agora inbox for pgsql-admin@postgresql.org
help / color / mirror / Atom feedFrom: Luc DALLEMANE <ldallemane@alaloop.com>
To: pgsql-admin@postgresql.org <pgsql-admin@postgresql.org>
Subject: LDAP authentication problem.
Date: Mon, 26 Jan 2015 16:38:00 +0000
Message-ID: <1422290279924.8856@alaloop.com> (raw)
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
Hello,
I'm facing a problem with my web application.
For this project, I'm using :
Java 1.8, Postgres 9.4, Tomcat 7.0.56 and a cisco asa firewall.
The firewall is configured with an IP and port restriction.
The Web part is located in a DMZ and the database part in the LAN.
I'm using a combined REALM (LDAP and Database).
The problem is the following, we can connect to the application and use it, but after a while (don't know really when), you cannot connect again.
In the log, I can see that the LDAP authentication never ends. (I have put logs before and after calling the authenticate method but the last log is never displayed)
In tomcat log, the problem begins with :
org.apache.catalina.core.StandardService stopInternal
INFO: Stopping service Catalina
When we check the firewall, we get the following message :
Deny TCP (no connection) from WEB/50790 to DB/5432 FIN ACK on interface DMZ_clients
You have to restart tomcat to fix this bug and it works again (for a while...)
I can't find the cause of this problem.
Any answers are welcome.
Luc.
view thread (3+ messages) latest in thread
Message-ID: <1422290279924.8856@alaloop.com>
Permalink: ../1422290279924.8856@alaloop.com/
Also on: postgresql.org/message-id/1422290279924.8856@alaloop.com
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: ldallemane@alaloop.com
Subject: Re: LDAP authentication problem.
In-Reply-To: <1422290279924.8856@alaloop.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox