1 Topic by Bronko

  • Bronko
  • Member
  • Offline
  • Registered: 2009-10-20
  • Posts: 112

Topic: iredapd error message in syslog without delivery issue

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.6.7
- Deployed with downloadable installer
- Linux/BSD distribution name and version: ubuntu 22.04
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====


Hi,

on every receiving email I get these error message at journalctl -f:

Dec 11 00:26:23 mail python3[310]: iredapd <!> Error while querying local domain: INSUFFICIENT_ACCESS({'desc': 'Insufficient access'})
Dec 11 00:26:23 mail python3[310]: iredapd <!> Error while querying alias domain: INSUFFICIENT_ACCESS({'desc': 'Insufficient access'})

(last line is repeating four times)

Email is working fine... any reason to worry about that?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,793

Re: iredapd error message in syslog without delivery issue

Seems the LDAP bind dn used in iRedAPD config file /opt/iredapd/settings.py doesn't have required privilege to query LDAP tree.

3 Reply by Bronko (edited by Bronko 2023-12-12 18:08:47)

  • Bronko
  • Member
  • Offline
  • Registered: 2009-10-20
  • Posts: 112

Re: iredapd error message in syslog without delivery issue

ZhangHuangbin wrote:

Seems the LDAP bind dn used in iRedAPD config file /opt/iredapd/settings.py doesn't have required privilege to query LDAP tree.

It is exactly what iRedMail.tips list for: - * LDAP bind dn (read-only) - (due to my fresh installasion) and double checked via LDAP browsing by Apache Directory Studio.