[ZendTo] {Disarmed} RE: Re: {Disarmed} RE: Re: {Disarmed} RE: Re: issue with rendered site

Tue Dec 17 14:04:15 GMT 2013

Richard,

I have attempted to log into the site with the bind user account, I get the same message.

I decided to work on my next issue this morning which relates to the dropoff email. I attempted to get a request code from the drop off page, but get
[cid:image001.png at 01CEFB06.E1988DD0]

This is what was written to the error log on the Zendto box:

[Tue Dec 17 08:55:45 2013] [notice] Apache/2.2.22 (Ubuntu) PHP/5.3.10-1ubuntu3.9 with Suhosin-Patch mod_ssl/2.2.22 OpenSSL/1.0.1 configured -- resuming normal operations
[Tue Dec 17 08:55:56 2013] [error] [client 172.16.3.195] AYAH::__construct: Warning: Publisher key is not defined.  This won't work., referer: https://zendto.cshlaw.com/
[Tue Dec 17 08:55:56 2013] [error] [client 172.16.3.195] AYAH::__construct: Warning: Scoring key is not defined.  This won't work., referer: https://zendto.cshlaw.com/
[Tue Dec 17 08:56:08 2013] [error] [client 172.16.3.195] AYAH::__construct: Warning: Publisher key is not defined.  This won't work., referer: https://zendto.cshlaw.com/verify.php
[Tue Dec 17 08:56:08 2013] [error] [client 172.16.3.195] AYAH::__construct: Warning: Scoring key is not defined.  This won't work., referer: https://zendto.cshlaw.com/verify.php
sendmail: fatal: config variable inet_interfaces: host not found: alT

side note, I did the upgrade Jules sent the note about this morning as well.

[http://www.cshlaw.com/images/elogo_stacked.jpg]<http://www.cshlaw.com/>

Erik Britt
IT Department
e-mail<mailto:ebritt at cshlaw.com>
www.cshlaw.com<http:/www.cshlaw.com>

p       +19198638828
f       +19198633427

Post Office Box 27808
Raleigh NC 27611-7808

From: zendto-bounces at zend.to [mailto:zendto-bounces at zend.to] On Behalf Of Richard Patterson
Sent: Saturday, December 14, 2013 4:37 PM
To: ZendTo Users
Subject: [ZendTo] Re: {Disarmed} RE: Re: {Disarmed} RE: Re: issue with rendered site

Erik,

Have you tried logging into the front end using the username (without @domain.com<http://domain.com>) and password for the same user you use for the Bind user? (since it seems to authenticate with it ok for the initial bind)

There is probably not much more i can suggest without seeing the actual configs, and having a more details about how your domain is setup.

If you want to take it off list, i’m happy to look at the specifics, and make more informed suggestions… We can then report back to the list with the eventual solution.

However, I am away for the next couple of days, so wouldn’t be able to do much until I get back on Tuesday / Wednesday.

Regards

Richard

--
Richard Patterson

HelpQuick Ltd
The headquarters of
innovative IT solutions

Office: 0191 2582888, Fax: 0191 6408666
Web: http://www.helpquick.co.uk<http://www.helpquick.co.uk/>

Have you used our services? Why not write a review on the FreeIndex<http://www.freeindex.co.uk/wr.htm?id=144533&br=1> website

HelpQuick Limited, Registered in England & Wales, Company number
5334746, Vat registration number: 859 6133 89, Registered office:
18 Camden Square, North Shields, NE30 1NR, UK

On 13 Dec 2013, at 21:32, Erik Britt <ebritt at cshlaw.com<mailto:ebritt at cshlaw.com>> wrote:

I am still stuck with the “authentication error: the username and password was incorrect” I have attempted to configure our site to use LDAP auth, but don’t get any further that way either.

The site certainly appears to contact the DC to get validation. Does Zendto need a listing of available users to be able to authenticate them? Are there permissions I seem to be missing somewhere?

Thanks again,

Erik

[cid:~WRD000.jpg]<http://www.cshlaw.com/>

Erik Britt
IT Department
e-mail<mailto:ebritt at cshlaw.com>
MailScanner has detected a possible fraud attempt from "http:" claiming to be www.cshlaw.com<http://www.cshlaw.com/>

p

+19198638828

f

+19198633427

Post Office Box 27808
Raleigh NC 27611-7808

From: zendto-bounces at zend.to<mailto:zendto-bounces at zend.to> [mailto:zendto-bounces at zend.to] On Behalf Of Richard Patterson
Sent: Thursday, December 12, 2013 4:16 PM
To: ZendTo Users
Subject: [ZendTo] Re: {Disarmed} RE: Re: issue with rendered site

Erik,

Ok...

Are you in a multi-domain environment, or a single domain?

When logging in (at the front end), ZendTo strips off anything before a back slash (\) and after an @ sign, and appends the suffix before doing the lookup with LDAP, so you will need to leave the suffix as @domain.com<http://domain.com/> (or rather @domain.local i.e. the internal domain name).

It doesn’t append the suffix for the bind user, so try setting it as you had it with the @domain.com<http://domain.com/> bit.

My setup is a single domain, and I had my settings as per the settings i sent through.

I’ve also raised the function level to 2008R2 to test that it still works… which it does.

I feel you are very close to getting it sorted.

Let me know how you get on with the above.

Regards

Richard

--
Richard Patterson

HelpQuick Ltd
The headquarters of
innovative IT solutions

Office: 0191 2582888, Fax: 0191 6408666
Web: http://www.helpquick.co.uk<http://www.helpquick.co.uk/>

Have you used our services? Why not write a review on the FreeIndex<http://www.freeindex.co.uk/wr.htm?id=144533&br=1> website

HelpQuick Limited, Registered in England & Wales, Company number
5334746, Vat registration number: 859 6133 89, Registered office:
18 Camden Square, North Shields, NE30 1NR, UK

On 12 Dec 2013, at 18:32, Erik Britt <ebritt at cshlaw.com<mailto:ebritt at cshlaw.com>> wrote:

I have changed these fields, This is the only entry I get on the DC:
<image001.png>
Which I get for my account and the account set to bind.

Without either domain\user or user at domain.com<mailto:user at domain.com> I get this error:
<image002.png>

Our domain controllers are Server 2008 R2 and I did create this Zendto box from the VM.

Thank you,

<~WRD000.jpg><http://www.cshlaw.com/>

Erik Britt
IT Department
e-mail<mailto:ebritt at cshlaw.com>
MailScanner has detected a possible fraud attempt from "http:" claiming to bewww.cshlaw.com<http://www.cshlaw.com/>

p

+19198638828

f

+19198633427

Post Office Box 27808
Raleigh NC 27611-7808

From: zendto-bounces at zend.to<mailto:zendto-bounces at zend.to> [mailto:zendto-bounces at zend.to] On Behalf Of Richard Patterson
Sent: Thursday, December 12, 2013 12:26 PM
To: ZendTo Users
Subject: [ZendTo] Re: issue with rendered site

Please try setting the 'authLDAPAccountSuffix1' => '@domain.com<http://domain.com/>',

Also, remove the @domain.com<http://domain.com/> from the 'authLDAPBindUser1' setting.

Try setting the servers to just 1 server (easier to check logs, etc.)

Do you get anything in the logs on the server when trying to authenticate?

Which version of windows are you on?

Are you using the VM from Zend.To, or have you installed it yourself?

Regards

Richard

On 12/12/2013 16:56, Erik Britt wrote:
Richard thank you for your suggestions. I am able to resolve the DC’s by name from the Zendto box, (I added the info in the hosts file for good measure). I also don’t think we’re having a firewall issue/port issue, we get the same result with SSL turned on or off.

Currently, when turned off it appears the site will cannot find either my usernames or passwords.
<image003.jpg>
Here’s the AD entry in my preferences file:
'authenticator'             => 'AD',
'authLDAPBaseDN1'           => 'DC=domain,DC=com',

'authLDAPServers1'          => array('0.0.0.4','0.0.0.7','0.0.0.9'),    ----(our 3 domain controller's ip addresses)

'authLDAPAccountSuffix1'    => '',

'authLDAPUseSSL1'           => false,

'authLDAPBindUser1'         => 'user at domain.com<mailto:user at domain.com>',

'authLDAPBindPass1'         => '********',

'authLDAPOrganization1'     => '',
  // If you are not using this 2nd set of settings for a 2nd AD forest,
  // do not comment them out, but instead set them to be empty.
'authLDAPBaseDN2'           => '',
// Set
//            'authLDAPServers2'          => array(),
'authLDAPAccountSuffix2'    => '',

'authLDAPUseSSL2'           => false,

'authLDAPBindUser2'         => '',

'authLDAPBindPass2'         => '',

'authLDAPOrganization2'     => '',

-- snip --

Confidentiality Notice:  If you are not the intended recipient of this message, you are not authorized to intercept, read, print, retain, copy, forward, or disseminate this communication. This communication may contain information that is proprietary, attorney/client privileged, attorney work product, confidential or otherwise legally exempt from disclosure. If you have received this message in error, please notify the sender immediately either by phone (800-849-4444) or by return e-mail and destroy all copies of this message (electronic, paper, or otherwise).
_______________________________________________
ZendTo mailing list
ZendTo at zend.to<mailto:ZendTo at zend.to>
http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto

_______________________________________________
ZendTo mailing list
ZendTo at zend.to<mailto:ZendTo at zend.to>
http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20131217/264253cc/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ~WRD000.jpg
Type: image/jpeg
Size: 823 bytes
Desc: ~WRD000.jpg
Url : http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20131217/264253cc/attachment-0001.jpg 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 16948 bytes
Desc: image001.png
Url : http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20131217/264253cc/attachment-0001.png 