The mailing list for listmasters using Sympa

[Gerard Ranke <address@concealed>]

On 01/31/2017 10:45 AM, Stefan Hornburg (Racke) wrote:
> On 01/30/2017 04:54 PM, address@concealed wrote:
>> Hi,
>> I'm trying to install a sympa server (V. 6.2.16) with an active directory 
>> data
>> source but I always have this message "INTERNAL SERVER ERROR (edit_list) -
>> Failed to include members "
>>
>> Here is my configuration :
>> include_ldap_2level_query
>> timeout1 60
>> suffix1 OU=Mairie,DC=domaine,DC=lan
>> ca_verify none
>> name ad_group_info
>> scope2 base
>> suffix2 [attrs1]
>> attrs2 mail
>> filter2 (objectClass=person)
>> host server.domaine.lan:389
>> user weiss-adm
>> scope1 sub
>> ssl_ciphers ALL
>> use_tls none
>> attrs1 member
>> select2 first
>> ssl_version tlsv1_1
>> filter1 (&(cn=info)(objectClass=group))
>> timeout2 10
>> passwd #######
>> select1 all
>>
>> And that's what i found in the logs :
>> Jan 30 16:28:48 sympa-test wwsympa[1106]: err main::#1662 >
>> main::do_edit_list#12451 > Sympa::List::on_the_fly_sync_include#7252 >
>> Sympa::List::sync_include#6900 >
>> Sympa::List::_load_list_members_from_include#6130 >
>> Sympa::List::_include_users_ldap_2level#5527 Unable to connect to the LDAP
>> server "server.domaine.lan:389"
>> Jan 30 16:28:48 sympa-test wwsympa[1106]: err main::#1662 >
>> main::do_edit_list#12451 > Sympa::List::on_the_fly_sync_include#7252 >
>> Sympa::List::sync_include#6900 >
>> Sympa::List::_load_list_members_from_include#6130 >
>> Sympa::List::_include_users_ldap_2level#5527 Unable to connect to the LDAP
>> server "server.domaine.lan:389"
>>
>> Does anybody has a clue ?
>> Thanks,
>>
>> Jean-Pierre
>>
> 
> Hello Jean-Pierre,
> 
> unfortunately Sympa doesn't include the connection error in these log 
> messages.
> 
> You could try to run ldapsearch from the Sympa server with your parameters 
> to see if that works.
> 
> Regards
>          Racke
> 

The error message said: Unable to connect to the LDAP server
"server.domaine.lan:389". So what I would do first is to try and connect
to the AD server from your sympa host with telnet or openssl s_client in
case you use TLS. You might have a firewall in the way.
Best,

gerard