Univention Bugzilla – Bug 44382
The initialization of the module failed: INVALID_CREDENTIALS: {'desc': 'Invalid credentials'}
Last modified: 2018-10-04 13:44:23 CEST
Version: 4.2-0 errata0 (Lesum) Traceback(2f3ef65aec439efd21b19f22fa444fab): Traceback (most recent call last): File "%PY2.7%/univention/management/console/protocol/modserver.py", line 178, in _recv self.handle(msg) File "%PY2.7%/univention/management/console/protocol/modserver.py", line 178, in _recv self.handle(msg) File "%PY2.7%/univention/management/console/protocol/modserver.py", line 178, in _recv self.handle(msg) File "%PY2.7%/univention/management/console/protocol/modserver.py", line 178, in _recv self.handle(msg) File "%PY2.7%/univention/management/console/protocol/modserver.py", line 178, in _recv self.handle(msg) File "%PY2.7%/univention/management/console/protocol/modserver.py", line 290, in handle self.__handler.init() File "%PY2.7%/univention/management/console/modules/udm/__init__.py", line 157, in init self.settings = UDM_Settings() File "%PY2.7%/univention/management/console/modules/udm/udm_ldap.py", line 886, in __init__ self.read() File "%PY2.7%/univention/management/console/modules/udm/udm_ldap.py", line 889, in read self._read_directories() File "%PY2.7%/univention/management/console/modules/udm/udm_ldap.py", line 88, in _decorated return method(*args, **kwargs) File "%PY2.7%/univention/management/console/ldap.py", line 140, in _decorated kwargs[loarg], kwargs[poarg] = lo, po = getter() File "%PY2.7%/univention/management/console/ldap.py", line 130, in getter conn = connection() File "%PY2.7%/univention/management/console/ldap.py", line 53, in connection bind(lo) File "%PY2.7%/univention/management/console/modules/udm/__init__.py", line 173, in bind_user_connection super(Instance, self).bind_user_connection(lo) File "%PY2.7%/univention/management/console/base.py", line 353, in bind_user_connection lo.lo.bind(self._user_dn, self._password) File "%PY2.7%/univention/uldap.py", line 165, in bind self.lo.simple_bind_s(self.binddn, self.__encode_pwd(self.bindpw)) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 879, in simple_bind_s res = self._apply_method_s(SimpleLDAPObject.simple_bind_s,*args,**kwargs) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 860, in _apply_method_s return func(self,*args,**kwargs) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 215, in simple_bind_s resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 476, in result3 resp_ctrl_classes=resp_ctrl_classes File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 483, in result4 ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 106, in _ldap_call result = func(*args,**kwargs) INVALID_CREDENTIALS: The initialization of the module failed
Version: 4.2-0 errata0 (Lesum)
Version: 4.2-0 errata0 (Lesum) Remark: Hallo Support, das Test-System mit dem ich UCS 4.2 testen möchte, erhält keine Lizenz.
Version: 4.2-0 errata1 (Lesum)
Version: 4.2-0 errata4 (Lesum)
Version: 4.2-0 errata4 (Lesum) Remark: Error occurs on opening of CUPS Printer dialog in web GUI.
#2017051621000613 #2017051521000053 #2017051521000044 #2017051221000602 #2017051121000551 Version: 4.2-0 errata15 (Lesum) Remark: I have completed the installation using the ESX image, but I am getting an error when I am trying to import the license file. Version: 4.2-0 errata4 (Lesum) Remark: Aufruf von Benutzerübersicht
Version: 4.2-0 errata15 (Lesum) Remark: DNS module error
I think we have a problem in the LDAP server itself here. I have this problem every day on my xen3 system: # strace -p $(pgrep -f slapd) Process 6332 attached futex(0x7f113a09c9d0, FUTEX_WAIT, 6333, NULL After restarting slapd everything works until the next day. Comment 2 has been split into Bug #44621.
A lot of other services are affected then, too. E.g: May 22 15:22:49 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials May 22 15:22:54 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials May 22 15:22:59 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials May 22 15:23:04 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials May 22 15:23:04 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': bind failed May 22 15:23:04 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials May 22 15:23:09 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials May 22 15:23:09 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials May 22 15:23:14 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials May 22 15:23:14 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials May 22 15:23:19 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': bind failed May 22 15:23:19 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials May 22 15:23:19 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': bind failed May 22 15:23:19 xen3 named[25729]: zone 0.168.192.in-addr.arpa/IN: refresh: unexpected rcode (SERVFAIL) from master 127.0.0.1#7777 (source 0.0.0.0#0) May 22 15:23:24 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials May 22 15:23:29 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials May 22 15:23:34 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': bind failed
Reported again, 4.2-0 errata15 (Lesum), #2017052221000031
Reported again, 4.2-0 errata25 (Lesum) #2017052921000671
The regular ldap bind with the machine account works. The bind with Administrator doesn't work. In my case - on a UCS as AD member system - this is because the Administrator's "userPassword" attribute is set to "{KINIT}". "kinit Administrator" tells me that the clock is out of sync with the active directory server ("clock skew") and happens after I start the VM. But the VM then updates its time automatically after a short time - I think that I saw the same error even after the clock was already synced again (Not sure, have to proove it 100%). So, I don't know what we can do? Masking the error/traceback? Might not be the best solution as we also have errors like Bug #44621.
Ok, then we should add a "rdate -n $kerberos_kdc" somewhere in the boot process? Or in the login process?
(In reply to Arvid Requate from comment #18) > Ok, then we should add a "rdate -n $kerberos_kdc" somewhere in the boot > process? Or in the login process? No, I mean the time on the AD machine is wrong not the one on UCS side. We have further feedback with a mail address here, I will ask for more details.
Version: 4.2-0 errata26 (Lesum) 2017060521000463 2017061121000041 2017060721000263 2017061121000157 2017061121000031 Remark: Fehler über Fehler,- Der Menüpunkt DNS lässt sich nicht aufrufen. Das Modul stürzt ab Remark: Auch das Netzwerkmodul lässt sich nicht aufrufen. Auch hier stürzt das Modul zuverlässig zu 100% ab
> No, I mean the time on the AD machine is wrong not the one on UCS side. If the UCS system is member of an AD domain, then by definition the time of the AD DC is authoritative.
4.2-0 errata29 (Lesum), #2017061221000941
4.2-0 errata29 (Lesum), #2017061321000617
4.2-0 errata29 (Lesum), #2017061321000635
4.2-0 errata29 (Lesum), #2017061521000471
Reported again, 4.2-0 errata52 (Lesum) #2017061921000688 Remark: brand new install of UCS
Ticket #2017061921000688 Remark: I was trying to set up a back up active directory and I think this error occurred because I has also selected some applications to install including the domain controller. For the back up UCS AD it would seem that you do not really install anything from that last section.
Version: 4.2-1 errata96 (Lesum) #2017071521000399 Remark: What's happens? After the upgrade more and more failures
Reported again, 4.2-0 errata45 (Lesum) Ticket#2017072021000263
I added temporary debug output and started the AD Member Jenkins job: ucs-ec2-tools (3.0.3-1): r81308 | Bug #44382: add temporary debug level of slapd
The problem in our AD Member Mode Jenkins tests is "unable to reach any KDC in realm ...".
Reported again, 4.2-1 errata52 (Lesum) #2017073121000591
Version: 4.2-1 errata52 (Lesum) #2017081921000013
This has probably to do with the SAML authentication.
*** Bug 38854 has been marked as a duplicate of this bug. ***
*** Bug 40505 has been marked as a duplicate of this bug. ***
*** Bug 40127 has been marked as a duplicate of this bug. ***
*** Bug 42370 has been marked as a duplicate of this bug. ***
*** Bug 45223 has been marked as a duplicate of this bug. ***
*** Bug 45438 has been marked as a duplicate of this bug. ***
If the regular ldap bind fails a SASL bind with SAML is performed. If this succeeds the internal auth_type state is set to "SAML". An error is logged then because this would be the proove that we have a bug in the auth-type-state detection. More useful information are now written on PROCESS level into the logfile. univention-management-console (9.0.80-73): dc1a71cde5ba | Bug #44382: Bug #45438: Merge branch 'fbest/44382-invalid-credentials' into 4.2-2 a35a2bd1b0d2 | Bug #44382: try to authenticate via SAML if simple bind failed. Add more logging. 0f023244c2de | Merge branch 'fbest/44382-invalid-credentials' into 4.2-2 a53597a4173c | Bug #44382: be more verbose about LDAP authentication failures univention-management-console.yaml: 8d1c30177a69 | YAML Bug #44382
Tests: I was unable to reproduce the issue. But the login still works. Code review: OK YAML: OK
<http://errata.software-univention.de/ucs/4.2/196.html>
This happened in Daniels VM with the school-import module, which fortunately logs the password length. Here is the log output: /var/log/univention/management-console-server.log 13.10.17 13:02:25.262 MODULE ( PROCESS ) : Setting auth type to None 13.10.17 13:02:25.456 MAIN ( PROCESS ) : Updating user password in 0 running module processes (auth-type: None). 13.10.17 13:02:25.471 MAIN ( PROCESS ) : running: ['/usr/sbin/univention-management-console-module', '-m', 'schoolimport', '-s', '/var/run/univention-management-console/1292-1507892545471.socket', '-d', '2', '-l', 'de_DE.UTF-8'] 13.10.17 13:02:37.436 MAIN ( WARN ) : Socket died (module=schoolimport) 13.10.17 13:02:37.437 MAIN ( WARN ) : Module process schoolimport died (pid: 2827, exit status: -1, signal: -1, status: -1) 13.10.17 13:02:37.437 MAIN ( WARN ) : Cleaning up requests 13.10.17 13:02:37.437 MAIN ( WARN ) : Remove inactivity timer 13.10.17 13:02:37.437 MAIN ( PROCESS ) : ModuleProcess: child died 13.10.17 13:02:57.149 MAIN ( PROCESS ) : Connection timed out. 13.10.17 13:02:57.150 MAIN ( PROCESS ) : Processor: dying /var/log/univention/management-console-web-server.log 13.10.17 13:00:44.786 MAIN ( PROCESS ) : SessionClient(0x7f76d1a38cd0): _authenticated: success=True status=200 message=None 13.10.17 13:00:44.786 MAIN ( PROCESS ) : auth_type='SAML' 13.10.17 13:02:25.458 MAIN ( PROCESS ) : SessionClient(0x7f76d1a458d0): _authenticated: success=True status=200 message=None 13.10.17 13:02:27.279 MAIN ( PROCESS ) : CPCommand (10.205.1.18:37100) response status code: 591 13.10.17 13:02:27.280 MAIN ( PROCESS ) : CPCommand (10.205.1.18:37100) response message: Die Ausführung des Kommandos schoolimport/ping ist fehlgeschlagen: Traceback (most recent call last): File "/usr/lib/pymodules/python2.7/univention/management/console/protocol/modserver.py", line 182, in _recv self.handle(msg) File "/usr/lib/pymodules/python2.7/univention/management/console/protocol/modserver.py", line 292, in handle self.__handler.init() File "/usr/lib/pymodules/python2.7/univention/management/console/modules/schoolimport/__init__.py", line 68, in init self.client = Client(self.username, self.password, log_level=Client.LOG_RESPONSE) File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 316, in __init__ setattr(self, cls_name, kls(self)) File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 399, in __init__ self.resource_url = self.client.resource_urls[self.resource_name] File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 326, in resource_urls self._resource_urls = self.call_api('get', '.') File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 390, in call_api raise exc(msg, status_code=response.status_code) BadRequest: Received status_code=400 with reason='Bad Request' for requests.get(**files=None, url=u'https://m150.uni.dtr/api/v1/', auth=('teacher1', u'****************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************'), headers={u'Accept': u'application/json'}, params=None, data=None). 13.10.17 13:02:27.280 MAIN ( PROCESS ) : CPCommand (10.205.1.18:37100) response result: None 13.10.17 13:06:05.763 MAIN ( PROCESS ) : SessionClient(0x7f76d1962b10): _authenticated: success=True status=200 message=None 13.10.17 13:06:05.764 MAIN ( PROCESS ) : auth_type='SAML' 13.10.17 13:10:03.531 DEBUG_INIT /var/log/univention/management-console-module-schoolimport.log 13.10.17 13:02:25.732 DEBUG_INIT 13.10.17 13:02:26.981 MODULE ( PROCESS ) : Loading python module. 13.10.17 13:02:27.186 MODULE ( PROCESS ) : Imported python module. 13.10.17 13:02:27.186 MODULE ( PROCESS ) : Module instance created. 13.10.17 13:02:27.186 MODULE ( PROCESS ) : Module socket initialized. 13.10.17 13:02:27.233 MODULE ( PROCESS ) : Setting user LDAP DN 'uid=teacher1,cn=lehrer,cn=users,ou=SchuleDrei,dc=uni,dc=dtr' 13.10.17 13:02:27.233 MODULE ( PROCESS ) : Setting auth type to None 13.10.17 13:02:27.233 MODULE ( PROCESS ) : Initializing module. 13.10.17 13:02:27.276 MODULE ( PROCESS ) : Die Ausführung des Kommandos ist fehlgeschlagen: 13.10.17 13:02:27.277 MODULE ( PROCESS ) : Die Ausführung des Kommandos schoolimport/ping ist fehlgeschlagen: Traceback (most recent call last): File "/usr/lib/pymodules/python2.7/univention/management/console/protocol/modserver.py", line 182, in _recv self.handle(msg) File "/usr/lib/pymodules/python2.7/univention/management/console/protocol/modserver.py", line 292, in handle self.__handler.init() File "/usr/lib/pymodules/python2.7/univention/management/console/modules/schoolimport/__init__.py", line 68, in init self.client = Client(self.username, self.password, log_level=Client.LOG_RESPONSE) File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 316, in __init__ setattr(self, cls_name, kls(self)) File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 399, in __init__ self.resource_url = self.client.resource_urls[self.resource_name] File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 326, in resource_urls self._resource_urls = self.call_api('get', '.') File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 390, in call_api raise exc(msg, status_code=response.status_code) BadRequest: Received status_code=400 with reason='Bad Request' for requests.get(**files=None, url=u'https://m150.uni.dtr/api/v1/', auth=('teacher1', u'****************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************'), headers={u'Accept': u'application/json'}, params=None, data=None). 13.10.17 13:02:37.277 MAIN ( WARN ) : Shutting down all open connections
Reported again: Version: 4.2-1 errata52 (Lesum) Ticket#2018081721000695 The initialization of the module failed: Traceback (most recent call last): File "%PY2.7%/univention/management/console/protocol/modserver.py", line 178, in _recv self.handle(msg) File "%PY2.7%/univention/management/console/protocol/modserver.py", line 291, in handle self.__handler.init() File "%PY2.7%/univention/management/console/modules/udm/__init__.py", line 155, in init self.settings = UDM_Settings() File "%PY2.7%/univention/management/console/modules/udm/udm_ldap.py", line 898, in __init__ self.read() File "%PY2.7%/univention/management/console/modules/udm/udm_ldap.py", line 901, in read self._read_directories() File "%PY2.7%/univention/management/console/modules/udm/udm_ldap.py", line 88, in _decorated return method(*args, **kwargs) File "%PY2.7%/univention/management/console/ldap.py", line 140, in _decorated kwargs[loarg], kwargs[poarg] = lo, po = getter() File "%PY2.7%/univention/management/console/ldap.py", line 130, in getter conn = connection() File "%PY2.7%/univention/management/console/ldap.py", line 53, in connection bind(lo) File "%PY2.7%/univention/management/console/modules/udm/__init__.py", line 169, in bind_user_connection super(Instance, self).bind_user_connection(lo) File "%PY2.7%/univention/management/console/base.py", line 353, in bind_user_connection lo.lo.bind(self._user_dn, self._password) File "%PY2.7%/univention/uldap.py", line 165, in bind self.lo.simple_bind_s(self.binddn, self.__encode_pwd(self.bindpw)) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 879, in simple_bind_s res = self._apply_method_s(SimpleLDAPObject.simple_bind_s,*args,**kwargs) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 860, in _apply_method_s return func(self,*args,**kwargs) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 215, in simple_bind_s resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 476, in result3 resp_ctrl_classes=resp_ctrl_classes File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 483, in result4 ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 106, in _ldap_call result = func(*args,**kwargs) INVALID_CREDENTIALS: {'desc': 'Invalid credentials'}