDeliveryFile,mailAutoReplyMode,mailAutoReplySubject,mailAutoReplyText,mailAutoReplyTextInternal,
mailAutoReplyTimeOut,mailSieveRultesource,mailForwardingaddress,
mailDeferprocessing,mgrpMsgRejectAction,mgrpRejectText,mgrpMsgRejectText,mgrpBroadcasterPolicy,
mgrpDisallowedBroadcaster,mgrpAllowedBroadcaster,mgrpDisallowedDomain,mgrpAllowedDomain,
mgrpMsgMaxSize,mgrpAuthPassword,mgrpModerator,mgrpDeliverTo,memberURL,
UniqueMember,mgrpRFC822MailMember,rfc822MailMember,mgrpErrorsTo,mgrpAddHeader,
mgrpRemoveHeader,mgrpMsgPrefixText,mgrpMsgSuffixText,mgmanMemberVisibility,
expandable?sub?(|([email protected])(mailAlternateaddress=postm22:02:19.50: Search succeeded but 0 entries returned
22:02:19.50: No matching entries were found that were valid
22:02:19.50: Status for this address = 0
22:02:19.50: - orig_send_acces mapping check: l|[email protected]|l|[email protected]
22:02:19.50: - passed.
22:02:19.50: - send_acces mapping check: l|[email protected]|l|[email protected]
22:02:19.50: - passed.
22:02:19.50: - user postmast unknown.
22:02:19.50: mmc_wnadr(0x08102850,'[email protected]','[email protected]','[email protected]','') called.
22:02:19.50: Cancelling DSNs that were created
22:02:19.50: - adding address [email protected] to headers.
22:02:19.50: Good address count 0 defer count 0
22:02:19.50: Copy estimate after address addition is 1
22:02:19.50: Cancelling DSNs that were created22:02:19.50: mmc_waend(0x08102850) called.
22:02:19.50: Copy estimate is 1
22:02:19.50: Queue area size 130679556, temp area size 998674
22:02:19.50: 65339778 blocks of effective free queue space available; setting disk limit accordingly.
22:02:19.50: 499337 blocks of free temporary space available; setting disk limit accordingly.
Expanded address:
[email protected]
Submitted address list:
address list error -- 5.1.1 unknown or illegal user: [email protected]
Submitted notifications list:
what's postmast for?From the debug output it appears the following is happening:
22:02:19.49: Checking for [email protected] in the system alias file
22:02:19.49: - system alias file match for [email protected]
22:02:19.49: Initial pool address: postmast
22:02:19.49: - postmast
=> Match is being found in the /opt/SUNWmsgsr/config/aliases file for [email protected], this points at 'postmast'
22:02:19.50: URL determined to be: ldap:///o%3Dthat.the.otter.com%2Co%3Disp?*?sub?(|(mail=[email protected])(mailAlternateaddress=
[email protected])(mailEquivalentaddress=[email protected]))
22:02:19.50: Search succeeded but 0 entries returned
22:02:19.50: No matching entries were found that were valid
=> A lookup is being performed for postmast@(default domain) i.e. [email protected] which fails
So you need to fix either the aliases file or provision an account with [email protected]
Regards,
Shane. -
I'm using IMS 5.2 Patch 2
When I installed IMS, I just put [email protected] for the postmaster email address....so now my boss want me to create account name [email protected], so I created the account in IDA..but when I send email to the account, I'll receive bounce email stating..
--- The message cannot be delivered to the following address. ---
[email protected] Mailbox unknown or not accepting mail.
550 5.1.1 unknown or illegal user: [email protected]
How could I solve this problem...thanks in advanceThis is the ldap access log when I tried to send email to [email protected]
[22/May/2005:12:35:18 +0800] conn=3172 op=5223 msgId=5224 - RESULT err=0 tag=101 nentries=1 etime=0
[22/May/2005:12:35:18 +0800] conn=4453 op=-1 msgId=-1 - fd=81 slot=81 LDAP connection from <ip messaging server> to <ip directory server>
[22/May/2005:12:35:18 +0800] conn=4453 op=0 msgId=1 - BIND dn="" method=128 version=2
[22/May/2005:12:35:18 +0800] conn=4453 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn=""
[22/May/2005:12:35:18 +0800] conn=4453 op=1 msgId=2 - UNBIND
[22/May/2005:12:35:18 +0800] conn=4453 op=1 msgId=-1 - closing - U1
[22/May/2005:12:35:18 +0800] conn=4454 op=-1 msgId=-1 - fd=114 slot=114 LDAP connection from <ip messaging server> to <ip directory server)
[22/May/2005:12:35:18 +0800] conn=4453 op=-1 msgId=-1 - closed.
[22/May/2005:12:35:18 +0800] conn=4454 op=0 msgId=1 - BIND dn="" method=128 version=2
[22/May/2005:12:35:18 +0800] conn=4454 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn=""
[22/May/2005:12:35:18 +0800] conn=4454 op=1 msgId=2 - UNBIND
[22/May/2005:12:35:18 +0800] conn=4454 op=1 msgId=-1 - closing - U1
[22/May/2005:12:35:18 +0800] conn=4454 op=-1 msgId=-1 - closed.
and this is the ldif for the postmaster group
cn=Postmaster,ou=Groups,o=xxx.com, dc=xxx,dc=com
objectClass=top
objectClass=groupOfUniqueNames
objectClass=inetMailGroup
objectClass=inetLocalMailRecipient
objectClass=inetMailGroupManagement
objectClass=nsManagedMailList
[email protected]
[email protected]
dataSource=iPlanet Messaging Server 5.0 Installer
inetMailGroupStatus=active
owner=uid=ServiceAdmin,ou=People,o=xxx.com, dc=xxx,dc=com
multiLineDescription=Postmaster group for domain xxx.com
cn=Postmaster
[email protected]
[email protected]
mgrpAllowedDomain=xxx.com
mgmanHidden=false
mgmanMemberVisibility=none
mgmanJoinability=none
mgrpModerator=ldap:///uid=user2, ou=people, o=xxx.com, dc=xxx,dc=com
I delete the postmaster user account using the ldapdelete command -
Trying to add a new user, but gives unknown error
Hi Guys,
When I go to site actions >> site setting >> site permissions >> and try to add a new user, it gives me "unknown error". Any ideas why this is happening? This is happening only on some of the sites. Thank you.check uls logs and event viewer
try these links:
http://www.go4sharepoint.com/Forum/get-unknown-error-adding-users-10654.aspx
http://roxority.com/sharepoint-zen/sharepoint-unknown-error-how-to-show-all-the-details.html
https://social.msdn.microsoft.com/Forums/office/en-US/69806e64-fc2c-4d74-8ec3-98f5d5e5f5ff/cannot-add-user-to-sharepoint-group-unknown-error?forum=sharepointdevelopmentlegacy
https://support.microsoft.com/kb/926961?wa=wsignin1.0
Please mark as answer if you find it useful else vote for it if it is close to answer..happy sharepointing -
I tried to download icloud for pc windows vista with 2.1.2 and when it was downloading almost finished it said it belonged to an unknown to me user?
You need to explain that, before you finished downloading something said that it belonged to another user ?
What said that, can you post a screenshot? -
root@db-prod-01 # imsimta version
Sun Java(tm) System Messaging Server 6.2-6.01 (built Apr 3 2006)
libimta.so 6.2-6.01 (built 11:20:35, Apr 3 2006)
SunOS db-prod-01 5.10 Generic_118833-18 sun4u sparc SUNW,Sun-Fire-V490
I was able to email this user before and now i can't. i am not sure what i change to this user to cause this error.
any ideas on how to fix this?
root@db-prod-01 # imsimta test -rewrite -debug help
Initializing mm_.
Initializing mm_ submission.
Checking identifiers.
*** Debug output from initializing MM for submission:
16:03:45.70: Debug output enabled, message enqueue routines version V6.2-6.01 compiled Apr 3 200611:20:45
16:03:45.70: mmc_winit('l','[email protected]','[email protected]') called.
16:03:45.70: Queue area size 40868186, temp area size 9329806
16:03:45.70: 10217046 blocks of effective free queue space available; setting disk limit accordingly.
16:03:45.70: 4664903 blocks of free temporary space available; setting disk limit accordingly.
16:03:45.70: Rewriting: Mbox = "postmaster", host = "db-prod-01.oswego.edu", domain = "$*", literal = "", tag = ""
16:03:45.70: Rewrite: "$*", position 0, hash table -
16:03:45.70: Found: "$A$E$F$U%[email protected]"
16:03:45.70: Rewrite failed, not forward.
16:03:45.70: Rewrite: "$*", position 1, hash table -
16:03:45.70: Failed.
16:03:45.70: Rewrite: "$*", position 0, rewrite database -
16:03:45.70: Failed
16:03:45.70: Rewriting: Mbox = "postmaster", host = "db-prod-01", domain = "db-prod-01.oswego.edu", literal = "", tag = ""
16:03:45.70: Rewrite: "db-prod-01.oswego.edu", position 0, hash table -
16:03:45.70: Found: "$U%[email protected]"
16:03:45.70: New mailbox: "postmaster".
16:03:45.70: New host: "db-prod-01.oswego.edu".
16:03:45.70: New route: "db-prod-01.oswego.edu".
16:03:45.70: New channel system: "db-prod-01.oswego.edu".
16:03:45.70: Looking up host "db-prod-01.oswego.edu".
16:03:45.70: - found on channel l
16:03:45.70: Routelocal flag set; scanning for % and !
16:03:45.70: Checking reverse URL cache for: [email protected]
16:03:45.70: Applying reverse URL pattern ldap:///$V?$N?sub?$R to: [email protected]
16:03:45.71: Resulting URL: ldap:///dc%3Doswego%2Cdc%3Dedu?preferredlanguage,mail,mailequivalentaddress?sub?(|([email protected])([email protected])([email protected])([email protected])([email protected])([email protected]))
16:03:45.71: mmc_open_url called to open ldap:///dc%3Doswego%2Cdc%3Dedu?preferredlanguage,mail,mailequivalentaddress?sub?(|([email protected])([email protected])([email protected])([email protected])([email protected])([email protected])), flags = 384
16:03:45.71: URL with quotes stripped: ldap:///dc%3Doswego%2Cdc%3Dedu?preferredlanguage,mail,mailequivalentaddress?sub?(|([email protected])([email protected])([email protected])([email protected])([email protected])([email protected]))
16:03:45.71: LDAP URL identified
16:03:45.71: URL context #1 will be used
16:03:45.71: Performing URL search on: ldap:///dc%3Doswego%2Cdc%3Dedu?preferredlanguage,mail,mailequivalentaddress?sub?(|([email protected])([email protected])([email protected])([email protected])([email protected])([email protected]))
16:03:45.72: mmc_read_url result: [cn=Postmaster,ou=Groups,dc=oswego,dc=edu]
16:03:45.72: URL resolution returned: [cn=Postmaster,ou=Groups,dc=oswego,dc=edu]
16:03:45.72: mmc_read_url result: [mail] [email protected]
16:03:45.72: URL resolution returned: [mail] [email protected]
16:03:45.72: Attribute index: 16
16:03:45.72: LDAP URL produced address [email protected]
16:03:45.72: No more result to return
16:03:45.72: Override postmaster: [email protected]
16:03:45.72: Mapped return address: [email protected]
16:03:45.72: from_access mapping check: ||MAIL|l|[email protected]|
16:03:45.72: - passed.
16:03:45.72: Rewriting: Mbox = "postmaster", host = "db-prod-01.oswego.edu", domain = "$*", literal = "", tag = ""
16:03:45.72: Rewrite: "$*", position 0, hash table -
16:03:45.72: Found: "$A$E$F$U%[email protected]"
16:03:45.72: Rewrite failed, not forward.
16:03:45.72: Rewrite: "$*", position 1, hash table -
16:03:45.72: Failed.
16:03:45.72: Rewrite: "$*", position 0, rewrite database -
16:03:45.72: Failed
16:03:45.72: Rewriting: Mbox = "postmaster", host = "db-prod-01", domain = "db-prod-01.oswego.edu", literal = "", tag = ""
16:03:45.72: Rewrite: "db-prod-01.oswego.edu", position 0, hash table -
16:03:45.72: Found: "$U%[email protected]"
16:03:45.72: New mailbox: "postmaster".
16:03:45.72: New host: "db-prod-01.oswego.edu".
16:03:45.72: New route: "db-prod-01.oswego.edu".
16:03:45.72: New channel system: "db-prod-01.oswego.edu".
16:03:45.72: Looking up host "db-prod-01.oswego.edu".
16:03:45.72: - found on channel l
16:03:45.72: Routelocal flag set; scanning for % and !
*** Debug output from rewriting a forward header address:
16:03:45.72: Rewriting: Mbox = "help", host = "oswego.edu", domain = "$*", literal = "", tag = ""
16:03:45.72: Rewrite: "$*", position 0, hash table -
16:03:45.72: Found: "$A$E$F$U%[email protected]"
16:03:45.72: Rewrite failed, not envelope.
16:03:45.72: Rewrite: "$*", position 1, hash table -
16:03:45.72: Failed.
16:03:45.72: Rewrite: "$*", position 0, rewrite database -
16:03:45.72: Failed
16:03:45.72: Rewriting: Mbox = "help", host = "oswego", domain = "oswego.edu", literal = "", tag = ""
16:03:45.72: Rewrite: "oswego.edu", position 0, hash table -
16:03:45.72: Found: "$U%[email protected]"
16:03:45.72: New mailbox: "help".
16:03:45.72: New host: "oswego.edu".
16:03:45.72: New route: "db-prod-01.oswego.edu".
16:03:45.72: New channel system: "db-prod-01.oswego.edu".
16:03:45.72: Looking up host "db-prod-01.oswego.edu".
16:03:45.72: - found on channel l
16:03:45.72: Routelocal flag set; scanning for % and !
16:03:45.72: Rewrite rules result: [email protected]
16:03:45.72: Checking reverse URL cache for: [email protected]
16:03:45.72: Applying reverse URL pattern ldap:///$V?$N?sub?$R to: [email protected]
16:03:45.73: Resulting URL: ldap:///dc%3Doswego%2Cdc%3Dedu?preferredlanguage,mail,mailequivalentaddress?sub?(|([email protected])([email protected])([email protected]))
16:03:45.73: mmc_open_url called to open ldap:///dc%3Doswego%2Cdc%3Dedu?preferredlanguage,mail,mailequivalentaddress?sub?(|([email protected])([email protected])([email protected])), flags = 384
16:03:45.73: URL with quotes stripped: ldap:///dc%3Doswego%2Cdc%3Dedu?preferredlanguage,mail,mailequivalentaddress?sub?(|([email protected])([email protected])([email protected]))
16:03:45.73: LDAP URL identified
16:03:45.73: URL context #1 will be used
16:03:45.73: Performing URL search on: ldap:///dc%3Doswego%2Cdc%3Dedu?preferredlanguage,mail,mailequivalentaddress?sub?(|([email protected])([email protected])([email protected]))
16:03:45.73: Search succeeded but result set was empty
16:03:45.73: URL resolution failed, status = 0
*** Debug output from rewriting a forward envelope address:
16:03:45.73: Rewriting: Mbox = "help", host = "oswego.edu", domain = "$*", literal = "", tag = ""
16:03:45.73: Rewrite: "$*", position 0, hash table -
16:03:45.73: Found: "$A$E$F$U%[email protected]"
16:03:45.73: Match, pattern = "oswego.edu", current = "(*domaincheck*)"
16:03:45.73: old state = not checked.
16:03:45.73: Domain check on oswego.edu.
16:03:45.73: Added domain result 1 to cache for oswego.edu.
16:03:45.73: new state = succeeded.
16:03:45.73: New mailbox: "help".
16:03:45.73: New host: "oswego.edu".
16:03:45.73: New route: "db-prod-01.oswego.edu".
16:03:45.73: New channel system: "db-prod-01.oswego.edu".
16:03:45.73: Looking up host "db-prod-01.oswego.edu".
16:03:45.73: - found on channel l
16:03:45.73: Routelocal flag set; scanning for % and !
forward channel = l
channel description =
channel user filter =
dest channel filter =
source channel filter =
channel flags #0 = BIDIRECTIONAL MULTIPLE IMMNONURGENT NOSERVICEALL
channel flags #1 = NOSMTP DEFAULT
channel flags #2 = COPYSENDPOST COPYWARNPOST POSTHEADONLY HEADERINC NOEXPROUTE
channel flags #3 = LOGGING NOGREY NORESTRICTED RETAINSECURITYMULTIPARTS
channel flags #4 = EIGHTBIT NOHEADERTRIM NOHEADERREAD RULES
channel flags #5 =
channel flags #6 = LOCALUSER REPORTNOTARY
channel flags #7 = NOSWITCHCHANNEL NOREMOTEHOST DATEFOUR DAYOFWEEK
channel flags #8 = NODEFRAGMENT EXQUOTA REVERSE NOCONVERT_OCTET_STREAM
channel flags #9 = NOTHURMAN INTERPRETENCODING USEINTERMEDIATE RECEIVEDFROM VALIDATELOCALSYSTEM NOTURN
defaulthost = oswego.edu oswego.edu
linelength = 1023
channel env addr type = SOURCEROUTE
channel hdr addr type = SOURCEROUTE
channel official host = db-prod-01.oswego.edu
channel queue 0 name = LOCAL_POOL
channel queue 1 name = LOCAL_POOL
channel queue 2 name = LOCAL_POOL
channel queue 3 name = LOCAL_POOL
channel after params =
channel user name =
urgentnotices = 1 2 4 7
normalnotices = 1 2 4 7
nonurgentnotices = 1 2 4 7
channel rightslist ids =
local behavior flags = %x7
expandchannel =
notificationchannel =
dispositionchannel =
saslswitchchannel =
tlsswitchchannel =
backward channel = l
header To: address = [email protected]
header From: address = [email protected]
envelope To: address = [email protected] (route (db-prod-01.oswego.edu,db-prod-01.oswego.edu)) (host oswego.edu)
envelope From: address = [email protected]
name =
mbox = help
Extracted address action list:
[email protected]
Extracted 733 address action list:
[email protected]
Address list expansion:
*** Debug output from alias expansion:
16:03:45.73: Inner expand, level = 0, mailbox = help
16:03:45.73: Rewriting: Mbox = "help", host = "oswego.edu", domain = "$*", literal = "", tag = ""
16:03:45.73: Rewrite: "$*", position 0, hash table -
16:03:45.73: Found: "$A$E$F$U%[email protected]"
16:03:45.73: Match, pattern = "oswego.edu", current = "(*domaincheck*)"
16:03:45.73: old state = not checked.
16:03:45.73: Using result 1 from domain match cache.
16:03:45.73: new state = succeeded.
16:03:45.73: New mailbox: "help".
16:03:45.73: New host: "oswego.edu".
16:03:45.73: New route: "db-prod-01.oswego.edu".
16:03:45.73: New channel system: "db-prod-01.oswego.edu".
16:03:45.73: Looking up host "db-prod-01.oswego.edu".
16:03:45.73: - found on channel l
16:03:45.73: Routelocal flag set; scanning for % and !
16:03:45.73: Reparsed mailbox: help
16:03:45.73: Reparsed host: oswego.edu
16:03:45.73: Variant #1 = [email protected]
16:03:45.73: Variant #2 = *@oswego.edu
16:03:45.73: Variant #3 = help
16:03:45.73: LDAP URL template identified
16:03:45.73: URL determined to be: ldap:///dc%3Doswego%2Cdc%3Dedu?*?sub?(|([email protected])([email protected])([email protected]))
16:03:45.73: URL context #1 will be used
16:03:45.73: Performing URL search on: ldap:///dc%3Doswego%2Cdc%3Dedu?objectclass,inetuserstatus,mailuserstatus,inetMailGroupStatus,uid,preferredLanguage,mailRoutingAddress,mailDeliveryOption,mail,mailAlternateAddress,mailEquivalentAddress,vacationStartDate,vacationEndDate,mailConversionTag,mailMsgMaxBlocks,mailhost,mailQuota,mailMsgQuota,mailProgramDeliveryInfo,mailDeliveryFileURL,mailDeliveryFile,mailAutoReplyMode,mailAutoReplySubject,mailAutoReplyText,mailAutoReplyTextInternal,mailAutoReplyTimeOut,mailSieveRuleSource,mailForwardingAddress,mailDeferProcessing,mgrpMsgRejectAction,mgrpRejectText,mgrpMsgRejectText,mgrpBroadcasterPolicy,mgrpDisallowedBroadcaster,mgrpAllowedBroadcaster,mgrpDisallowedDomain,mgrpAllowedDomain,mgrpMsgMaxSize,mgrpAuthPassword,mgrpModerator,mgrpDeliverTo,memberURL,UniqueMember,mgrpRFC822MailMember,rfc822MailMember,mgrpErrorsTo,mgrpAddHeader,mgrpRemoveHeader,mgrpMsgPrefixText,mgrpMsgSuffixText,mgmanMemberVisibility,expandable?sub?(|([email protected])([email protected])(ma16:03:45.73: Search succeeded but 0 entries returned
16:03:45.73: No matching entries were found that were valid
16:03:45.73: Status for this address = 0
0 expansion total.
*** Debug output from submitting an envelope address:
16:03:45.73: mmc_wadr(0x006a7670,'help','help') called.
16:03:45.73: Copy estimate before address addition is 1
16:03:45.73: Parsing address help
16:03:45.73: Rewriting: Mbox = "help", host = "oswego.edu", domain = "$*", literal = "", tag = ""
16:03:45.73: Rewrite: "$*", position 0, hash table -
16:03:45.73: Found: "$A$E$F$U%[email protected]"
16:03:45.73: Match, pattern = "oswego.edu", current = "(*domaincheck*)"
16:03:45.73: old state = not checked.
16:03:45.73: Using result 1 from domain match cache.
16:03:45.73: new state = succeeded.
16:03:45.73: New mailbox: "help".
16:03:45.73: New host: "oswego.edu".
16:03:45.73: New route: "db-prod-01.oswego.edu".
16:03:45.73: New channel system: "db-prod-01.oswego.edu".
16:03:45.73: Looking up host "db-prod-01.oswego.edu".
16:03:45.73: - found on channel l
16:03:45.73: Routelocal flag set; scanning for % and !
16:03:45.73: Address [email protected] requires local processing.
16:03:45.73: Variant #1 = [email protected]
16:03:45.73: Variant #2 = *@oswego.edu
16:03:45.73: Variant #3 = help
16:03:45.73: Checking for [email protected] in the system alias file
16:03:45.73: - not found
16:03:45.73: Checking for *@oswego.edu in the system alias file
16:03:45.73: - not found
16:03:45.73: Checking for help in the system alias file
16:03:45.73: - not found
16:03:45.73: Checking [email protected] with URL template ldap:///$V?*?sub?$R
16:03:45.73: LDAP URL template identified
16:03:45.73: URL determined to be: ldap:///dc%3Doswego%2Cdc%3Dedu?*?sub?(|([email protected])([email protected])([email protected]))
16:03:45.73: URL context #1 will be used
16:03:45.73: Performing URL search on: ldap:///dc%3Doswego%2Cdc%3Dedu?objectclass,inetuserstatus,mailuserstatus,inetMailGroupStatus,uid,preferredLanguage,mailRoutingAddress,mailDeliveryOption,mail,mailAlternateAddress,mailEquivalentAddress,vacationStartDate,vacationEndDate,mailConversionTag,mailMsgMaxBlocks,mailhost,mailQuota,mailMsgQuota,mailProgramDeliveryInfo,mailDeliveryFileURL,mailDeliveryFile,mailAutoReplyMode,mailAutoReplySubject,mailAutoReplyText,mailAutoReplyTextInternal,mailAutoReplyTimeOut,mailSieveRuleSource,mailForwardingAddress,mailDeferProcessing,mgrpMsgRejectAction,mgrpRejectText,mgrpMsgRejectText,mgrpBroadcasterPolicy,mgrpDisallowedBroadcaster,mgrpAllowedBroadcaster,mgrpDisallowedDomain,mgrpAllowedDomain,mgrpMsgMaxSize,mgrpAuthPassword,mgrpModerator,mgrpDeliverTo,memberURL,UniqueMember,mgrpRFC822MailMember,rfc822MailMember,mgrpErrorsTo,mgrpAddHeader,mgrpRemoveHeader,mgrpMsgPrefixText,mgrpMsgSuffixText,mgmanMemberVisibility,expandable?sub?(|([email protected])([email protected])(ma16:03:45.74: Search succeeded but 0 entries returned
16:03:45.74: No matching entries were found that were valid
16:03:45.74: Status for this address = 0
16:03:45.74: - adding address [email protected] to headers.
16:03:45.74: Copy estimate after address addition is 1
Expanded address:
[email protected]
Submitted address list:
Address list error -- 5.1.1 unknown or illegal alias: help
Submitted notifications list:okay i hope this is better info
14/Aug/2006:16:39:23 -0400] conn=67777 op=-1 msgId=-1 - fd=130 slot=130 LDAP connection from 129.3.22.160 to 129.3.22.160
[14/Aug/2006:16:39:23 -0400] conn=67777 op=0 msgId=1 - BIND dn="cn=msg-config, cn=Sun ONE Messaging Suite, cn=Server Group, cn=db-prod-01.oswego.edu, ou=oswego.edu, o=NetscapeRoot" method=128 version=2
[14/Aug/2006:16:39:23 -0400] conn=67777 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=msg-config,cn=sun one messaging suite,cn=server group,cn=db-prod-01.oswego.edu,ou=oswego.edu,o=netscaperoot"
[14/Aug/2006:16:39:23 -0400] conn=67777 op=1 msgId=2 - SRCH base="cn=configuration,cn=msg-config,cn=sun one messaging suite,cn=server group,cn=db-prod-01.oswego.edu,ou=oswego.edu,o=netscaperoot" scope=2 filter="(objectClass=*)" attrs=ALL
[14/Aug/2006:16:39:24 -0400] conn=67777 op=1 msgId=2 - RESULT err=0 tag=101 nentries=1028 etime=1
[14/Aug/2006:16:39:24 -0400] conn=67778 op=-1 msgId=-1 - fd=135 slot=135 LDAP connection from 129.3.22.160 to 129.3.22.160
[14/Aug/2006:16:39:24 -0400] conn=67778 op=0 msgId=1 - BIND dn="uid=msg-admin-db-prod-01.oswego.edu-20060626211223Z, ou=People, dc=oswego,dc=edu" method=128 version=3
[14/Aug/2006:16:39:24 -0400] conn=67778 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn="uid=msg-admin-db-prod-01.oswego.edu-20060626211223z,ou=people,dc=oswego,dc=edu"
[14/Aug/2006:16:39:24 -0400] conn=67778 op=1 msgId=2 - SRCH base="dc=db-prod-01,dc=oswego,dc=edu,o=internet" scope=0 filter="(|(objectClass=inetDomain)(objectClass=inetdomainalias))" attrs=ALL
[14/Aug/2006:16:39:24 -0400] conn=67778 op=1 msgId=2 - RESULT err=0 tag=101 nentries=1 etime=0
[14/Aug/2006:16:39:24 -0400] conn=67778 op=2 msgId=3 - SRCH base="dc=oswego,dc=edu,o=internet" scope=0 filter="(|(objectClass=inetDomain)(objectClass=inetdomainalias))" attrs=ALL
[14/Aug/2006:16:39:24 -0400] conn=67778 op=2 msgId=3 - RESULT err=0 tag=101 nentries=1 etime=0
[14/Aug/2006:16:39:24 -0400] conn=67778 op=3 msgId=4 - SRCH base="dc=oswego,dc=edu" scope=0 filter="(objectClass=*)" attrs=ALL
[14/Aug/2006:16:39:24 -0400] conn=67778 op=3 msgId=4 - RESULT err=0 tag=101 nentries=1 etime=0
[14/Aug/2006:16:39:24 -0400] conn=67778 op=4 msgId=5 - SRCH base="dc=oswego,dc=edu" scope=2 filter="(|([email protected])([email protected])([email protected])([email protected])([email protected])([email protected]))" attrs="preferredLanguage mail mailEquivalentAddress"
[14/Aug/2006:16:39:24 -0400] conn=67778 op=4 msgId=5 - RESULT err=0 tag=101 nentries=1 etime=0
[14/Aug/2006:16:39:24 -0400] conn=67778 op=5 msgId=6 - SRCH base="dc=oswego,dc=edu" scope=2 filter="(|([email protected])([email protected])([email protected]))" attrs="preferredLanguage mail mailEquivalentAddress"
[14/Aug/2006:16:39:24 -0400] conn=67778 op=5 msgId=6 - RESULT err=0 tag=101 nentries=0 etime=0
[14/Aug/2006:16:39:24 -0400] conn=67778 op=6 msgId=7 - SRCH base="dc=oswego,dc=edu" scope=2 filter="(|([email protected])([email protected])([email protected]))" attrs="objectClass inetUserStatus mailUserStatus inetMailGroupStatus uid preferredLanguage mailRoutingAddress mailDeliveryOption mail mailAlternateAddress mailEquivalentAddress vacationStartDate vacationEndDate mailConversionTag mailMsgMaxBlocks mailHost mailQuota mailMsgQuota mailProgramDeliveryInfo mailDeliveryFileURL maildeliveryfile mailAutoReplyMode mailAutoReplySubject mailAutoReplyText mailAutoReplyTextInternal mailAutoReplyTimeout mailSieveRuleSource mailForwardingAddress mailDeferProcessing mgrpMsgRejectAction mgrprejecttext mgrpMsgRejectText mgrpBroadcasterPolicy mgrpDisallowedBroadcaster mgrpAllowedBroadcaster mgrpDisallowedDomain mgrpAllowedDomain mgrpMsgMaxsize mgrpAuthPassword mgrpModerator mgrpDeliverTo memberURL uniqueMember mgrpRFC822MailMember rfc822mailmember mgrpErrorsTo mgrpAddHeader mgrpRemoveHeader mgrpMsgPrefixText mgrpMsgSuffixText mgmanMemberVisibility expandable"
[14/Aug/2006:16:39:24 -0400] conn=67778 op=6 msgId=7 - RESULT err=0 tag=101 nentries=0 etime=0
[14/Aug/2006:16:39:24 -0400] conn=67778 op=7 msgId=8 - SRCH base="dc=oswego,dc=edu" scope=2 filter="(|([email protected])([email protected])([email protected]))" attrs="objectClass inetUserStatus mailUserStatus inetMailGroupStatus uid preferredLanguage mailRoutingAddress mailDeliveryOption mail mailAlternateAddress mailEquivalentAddress vacationStartDate vacationEndDate mailConversionTag mailMsgMaxBlocks mailHost mailQuota mailMsgQuota mailProgramDeliveryInfo mailDeliveryFileURL maildeliveryfile mailAutoReplyMode mailAutoReplySubject mailAutoReplyText mailAutoReplyTextInternal mailAutoReplyTimeout mailSieveRuleSource mailForwardingAddress mailDeferProcessing mgrpMsgRejectAction mgrprejecttext mgrpMsgRejectText mgrpBroadcasterPolicy mgrpDisallowedBroadcaster mgrpAllowedBroadcaster mgrpDisallowedDomain mgrpAllowedDomain mgrpMsgMaxsize mgrpAuthPassword mgrpModerator mgrpDeliverTo memberURL uniqueMember mgrpRFC822MailMember rfc822mailmember mgrpErrorsTo mgrpAddHeader mgrpRemoveHeader mgrpMsgPrefixText mgrpMsgSuffixText mgmanMemberVisibility expandable"
[14/Aug/2006:16:39:24 -0400] conn=67778 op=7 msgId=8 - RESULT err=0 tag=101 nentries=0 etime=0
[14/Aug/2006:16:39:24 -0400] conn=67777 op=-1 msgId=-1 - closing - B1
[14/Aug/2006:16:39:24 -0400] conn=67777 op=-1 msgId=-1 - closed.
[14/Aug/2006:16:39:24 -0400] conn=67778 op=-1 msgId=-1 - closing - B1
[14/Aug/2006:16:39:24 -0400] conn=67778 op=-1 msgId=-1 - closed.
[14/Aug/2006:16:39:29 -0400] conn=67624 op=182 msgId=183 - SRCH base="dc=asu,dc=edu,o=internet" scope=0 filter="(|(objectClass=inetDomain)(objectClass=inetdomainalias))" attrs=ALL
[14/Aug/2006:16:39:29 -0400] conn=67624 op=182 msgId=183 - RESULT err=32 tag=101 nentries=0 etime=0 -
Why are BC objects created in user's schema
Server = Sun Sparc SunOS 5.8, Oracle 8.1.7.4 SID
Client = Windows 2000, Oracle 9iDS (v9.0.2 w/Jdeveloper v9.0.3)
Network = 100MB TCP/IP
I have a schema with relatively large (in my mind) tables master = 225,000 records; detail = 1,200,000 records.
I've used Jdeveloper 9i to create a business components (Java based) view of these tables.
When I execute the view (query) and request the last record of the master table, this action takes approximately 1 hr and 40 minutes to accomplish.
The database is in archive mode.
The redo logs (3) on the database were 500 KB files (the default created by the DBCA). I was seeing archive files created on the order of one every 10 seconds. I increased the logfiles to be 200 MB and now appear to be getting archives once every 10 minutes.
I've tracked it down to something taking place in the connected user's tablespace during the query.
I created a separate tablespace (with it's own temporary tablespace) for my test user. If I did not grant unlimited tablespace to this user, the query failed because the user did not have privilege on the tablespace.
When I granted unlimited tablespace (is there no middle ground??), the tablespace grew to 290 MB from 128 KB. After disconnecting from the query (quitting the application) the tablespace remained at 290 MB. Upon restarting the query, the used tablespace initially shrunk back to 650KB and then grew again to 290 MB. The temporary tablespace never changed or seemed to be accessed. Both times the query took about1 hr and 40 minutes
9 objects were created in the users schema, 3 tables, 4 indexes and 2 LOBs.
My question is why these thing s need to be created for tables that are already indexed and why they would not stay populated for quick reuse. If every one of my users create and populate these tables and indexes for each query session, Ill soon run out of disk space, to say nothing about the ridiculously poor performance.
Have I made some basic error in the creation of my business components that cause this condition?It will spew out a whole lot of diagnostic output. Copy and post that diag and let me have a look at it.Here goes ...... and guess what .... this actually worked, there was no tables created in the user schema and the query only took about 3 or 4 minutes. Something quirky in the JDeveloper / tester way of doing business ???
[00] Diagnostic Properties: Timing:false Functions:false Linecount:true Threshold:6
[01] CommonMessageBundle (language base) being initialized
[02] Stringmanager using default locale: 'null'
[03] BC4J Property jbo.maxpoolcookieage='-1' -->(MetaObjectManager) from System Default
[04] Loading 5.0 IDE classes
[05] BC4J Property jbo.maxpoolcookieage='-1' -->(MetaObjectManager) from System Default
[06] BC4J Property jbo.maxpoolcookieage='-1' -->(MetaObjectManager) from System Default
[07] Creating a new pool resource
[08] BC4JDeployPlatform: LOCAL
[09] Propertymanager: searching for file and system based properties
[10] {{ begin Loading BC4J properties
[11] -----------------------------------------------------------
[12] BC4J Property jbo.default.language='en' -->(MetaObjectManager) from System Default
[13] BC4J Property jbo.default.country='US' -->(MetaObjectManager) from System Default
[14] BC4J Property DeployPlatform='LOCAL' -->(SessionImpl) from Client Environment
[15] Skipping empty Property ConnectionMode from System Default
[16] Skipping empty Property HostName from System Default
[17] Skipping empty Property ConnectionPort from System Default
[18] BC4J Property jbo.locking.mode='pessimistic' -->(MetaObjectManager) from System Default
[19] Skipping empty Property ApplicationPath from System Default
[20] BC4J Property AppModuleJndiName='ctf.database.gpl.bc.BcModule' -->(SessionImpl) from Client Environment
[21] Skipping empty Property java.naming.security.principal from System Default
[22] Skipping empty Property java.naming.security.credentials from System Default
[23] Skipping empty Property jbo.user.principal from System Default
[24] Skipping empty Property jbo.object.marshaller from System Default
[25] BC4J Property jbo.use.pers.coll='false' -->(SessionImpl) from System Property
[26] BC4J Property jbo.pers.max.rows.per.node='70' -->(SessionImpl) from System Default
[27] BC4J Property jbo.pers.max.active.nodes='30' -->(SessionImpl) from System Default
[28] Skipping empty Property jbo.pcoll.mgr from System Default
[29] BC4J Property jbo.txn_table_name='PS_TXN' -->(SessionImpl) from System Default
[30] BC4J Property jbo.txn_seq_name='PS_TXN_seq' -->(SessionImpl) from System Default
[31] BC4J Property jbo.control_table_name='PCOLL_CONTROL' -->(MetaObjectManager) from System Default
[32] BC4J Property jbo.stringmanager.factory.class='use_default' -->(SessionImpl) from System Default
[33] BC4J Property jbo.fetch.mode='AS.NEEDED' -->(MetaObjectManager) from System Default
[34] BC4J Property jbo.323.compatible='false' -->(MetaObjectManager) from System Default
[35] Skipping empty Property JBODynamicObjectsPackage from System Default
[36] BC4J Property MetaObjectContextFactory='oracle.jbo.mom.xml.DefaultMomContextFactory' -->(MetaObjectManager) from System Default
[37] BC4J Property MetaObjectContext='oracle.jbo.mom.xml.XMLContextImpl' -->(MetaObjectManager) from System Default
[38] BC4J Property java.naming.factory.initial='oracle.jbo.common.JboInitialContextFactory' -->(SessionImpl) from Client Environment
[39] BC4J Property IsLazyLoadingTrue='true' -->(MetaObjectManager) from /oracle/jbo/server/jboserver.properties resource
[40] BC4J Property ActivateSharedDataHandle='false' -->(MetaObjectManager) from System Default
[41] Skipping empty Property HandleName from System Default
[42] Skipping empty Property Factory-Substitution-List from System Default
[43] BC4J Property jbo.project='PM_BC' -->(MetaObjectManager) from Client Environment
[44] BC4J Property jbo.max.cursors='50' -->(MetaObjectManager) from System Default
[45] BC4J Property jbo.dofailover='true' -->(MetaObjectManager) from System Default
[46] BC4J Property jbo.doconnectionpooling='false' -->(MetaObjectManager) from System Default
[47] BC4J Property jbo.recyclethreshold='10' -->(MetaObjectManager) from System Default
[48] BC4J Property jbo.ampool.dynamicjdbccredentials='true' -->(MetaObjectManager) from System Default
[49] BC4J Property jbo.ampool.resetnontransactionalstate='true' -->(SessionImpl) from System Default
[50] BC4J Property jbo.ampool.sessioncookiefactoryclass='oracle.jbo.common.ampool.DefaultSessionCookieFactory' -->(MetaObjectManager) from System Default
[51] BC4J Property jbo.ampool.connectionstrategyclass='oracle.jbo.common.ampool.DefaultConnectionStrategy' -->(MetaObjectManager) from System Default
[52] BC4J Property jbo.ampool.maxpoolsize='2147483647' -->(MetaObjectManager) from System Default
[53] BC4J Property jbo.ampool.initpoolsize='0' -->(MetaObjectManager) from System Default
[54] BC4J Property jbo.ampool.monitorsleepinterval='600000' -->(MetaObjectManager) from System Default
[55] BC4J Property jbo.ampool.minavailablesize='5' -->(MetaObjectManager) from System Default
[56] BC4J Property jbo.ampool.maxavailablesize='25' -->(MetaObjectManager) from System Default
[57] BC4J Property jbo.ampool.maxinactiveage='600000' -->(MetaObjectManager) from System Default
[58] BC4J Property jbo.passivationstore='null' -->(MetaObjectManager) from System Default
[59] BC4J Property RELEASE_MODE='Stateful' -->(MetaObjectManager) from System Default
[60] BC4J Property jbo.maxpoolcookieage='-1' -->(MetaObjectManager) from System Default
[61] BC4J Property PoolClassName='oracle.jbo.common.ampool.ApplicationPoolImpl'-->(MetaObjectManager) from System Default
[62] BC4J Property jbo.maxpoolsize='2147483647' -->(MetaObjectManager) from System Default
[63] BC4J Property jbo.initpoolsize='0' -->(MetaObjectManager) from System Default
[64] BC4J Property jbo.poolrequesttimeout='30000' -->(MetaObjectManager) from System Default
[65] BC4J Property jbo.poolmonitorsleepinterval='600000' -->(MetaObjectManager) from System Default
[66] BC4J Property jbo.poolminavailablesize='5' -->(MetaObjectManager) from System Default
[67] BC4J Property jbo.poolmaxavailablesize='25' -->(MetaObjectManager) from System Default
[68] BC4J Property jbo.poolmaxinactiveage='600000' -->(MetaObjectManager) from System Default
[69] BC4J Property jbo.assoc.consistent='true' -->(MetaObjectManager) from System Default
[70] BC4J Property jbo.viewlink.consistent='false' -->(MetaObjectManager) from System Default
[71] BC4J Property jbo.passivation.TrackInsert='true' -->(MetaObjectManager) from System Default
[72] Skipping empty Property jbo.ViewCriteriaAdapter from System Default
[73] BC4J Property jbo.SQLBuilder='Oracle' -->(MetaObjectManager) from /oracle/jbo/server/jboserver.properties resource
[74] BC4J Property jbo.ConnectionPoolManager='oracle.jbo.server.ConnectionPoolManagerImpl' -->(MetaObjectManager) from System Default
[75] BC4J Property jbo.TypeMapEntries='Oracle' -->(MetaObjectManager) from Client Environment
[76] Skipping empty Property jbo.sql92.JdbcDriverClass from System Default
[77] BC4J Property jbo.jdbc.trace='false' -->(MetaObjectManager) from System Default
[78] BC4J Property jbo.sql92.DbTimeQuery='select sysdate from dual' -->(MetaObjectManager) from System Default
[79] BC4J Property oracle.jbo.defineColumnLength='as_chars' -->(MetaObjectManager) from System Default
[80] Skipping empty Property jbo.tmpdir from System Default
[81] Skipping empty Property jbo.server.internal_connection from System Default
[82] Skipping empty Property SessionClass from System Default
[83] Skipping empty Property TransactionFactory from System Default
[84] BC4J Property jbo.debugoutput='console' -->(Diagnostic) from System Property
[85] BC4J Property jbo.debug.prefix='DBG: ' -->(Diagnostic) from /oracle/jbo/common/Diagnostic.properties resource
[86] BC4J Property jbo.logging.show.timing='false' -->(Diagnostic) from /oracle/jbo/common/Diagnostic.properties resource
[87] BC4J Property jbo.logging.show.function='false' -->(Diagnostic) from /oracle/jbo/common/Diagnostic.properties resource
[88] BC4J Property jbo.logging.show.level='false' -->(Diagnostic) from /oracle/jbo/common/Diagnostic.properties resource
[89] BC4J Property jbo.logging.show.linecount='true' -->(Diagnostic) from /oracle/jbo/common/Diagnostic.properties resource
[90] BC4J Property jbo.logging.trace.threshold='6' -->(Diagnostic) from /oracle/jbo/common/Diagnostic.properties resource
[91] BC4J Property jbo.jdbc.driver.verbose='false' -->(Diagnostic) from System Default
[92] BC4J Property jbo.ejb.txntimeout='1830' -->(SessionImpl) from System Default
[93] BC4J Property jbo.ejb.txntype='global' -->(MetaObjectManager) from System Default
[94] BC4J Property jbo.ejb.txn.disconnect_on_completion='false' -->(SessionImpl) from System Default
[95] Skipping empty Property oracle.jbo.schema from System Default
[96] BC4J Property jbo.xml.validation='false' -->(MetaObjectManager) from System Default
[97] BC4J Property ord.RetrievePath='ordDeliverMedia' -->(MetaObjectManager) from System Default
[98] BC4J Property ord.HttpMaxMemory='102400' -->(MetaObjectManager) from System Default
[99] Skipping empty Property ord.HttpTempDir from System Default
[100] BC4J Property ord.wmp.classid='clsid:22D6F312-B0F6-11D0-94AB-0080C74C7E95' -->(MetaObjectManager) from System Default
[101] BC4J Property ord.qp.classid='clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B'-->(MetaObjectManager) from System Default
[102] BC4J Property ord.rp.classid='clsid:CFCDAA03-8BE4-11cf-B84B-0020AFBBCCFA'-->(MetaObjectManager) from System Default
[103] BC4J Property ord.wmp.codebase='http://activex.microsoft.com/activex/controls/mplayer/en/nsmp2inf.cab#Version=5,1,52,701' -->(MetaObjectManager) from System Default
[104] BC4J Property ord.qp.codebase='http://www.apple.com/qtactivex/qtplugin.cab' -->(MetaObjectManager) from System Default
[105] Skipping empty Property ord.rp.codebase from System Default
[106] BC4J Property ord.wmp.plugins.page='http://www.microsoft.com/isapi/redir.dll?prd=windows&sbp=mediaplayer&ar=Media&sba=Plugin&' -->(MetaObjectManager) from System Default
[107] BC4J Property ord.qp.plugins.page='http://www.apple.com/quicktime/download/' -->(MetaObjectManager) from System Default
[108] BC4J Property ord.rp.plugins.page='http://www.real.com/player/' -->(MetaObjectManager) from System Default
[109] BC4J Property jbo.security.enforce='None' -->(SessionImpl) from System Default
[110] BC4J Property jbo.security.loginmodule='oracle.security.jazn.tools.Admintool' -->(SessionImpl) from System Default
[111] BC4J Property jbo.server.useNullDbTransaction='false' -->(SessionImpl) from System Default
[112] Copying unknown Client property (DBconnection='jdbc:oracle:oci8:@(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=hostname)(PORT=1526)))(CONNECT_DATA=(SID=sidname)))') to session
[113] Copying unknown Client property (password='apassword') to session
[114] Copying unknown Client property (JDBCName='dev_oci') to session
[115] Copying unknown Client property (user='ausername') to session
[116] Copying unknown Client property (jbo.applicationmoduleclassname='ctf.database.gpl.bc.BcModule') to session
[117] Copying unknown Client property (ApplicationName='ctf.database.gpl.bc.BcModule') to session
[118] WARNING: Unused property: LC='Calling Function' found in /oracle/jbo/common/Diagnostic.properties resource
[119] }} finished loading BC4J properties
[120] -----------------------------------------------------------Diagnostics: (Properties (re)loaded) Routing diagnostics to standard output (use -Djbo.debugoutput=silent to remove)
[121] Diagnostic Properties: Timing:false Functions:false Linecount:true Threshold:6
[122] JavaVMVersion: 9.0.3.738 cdov
[123] JavaVMVendor: Oracle Corp.
[124] JavaVMName: OJVM Client VM
[125] OperatingSystemName: Windows 2000
[126] OperatingSystemVersion: 5.0
[127] OperatingSystemUsername: MacEwan James
[128] Jbo323Compatible Flag: false, str: false
[129] Loading from PM_BC.jpx file
[130] Loading from indvidual XML files
[131] Loading the Containees for the Package 'PM_BC.PM_BC'.
[132] Registered Oracle JDBC driver with BC4J Server
[133] Connected to Oracle JBO Server - Version: 9.0.3.10.7
[134] BC4J: Instrumentation disabled
[135] Loading from /ctf/database/gpl/bc/bc.xml file
[136] Loading from indvidual XML files
[137] Loading the Containees for the Package 'ctf.database.gpl.bc.bc'.
[138] Loading from /ctf/database/gpl/bc/BcModule.xml file
[139] Loading from /ctf/database/gpl/bc/GplElementView.xml file
[140] ViewObjectImpl's default fetch mode = 0
[141] Loading from /ctf/database/gpl/bc/GplElement.xml file
[142] Loading Typemap entries from oracle.jbo.common.OracleTypeMapEntries
[143] CSMessageBundle (language base) being initialized
[144] OracleSQLBuilder reached getInterface
[145] Oracle SQL Builder Version 3.2.0.0.0
[146] Loading from /ctf/database/gpl/bc/GplGroupView.xml file
[147] Loading from /ctf/database/gpl/bc/GplGroup.xml file
[148] Loading from /ctf/database/gpl/bc/GplPageView.xml file
[149] Loading from /ctf/database/gpl/bc/GplPage.xml file
[150] Loading from /ctf/database/gpl/bc/GplParamView.xml file
[151] Loading from /ctf/database/gpl/bc/GplParam.xml file
[152] Loading from /ctf/database/gpl/bc/GroupPageIdFkLink.xml file
[153] Loading from /ctf/database/gpl/bc/GroupPageIdFkAssoc.xml file
[154] Loading from /ctf/database/gpl/bc/ElementPageFkLink.xml file
[155] Loading from /ctf/database/gpl/bc/ElementPageFkAssoc.xml file
[156] Loading from /ctf/database/gpl/bc/ParamElmFkLink.xml file
[157] Loading from /ctf/database/gpl/bc/ParamElmFkAssoc.xml file
[158] Using DatabaseTransactionFactory implementation oracle.jbo.server.Database TransactionFactory
[159] mUsePersColl is false
[160] ViewObjectImpl.mDefaultMaxRowsPerNode is 70
[161] ViewObjectImpl.mDefaultMaxActiveNodes is 30
[162] DBTransactionImpl Max Cursors is 50
[163] Created root application module: 'ctf.database.gpl.bc.BcModule'
[164] Locale is: 'en_US'
[165] DefaultConnectionStrategy is establishing an application module connection
[166] Oracle SQLBuilder: Registered driver: oracle.jdbc.driver.OracleDriver
[167] Creating a new pool resource
[168] Trying connection/2: url='jdbc:oracle:oci8:@(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=ahost)(PORT=1526)))(CONNECT_DATA=(SID=asid)))' info='{user=ausername, password=apassword, java.naming.security.principal=ausername, java.naming.security.credentials=ausername}' ...
[169] Successfully logged in
[170] JDBCDriverVersion: 9.0.1.4.0
[171] DatabaseProductName: Oracle
[172] DatabaseProductVersion: Oracle8i Enterprise Edition Release 8.1.7.4.0 - Production JServer Release 8.1.7.4.0 - Production
[173] ViewRowSetImpl's jbo.viewlink.consistent = false (0)
[174] Column count: 21
[175] ViewObject : Created new QUERY statement
[176] SELECT GplPage.PAGE_ID, GplPage.PAGENAME, GplPage.HEIGHT, GplPage.WIDTH, GplPage.UNITS, GplPage.GRID_SCALE, GplPage.GRID_FLAGS, GplPage.LEFT_GRID_MARGIN, GplPage.RIGHT_GRID_MARGIN, GplPage.BOTTOM_GRID_MARGIN, GplPage.TOP_GRID_MARGIN, GplPage.NUM_MINOR_GRID, GplPage.TYPE, GplPage.ACL, GplPage.CLASS, GplPage.DATE_MOD, GplPage.NUM_ELEMENT, GplPage.LOCKED, GplPage.FLAGS FROM GPL.GPL_PAGE GplPage
[177] Column count: 11
[178] ViewObject close prepared statements...
[179] ViewObject : Created new QUERY statement
[180] SELECT GplGroup.GROUP_ID, GplGroup.LINK_ID, GplGroup.USERNAME, GplGroup.GROUPNAME, GplGroup.ACL, GplGroup.CLASS, GplGroup.PAGE_ID, GplGroup.TAIL, GplGroup.TEST, GplGroup.SEQ, GplGroup.VERSION FROM GPL.GPL_GROUP GplGroup WHERE GplGroup.PAGE_ID = :1
[181] Binding null for 1
[182] Column count: 11
[183] ViewObject : Re-defining and reusing prepared Statement
[184] Binding param 1: 2
[185] JBOTableModel: Recvd Event=[RangeRefreshEvent: GplGroupView2 start=0 count=1]
[186] $$added root$$ id=-2
[187] $$added root$$ id=-73
[188] $$added root$$ id=-2559
[189] Column count: 11
[190] ViewObject : Reusing defined prepared Statement
[191] Binding param 1: 363793
[192] JBOTableModel: Recvd Event=[RangeRefreshEvent: GplGroupView2 start=0 count=1]
[193] Removing an unreferenced, available pool instance
[194] ViewObject close prepared statements...
[195] ViewObject close prepared statements...
[196] ViewObject close prepared statements...
[197] ViewObject close prepared statements...
[198] ViewObject close prepared statements...
[199] ViewObject close prepared statements...
[200] ViewObject close prepared statements...
[201] Clearing EO cache for ctf.database.gpl.bc.GplPage
[202] Clearing EO cache for ctf.database.gpl.bc.GplParam
[203] Clearing EO cache for ctf.database.gpl.bc.GplGroup
[204] Clearing EO cache for ctf.database.gpl.bc.GplElement
[205] Clearing EO cache for ctf.database.gpl.bc.GplPage
[206] Clearing EO cache for ctf.database.gpl.bc.GplParam
[207] Clearing EO cache for ctf.database.gpl.bc.GplGroup
[208] Clearing EO cache for ctf.database.gpl.bc.GplElement
[209] Resetting AM=BcModule
[210] *** closing jdbc connection now **** (oracle.jdbc.driver.OracleConnection@120)
[211] mUsePersColl is false
[212] ViewObjectImpl.mDefaultMaxRowsPerNode is 70
[213] ViewObjectImpl.mDefaultMaxActiveNodes is 30
BC4J Tester exit code(0) -
Active Directory users not made member of Local Network group
Hi all,
I've just done a clean install from 10.6 Server to 10.8.4.
The issue I seem to be having is a mismatch between what Groups in Server.app is reporting as members (who happen to be users or groups from our Active Directory domains) of a Local Network group and what dseditgroup reports as members of the same network.
The Setup:
In Groups in Server.app under Local Network Group I have created a group call "AccessServer"
Members in that group are:
- AD-Domain User Group (so should be all users in the domain)
- MacOS X "netaccounts" group (again, should capture all users that connect through the network I've used this in the past/10.6 very handy)
- AD User 1
- AD User 2
- AD User 3
The Server is bound to the AD Domain, All-Domains is not selected and a Search Path is added for each Domain needed and set at the top of the search order.
The Behaviour:
AD User 1 can access AFP and other services as expected.
AD User 2 and 3 cannot.
Another user within AD-Domain User Group or netaccounts can access AFP and other services as expected
Yet other users within AD-Domain User Group or netaccounts cannot
Furthermore:
If I REMOVE AD User 1 (a working user) *and* the AD Domain Group and netaccounts Group. I can still login with that account!
Diagnosis:
I tried checking group membership with dseditgroup, the results match the behaviour, not the setup.
>dseditgroup -o checkmember -m ADUser1 accessserver
yes ADUser1 is a member of accessserver
>dseditgroup -o checkmember -m ADUser2 accessserver
no ADUser2 is NOT member of accessserver
>dseditgroup -o checkmember -m ADDomainUser/netacc accessserver
yes ADDomainUser/netacc is a member of accessserver
>dseditgroup -o checkmember -m n accessserver
no ADUser2 is NOT member of accessserver
When non-member users try to connect I get a message in the logs of (IP/DNS values anonymized):
2013-06-25 3:04:36.794 PM sshd[5217]: error: PAM: authentication error for illegal user ----- from ----.mala.bc.ca via x.x.
I get the same results even after removing the user from the Groups screen!
Failed Solutions
- As we are a large AD I've tried specifying specific Active Direcotry servers that might better be able to find the users in question and authenticate.
- I've let the system just sit, in hopes delayed replication would solve the problem overnight.
- I've deleted and recreated the groups.Upon further investigation we have discovered:
a) the main behaviour that is causing the problem is best described as AD users that are added to a Local or Network OS X group... either individually or through a Domain group.... are not actually recognized as members of that OS X group even though the GUI or CLI tool have added them and acknowledge them as being in the list.
b) This is NOT limited only to MacOS X Server 10.8. The same behaviour is occuring on a long-running 10.6 server as well.
c) The problem remains whether we nest AD groups to capture a large bunch of users, or add users individually. If the user is part of the mysteriously denied set, how they are added to the OD or local group is irrelevant, including if added from the command line.
d) Which users are allowed and which are not is unclear and appears generally random. We have found 3 'classes' of users:
1 - those that are successfully becoming members every time.
2 - those that are intermittent members. Members on one server or another, or in one case even go from being reported as a member (by dseditgroup), to not being a member, to being a member again within the span of only a minute or two.
3 - those that are never successfully admitted as a member.
So the problem is both Apple's and Windows in that:
Apple: Is allowing a group and/or user to be added and implying then membership in the group even though that membership is not being honoured in some way and there is no feedback or communication of that fact aside from generic 'denied' or 'illegal user' errors.
Windows: Is passing along membership through its groups and users, but not completely, for reasons that are, at this point, a mystery.
Really hoping people have some ideas on this. This system of nested groups or individual user access is something we have of course being using for many years. So this is a major setback.
Maybe you are looking for
-
ITunes stops working when it's not the active window and connected to the internet
Hi, I have a problem with iTunes where it crashes, only when the wifi is on and connected to a network. Usually it occurs when I click onto another application outside of iTunes. I've tried reinstalling both iTunes and the Apple Application Support b
-
My brother and I phone number is link together on the same iTunes and Icloud therefore I am getting all his text messages on my phone, how do I stop this? He does not even have an Iphone anymore.
-
Pc and mac compatible drive format
I have a 2-year old macbook and it is a real piece of crap and I am unhappy that I bought it. I have a p.c. waiting for me for christmas and I was wondering how to change the format type on my external drive. Right now it is Mac OS extended (journale
-
I have an jsp web page that i want to implement using an xsl style sheet, Im getting funny errors and i dont know how to fix it, The code im using is <?xml-stylesheet type="text/xsl" href="http://******/xsl/1.xsl"?> <%@ contentType="application/xml"
-
Hello! We have a "flat frame" and want to have colour on only the fram? Can this be done? We have not figured out how to do this. If anyone knows how to do this we are glad :-) Best regards!