28 Dec
2015
28 Dec
'15
10:25 a.m.
On Wed, Dec 23, 2015 at 10:39 PM, Harrison Lambeth
<Harrison.Lambeth(a)aexp.com> wrote:
Hi Thomas,
Thanks for the quick response. I've enabled this and will see what comes up next time
this issue occurs.
Well enabling this all the time is not a good idea, it will quickly
make your log huge. My suggestion was more to enable it only when you
reproduce the issue since you seems to be able to reproduce it several
times when it happen.
Thanks,
Harrison
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Thomas Mortagne
Sent: Wednesday, December 23, 2015 9:02 AM
To: XWiki Users
Subject: Re: [xwiki-users] Active Directory / LDAP lockouts
On Mon, Dec 21, 2015 at 6:49 PM, Harrison Lambeth <Harrison.Lambeth(a)aexp.com>
wrote:
--
Thomas Mortagne
Hey all,
I have an instance of XWiki running that is integrated with Active Directory. 99% of the
time, users are able to log in without issues. However, once in a while (every month or
two), a user will get kicked off (signed out and their credentials no longer work). After
a couple hours, they are able to log in perfectly fine. During this time, other users have
no login issues and using a different browser, clearing cookies/cache, etc do not seem to
help at all. Additionally, the user can still log into other systems that use Active
Directory with those same credentials. It also doesn't look like this is happening
because of a password reset as far as I can tell; today a user was locked out but their
last password reset was last week some time.
Does anyone have any ideas about what might be causing this, or at least know how to
narrow it down to figure out if it's an XWiki issue or if it's something else? I
have been poking around through the log files but I haven't been able to see anything
out of the ordinary.
The best when it happen again would be to enable debug log (see
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HEnableL…)
to see in detail what XWiki is doing during the failing authentication.
Thanks,
Harrison
American Express made the following annotations
**********************************************************************
********
"This message and any attachments are solely for the intended recipient and may
contain confidential or privileged information. If you are not the intended recipient, any
disclosure, copying, use, or distribution of the information included in this message and
any attachments is prohibited. If you have received this communication in error, please
notify us by reply e-mail and immediately and permanently delete this message and any
attachments. Thank you."
American Express a ajouté le commentaire suivant le Ce courrier et
toute pièce jointe qu'il contient sont réservés au seul destinataire
indiqué et peuvent renfermer des
renseignements confidentiels et privilégiés. Si vous n'êtes pas le destinataire
prévu, toute divulgation, duplication, utilisation ou distribution du courrier ou de toute
pièce jointe est interdite. Si vous avez reçu cette communication par erreur, veuillez
nous en aviser par courrier et détruire immédiatement le courrier et les pièces jointes.
Merci.
**********************************************************************
********
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
American Express made the following annotations
******************************************************************************
"This message and any attachments are solely for the intended recipient and may
contain confidential or privileged information. If you are not the intended recipient, any
disclosure, copying, use, or distribution of the information included in this message and
any attachments is prohibited. If you have received this communication in error, please
notify us by reply e-mail and immediately and permanently delete this message and any
attachments. Thank you."
American Express a ajouté le commentaire suivant le Ce courrier et toute pièce jointe
qu'il contient sont réservés au seul destinataire indiqué et peuvent renfermer des
renseignements confidentiels et privilégiés. Si vous n'êtes pas le destinataire
prévu, toute divulgation, duplication, utilisation ou distribution du courrier ou de toute
pièce jointe est interdite. Si vous avez reçu cette communication par erreur, veuillez
nous en aviser par courrier et détruire immédiatement le courrier et les pièces jointes.
Merci.
******************************************************************************
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users