Re: [xwiki-users] LDAP-Login changes in new version

ok .. as i enabled ldap debugging i get tons of messages ;-) very good. here is a piece of xwiki.log when the login doesn't work (beginning with "Connection to LDAP server"): 11:31:34,605 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-3] DEBUG ldap.XWikiLDAPConnection - Connection to LDAP server [company.comp.co:389] 11:31:49,761 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-5] DEBUG LDAP.XWikiLDAPAuthServiceImpl - The provided user is null. We don't try to authenticate, it probably means the user is in non logged mode. 11:31:49,761 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-5] DEBUG ldap.XWikiLDAPConfig - ldap_group_classes: [groupofnames, groupwisedistributionlist, dynamicgroup, dynamicgroupaux, groupofuniquenames, group] 11:31:49,761 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-5] DEBUG ldap.XWikiLDAPConfig - ldap_group_memberfields: [member, uniquemember] 11:31:49,761 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-5] DEBUG ldap.XWikiLDAPConnection - Connection to LDAP server [company.comp.co:389] 11:31:55,621 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-3] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Local LDAP authentication failed. com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP bind failed with LDAPException. Wrapped Exception: Connect Error at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:174) at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:108) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:304) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:202) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:149) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148) at com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:203) at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3578) at com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:139) at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3586) at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4572) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196) at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432) at javax.servlet.http.HttpServlet.service(HttpServlet.java:710) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.plugin.webdav.XWikiDavFilter.doFilter(XWikiDavFilter.java:68) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:135) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447) at java.lang.Thread.run(Unknown Source) Wrapped Exception: java.net.ConnectException: Connection timed out: connect at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.PlainSocketImpl.doConnect(Unknown Source) at java.net.PlainSocketImpl.connectToAddress(Unknown Source) at java.net.PlainSocketImpl.connect(Unknown Source) at java.net.SocksSocketImpl.connect(Unknown Source) at java.net.Socket.connect(Unknown Source) at java.net.Socket.connect(Unknown Source) at java.net.Socket.<init>(Unknown Source) at java.net.Socket.<init>(Unknown Source) at com.novell.ldap.Connection.connect(Unknown Source) at com.novell.ldap.Connection.connect(Unknown Source) at com.novell.ldap.LDAPConnection.connect(Unknown Source) at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.connect(XWikiLDAPConnection.java:194) at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:166) at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:108) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:304) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:202) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:149) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148) at com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:203) at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3578) at com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:139) at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3586) at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4572) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196) at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432) at javax.servlet.http.HttpServlet.service(HttpServlet.java:710) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.plugin.webdav.XWikiDavFilter.doFilter(XWikiDavFilter.java:68) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:135) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447) at java.lang.Thread.run(Unknown Source) 11:31:55,621 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-3] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki DB 11:31:55,621 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-3] DEBUG LDAP.XWikiLDAPAuthServiceImpl - LDAP authentication failed for user [woeste] 11:31:55,918 [http://xwiki/bin/view/Main/DocumentDoesNotExist] [http-80-3] DEBUG LDAP.XWikiLDAPAuthServiceImpl - The provided user is null. We don't try to authenticate, it probably means the user is in non logged mode. ------------------------------------------------------------------------ here is a piece of xwiki.log when the login works again (one minute later) (also beginning with "Connection to LDAP server"): 11:32:21,496 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG ldap.XWikiLDAPConnection - Connection to LDAP server [company.comp.co:389] 11:32:21,543 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG ldap.XWikiLDAPConnection - Binding to LDAP server with credentials login=[CN=xWiKi,OU=ServicesAccounts,DC=company,DC=comp,DC=co] 11:32:21,684 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG ldap.XWikiLDAPUtils - Searching for the user in LDAP: user:asakur base:DC=company,DC=comp,DC=co query:(sAMAccountName=asakur) uid:sAMAccountName 11:32:21,684 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG ldap.XWikiLDAPConnection - LDAP search: baseDN=[DC=company,DC=comp,DC=co] query=[(sAMAccountName=asakur)] attr=[[sAMAccountName, sn, givenName, fullName, mail, dn]] ldapScope=[2] 11:32:21,746 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG ldap.XWikiLDAPConnection - - values for attribute "givenName" 11:32:21,762 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG ldap.XWikiLDAPConnection - |- [Stefan] 11:32:21,762 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG ldap.XWikiLDAPConnection - - values for attribute "sn" 11:32:21,762 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG ldap.XWikiLDAPConnection - |- [Woehrer] 11:32:21,762 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG ldap.XWikiLDAPConnection - - values for attribute "mail" 11:32:21,762 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG ldap.XWikiLDAPConnection - |- [woeste(a)company.at] 11:32:21,762 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG ldap.XWikiLDAPConnection - - values for attribute "sAMAccountName" 11:32:21,762 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG ldap.XWikiLDAPConnection - |- [woeste] 11:32:21,762 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG ldap.XWikiLDAPConnection - LDAP search found attributes: [{name=dn value=CN=company Kurt,OU=Poweruser,DC=company,DC=comp,DC=co}, {name=givenName value=woe}, {name=sn value=company}, {name=mail value=woeste(a)company.at}, {name=sAMAccountName value=woeste}] 11:32:21,809 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG LDAP.XWikiLDAPAuthServiceImpl - LDAP attributes will be used to update XWiki attributes. 11:32:21,809 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Creating new XWiki user based on LDAP attribues located at CN=Woehrer Stefan,OU=Poweruser,DC=company,DC=comp,DC=co 11:32:21,809 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Start synchronising LDAP profile .... even groupmapping works correctly 11:32:22,121 [http://xwiki.company/bin/loginsubmit/XWiki/XWikiLogin] [http-80-4] DEBUG ldap.XWikiLDAPConfig - Groupmapping found: XWiki.XWikiAdminGroup [CN=xwiki_Admin,OU=xWiki Groups,DC=company,DC=comp,DC=co] ... ------------------------------------------------------------------------ hope this helps

stefan I think you get "wrong passowrd" just because LDAP failed to connect for some reason so the authentication tried the XWiki authenticator and obviously it fail since the password is registered on LDAP server and not in XWiki database. Could you enable LDAP debug log (see http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HEnableL…) and try to reproduce it ? We will see better what append when LDAP fail to connect. -- View this message in context: http://n2.nabble.com/LDAP-Login-changes-in-new-version-tp2257004p2274317.ht… Sent from the XWiki- Users mailing list archive at Nabble.com. _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users