7 Oct
2008
7 Oct
'08
4:16 p.m.
Hello again,
I've been running XE 1.5 for a while and our LDAP authentication against
Active Directory works fine. I've installed a separate, test instance of
XE 1.6 and, using the same LDAP configuration, all of our login attempts
fail when going against our Active Directory server.
09:04:00,401 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1]
DEBUG LDAP.XWikiLDAPAuthServiceImpl - Found user dn with the user
object: null
09:04:00,402 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1]
DEBUG ldap.XWikiLDAPConfig - Ready to create user from
LDAP with fields
name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayNa
me,mail=mail,ldap_dn=dn
09:04:00,402 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1]
DEBUG ldap.XWikiLDAPUtils - Searching for the user in
LDAP: user:jnovak base:
query:(sAMAccountName=jnovak) uid:sAMAccountName
09:04:00,484 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1]
DEBUG ldap.XWikiLDAPConnection - LDAP Search failed
LDAPException: No Such Object (32) No Such Object
LDAPException: Server Message: 0000208D: NameErr: DSID-031001A8,
problem 2001 (NO_OBJECT),
data 0, best match of:
''
Our XE 1.5.2.12758 installation with the same configuration works fine.
Does the above error look to you like it's not even binding to the AD
server? That's my hunch.
The first log line on our working 1.5 install look like this when I
authenticate:
08:47:09,148 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6807-3]
DEBUG LDAP.XWikiLD APAuthServiceImpl - Found user dn with the user
object:
CN=Jamison Novak,CN=Users,DC=NNNNN,DC=com
This is our base_DN:
xwiki.authentication.ldap.base_DN=cn=Users,dc=NNNNN,dc=com
This is our bind_DN:
xwiki.authentication.ldap.bind_DN=cn=svc_webapp,ou=Service
Accounts,dc=NNNNN,dc=com
Is it possible that the space in the "ou=Service Accounts" is causing
some unlogged error? I tried putting quotes around the entire thing
(bind_dn="string here"), but that just caused it to fail to try LDAP at
all.
Any thoughts? I'm really confused why it's changed between 1.5 and 1.6
like this, at least for us.
-Jamie
7 Oct
7 Oct
7:32 p.m.
Hi Jamie,
On Tue, Oct 7, 2008 at 4:16 PM, Jamison Novak <JNovak(a)mltvacations.com> wrote:
Hello again,
I've been running XE 1.5 for a while and our LDAP authentication against
Active Directory works fine. I've installed a separate, test instance of
XE 1.6 and, using the same LDAP configuration, all of our login attempts
fail when going against our Active Directory server.
09:04:00,401 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1]
DEBUG LDAP.XWikiLDAPAuthServiceImpl - Found user dn with the user
object: null
09:04:00,402 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1]
DEBUG ldap.XWikiLDAPConfig - Ready to create user from
LDAP with fields
name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayNa
me,mail=mail,ldap_dn=dn
09:04:00,402 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1]
DEBUG ldap.XWikiLDAPUtils - Searching for the user in
LDAP: user:jnovak base:
query:(sAMAccountName=jnovak) uid:sAMAccountName
09:04:00,484 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1]
DEBUG ldap.XWikiLDAPConnection - LDAP Search failed
LDAPException: No Such Object (32) No Such Object
LDAPException: Server Message: 0000208D: NameErr: DSID-031001A8,
problem 2001 (NO_OBJECT),
data 0, best match of:
''
Our XE 1.5.2.12758 installation with the same configuration works fine.
Does the above error look to you like it's not even binding to the AD
server? That's my hunch.
The first log line on our working 1.5 install look like this when I
authenticate:
08:47:09,148 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6807-3]
DEBUG LDAP.XWikiLD APAuthServiceImpl - Found user dn with the user
object:
CN=Jamison Novak,CN=Users,DC=NNNNN,DC=com
This is our base_DN:
xwiki.authentication.ldap.base_DN=cn=Users,dc=NNNNN,dc=com
This is our bind_DN:
xwiki.authentication.ldap.bind_DN=cn=svc_webapp,ou=Service
Accounts,dc=NNNNN,dc=com
Shouldn't your base_DN be
xwiki.authentication.ldap.base_DN=dc=NNNNN,dc=com as your bind_DN does
not seems included in it ?
you can enable "debug" log to get more informations (see
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HEnableL…)
Is it possible that the space in the "ou=Service Accounts" is causing
some unlogged error? I tried putting quotes around the entire thing
(bind_dn="string here"), but that just caused it to fail to try LDAP at
all.
Any thoughts? I'm really confused why it's changed between 1.5 and 1.6
like this, at least for us.
Since XE 1.6, the default LDAP authenticator is
XWikiLDAPAuthServiceImpl as you can see in the log. Before that it was
LDAPAuthServiceImpl which is deprecated since 1.3. If you don't have
any xwiki.authentication.authclass explicitly configured in xwiki.cfg
that's the main difference between 1.5 and 1.6. If you want to use the
old LDAP authenticator you need to add
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.LDAPAuthServiceImpl
in xwiki.cfg
-Jamie
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
8:17 p.m.
Hi Thomas,
Thanks, as always, for the reply.
Shouldn't your base_DN be
xwiki.authentication.ldap.base_DN=dc=NNNNN,dc=com as your bind_DN
does not seems included in it ?
Our bind user isn't really a user, so I specified the base_DN in such a
way that only real people are included in the search. I've modified it
as you suggested, but it had no effect.
I have the DEBUG log enabled already, which is how I got the information
for my initial question. It is not altogether helpful, though.
Since XE 1.6, the default LDAP authenticator is
XWikiLDAPAuthServiceImpl as you can see in the log.
I have that specifically enabled in both my 1.5 and 1.6 xwiki.cfg file.
#-# new LDAP authentication service
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAut
hServiceImpl
With that enabled, our 1.5.2.12758 install of XWiki successfully
authenticates against our Active Directory domain. It binds, it
authenticates me, and logs me in.
Our 1.6.13286 install does not.
I think the problem is that, with the 1.6 installation, it is not
binding to the AD server while the 1.5 install is.
12:58:07,674 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1] DEBUG
LDAP.XWikiLDAPAuthServiceImpl
- Found user dn with the user object: null
[ ... ]
12:58:07,741 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1] DEBUG
ldap.XWikiLDAPConnection
- LDAP Search failed
LDAPException: No Such Object (32) No Such Object
LDAPException: Server Message: 0000208D: NameErr: DSID-031001A8,
problem 2001
(NO_OBJECT), data 0, best match of:
''
^@
LDAPException: Matched DN:
at com.novell.ldap.LDAPResponse.getResultException(Unknown
Source)
at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source)
at com.novell.ldap.LDAPSearchResults.next(Unknown Source)
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.searchLDAP(XWikiLDAPConnec
tion.java:270)
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPUtils.searchUserAttributesByUid(XWiki
LDAPUtils.java:507)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateIn
Context(XWikiLDAPAuthServiceImpl.java:338)
[ ... ]
In the 1.5 DEBUG log, the "Found user dn" log line returns the proper
information, rather than "null". (See my previous message).
What I want to know is why it succeeds in 1.5, but fails in 1.6 - both
using the same xwiki.cfg settings for all things LDAP. The DEBUG log is
not helping me understand why exactly it's failing.
The ONLY thing I can think of is that the space in "Service Accounts" in
our bind_DN is causing it to break under 1.6.
xwiki.authentication.ldap.bind_DN=cn=svc_webapp,ou=Service
Accounts,dc=MLT,dc=inc
Is that possible? Can you think of any other reasons why it would be
failing? Both instances are running on the same server, just obviously
not the same Java/Resin instance.
Confused,
Jamie
8 Oct
8 Oct
11:51 a.m.
On Tue, Oct 7, 2008 at 8:17 PM, Jamison Novak <JNovak(a)mltvacations.com> wrote:
Hi Thomas,
Thanks, as always, for the reply.
I would like to know too ;)
Shouldn't your base_DN be
xwiki.authentication.ldap.base_DN=dc=NNNNN,dc=com as your bind_DN
does not seems included in it ?
Our bind user isn't really a user, so I specified the base_DN in such a
way that only real people are included in the search. I've modified it
as you suggested, but it had no effect.
I have the DEBUG log enabled already, which is how I got the information
for my initial question. It is not altogether helpful, though.
Since XE 1.6, the default LDAP authenticator is
XWikiLDAPAuthServiceImpl as you can see in the log.
I have that specifically enabled in both my 1.5 and 1.6 xwiki.cfg file.
#-# new LDAP authentication service
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAut
hServiceImpl
With that enabled, our 1.5.2.12758 install of XWiki successfully
authenticates against our Active Directory domain. It binds, it
authenticates me, and logs me in.
Our 1.6.13286 install does not.
I think the problem is that, with the 1.6 installation, it is not
binding to the AD server while the 1.5 install is.
12:58:07,674 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1] DEBUG
LDAP.XWikiLDAPAuthServiceImpl
- Found user dn with the user object: null
[ ... ]
12:58:07,741 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1] DEBUG
ldap.XWikiLDAPConnection
- LDAP Search failed
LDAPException: No Such Object (32) No Such Object
LDAPException: Server Message: 0000208D: NameErr: DSID-031001A8,
problem 2001
(NO_OBJECT), data 0, best match of:
''
^@
LDAPException: Matched DN:
at com.novell.ldap.LDAPResponse.getResultException(Unknown
Source)
at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source)
at com.novell.ldap.LDAPSearchResults.next(Unknown Source)
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.searchLDAP(XWikiLDAPConnec
tion.java:270)
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPUtils.searchUserAttributesByUid(XWiki
LDAPUtils.java:507)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateIn
Context(XWikiLDAPAuthServiceImpl.java:338)
[ ... ]
In the 1.5 DEBUG log, the "Found user dn" log line returns the proper
information, rather than "null". (See my previous message).
What I want to know is why it succeeds in 1.5, but fails in 1.6 - both
using the same xwiki.cfg settings for all things LDAP. The DEBUG log is
not helping me understand why exactly it's failing.
The ONLY thing I can think of is that the space in "Service Accounts" in
our bind_DN is causing it to break under 1.6.
xwiki.authentication.ldap.bind_DN=cn=svc_webapp,ou=Service
Accounts,dc=MLT,dc=inc
Is that possible? Can you think of any other reasons why it would be
failing? Both instances are running on the same server, just obviously
not the same Java/Resin instance.
I don't think that's the problem no... but there something weird in your log:
LDAP: user:jnovak base:
query:(sAMAccountName=jnovak) uid:sAMAccountName
the base DN should be printed here so I think that's the problem: the
search is done with an empty base DN. My guess is that it's a bug
introduced in 1.6 but every unit test pass on this...
I'm searching a little more...
Confused,
Jamie
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
11:57 a.m.
On Wed, Oct 8, 2008 at 11:51 AM, Thomas Mortagne
<thomas.mortagne(a)xwiki.com> wrote:
--
Thomas Mortagne
On Tue, Oct 7, 2008 at 8:17 PM, Jamison Novak
<JNovak(a)mltvacations.com> wrote:
I think i found something, i'm fixing and committing and you will be
able to test if it's working for you with a 1.6-SNAPSHOT version.
Hi Thomas,
Thanks, as always, for the reply.
I would like to know too ;)
Shouldn't your base_DN be
xwiki.authentication.ldap.base_DN=dc=NNNNN,dc=com as your bind_DN
does not seems included in it ?
Our bind user isn't really a user, so I specified the base_DN in such a
way that only real people are included in the search. I've modified it
as you suggested, but it had no effect.
I have the DEBUG log enabled already, which is how I got the information
for my initial question. It is not altogether helpful, though.
Since XE 1.6, the default LDAP authenticator is
XWikiLDAPAuthServiceImpl as you can see in the log.
I have that specifically enabled in both my 1.5 and 1.6 xwiki.cfg file.
#-# new LDAP authentication service
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAut
hServiceImpl
With that enabled, our 1.5.2.12758 install of XWiki successfully
authenticates against our Active Directory domain. It binds, it
authenticates me, and logs me in.
Our 1.6.13286 install does not.
I think the problem is that, with the 1.6 installation, it is not
binding to the AD server while the 1.5 install is.
12:58:07,674 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1] DEBUG
LDAP.XWikiLDAPAuthServiceImpl
- Found user dn with the user object: null
[ ... ]
12:58:07,741 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1] DEBUG
ldap.XWikiLDAPConnection
- LDAP Search failed
LDAPException: No Such Object (32) No Such Object
LDAPException: Server Message: 0000208D: NameErr: DSID-031001A8,
problem 2001
(NO_OBJECT), data 0, best match of:
''
^@
LDAPException: Matched DN:
at com.novell.ldap.LDAPResponse.getResultException(Unknown
Source)
at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source)
at com.novell.ldap.LDAPSearchResults.next(Unknown Source)
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.searchLDAP(XWikiLDAPConnec
tion.java:270)
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPUtils.searchUserAttributesByUid(XWiki
LDAPUtils.java:507)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateIn
Context(XWikiLDAPAuthServiceImpl.java:338)
[ ... ]
In the 1.5 DEBUG log, the "Found user dn" log line returns the proper
information, rather than "null". (See my previous message).
What I want to know is why it succeeds in 1.5, but fails in 1.6 - both
using the same xwiki.cfg settings for all things LDAP. The DEBUG log is
not helping me understand why exactly it's failing.
The ONLY thing I can think of is that the space in "Service Accounts" in
our bind_DN is causing it to break under 1.6.
xwiki.authentication.ldap.bind_DN=cn=svc_webapp,ou=Service
Accounts,dc=MLT,dc=inc
Is that possible? Can you think of any other reasons why it would be
failing? Both instances are running on the same server, just obviously
not the same Java/Resin instance.
I don't think that's the problem no... but there something weird in your log:
LDAP: user:jnovak base:
query:(sAMAccountName=jnovak) uid:sAMAccountName
the base DN should be printed here so I think that's the problem: the
search is done with an empty base DN. My guess is that it's a bug
introduced in 1.6 but every unit test pass on this...
I'm searching a little more...
Confused,
Jamie
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
12:29 p.m.
On Wed, Oct 8, 2008 at 11:57 AM, Thomas Mortagne
<thomas.mortagne(a)xwiki.com> wrote:
--
Thomas Mortagne
--
Thomas Mortagne
On Wed, Oct 8, 2008 at 11:51 AM, Thomas Mortagne
<thomas.mortagne(a)xwiki.com> wrote:
You can download the last 1.6 version including the fix at
http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.6-SNAP….
I would be great if you could test it for your configuration.
On Tue, Oct 7, 2008 at 8:17 PM, Jamison Novak
<JNovak(a)mltvacations.com> wrote:
I think i found something, i'm fixing and committing and you will be
able to test if it's working for you with a 1.6-SNAPSHOT version. Hi Thomas,
Thanks, as always, for the reply.
I would like to know too ;)
Shouldn't your base_DN be
xwiki.authentication.ldap.base_DN=dc=NNNNN,dc=com as your bind_DN
does not seems included in it ?
Our bind user isn't really a user, so I specified the base_DN in such a
way that only real people are included in the search. I've modified it
as you suggested, but it had no effect.
I have the DEBUG log enabled already, which is how I got the information
for my initial question. It is not altogether helpful, though.
Since XE 1.6, the default LDAP authenticator is
XWikiLDAPAuthServiceImpl as you can see in the log.
I have that specifically enabled in both my 1.5 and 1.6 xwiki.cfg file.
#-# new LDAP authentication service
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAut
hServiceImpl
With that enabled, our 1.5.2.12758 install of XWiki successfully
authenticates against our Active Directory domain. It binds, it
authenticates me, and logs me in.
Our 1.6.13286 install does not.
I think the problem is that, with the 1.6 installation, it is not
binding to the AD server while the 1.5 install is.
12:58:07,674 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1] DEBUG
LDAP.XWikiLDAPAuthServiceImpl
- Found user dn with the user object: null
[ ... ]
12:58:07,741 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin]
[resin-tcp-connection-127.0.0.1:6808-1] DEBUG
ldap.XWikiLDAPConnection
- LDAP Search failed
LDAPException: No Such Object (32) No Such Object
LDAPException: Server Message: 0000208D: NameErr: DSID-031001A8,
problem 2001
(NO_OBJECT), data 0, best match of:
''
^@
LDAPException: Matched DN:
at com.novell.ldap.LDAPResponse.getResultException(Unknown
Source)
at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source)
at com.novell.ldap.LDAPSearchResults.next(Unknown Source)
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.searchLDAP(XWikiLDAPConnec
tion.java:270)
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPUtils.searchUserAttributesByUid(XWiki
LDAPUtils.java:507)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateIn
Context(XWikiLDAPAuthServiceImpl.java:338)
[ ... ]
In the 1.5 DEBUG log, the "Found user dn" log line returns the proper
information, rather than "null". (See my previous message).
What I want to know is why it succeeds in 1.5, but fails in 1.6 - both
using the same xwiki.cfg settings for all things LDAP. The DEBUG log is
not helping me understand why exactly it's failing.
The ONLY thing I can think of is that the space in "Service Accounts" in
our bind_DN is causing it to break under 1.6.
xwiki.authentication.ldap.bind_DN=cn=svc_webapp,ou=Service
Accounts,dc=MLT,dc=inc
Is that possible? Can you think of any other reasons why it would be
failing? Both instances are running on the same server, just obviously
not the same Java/Resin instance.
I don't think that's the problem no... but there something weird in your log:
LDAP: user:jnovak base:
query:(sAMAccountName=jnovak) uid:sAMAccountName
the base DN should be printed here so I think that's the problem: the
search is done with an empty base DN. My guess is that it's a bug
introduced in 1.6 but every unit test pass on this...
I'm searching a little more...
Confused,
Jamie
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
5:22 p.m.
Hi,
we do have an LDAP Auth problem to and i think it's the same as mentioned
here.
It did also happen in the 1.6m2 realease
http://n2.nabble.com/XWiki-1.6m2-Issues-td1084838.html
Could you provide the version including the fix. I couldn't find it
following the link provided in the last post and I would like to test it
too.
Thanks
Helmut
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1306913.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
7:40 p.m.
Hi,
On Wed, Oct 8, 2008 at 5:22 PM, hel-o <hel(a)hel.at> wrote:
Hi,
we do have an LDAP Auth problem to and i think it's the same as mentioned
here.
It did also happen in the 1.6m2 realease
http://n2.nabble.com/XWiki-1.6m2-Issues-td1084838.html
Could you provide the version including the fix. I couldn't find it
following the link provided in the last post and I would like to test it
too.
The provided link is where all xwiki-core 1.6 spnashots are built, you
just have to download the last jar file. For example at the time i'm
writing theses lines
http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.6-SNAP…
should be ok.
Thanks
Helmut
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1306913.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
7:45 p.m.
Fine Thanks,
i'll try that tomorrow.
Helmut
Thomas Mortagne wrote:
The provided link is where all xwiki-core 1.6 spnashots are built, you
just have to download the last jar file. For example at the time i'm
writing theses lines
http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.6-SNAP…
should be ok.
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1307329.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
9:50 p.m.
On Wednesday, October 8, 2008 at 5:30AM, Thomas Mortagne wrote:
http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.6-S
NAPSHOT/.
I think i
found something, i'm fixing and committing and you will be
able to test if it's working for you with a 1.6-SNAPSHOT version.
You can download the last 1.6 version including the fix at
I would be great if you could test it for your
configuration.
Thomas,
I downloaded xwiki-core-1.6-20081008.191325-999.jar and that seems to
have fixed the problem. I restarted Xwiki and was able to authenticate
against our Active Directory server once more.
Thank you so much for your quick work on that!
Best,
Jamie
9 Oct
9 Oct
9:41 a.m.
On Wed, Oct 8, 2008 at 9:50 PM, Jamison Novak <JNovak(a)mltvacations.com> wrote:
On Wednesday, October 8, 2008 at 5:30AM, Thomas
Mortagne wrote:
http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.6-S
NAPSHOT/.
Your arer welcome, thanks you for testing the fixes of my mistakes ;)
I think i
found something, i'm fixing and committing and you will be
able to test if it's working for you with a 1.6-SNAPSHOT version.
You can download the last 1.6 version including the fix at
I would be great if you could test it for your
configuration.
Thomas,
I downloaded xwiki-core-1.6-20081008.191325-999.jar and that seems to
have fixed the problem. I restarted Xwiki and was able to authenticate
against our Active Directory server once more.
Thank you so much for your quick work on that!
Best,
Jamie
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
10:55 a.m.
Hi,
tried it to, LDAP-Authentication worked on on instance (Windows Server 2003)
Doesn't work on another (Linux) but i don't think its related to the LDAP
problem we got here.
The Logging information is:
09:18:12,953 [] [http-80-2] DEBUG util.ModuleUtils - Get
module name for path /bin
09:18:12,953 [] [http-80-2] DEBUG util.ModuleUtils - Module
name found: default
09:18:12,953 [] [http-80-2] DEBUG action.RequestProcessor -
Processing a 'POST' for path '/loginsubmit/'
09:18:12,953 [] [http-80-2] DEBUG action.RequestProcessor - Looking
for Action instance for class com.xpn.xwiki.web.LoginSubmitAction
09:18:13,083 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-2]
DEBUG LDAP.XWikiLDAPAuthServiceImpl - Local LDAP authentication failed.
09:18:13,083 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-2]
DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki
DB
Thanks Helmut
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1311402.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
11:17 a.m.
On Thu, Oct 9, 2008 at 10:55 AM, hel-o <hel(a)hel.at> wrote:
Hi,
tried it to, LDAP-Authentication worked on on instance (Windows Server 2003)
Doesn't work on another (Linux) but i don't think its related to the LDAP
problem we got here.
The Logging information is:
09:18:12,953 [] [http-80-2] DEBUG util.ModuleUtils - Get
module name for path /bin
09:18:12,953 [] [http-80-2] DEBUG util.ModuleUtils - Module
name found: default
09:18:12,953 [] [http-80-2] DEBUG action.RequestProcessor -
Processing a 'POST' for path '/loginsubmit/'
09:18:12,953 [] [http-80-2] DEBUG action.RequestProcessor - Looking
for Action instance for class com.xpn.xwiki.web.LoginSubmitAction
09:18:13,083 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-2]
DEBUG LDAP.XWikiLDAPAuthServiceImpl - Local LDAP authentication failed.
09:18:13,083 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-2]
DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki
DB
You should have a lot more log than just that, it seems ldap is
disabled. Check the xwiki.authentication.ldap, it should be 1.
Thanks Helmut
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1311402.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
noon
Hi,
LDAP is enabled
here is my configuration -> this one works in the windows environment
#-------------------------------------------------------------------------------------
# LDAP
#-------------------------------------------------------------------------------------
#-# new LDAP authentication service
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl
#-# Turn LDAP authentication on - otherwise only XWiki authentication
#-# 0: disable
#-# 1: enable
xwiki.authentication.ldap=1
#-# LDAP Server (Active Directory, eDirectory, OpenLDAP, etc.)
xwiki.authentication.ldap.server=<SERVER>.<DOMAIN>
xwiki.authentication.ldap.port=389
#-# LDAP login, empty = anonymous access, otherwise specify full dn
#-# {0} is replaced with the username, {1} with the password
xwiki.authentication.ldap.bind_DN=<DOMAIN>\\{0}
xwiki.authentication.ldap.bind_pass={1}
#-# Force to check password after LDAP connection
#-# 0: disable
#-# 1: enable
xwiki.authentication.ldap.validate_password=0
#-# only members of the following group will be verified in the LDAP
#-# otherwise only users that are found after searching starting from the
base_DN
#
xwiki.authentication.ldap.user_group=cn=developers,ou=groups,o=MegaNova,c=US
#-# [Since 1.5RC1, XWikiLDAPAuthServiceImpl]
#-# only users not member of the following group can autheticate
# xwiki.authentication.ldap.exclude_group=cn=admin,ou=groups,o=MegaNova,c=US
#-# base DN for searches
xwiki.authentication.ldap.base_DN=dc=<DOMAIN>
#-# Specifies the LDAP attribute containing the identifier to be used as the
XWiki name (default=cn)
xwiki.authentication.ldap.UID_attr=sAMAccountName
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]
#-# Specifies the LDAP attribute containing the password to be used "when
xwiki.authentication.ldap.validate_password" is set to 1
# xwiki.authentication.ldap.password_field=userPassword
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]
#-# The potential LDAP groups classes. Separated by commas.
#
xwiki.authentication.ldap.group_classes=group,groupOfNames,groupOfUniqueNames,dynamicGroup,dynamicGroupAux,groupWiseDistributionList
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]
#-# The potential names of the LDAP groups fields containings the members.
Separated by commas.
# xwiki.authentication.ldap.group_memberfields=member,uniqueMember
#-# retrieve the following fields from LDAP and store them in the XWiki user
object (xwiki-attribute=ldap-attribute)
#-# ldap_dn=dn -- dn is set by class, caches dn in XWiki.user object for
faster access
xwiki.authentication.ldap.fields_mapping=last_name=sn,first_name=givenName,fullname=fullName,email=mail,ldap_dn=dn
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# on every login update the mapped attributes from LDAP to XWiki otherwise
this happens only once when the XWiki account is created.
xwiki.authentication.ldap.update_user=1
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# mapps XWiki groups to LDAP groups, separator is "|"
#
xwiki.authentication.ldap.group_mapping=XWiki.XWikiAdminGroup=cn=AdminRole,ou=groups,o=MegaNova,c=US|\
#
XWiki.Organisation=cn=testers,ou=groups,o=MegaNova,c=US
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# time in s after which the list of members in a group is refreshed from
LDAP (default=3600*6)
# xwiki.authentication.ldap.groupcache_expiration=21800
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# - create : synchronize group membership only when the user is first
created
#-# - always: synchronize on every login
xwiki.authentication.ldap.mode_group_sync=always
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# if ldap authentication fails for any reason, try XWiki DB authentication
with the same credentials
xwiki.authentication.ldap.trylocal=1
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# SSL connection to LDAP server
#-# 0: normal
#-# 1: SSL
# xwiki.authentication.ldap.ssl=0
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# The keystore file to use in SSL connection
# xwiki.authentication.ldap.ssl.keystore=
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]
#-# The java secure provider used in SSL connection
#
xwiki.authentication.ldap.ssl.secure_provider=com.sun.net.ssl.internal.ssl.Provider
Thomas Mortagne wrote:
On Thu, Oct 9, 2008 at 10:55 AM, hel-o <hel(a)hel.at> wrote:
You should have a lot more log than just that, it seems ldap is
disabled. Check the xwiki.authentication.ldap, it should be 1.
Helmut
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1311565.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
12:35 p.m.
On Thu, Oct 9, 2008 at 12:00 PM, hel-o <hel(a)hel.at> wrote:
Hi,
LDAP is enabled
here is my configuration -> this one works in the windows environment
You are right, if you had ldap=0 you would get "LDAP authentication
failed: LDAP not activ" in the debug log.
I don't see how there could be any difference between linux and
windows environment for LDAP authentication that makes LDAP fail on
linux...
I just comited a version that should give you a more detailed log, can
you download and try it ?
#-------------------------------------------------------------------------------------
# LDAP
#-------------------------------------------------------------------------------------
#-# new LDAP authentication service
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl
#-# Turn LDAP authentication on - otherwise only XWiki authentication
#-# 0: disable
#-# 1: enable
xwiki.authentication.ldap=1
#-# LDAP Server (Active Directory, eDirectory, OpenLDAP, etc.)
xwiki.authentication.ldap.server=<SERVER>.<DOMAIN>
xwiki.authentication.ldap.port=389
#-# LDAP login, empty = anonymous access, otherwise specify full dn
#-# {0} is replaced with the username, {1} with the password
xwiki.authentication.ldap.bind_DN=<DOMAIN>\\{0}
xwiki.authentication.ldap.bind_pass={1}
#-# Force to check password after LDAP connection
#-# 0: disable
#-# 1: enable
xwiki.authentication.ldap.validate_password=0
#-# only members of the following group will be verified in the LDAP
#-# otherwise only users that are found after searching starting from the
base_DN
#
xwiki.authentication.ldap.user_group=cn=developers,ou=groups,o=MegaNova,c=US
#-# [Since 1.5RC1, XWikiLDAPAuthServiceImpl]
#-# only users not member of the following group can autheticate
# xwiki.authentication.ldap.exclude_group=cn=admin,ou=groups,o=MegaNova,c=US
#-# base DN for searches
xwiki.authentication.ldap.base_DN=dc=<DOMAIN>
#-# Specifies the LDAP attribute containing the identifier to be used as the
XWiki name (default=cn)
xwiki.authentication.ldap.UID_attr=sAMAccountName
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]
#-# Specifies the LDAP attribute containing the password to be used "when
xwiki.authentication.ldap.validate_password" is set to 1
# xwiki.authentication.ldap.password_field=userPassword
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]
#-# The potential LDAP groups classes. Separated by commas.
#
xwiki.authentication.ldap.group_classes=group,groupOfNames,groupOfUniqueNames,dynamicGroup,dynamicGroupAux,groupWiseDistributionList
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]
#-# The potential names of the LDAP groups fields containings the members.
Separated by commas.
# xwiki.authentication.ldap.group_memberfields=member,uniqueMember
#-# retrieve the following fields from LDAP and store them in the XWiki user
object (xwiki-attribute=ldap-attribute)
#-# ldap_dn=dn -- dn is set by class, caches dn in XWiki.user object for
faster access
xwiki.authentication.ldap.fields_mapping=last_name=sn,first_name=givenName,fullname=fullName,email=mail,ldap_dn=dn
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# on every login update the mapped attributes from LDAP to XWiki otherwise
this happens only once when the XWiki account is created.
xwiki.authentication.ldap.update_user=1
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# mapps XWiki groups to LDAP groups, separator is "|"
#
xwiki.authentication.ldap.group_mapping=XWiki.XWikiAdminGroup=cn=AdminRole,ou=groups,o=MegaNova,c=US|\
#
XWiki.Organisation=cn=testers,ou=groups,o=MegaNova,c=US
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# time in s after which the list of members in a group is refreshed from
LDAP (default=3600*6)
# xwiki.authentication.ldap.groupcache_expiration=21800
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# - create : synchronize group membership only when the user is first
created
#-# - always: synchronize on every login
xwiki.authentication.ldap.mode_group_sync=always
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# if ldap authentication fails for any reason, try XWiki DB authentication
with the same credentials
xwiki.authentication.ldap.trylocal=1
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# SSL connection to LDAP server
#-# 0: normal
#-# 1: SSL
# xwiki.authentication.ldap.ssl=0
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl]
#-# The keystore file to use in SSL connection
# xwiki.authentication.ldap.ssl.keystore=
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl]
#-# The java secure provider used in SSL connection
#
xwiki.authentication.ldap.ssl.secure_provider=com.sun.net.ssl.internal.ssl.Provider
Thomas Mortagne wrote:
--
Thomas Mortagne
On Thu, Oct 9, 2008 at 10:55 AM, hel-o <hel(a)hel.at> wrote:
You should have a lot more log than just that, it seems ldap is
disabled. Check the xwiki.authentication.ldap, it should be 1.
Helmut
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1311565.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
4:06 p.m.
Ok,
i tried it again with Snapshot:
xwiki-core-1.6-20081009.103057-1014.jar
I also tried to connect to the ldap server via command line using the same
credentials and it worked.
In XWiki it still doesn't work but theres more logging information now:
com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP bind
failed with LDAPException.
Wrapped Exception: Invalid Credentials
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:178)
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:107)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:277)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:176)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:131)
at
com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239)
at
com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165)
at
com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148)
at
com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:205)
at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3566)
at
com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:139)
at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3574)
at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4480)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115)
at
org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
at
org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Thread.java:636)
Wrapped Exception:
LDAPException: Invalid Credentials (49) Invalid Credentials
LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment:
AcceptSecurityContext error, data 525, vece0)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Thread.java:636)
16:01:57,804 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki
DB
Thanks
Helmut
Thomas Mortagne wrote:
On Thu, Oct 9, 2008 at 12:00 PM, hel-o <hel(a)hel.at> wrote:
I don't see how there could be any difference between linux and
windows environment for LDAP authentication that makes LDAP fail on
linux...
I just comited a version that should give you a more detailed log, can
you download and try it ?
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1312276.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
5:18 p.m.
On Thu, Oct 9, 2008 at 4:06 PM, hel-o <hel(a)hel.at> wrote:
Ok,
i tried it again with Snapshot:
xwiki-core-1.6-20081009.103057-1014.jar
I also tried to connect to the ldap server via command line using the same
credentials and it worked.
Just added some more log, you should now get the exact credentials
used in XWikiLDAPConnection.open to bind to LDAP server.
In XWiki it still doesn't work but theres more logging information now:
com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP bind
failed with LDAPException.
Wrapped Exception: Invalid Credentials
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:178)
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:107)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:277)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:176)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:131)
at
com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239)
at
com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165)
at
com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148)
at
com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:205)
at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3566)
at
com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:139)
at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3574)
at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4480)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115)
at
org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
at
org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Thread.java:636)
Wrapped Exception:
LDAPException: Invalid Credentials (49) Invalid Credentials
LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment:
AcceptSecurityContext error, data 525, vece0)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Thread.java:636)
16:01:57,804 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki
DB
Thanks
Helmut
Thomas Mortagne wrote:
--
Thomas Mortagne
On Thu, Oct 9, 2008 at 12:00 PM, hel-o <hel(a)hel.at> wrote:
I don't see how there could be any difference between linux and
windows environment for LDAP authentication that makes LDAP fail on
linux...
I just comited a version that should give you a more detailed log, can
you download and try it ?
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1312276.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
5:32 p.m.
Ok,
i uploaded the whole xwiki.log file
Thanks Helmut
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1312582.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
11 Oct
11 Oct
4:43 p.m.
On Thu, Oct 9, 2008 at 5:32 PM, hel-o <hel(a)hel.at> wrote:
Ok,
i uploaded the whole xwiki.log file
Did you tried with the last xwiki-core 1.6 SNAPSHOT ? I don't see the
log I added which indicate the credentials used to bind in this log...
Thanks Helmut
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1312582.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
13 Oct
13 Oct
9:17 a.m.
Hi,
seems that i used an old xwiki-core. For the logfile i sent you i used
xwiki-core-1.6-20081009.103057-1014.jar
Now i used
xwiki-core-1.6-20081011.013225-1016.jar
and i get the following log massage
09:06:25,763
[http://xwiki/bin/view/Main/WikiHelpEdit?xpage=xpart&vm=commentsinline.vm]
[http-80-1] DEBUG ldap.XWikiLDAPConnection - Connection to LDAP
server [svivm01.ivmwien:389]
09:06:25,764
[http://xwiki/bin/view/Main/WikiHelpEdit?xpage=xpart&vm=commentsinline.vm]
[http-80-1] DEBUG ldap.XWikiLDAPConnection - Binding to LDAP server
with credentials login=[ivmwien\\xwiki] password=[xwiki]
09:06:25,765
[http://xwiki/bin/view/Main/WikiHelpEdit?xpage=xpart&vm=commentsinline.vm]
[http-80-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Local LDAP
authentication failed.
com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP bind
failed with LDAPException.
Wrapped Exception: Invalid Credentials
In the login-form i use my Username and Password not "xwiki", the
config-definition is to bind with the username and password entered in the
login-form
#-# LDAP login, empty = anonymous access, otherwise specify full dn
#-# {0} is replaced with the username, {1} with the password
xwiki.authentication.ldap.bind_DN=ivmwien\\{0}
xwiki.authentication.ldap.bind_pass={1}
But hat seems not to work and xwiki is used for both instead?
The used java version is "1.6.0"
IcedTea Runtime Environment (build 1.6.0-b09)
OpenJDK Client VM (build 1.6.0-b09, mixed mode)
Could that be the problem?
It works in a Windows environment with the exact same config-definition.
Thanks
Helmut
Thomas Mortagne wrote:
On Thu, Oct 9, 2008 at 5:32 PM, hel-o <hel(a)hel.at> wrote:
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1324724.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
Ok,
i uploaded the whole xwiki.log file
Did you tried with the last xwiki-core 1.6 SNAPSHOT ? I don't see the
log I added which indicate the credentials used to bind in this log...
Thanks Helmut
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1312582.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
9:35 a.m.
Hi, wrong again.
Old credentials where used also i restarted tomcat and deleted the old
logfile before i logged in. Is that related to all the JBoss log it get?
Nevertheless now when i use the right credentials i cannot log in too.
09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG cache.RPCManagerImpl - cache mode is local, will not create
the channel
09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
INFO factories.ComponentRegistry - JBoss Cache version: JBossCache
'Poblano' 2.2.0.GA
09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG cache.CacheStatus - Ignoring call to create() as current
state is STARTED
09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG cache.CacheStatus - Ignoring call to start() as current
state is STARTED
09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
INFO nternal.JBossCacheCacheFactory - End JBoss cache initialisation
09:21:33,848 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin]
[EvictionTimer-0] DEBUG eviction.BaseEvictionAlgorithm - initialized:
org.jboss.cache.eviction.LRUAlgorithm@10a6723 reqion=/xwiki recycle=0
evict=0
09:21:33,916 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin]
[EvictionTimer-1] DEBUG eviction.BaseEvictionAlgorithm - initialized:
org.jboss.cache.eviction.LRUAlgorithm@1bdea60 reqion=/xwiki recycle=0
evict=0
09:21:37,262 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin]
[EvictionTimer-2] DEBUG eviction.BaseEvictionAlgorithm - initialized:
org.jboss.cache.eviction.LRUAlgorithm@116e5d6 reqion=/xwiki recycle=0
evict=0
09:21:38,032 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin]
[EvictionTimer-3] DEBUG eviction.BaseEvictionAlgorithm - initialized:
org.jboss.cache.eviction.LRUAlgorithm@d6a0e0 reqion=/xwiki recycle=0 evict=0
09:23:57,565 [] [http-80-1] DEBUG util.ModuleUtils - Get
module name for path /bin
09:23:57,565 [] [http-80-1] DEBUG util.ModuleUtils - Module
name found: default
09:23:57,565 [] [http-80-1] DEBUG action.RequestProcessor -
Processing a 'POST' for path '/loginsubmit/'
09:23:57,566 [] [http-80-1] DEBUG action.RequestProcessor - Looking
for Action instance for class com.xpn.xwiki.web.LoginSubmitAction
09:23:57,568 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG ldap.XWikiLDAPConnection - Connection to LDAP server
[svivm01.ivmwien:389]
09:23:57,570 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG ldap.XWikiLDAPConnection - Binding to LDAP server with
credentials login=[ivmwien\\lehner] password=[<mypassword>]
09:23:57,576 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG LDAP.XWikiLDAPAuthServiceImpl - Local LDAP authentication failed.
com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP bind
failed with LDAPException.
Wrapped Exception: Invalid Credentials
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:176)
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:107)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:277)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:176)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:131)
at
com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239)
at
com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165)
at
com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148)
at
com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:205)
at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3566)
at
com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:139)
at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3574)
at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4480)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115)
at
org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
at
org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Thread.java:636)
Wrapped Exception:
LDAPException: Invalid Credentials (49) Invalid Credentials
LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment:
AcceptSecurityContext error, data 525,
vecexpn.xwiki.XWiki.checkAccess(XWiki.java:3574)
at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4480)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115)
at
org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
at
org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Thread.java:636)
09:23:57,578 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki
DB
I can login with the same credentials using ldapsearch on the comand line
ldapsearch -v -h svivm01.ivmwien -p 389 -x -D ivmwien\\lehner -W -b
"dc=ivmwien" "sAMAccountName=lehner"
Thanks
Helmut
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1324750.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
4:10 p.m.
On Mon, Oct 13, 2008 at 9:35 AM, hel-o <hel(a)hel.at> wrote:
Hi, wrong again.
Old credentials where used also i restarted tomcat and deleted the old
logfile before i logged in. Is that related to all the JBoss log it get?
Seems you enabled all debug log and not just LDAP authentication, you
should not get any log from JBossCache I think. Anyway this log seems
just informational not error.
Nevertheless now when i use the right credentials i cannot log in too.
09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG cache.RPCManagerImpl - cache mode is local, will not create
the channel
09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
INFO factories.ComponentRegistry - JBoss Cache version: JBossCache
'Poblano' 2.2.0.GA
09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG cache.CacheStatus - Ignoring call to create() as current
state is STARTED
09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG cache.CacheStatus - Ignoring call to start() as current
state is STARTED
09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
INFO nternal.JBossCacheCacheFactory - End JBoss cache initialisation
09:21:33,848 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin]
[EvictionTimer-0] DEBUG eviction.BaseEvictionAlgorithm - initialized:
org.jboss.cache.eviction.LRUAlgorithm@10a6723 reqion=/xwiki recycle=0
evict=0
09:21:33,916 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin]
[EvictionTimer-1] DEBUG eviction.BaseEvictionAlgorithm - initialized:
org.jboss.cache.eviction.LRUAlgorithm@1bdea60 reqion=/xwiki recycle=0
evict=0
09:21:37,262 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin]
[EvictionTimer-2] DEBUG eviction.BaseEvictionAlgorithm - initialized:
org.jboss.cache.eviction.LRUAlgorithm@116e5d6 reqion=/xwiki recycle=0
evict=0
09:21:38,032 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin]
[EvictionTimer-3] DEBUG eviction.BaseEvictionAlgorithm - initialized:
org.jboss.cache.eviction.LRUAlgorithm@d6a0e0 reqion=/xwiki recycle=0 evict=0
09:23:57,565 [] [http-80-1] DEBUG util.ModuleUtils - Get
module name for path /bin
09:23:57,565 [] [http-80-1] DEBUG util.ModuleUtils - Module
name found: default
09:23:57,565 [] [http-80-1] DEBUG action.RequestProcessor -
Processing a 'POST' for path '/loginsubmit/'
09:23:57,566 [] [http-80-1] DEBUG action.RequestProcessor - Looking
for Action instance for class com.xpn.xwiki.web.LoginSubmitAction
09:23:57,568 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG ldap.XWikiLDAPConnection - Connection to LDAP server
[svivm01.ivmwien:389]
09:23:57,570 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG ldap.XWikiLDAPConnection - Binding to LDAP server with
credentials login=[ivmwien\\lehner] password=[<mypassword>]
09:23:57,576 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG LDAP.XWikiLDAPAuthServiceImpl - Local LDAP authentication failed.
com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP bind
failed with LDAPException.
Wrapped Exception: Invalid Credentials
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:176)
at
com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:107)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:277)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:176)
at
com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:131)
at
com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239)
at
com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165)
at
com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148)
at
com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:205)
at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3566)
at
com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:139)
at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3574)
at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4480)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115)
at
org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
at
org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Thread.java:636)
Wrapped Exception:
LDAPException: Invalid Credentials (49) Invalid Credentials
LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment:
AcceptSecurityContext error, data 525,
vecexpn.xwiki.XWiki.checkAccess(XWiki.java:3574)
at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4480)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115)
at
org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
at
org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Thread.java:636)
09:23:57,578 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1]
DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki
DB
I can login with the same credentials using ldapsearch on the comand line
ldapsearch -v -h svivm01.ivmwien -p 389 -x -D ivmwien\\lehner -W -b
"dc=ivmwien" "sAMAccountName=lehner"
I really don't see what could makes authentication fail with the right
credentials specifically on linux and if it's working on Windows. The
log print exactly what is directly used to bind, except for a bug in
the Novell LDAP implementation we are using I don't have much idea
right now if the right LDAP server is pointed in the configuration.
Does password contains non-ASCII characters ?
Thanks
Helmut
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1324750.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
14 Oct
14 Oct
noon
Hi,
and first of all thanks for your help. Found the problem in the end and in
fact it was my own fault:blush:
Thomas Mortagne wrote:
On Mon, Oct 13, 2008 at 9:35 AM, hel-o <hel(a)hel.at> wrote:
Seems you enabled all debug log and not just LDAP authentication, you
should not get any log from JBossCache I think. Anyway this log seems
just informational not error.
There are some funny things happening in our installation so wether the
log4j.properties File is ignored or theres something else wrong.
Thomas Mortagne wrote:
I really don't see what could makes authentication fail with the right
credentials specifically on linux and if it's working on Windows. The
log print exactly what is directly used to bind, except for a bug in
the Novell LDAP implementation we are using I don't have much idea
right now if the right LDAP server is pointed in the configuration.
Does password contains non-ASCII characters ?
I tried with a new Xwiki 1.6 installation and the new xwiki-core and LDAP
worked fine -> Finaly i found that i (must have been) have added the LDAP
definitions in the XWikiPrefferences.
I think they were the same definitions but obviously they were not (or can
there be a conflict when there are definition in the Preferences and the
xwiki.cfg).
Thanks again
Helmut
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1332099.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
2:57 p.m.
On Tue, Oct 14, 2008 at 12:00 PM, hel-o <hel(a)hel.at> wrote:
Hi,
and first of all thanks for your help. Found the problem in the end and in
fact it was my own fault:blush:
Ok great, anyway it made me improve LDAP log ;)
Thomas Mortagne wrote:
--
Thomas Mortagne
On Mon, Oct 13, 2008 at 9:35 AM, hel-o <hel(a)hel.at> wrote:
Seems you enabled all debug log and not just LDAP authentication, you
should not get any log from JBossCache I think. Anyway this log seems
just informational not error.
There are some funny things happening in our installation so wether the
log4j.properties File is ignored or theres something else wrong.
Thomas Mortagne wrote:
I really don't see what could makes authentication fail with the right
credentials specifically on linux and if it's working on Windows. The
log print exactly what is directly used to bind, except for a bug in
the Novell LDAP implementation we are using I don't have much idea
right now if the right LDAP server is pointed in the configuration.
Does password contains non-ASCII characters ?
I tried with a new Xwiki 1.6 installation and the new xwiki-core and LDAP
worked fine -> Finaly i found that i (must have been) have added the LDAP
definitions in the XWikiPrefferences.
I think they were the same definitions but obviously they were not (or can
there be a conflict when there are definition in the Preferences and the
xwiki.cfg).
Thanks again
Helmut
--
View this message in context:
http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1332099.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
8 Oct
8 Oct
3:49 a.m.
New subject: [xwiki-users] Contentview.vm document an increase in the query why some of the implementation of some non-implementation of the chat?
Contentview.vm document an increase in the query why some of the implementation of some
non-implementation of the chat, for example: an increase in the document # set ($ names =
$ tdoc.web +'.'+$ tdoc.name)
# set ($ resultds = $ xwiki.search ( "select max (do.pageViews) from DocumentStats do
where do.name = '$ names'", 5,0))
[$ resultds.size ()] after the implementation of the page for some 0, the database can
query the data and $ resultds.size () = 0 why?
5819
days inactive
5826
days old
24 comments
4 participants
participants (4)
-
hel-o -
Jamison Novak -
Thomas Mortagne -
xiaoyao1118