Mailing List CGatePro@mail.stalker.com Message #105142
From: <trymes@rymes.com>
Subject: Re: Mysterious LDAP inquiries
Date: Tue, 2 Sep 2014 09:15:24 -0700
To: CommuniGate Pro Discussions <CGatePro@mail.stalker.com>
Gib,

You are aware that MacOS and Linux are both capable of using SMB, no? Also, as others have pointed out, MacOS definitely uses LDAP, so that could be your problem.

Tim

On Sep 1, 2014, at 6:15 AM, "Gib Henry" <gib@realpeople.com> wrote:

Well, no SMB nor Micro$loth nor AD, so I guess that isn't it, thanks!  :-)  Cheers,
--
Gib


On 8/31/14, 4:47 PM, Juergen P. [core] wrote:
behave! :-|

so henry,  do you have n smb share ?

the netlogon request is a typically authentication to microsoft AD  via LDAP so check your services and dns.
_msdcs.your-fqdn-domain-name
_sites.your-fqdn-domain-name
_tcp.your-fqdn-domain-name
_udp.your-fqdn-domain-name


try nslookup to find such records - if you receive the .17 ip  your zone is misconfigured.




On Sun, 31 Aug 2014 08:11:07 -0500
 Gib Henry <gib@realpeople.com> wrote:
        .115 is my machine, trying to do an LDAP inquiry to CGP at .117.

 On 8/31/14, 6:00 AM, CommuniGate Pro Discussions wrote:    
 Is   the  IP  24.73.176.115  yours?  Doing  a  lookup  on the other IP
 24.73.176.117 points to mail.realpeople.com.

 24.73.176.115 appears to be the inbound connection to LDAP (if I'm not
 mistaken). Is the IP on the same machine as CGP?

    

 On Saturday, August 30, 2014, 3:15:34 PM, Gib wrote:
 Thank you for your in-depth response.  I can find no trace of LDAP in 
 either Directory Utility or Internet Accounts, and have never been 
 involved with Exchange.  I turned LDAP back on with log level set to all
 info, and it took less than 20 minutes for the incoming request, which
 repeated several times in rapid succession.
 Unfortunately, I don't see any info to suggest the source of the 
 request, do you?  Cheers,
 --
 Gib Henry
 13:13:44.448 2 SYSTEM User 'postmaster' has updated the LDAP module settings
 13:13:46.001 2 LDAP [0.0.0.0]:636 listener ready for connections
 13:13:46.001 2 LDAP [0.0.0.0]:389 listener ready for connections
 13:32:11.393 5 LDAP [0.0.0.0]:389 <- [24.73.176.115]:52833 connection 
 request. socket=38
 13:32:11.393 5 LDAP new VStream created, 1 total
 13:32:11.393 5 LDAP stream thread started
 13:32:11.393 4 LDAP-003041([24.73.176.115]) [24.73.176.117]:389 <- 
 [24.73.176.115]:52833 incoming connection(realpeople.com)
 13:32:11.393 3 LDAP-003041([24.73.176.115]) request reading failed. 
 Error Code=connection closed by peer
 13:32:11.393 4 LDAP-003041([24.73.176.115]) closing connection
 13:32:11.393 4 LDAP-003041([24.73.176.115]) releasing stream
 13:32:12.191 5 LDAP [0.0.0.0]:389 <- [24.73.176.115]:52838 connection 
 request. socket=38
 13:32:12.191 4 LDAP-003042([24.73.176.115]) [24.73.176.117]:389 <- 
 [24.73.176.115]:52838 incoming connection(realpeople.com)
 ...   
--
Best Regards

Juergen Paulhart

#############################################################

This message is sent to you because you are subscribed to

  the mailing list <CGatePro@mail.stalker.com>.

To unsubscribe, E-mail to: <CGatePro-off@mail.stalker.com>

To switch to the DIGEST mode, E-mail to <CGatePro-digest@mail.stalker.com>

To switch to the INDEX mode, E-mail to <CGatePro-index@mail.stalker.com>

Send administrative queries to  <CGatePro-request@mail.stalker.com>
Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster