Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
Highlighted
Anonymous_User Absent Member.
Absent Member.
4054 views

iFolder 2.1.8 -- intermittent "Authentication failed"

We have an iFolder 2.1.8 server running on NetWare 6.5 SP7 that's been
in use since 2003. It is scheduled to be retired but we still have
several VIPs using it. Recently, said VIPs have been getting
intermittent "authentication failed" messages when they try to login.
There's nothing visibly wrong with their user accounts in eDirectory:
account and password are not expired, login is not disabled or locked
out. I haven't tried restarting the iFolder app or the server itself
because I don't know what I'll do if it doesn't come back up -- it
hasn't been rebooted in almost 18 months.

Can anyone think of something to look at?

Thanks


Labels (1)
0 Likes
9 Replies
Knowledge Partner
Knowledge Partner

Re: iFolder 2.1.8 -- intermittent "Authentication failed"

Douglas Black,
> Can anyone think of something to look at?


LDAP logs? What LDAP server is it authenticating to?

--
Anders Gustafsson (NKP)
The Aaland Islands (N60 E20)

Have an idea for a product enhancement? Please visit:
http://www.novell.com/rms

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: iFolder 2.1.8 -- intermittent "Authentication failed"

Anders Gustafsson,
>
> LDAP logs? What LDAP server is it authenticating to?
>


The iFolder Error log shows this intermittent error: "ldap_search_ext :
Can't contact LDAP server (81)." After five or six of those, there's a
"connection restored" message.

The iFolder server is in the DMZ and the LDAP server is a dedicated
eDirectory tree on the inside. I'll see what our firewall guy says.


Thanks


0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: iFolder 2.1.8 -- intermittent "Authentication failed"


> The iFolder Error log shows this intermittent error: "ldap_search_ext :
> Can't contact LDAP server (81)." After five or six of those, there's a
> "connection restored" message.
>
> The iFolder server is in the DMZ and the LDAP server is a dedicated
> eDirectory tree on the inside. I'll see what our firewall guy says.
>
>


Firewall guy says there are no dropped or blocked packets coming from
our iFolder server around the time that iFolder was saying "can't
contact LDAP server". Time for a packet trace, I suppose.

0 Likes
Knowledge Partner
Knowledge Partner

Re: iFolder 2.1.8 -- intermittent "Authentication failed"

Douglas Black,
> Time for a packet trace, I suppose.


Yes. Or try another LDAP server.

--
Anders Gustafsson (NKP)
The Aaland Islands (N60 E20)

Have an idea for a product enhancement? Please visit:
http://www.novell.com/rms

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: iFolder 2.1.8 -- intermittent "Authentication failed"

Anders Gustafsson,

>> Time for a packet trace, I suppose.

>
> Yes. Or try another LDAP server.
>

I tried adding a second LDAP server (another replica server in the same
tree). It gives the intermittent error on both.


0 Likes
Knowledge Partner
Knowledge Partner

Re: iFolder 2.1.8 -- intermittent "Authentication failed"

Douglas Black,
> I tried adding a second LDAP server (another replica server in the same
> tree). It gives the intermittent error on both.


OK. Time for a packet trace I guess to see if the problem is on the LDAP
server or client's side.

--
Anders Gustafsson (NKP)
The Aaland Islands (N60 E20)

Have an idea for a product enhancement? Please visit:
http://www.novell.com/rms

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: iFolder 2.1.8 -- intermittent "Authentication failed"

Anders Gustafsson,

>> I tried adding a second LDAP server (another replica server in the same
>> tree). It gives the intermittent error on both.

>
> OK. Time for a packet trace I guess to see if the problem is on the LDAP
> server or client's side.
>


One thing that just occurred to me: the SSL certificates for the
iFolder server expired a few weeks ago, which is approximately when this
issue began. Could that cause *some* clients to refuse to connect? I
still can't reproduce the issue on my own machine, but it's inside the
firewall.




0 Likes
Knowledge Partner
Knowledge Partner

Re: iFolder 2.1.8 -- intermittent "Authentication failed"

Douglas Black,
> Could that cause *some* clients to refuse to connect? I
> still can't reproduce the issue on my own machine, but it's inside the
> firewall.


Sounds unlikely, but I'd renew them just as well.

--
Anders Gustafsson (NKP)
The Aaland Islands (N60 E20)

Have an idea for a product enhancement? Please visit:
http://www.novell.com/rms

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: iFolder 2.1.8 -- intermittent "Authentication failed"

Anders Gustafsson,

>> Could that cause *some* clients to refuse to connect? I
>> still can't reproduce the issue on my own machine, but it's inside the
>> firewall.

>
> Sounds unlikely, but I'd renew them just as well.
>


It seemed unlikely to me as well, but after I ran PKIDIAG and TCKEYGEN
on the iFolder server, the issue was fixed for at least one user.


Thanks


0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.