[xwiki-users] LDAP Auth problem in 1.6
Hello again, I've been running XE 1.5 for a while and our LDAP authentication against Active Directory works fine. I've installed a separate, test instance of XE 1.6 and, using the same LDAP configuration, all of our login attempts fail when going against our Active Directory server. 09:04:00,401 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Found user dn with the user object: null 09:04:00,402 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG ldap.XWikiLDAPConfig - Ready to create user from LDAP with fields name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayNa me,mail=mail,ldap_dn=dn 09:04:00,402 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG ldap.XWikiLDAPUtils - Searching for the user in LDAP: user:jnovak base: query:(sAMAccountName=jnovak) uid:sAMAccountName 09:04:00,484 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG ldap.XWikiLDAPConnection - LDAP Search failed LDAPException: No Such Object (32) No Such Object LDAPException: Server Message: 0000208D: NameErr: DSID-031001A8, problem 2001 (NO_OBJECT), data 0, best match of: '' Our XE 1.5.2.12758 installation with the same configuration works fine. Does the above error look to you like it's not even binding to the AD server? That's my hunch. The first log line on our working 1.5 install look like this when I authenticate: 08:47:09,148 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6807-3] DEBUG LDAP.XWikiLD APAuthServiceImpl - Found user dn with the user object: CN=Jamison Novak,CN=Users,DC=NNNNN,DC=com This is our base_DN: xwiki.authentication.ldap.base_DN=cn=Users,dc=NNNNN,dc=com This is our bind_DN: xwiki.authentication.ldap.bind_DN=cn=svc_webapp,ou=Service Accounts,dc=NNNNN,dc=com Is it possible that the space in the "ou=Service Accounts" is causing some unlogged error? I tried putting quotes around the entire thing (bind_dn="string here"), but that just caused it to fail to try LDAP at all. Any thoughts? I'm really confused why it's changed between 1.5 and 1.6 like this, at least for us. -Jamie
Hi Jamie, On Tue, Oct 7, 2008 at 4:16 PM, Jamison Novak <[email protected]> wrote:
Hello again,
I've been running XE 1.5 for a while and our LDAP authentication against Active Directory works fine. I've installed a separate, test instance of XE 1.6 and, using the same LDAP configuration, all of our login attempts fail when going against our Active Directory server.
09:04:00,401 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Found user dn with the user object: null 09:04:00,402 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG ldap.XWikiLDAPConfig - Ready to create user from LDAP with fields
name=sAMAccountName,last_name=sn,first_name=givenName,fullname=displayNa me,mail=mail,ldap_dn=dn 09:04:00,402 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG ldap.XWikiLDAPUtils - Searching for the user in LDAP: user:jnovak base: query:(sAMAccountName=jnovak) uid:sAMAccountName 09:04:00,484 [http://xwiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG ldap.XWikiLDAPConnection - LDAP Search failed LDAPException: No Such Object (32) No Such Object LDAPException: Server Message: 0000208D: NameErr: DSID-031001A8, problem 2001 (NO_OBJECT), data 0, best match of: ''
Our XE 1.5.2.12758 installation with the same configuration works fine. Does the above error look to you like it's not even binding to the AD server? That's my hunch.
The first log line on our working 1.5 install look like this when I authenticate:
08:47:09,148 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6807-3] DEBUG LDAP.XWikiLD APAuthServiceImpl - Found user dn with the user object: CN=Jamison Novak,CN=Users,DC=NNNNN,DC=com
This is our base_DN:
xwiki.authentication.ldap.base_DN=cn=Users,dc=NNNNN,dc=com
This is our bind_DN:
xwiki.authentication.ldap.bind_DN=cn=svc_webapp,ou=Service Accounts,dc=NNNNN,dc=com
Shouldn't your base_DN be xwiki.authentication.ldap.base_DN=dc=NNNNN,dc=com as your bind_DN does not seems included in it ? you can enable "debug" log to get more informations (see http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HEnableLD...)
Is it possible that the space in the "ou=Service Accounts" is causing some unlogged error? I tried putting quotes around the entire thing (bind_dn="string here"), but that just caused it to fail to try LDAP at all.
Any thoughts? I'm really confused why it's changed between 1.5 and 1.6 like this, at least for us.
Since XE 1.6, the default LDAP authenticator is XWikiLDAPAuthServiceImpl as you can see in the log. Before that it was LDAPAuthServiceImpl which is deprecated since 1.3. If you don't have any xwiki.authentication.authclass explicitly configured in xwiki.cfg that's the main difference between 1.5 and 1.6. If you want to use the old LDAP authenticator you need to add xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.LDAPAuthServiceImpl in xwiki.cfg
-Jamie _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Hi Thomas, Thanks, as always, for the reply.
Shouldn't your base_DN be xwiki.authentication.ldap.base_DN=dc=NNNNN,dc=com as your bind_DN does not seems included in it ?
Our bind user isn't really a user, so I specified the base_DN in such a way that only real people are included in the search. I've modified it as you suggested, but it had no effect. I have the DEBUG log enabled already, which is how I got the information for my initial question. It is not altogether helpful, though.
Since XE 1.6, the default LDAP authenticator is XWikiLDAPAuthServiceImpl as you can see in the log.
I have that specifically enabled in both my 1.5 and 1.6 xwiki.cfg file. #-# new LDAP authentication service xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAut hServiceImpl With that enabled, our 1.5.2.12758 install of XWiki successfully authenticates against our Active Directory domain. It binds, it authenticates me, and logs me in. Our 1.6.13286 install does not. I think the problem is that, with the 1.6 installation, it is not binding to the AD server while the 1.5 install is. 12:58:07,674 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Found user dn with the user object: null [ ... ] 12:58:07,741 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG ldap.XWikiLDAPConnection - LDAP Search failed LDAPException: No Such Object (32) No Such Object LDAPException: Server Message: 0000208D: NameErr: DSID-031001A8, problem 2001 (NO_OBJECT), data 0, best match of: '' ^@ LDAPException: Matched DN: at com.novell.ldap.LDAPResponse.getResultException(Unknown Source) at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source) at com.novell.ldap.LDAPSearchResults.next(Unknown Source) at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.searchLDAP(XWikiLDAPConnec tion.java:270) at com.xpn.xwiki.plugin.ldap.XWikiLDAPUtils.searchUserAttributesByUid(XWiki LDAPUtils.java:507) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateIn Context(XWikiLDAPAuthServiceImpl.java:338) [ ... ] In the 1.5 DEBUG log, the "Found user dn" log line returns the proper information, rather than "null". (See my previous message). What I want to know is why it succeeds in 1.5, but fails in 1.6 - both using the same xwiki.cfg settings for all things LDAP. The DEBUG log is not helping me understand why exactly it's failing. The ONLY thing I can think of is that the space in "Service Accounts" in our bind_DN is causing it to break under 1.6. xwiki.authentication.ldap.bind_DN=cn=svc_webapp,ou=Service Accounts,dc=MLT,dc=inc Is that possible? Can you think of any other reasons why it would be failing? Both instances are running on the same server, just obviously not the same Java/Resin instance. Confused, Jamie
On Tue, Oct 7, 2008 at 8:17 PM, Jamison Novak <[email protected]> wrote:
Hi Thomas,
Thanks, as always, for the reply.
Shouldn't your base_DN be xwiki.authentication.ldap.base_DN=dc=NNNNN,dc=com as your bind_DN does not seems included in it ?
Our bind user isn't really a user, so I specified the base_DN in such a way that only real people are included in the search. I've modified it as you suggested, but it had no effect.
I have the DEBUG log enabled already, which is how I got the information for my initial question. It is not altogether helpful, though.
Since XE 1.6, the default LDAP authenticator is XWikiLDAPAuthServiceImpl as you can see in the log.
I have that specifically enabled in both my 1.5 and 1.6 xwiki.cfg file.
#-# new LDAP authentication service xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAut hServiceImpl
With that enabled, our 1.5.2.12758 install of XWiki successfully authenticates against our Active Directory domain. It binds, it authenticates me, and logs me in.
Our 1.6.13286 install does not.
I think the problem is that, with the 1.6 installation, it is not binding to the AD server while the 1.5 install is.
12:58:07,674 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Found user dn with the user object: null [ ... ] 12:58:07,741 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG ldap.XWikiLDAPConnection - LDAP Search failed LDAPException: No Such Object (32) No Such Object LDAPException: Server Message: 0000208D: NameErr: DSID-031001A8, problem 2001 (NO_OBJECT), data 0, best match of: '' ^@ LDAPException: Matched DN: at com.novell.ldap.LDAPResponse.getResultException(Unknown Source) at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source) at com.novell.ldap.LDAPSearchResults.next(Unknown Source) at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.searchLDAP(XWikiLDAPConnec tion.java:270) at com.xpn.xwiki.plugin.ldap.XWikiLDAPUtils.searchUserAttributesByUid(XWiki LDAPUtils.java:507) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateIn Context(XWikiLDAPAuthServiceImpl.java:338) [ ... ]
In the 1.5 DEBUG log, the "Found user dn" log line returns the proper information, rather than "null". (See my previous message).
What I want to know is why it succeeds in 1.5, but fails in 1.6 - both using the same xwiki.cfg settings for all things LDAP. The DEBUG log is not helping me understand why exactly it's failing.
I would like to know too ;)
The ONLY thing I can think of is that the space in "Service Accounts" in our bind_DN is causing it to break under 1.6.
xwiki.authentication.ldap.bind_DN=cn=svc_webapp,ou=Service Accounts,dc=MLT,dc=inc
Is that possible? Can you think of any other reasons why it would be failing? Both instances are running on the same server, just obviously not the same Java/Resin instance.
I don't think that's the problem no... but there something weird in your log:
LDAP: user:jnovak base: query:(sAMAccountName=jnovak) uid:sAMAccountName
the base DN should be printed here so I think that's the problem: the search is done with an empty base DN. My guess is that it's a bug introduced in 1.6 but every unit test pass on this... I'm searching a little more...
Confused, Jamie _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
On Wed, Oct 8, 2008 at 11:51 AM, Thomas Mortagne <[email protected]> wrote:
On Tue, Oct 7, 2008 at 8:17 PM, Jamison Novak <[email protected]> wrote:
Hi Thomas,
Thanks, as always, for the reply.
Shouldn't your base_DN be xwiki.authentication.ldap.base_DN=dc=NNNNN,dc=com as your bind_DN does not seems included in it ?
Our bind user isn't really a user, so I specified the base_DN in such a way that only real people are included in the search. I've modified it as you suggested, but it had no effect.
I have the DEBUG log enabled already, which is how I got the information for my initial question. It is not altogether helpful, though.
Since XE 1.6, the default LDAP authenticator is XWikiLDAPAuthServiceImpl as you can see in the log.
I have that specifically enabled in both my 1.5 and 1.6 xwiki.cfg file.
#-# new LDAP authentication service xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAut hServiceImpl
With that enabled, our 1.5.2.12758 install of XWiki successfully authenticates against our Active Directory domain. It binds, it authenticates me, and logs me in.
Our 1.6.13286 install does not.
I think the problem is that, with the 1.6 installation, it is not binding to the AD server while the 1.5 install is.
12:58:07,674 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Found user dn with the user object: null [ ... ] 12:58:07,741 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG ldap.XWikiLDAPConnection - LDAP Search failed LDAPException: No Such Object (32) No Such Object LDAPException: Server Message: 0000208D: NameErr: DSID-031001A8, problem 2001 (NO_OBJECT), data 0, best match of: '' ^@ LDAPException: Matched DN: at com.novell.ldap.LDAPResponse.getResultException(Unknown Source) at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source) at com.novell.ldap.LDAPSearchResults.next(Unknown Source) at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.searchLDAP(XWikiLDAPConnec tion.java:270) at com.xpn.xwiki.plugin.ldap.XWikiLDAPUtils.searchUserAttributesByUid(XWiki LDAPUtils.java:507) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateIn Context(XWikiLDAPAuthServiceImpl.java:338) [ ... ]
In the 1.5 DEBUG log, the "Found user dn" log line returns the proper information, rather than "null". (See my previous message).
What I want to know is why it succeeds in 1.5, but fails in 1.6 - both using the same xwiki.cfg settings for all things LDAP. The DEBUG log is not helping me understand why exactly it's failing.
I would like to know too ;)
The ONLY thing I can think of is that the space in "Service Accounts" in our bind_DN is causing it to break under 1.6.
xwiki.authentication.ldap.bind_DN=cn=svc_webapp,ou=Service Accounts,dc=MLT,dc=inc
Is that possible? Can you think of any other reasons why it would be failing? Both instances are running on the same server, just obviously not the same Java/Resin instance.
I don't think that's the problem no... but there something weird in your log:
LDAP: user:jnovak base: query:(sAMAccountName=jnovak) uid:sAMAccountName
the base DN should be printed here so I think that's the problem: the search is done with an empty base DN. My guess is that it's a bug introduced in 1.6 but every unit test pass on this...
I'm searching a little more...
I think i found something, i'm fixing and committing and you will be able to test if it's working for you with a 1.6-SNAPSHOT version.
Confused, Jamie _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
-- Thomas Mortagne
On Wed, Oct 8, 2008 at 11:57 AM, Thomas Mortagne <[email protected]> wrote:
On Wed, Oct 8, 2008 at 11:51 AM, Thomas Mortagne <[email protected]> wrote:
On Tue, Oct 7, 2008 at 8:17 PM, Jamison Novak <[email protected]> wrote:
Hi Thomas,
Thanks, as always, for the reply.
Shouldn't your base_DN be xwiki.authentication.ldap.base_DN=dc=NNNNN,dc=com as your bind_DN does not seems included in it ?
Our bind user isn't really a user, so I specified the base_DN in such a way that only real people are included in the search. I've modified it as you suggested, but it had no effect.
I have the DEBUG log enabled already, which is how I got the information for my initial question. It is not altogether helpful, though.
Since XE 1.6, the default LDAP authenticator is XWikiLDAPAuthServiceImpl as you can see in the log.
I have that specifically enabled in both my 1.5 and 1.6 xwiki.cfg file.
#-# new LDAP authentication service xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAut hServiceImpl
With that enabled, our 1.5.2.12758 install of XWiki successfully authenticates against our Active Directory domain. It binds, it authenticates me, and logs me in.
Our 1.6.13286 install does not.
I think the problem is that, with the 1.6 installation, it is not binding to the AD server while the 1.5 install is.
12:58:07,674 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Found user dn with the user object: null [ ... ] 12:58:07,741 [http://wiki-dev/bin/loginsubmit/XWiki/XWikiLogin] [resin-tcp-connection-127.0.0.1:6808-1] DEBUG ldap.XWikiLDAPConnection - LDAP Search failed LDAPException: No Such Object (32) No Such Object LDAPException: Server Message: 0000208D: NameErr: DSID-031001A8, problem 2001 (NO_OBJECT), data 0, best match of: '' ^@ LDAPException: Matched DN: at com.novell.ldap.LDAPResponse.getResultException(Unknown Source) at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source) at com.novell.ldap.LDAPSearchResults.next(Unknown Source) at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.searchLDAP(XWikiLDAPConnec tion.java:270) at com.xpn.xwiki.plugin.ldap.XWikiLDAPUtils.searchUserAttributesByUid(XWiki LDAPUtils.java:507) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateIn Context(XWikiLDAPAuthServiceImpl.java:338) [ ... ]
In the 1.5 DEBUG log, the "Found user dn" log line returns the proper information, rather than "null". (See my previous message).
What I want to know is why it succeeds in 1.5, but fails in 1.6 - both using the same xwiki.cfg settings for all things LDAP. The DEBUG log is not helping me understand why exactly it's failing.
I would like to know too ;)
The ONLY thing I can think of is that the space in "Service Accounts" in our bind_DN is causing it to break under 1.6.
xwiki.authentication.ldap.bind_DN=cn=svc_webapp,ou=Service Accounts,dc=MLT,dc=inc
Is that possible? Can you think of any other reasons why it would be failing? Both instances are running on the same server, just obviously not the same Java/Resin instance.
I don't think that's the problem no... but there something weird in your log:
LDAP: user:jnovak base: query:(sAMAccountName=jnovak) uid:sAMAccountName
the base DN should be printed here so I think that's the problem: the search is done with an empty base DN. My guess is that it's a bug introduced in 1.6 but every unit test pass on this...
I'm searching a little more...
I think i found something, i'm fixing and committing and you will be able to test if it's working for you with a 1.6-SNAPSHOT version.
You can download the last 1.6 version including the fix at http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.6-SNAPS.... I would be great if you could test it for your configuration.
Confused, Jamie _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
-- Thomas Mortagne
-- Thomas Mortagne
Hi, we do have an LDAP Auth problem to and i think it's the same as mentioned here. It did also happen in the 1.6m2 realease http://n2.nabble.com/XWiki-1.6m2-Issues-td1084838.html Could you provide the version including the fix. I couldn't find it following the link provided in the last post and I would like to test it too. Thanks Helmut -- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1306913.html Sent from the XWiki- Users mailing list archive at Nabble.com.
Hi, On Wed, Oct 8, 2008 at 5:22 PM, hel-o <[email protected]> wrote:
Hi,
we do have an LDAP Auth problem to and i think it's the same as mentioned here.
It did also happen in the 1.6m2 realease
http://n2.nabble.com/XWiki-1.6m2-Issues-td1084838.html
Could you provide the version including the fix. I couldn't find it following the link provided in the last post and I would like to test it too.
The provided link is where all xwiki-core 1.6 spnashots are built, you just have to download the last jar file. For example at the time i'm writing theses lines http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.6-SNAPS... should be ok.
Thanks Helmut -- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1306913.html Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Fine Thanks, i'll try that tomorrow. Helmut Thomas Mortagne wrote:
The provided link is where all xwiki-core 1.6 spnashots are built, you just have to download the last jar file. For example at the time i'm writing theses lines http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.6-SNAPS... should be ok.
Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1307329.html Sent from the XWiki- Users mailing list archive at Nabble.com.
On Wednesday, October 8, 2008 at 5:30AM, Thomas Mortagne wrote:
I think i found something, i'm fixing and committing and you will be able to test if it's working for you with a 1.6-SNAPSHOT version.
You can download the last 1.6 version including the fix at
http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.6-S NAPSHOT/.
I would be great if you could test it for your configuration.
Thomas, I downloaded xwiki-core-1.6-20081008.191325-999.jar and that seems to have fixed the problem. I restarted Xwiki and was able to authenticate against our Active Directory server once more. Thank you so much for your quick work on that! Best, Jamie
On Wed, Oct 8, 2008 at 9:50 PM, Jamison Novak <[email protected]> wrote:
On Wednesday, October 8, 2008 at 5:30AM, Thomas Mortagne wrote:
I think i found something, i'm fixing and committing and you will be able to test if it's working for you with a 1.6-SNAPSHOT version.
You can download the last 1.6 version including the fix at
http://maven.xwiki.org/snapshots/com/xpn/xwiki/platform/xwiki-core/1.6-S NAPSHOT/.
I would be great if you could test it for your configuration.
Thomas,
I downloaded xwiki-core-1.6-20081008.191325-999.jar and that seems to have fixed the problem. I restarted Xwiki and was able to authenticate against our Active Directory server once more.
Thank you so much for your quick work on that!
Your arer welcome, thanks you for testing the fixes of my mistakes ;)
Best, Jamie _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Hi, tried it to, LDAP-Authentication worked on on instance (Windows Server 2003) Doesn't work on another (Linux) but i don't think its related to the LDAP problem we got here. The Logging information is: 09:18:12,953 [] [http-80-2] DEBUG util.ModuleUtils - Get module name for path /bin 09:18:12,953 [] [http-80-2] DEBUG util.ModuleUtils - Module name found: default 09:18:12,953 [] [http-80-2] DEBUG action.RequestProcessor - Processing a 'POST' for path '/loginsubmit/' 09:18:12,953 [] [http-80-2] DEBUG action.RequestProcessor - Looking for Action instance for class com.xpn.xwiki.web.LoginSubmitAction 09:18:13,083 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-2] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Local LDAP authentication failed. 09:18:13,083 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-2] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki DB Thanks Helmut -- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1311402.html Sent from the XWiki- Users mailing list archive at Nabble.com.
On Thu, Oct 9, 2008 at 10:55 AM, hel-o <[email protected]> wrote:
Hi,
tried it to, LDAP-Authentication worked on on instance (Windows Server 2003)
Doesn't work on another (Linux) but i don't think its related to the LDAP problem we got here.
The Logging information is:
09:18:12,953 [] [http-80-2] DEBUG util.ModuleUtils - Get module name for path /bin 09:18:12,953 [] [http-80-2] DEBUG util.ModuleUtils - Module name found: default 09:18:12,953 [] [http-80-2] DEBUG action.RequestProcessor - Processing a 'POST' for path '/loginsubmit/' 09:18:12,953 [] [http-80-2] DEBUG action.RequestProcessor - Looking for Action instance for class com.xpn.xwiki.web.LoginSubmitAction 09:18:13,083 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-2] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Local LDAP authentication failed. 09:18:13,083 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-2] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki DB
You should have a lot more log than just that, it seems ldap is disabled. Check the xwiki.authentication.ldap, it should be 1.
Thanks Helmut -- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1311402.html Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Hi, LDAP is enabled here is my configuration -> this one works in the windows environment #------------------------------------------------------------------------------------- # LDAP #------------------------------------------------------------------------------------- #-# new LDAP authentication service xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl #-# Turn LDAP authentication on - otherwise only XWiki authentication #-# 0: disable #-# 1: enable xwiki.authentication.ldap=1 #-# LDAP Server (Active Directory, eDirectory, OpenLDAP, etc.) xwiki.authentication.ldap.server=<SERVER>.<DOMAIN> xwiki.authentication.ldap.port=389 #-# LDAP login, empty = anonymous access, otherwise specify full dn #-# {0} is replaced with the username, {1} with the password xwiki.authentication.ldap.bind_DN=<DOMAIN>\\{0} xwiki.authentication.ldap.bind_pass={1} #-# Force to check password after LDAP connection #-# 0: disable #-# 1: enable xwiki.authentication.ldap.validate_password=0 #-# only members of the following group will be verified in the LDAP #-# otherwise only users that are found after searching starting from the base_DN # xwiki.authentication.ldap.user_group=cn=developers,ou=groups,o=MegaNova,c=US #-# [Since 1.5RC1, XWikiLDAPAuthServiceImpl] #-# only users not member of the following group can autheticate # xwiki.authentication.ldap.exclude_group=cn=admin,ou=groups,o=MegaNova,c=US #-# base DN for searches xwiki.authentication.ldap.base_DN=dc=<DOMAIN> #-# Specifies the LDAP attribute containing the identifier to be used as the XWiki name (default=cn) xwiki.authentication.ldap.UID_attr=sAMAccountName #-# [Since 1.5M1, XWikiLDAPAuthServiceImpl] #-# Specifies the LDAP attribute containing the password to be used "when xwiki.authentication.ldap.validate_password" is set to 1 # xwiki.authentication.ldap.password_field=userPassword #-# [Since 1.5M1, XWikiLDAPAuthServiceImpl] #-# The potential LDAP groups classes. Separated by commas. # xwiki.authentication.ldap.group_classes=group,groupOfNames,groupOfUniqueNames,dynamicGroup,dynamicGroupAux,groupWiseDistributionList #-# [Since 1.5M1, XWikiLDAPAuthServiceImpl] #-# The potential names of the LDAP groups fields containings the members. Separated by commas. # xwiki.authentication.ldap.group_memberfields=member,uniqueMember #-# retrieve the following fields from LDAP and store them in the XWiki user object (xwiki-attribute=ldap-attribute) #-# ldap_dn=dn -- dn is set by class, caches dn in XWiki.user object for faster access xwiki.authentication.ldap.fields_mapping=last_name=sn,first_name=givenName,fullname=fullName,email=mail,ldap_dn=dn #-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# on every login update the mapped attributes from LDAP to XWiki otherwise this happens only once when the XWiki account is created. xwiki.authentication.ldap.update_user=1 #-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# mapps XWiki groups to LDAP groups, separator is "|" # xwiki.authentication.ldap.group_mapping=XWiki.XWikiAdminGroup=cn=AdminRole,ou=groups,o=MegaNova,c=US|\ # XWiki.Organisation=cn=testers,ou=groups,o=MegaNova,c=US #-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# time in s after which the list of members in a group is refreshed from LDAP (default=3600*6) # xwiki.authentication.ldap.groupcache_expiration=21800 #-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# - create : synchronize group membership only when the user is first created #-# - always: synchronize on every login xwiki.authentication.ldap.mode_group_sync=always #-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# if ldap authentication fails for any reason, try XWiki DB authentication with the same credentials xwiki.authentication.ldap.trylocal=1 #-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# SSL connection to LDAP server #-# 0: normal #-# 1: SSL # xwiki.authentication.ldap.ssl=0 #-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# The keystore file to use in SSL connection # xwiki.authentication.ldap.ssl.keystore= #-# [Since 1.5M1, XWikiLDAPAuthServiceImpl] #-# The java secure provider used in SSL connection # xwiki.authentication.ldap.ssl.secure_provider=com.sun.net.ssl.internal.ssl.Provider Thomas Mortagne wrote:
On Thu, Oct 9, 2008 at 10:55 AM, hel-o <[email protected]> wrote:
You should have a lot more log than just that, it seems ldap is disabled. Check the xwiki.authentication.ldap, it should be 1.
Helmut
-- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1311565.html Sent from the XWiki- Users mailing list archive at Nabble.com.
On Thu, Oct 9, 2008 at 12:00 PM, hel-o <[email protected]> wrote:
Hi,
LDAP is enabled here is my configuration -> this one works in the windows environment
You are right, if you had ldap=0 you would get "LDAP authentication failed: LDAP not activ" in the debug log. I don't see how there could be any difference between linux and windows environment for LDAP authentication that makes LDAP fail on linux... I just comited a version that should give you a more detailed log, can you download and try it ?
#------------------------------------------------------------------------------------- # LDAP #-------------------------------------------------------------------------------------
#-# new LDAP authentication service xwiki.authentication.authclass=com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl
#-# Turn LDAP authentication on - otherwise only XWiki authentication #-# 0: disable #-# 1: enable xwiki.authentication.ldap=1
#-# LDAP Server (Active Directory, eDirectory, OpenLDAP, etc.) xwiki.authentication.ldap.server=<SERVER>.<DOMAIN> xwiki.authentication.ldap.port=389
#-# LDAP login, empty = anonymous access, otherwise specify full dn #-# {0} is replaced with the username, {1} with the password xwiki.authentication.ldap.bind_DN=<DOMAIN>\\{0} xwiki.authentication.ldap.bind_pass={1}
#-# Force to check password after LDAP connection #-# 0: disable #-# 1: enable xwiki.authentication.ldap.validate_password=0
#-# only members of the following group will be verified in the LDAP #-# otherwise only users that are found after searching starting from the base_DN # xwiki.authentication.ldap.user_group=cn=developers,ou=groups,o=MegaNova,c=US
#-# [Since 1.5RC1, XWikiLDAPAuthServiceImpl] #-# only users not member of the following group can autheticate # xwiki.authentication.ldap.exclude_group=cn=admin,ou=groups,o=MegaNova,c=US
#-# base DN for searches xwiki.authentication.ldap.base_DN=dc=<DOMAIN>
#-# Specifies the LDAP attribute containing the identifier to be used as the XWiki name (default=cn) xwiki.authentication.ldap.UID_attr=sAMAccountName
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl] #-# Specifies the LDAP attribute containing the password to be used "when xwiki.authentication.ldap.validate_password" is set to 1 # xwiki.authentication.ldap.password_field=userPassword
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl] #-# The potential LDAP groups classes. Separated by commas. # xwiki.authentication.ldap.group_classes=group,groupOfNames,groupOfUniqueNames,dynamicGroup,dynamicGroupAux,groupWiseDistributionList
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl] #-# The potential names of the LDAP groups fields containings the members. Separated by commas. # xwiki.authentication.ldap.group_memberfields=member,uniqueMember
#-# retrieve the following fields from LDAP and store them in the XWiki user object (xwiki-attribute=ldap-attribute) #-# ldap_dn=dn -- dn is set by class, caches dn in XWiki.user object for faster access xwiki.authentication.ldap.fields_mapping=last_name=sn,first_name=givenName,fullname=fullName,email=mail,ldap_dn=dn
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# on every login update the mapped attributes from LDAP to XWiki otherwise this happens only once when the XWiki account is created. xwiki.authentication.ldap.update_user=1
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# mapps XWiki groups to LDAP groups, separator is "|" # xwiki.authentication.ldap.group_mapping=XWiki.XWikiAdminGroup=cn=AdminRole,ou=groups,o=MegaNova,c=US|\ # XWiki.Organisation=cn=testers,ou=groups,o=MegaNova,c=US
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# time in s after which the list of members in a group is refreshed from LDAP (default=3600*6) # xwiki.authentication.ldap.groupcache_expiration=21800
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# - create : synchronize group membership only when the user is first created #-# - always: synchronize on every login xwiki.authentication.ldap.mode_group_sync=always
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# if ldap authentication fails for any reason, try XWiki DB authentication with the same credentials xwiki.authentication.ldap.trylocal=1
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# SSL connection to LDAP server #-# 0: normal #-# 1: SSL # xwiki.authentication.ldap.ssl=0
#-# [Since 1.3M2, XWikiLDAPAuthServiceImpl] #-# The keystore file to use in SSL connection # xwiki.authentication.ldap.ssl.keystore=
#-# [Since 1.5M1, XWikiLDAPAuthServiceImpl] #-# The java secure provider used in SSL connection # xwiki.authentication.ldap.ssl.secure_provider=com.sun.net.ssl.internal.ssl.Provider
Thomas Mortagne wrote:
On Thu, Oct 9, 2008 at 10:55 AM, hel-o <[email protected]> wrote:
You should have a lot more log than just that, it seems ldap is disabled. Check the xwiki.authentication.ldap, it should be 1.
Helmut
-- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1311565.html Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Ok, i tried it again with Snapshot: xwiki-core-1.6-20081009.103057-1014.jar I also tried to connect to the ldap server via command line using the same credentials and it worked. In XWiki it still doesn't work but theres more logging information now: com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP bind failed with LDAPException. Wrapped Exception: Invalid Credentials at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:178) at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:107) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:277) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:176) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:131) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148) at com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:205) at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3566) at com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:139) at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3574) at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4480) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196) at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432) at javax.servlet.http.HttpServlet.service(HttpServlet.java:710) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447) at java.lang.Thread.run(Thread.java:636) Wrapped Exception: LDAPException: Invalid Credentials (49) Invalid Credentials LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece0) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447) at java.lang.Thread.run(Thread.java:636) 16:01:57,804 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki DB Thanks Helmut Thomas Mortagne wrote:
On Thu, Oct 9, 2008 at 12:00 PM, hel-o <[email protected]> wrote: I don't see how there could be any difference between linux and windows environment for LDAP authentication that makes LDAP fail on linux...
I just comited a version that should give you a more detailed log, can you download and try it ?
-- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1312276.html Sent from the XWiki- Users mailing list archive at Nabble.com.
On Thu, Oct 9, 2008 at 4:06 PM, hel-o <[email protected]> wrote:
Ok,
i tried it again with Snapshot:
xwiki-core-1.6-20081009.103057-1014.jar
I also tried to connect to the ldap server via command line using the same credentials and it worked.
Just added some more log, you should now get the exact credentials used in XWikiLDAPConnection.open to bind to LDAP server.
In XWiki it still doesn't work but theres more logging information now:
com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP bind failed with LDAPException. Wrapped Exception: Invalid Credentials at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:178) at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:107) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:277) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:176) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:131) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148) at com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:205) at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3566) at com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:139) at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3574) at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4480) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196) at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432) at javax.servlet.http.HttpServlet.service(HttpServlet.java:710) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447) at java.lang.Thread.run(Thread.java:636)
Wrapped Exception:
LDAPException: Invalid Credentials (49) Invalid Credentials LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece0) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447) at java.lang.Thread.run(Thread.java:636) 16:01:57,804 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki DB
Thanks Helmut
Thomas Mortagne wrote:
On Thu, Oct 9, 2008 at 12:00 PM, hel-o <[email protected]> wrote: I don't see how there could be any difference between linux and windows environment for LDAP authentication that makes LDAP fail on linux...
I just comited a version that should give you a more detailed log, can you download and try it ?
-- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1312276.html Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Ok, i uploaded the whole xwiki.log file Thanks Helmut -- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1312582.html Sent from the XWiki- Users mailing list archive at Nabble.com.
On Thu, Oct 9, 2008 at 5:32 PM, hel-o <[email protected]> wrote:
Ok,
i uploaded the whole xwiki.log file
Did you tried with the last xwiki-core 1.6 SNAPSHOT ? I don't see the log I added which indicate the credentials used to bind in this log...
Thanks Helmut -- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1312582.html Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Hi, seems that i used an old xwiki-core. For the logfile i sent you i used xwiki-core-1.6-20081009.103057-1014.jar Now i used xwiki-core-1.6-20081011.013225-1016.jar and i get the following log massage 09:06:25,763 [http://xwiki/bin/view/Main/WikiHelpEdit?xpage=xpart&vm=commentsinline.vm] [http-80-1] DEBUG ldap.XWikiLDAPConnection - Connection to LDAP server [svivm01.ivmwien:389] 09:06:25,764 [http://xwiki/bin/view/Main/WikiHelpEdit?xpage=xpart&vm=commentsinline.vm] [http-80-1] DEBUG ldap.XWikiLDAPConnection - Binding to LDAP server with credentials login=[ivmwien\\xwiki] password=[xwiki] 09:06:25,765 [http://xwiki/bin/view/Main/WikiHelpEdit?xpage=xpart&vm=commentsinline.vm] [http-80-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Local LDAP authentication failed. com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP bind failed with LDAPException. Wrapped Exception: Invalid Credentials In the login-form i use my Username and Password not "xwiki", the config-definition is to bind with the username and password entered in the login-form #-# LDAP login, empty = anonymous access, otherwise specify full dn #-# {0} is replaced with the username, {1} with the password xwiki.authentication.ldap.bind_DN=ivmwien\\{0} xwiki.authentication.ldap.bind_pass={1} But hat seems not to work and xwiki is used for both instead? The used java version is "1.6.0" IcedTea Runtime Environment (build 1.6.0-b09) OpenJDK Client VM (build 1.6.0-b09, mixed mode) Could that be the problem? It works in a Windows environment with the exact same config-definition. Thanks Helmut Thomas Mortagne wrote:
On Thu, Oct 9, 2008 at 5:32 PM, hel-o <[email protected]> wrote:
Ok,
i uploaded the whole xwiki.log file
Did you tried with the last xwiki-core 1.6 SNAPSHOT ? I don't see the log I added which indicate the credentials used to bind in this log...
Thanks Helmut -- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1312582.html Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1324724.html Sent from the XWiki- Users mailing list archive at Nabble.com.
Hi, wrong again. Old credentials where used also i restarted tomcat and deleted the old logfile before i logged in. Is that related to all the JBoss log it get? Nevertheless now when i use the right credentials i cannot log in too. 09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG cache.RPCManagerImpl - cache mode is local, will not create the channel 09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] INFO factories.ComponentRegistry - JBoss Cache version: JBossCache 'Poblano' 2.2.0.GA 09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG cache.CacheStatus - Ignoring call to create() as current state is STARTED 09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG cache.CacheStatus - Ignoring call to start() as current state is STARTED 09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] INFO nternal.JBossCacheCacheFactory - End JBoss cache initialisation 09:21:33,848 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [EvictionTimer-0] DEBUG eviction.BaseEvictionAlgorithm - initialized: org.jboss.cache.eviction.LRUAlgorithm@10a6723 reqion=/xwiki recycle=0 evict=0 09:21:33,916 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [EvictionTimer-1] DEBUG eviction.BaseEvictionAlgorithm - initialized: org.jboss.cache.eviction.LRUAlgorithm@1bdea60 reqion=/xwiki recycle=0 evict=0 09:21:37,262 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [EvictionTimer-2] DEBUG eviction.BaseEvictionAlgorithm - initialized: org.jboss.cache.eviction.LRUAlgorithm@116e5d6 reqion=/xwiki recycle=0 evict=0 09:21:38,032 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [EvictionTimer-3] DEBUG eviction.BaseEvictionAlgorithm - initialized: org.jboss.cache.eviction.LRUAlgorithm@d6a0e0 reqion=/xwiki recycle=0 evict=0 09:23:57,565 [] [http-80-1] DEBUG util.ModuleUtils - Get module name for path /bin 09:23:57,565 [] [http-80-1] DEBUG util.ModuleUtils - Module name found: default 09:23:57,565 [] [http-80-1] DEBUG action.RequestProcessor - Processing a 'POST' for path '/loginsubmit/' 09:23:57,566 [] [http-80-1] DEBUG action.RequestProcessor - Looking for Action instance for class com.xpn.xwiki.web.LoginSubmitAction 09:23:57,568 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG ldap.XWikiLDAPConnection - Connection to LDAP server [svivm01.ivmwien:389] 09:23:57,570 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG ldap.XWikiLDAPConnection - Binding to LDAP server with credentials login=[ivmwien\\lehner] password=[<mypassword>] 09:23:57,576 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Local LDAP authentication failed. com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP bind failed with LDAPException. Wrapped Exception: Invalid Credentials at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:176) at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:107) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:277) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:176) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:131) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148) at com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:205) at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3566) at com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:139) at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3574) at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4480) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196) at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432) at javax.servlet.http.HttpServlet.service(HttpServlet.java:710) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447) at java.lang.Thread.run(Thread.java:636) Wrapped Exception: LDAPException: Invalid Credentials (49) Invalid Credentials LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vecexpn.xwiki.XWiki.checkAccess(XWiki.java:3574) at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4480) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196) at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432) at javax.servlet.http.HttpServlet.service(HttpServlet.java:710) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447) at java.lang.Thread.run(Thread.java:636) 09:23:57,578 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki DB I can login with the same credentials using ldapsearch on the comand line ldapsearch -v -h svivm01.ivmwien -p 389 -x -D ivmwien\\lehner -W -b "dc=ivmwien" "sAMAccountName=lehner" Thanks Helmut -- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1324750.html Sent from the XWiki- Users mailing list archive at Nabble.com.
On Mon, Oct 13, 2008 at 9:35 AM, hel-o <[email protected]> wrote:
Hi, wrong again.
Old credentials where used also i restarted tomcat and deleted the old logfile before i logged in. Is that related to all the JBoss log it get?
Seems you enabled all debug log and not just LDAP authentication, you should not get any log from JBossCache I think. Anyway this log seems just informational not error.
Nevertheless now when i use the right credentials i cannot log in too.
09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG cache.RPCManagerImpl - cache mode is local, will not create the channel 09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] INFO factories.ComponentRegistry - JBoss Cache version: JBossCache 'Poblano' 2.2.0.GA 09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG cache.CacheStatus - Ignoring call to create() as current state is STARTED 09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG cache.CacheStatus - Ignoring call to start() as current state is STARTED 09:21:33,031 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] INFO nternal.JBossCacheCacheFactory - End JBoss cache initialisation 09:21:33,848 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [EvictionTimer-0] DEBUG eviction.BaseEvictionAlgorithm - initialized: org.jboss.cache.eviction.LRUAlgorithm@10a6723 reqion=/xwiki recycle=0 evict=0 09:21:33,916 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [EvictionTimer-1] DEBUG eviction.BaseEvictionAlgorithm - initialized: org.jboss.cache.eviction.LRUAlgorithm@1bdea60 reqion=/xwiki recycle=0 evict=0 09:21:37,262 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [EvictionTimer-2] DEBUG eviction.BaseEvictionAlgorithm - initialized: org.jboss.cache.eviction.LRUAlgorithm@116e5d6 reqion=/xwiki recycle=0 evict=0 09:21:38,032 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [EvictionTimer-3] DEBUG eviction.BaseEvictionAlgorithm - initialized: org.jboss.cache.eviction.LRUAlgorithm@d6a0e0 reqion=/xwiki recycle=0 evict=0 09:23:57,565 [] [http-80-1] DEBUG util.ModuleUtils - Get module name for path /bin 09:23:57,565 [] [http-80-1] DEBUG util.ModuleUtils - Module name found: default 09:23:57,565 [] [http-80-1] DEBUG action.RequestProcessor - Processing a 'POST' for path '/loginsubmit/' 09:23:57,566 [] [http-80-1] DEBUG action.RequestProcessor - Looking for Action instance for class com.xpn.xwiki.web.LoginSubmitAction 09:23:57,568 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG ldap.XWikiLDAPConnection - Connection to LDAP server [svivm01.ivmwien:389] 09:23:57,570 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG ldap.XWikiLDAPConnection - Binding to LDAP server with credentials login=[ivmwien\\lehner] password=[<mypassword>] 09:23:57,576 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Local LDAP authentication failed. com.xpn.xwiki.plugin.ldap.XWikiLDAPException: Error number 0 in 5: LDAP bind failed with LDAPException. Wrapped Exception: Invalid Credentials at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:176) at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.open(XWikiLDAPConnection.java:107) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:277) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:176) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:131) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148) at com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:205) at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3566) at com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:139) at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3574) at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4480) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196) at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432) at javax.servlet.http.HttpServlet.service(HttpServlet.java:710) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447) at java.lang.Thread.run(Thread.java:636)
Wrapped Exception:
LDAPException: Invalid Credentials (49) Invalid Credentials LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vecexpn.xwiki.XWiki.checkAccess(XWiki.java:3574) at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4480) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196) at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432) at javax.servlet.http.HttpServlet.service(HttpServlet.java:710) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:94) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447) at java.lang.Thread.run(Thread.java:636) 09:23:57,578 [http://xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-80-1] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki DB
I can login with the same credentials using ldapsearch on the comand line
ldapsearch -v -h svivm01.ivmwien -p 389 -x -D ivmwien\\lehner -W -b "dc=ivmwien" "sAMAccountName=lehner"
I really don't see what could makes authentication fail with the right credentials specifically on linux and if it's working on Windows. The log print exactly what is directly used to bind, except for a bug in the Novell LDAP implementation we are using I don't have much idea right now if the right LDAP server is pointed in the configuration. Does password contains non-ASCII characters ?
Thanks Helmut
-- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1324750.html Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Hi, and first of all thanks for your help. Found the problem in the end and in fact it was my own fault:blush: Thomas Mortagne wrote:
On Mon, Oct 13, 2008 at 9:35 AM, hel-o <[email protected]> wrote: Seems you enabled all debug log and not just LDAP authentication, you should not get any log from JBossCache I think. Anyway this log seems just informational not error.
There are some funny things happening in our installation so wether the log4j.properties File is ignored or theres something else wrong. Thomas Mortagne wrote:
I really don't see what could makes authentication fail with the right credentials specifically on linux and if it's working on Windows. The log print exactly what is directly used to bind, except for a bug in the Novell LDAP implementation we are using I don't have much idea right now if the right LDAP server is pointed in the configuration. Does password contains non-ASCII characters ?
I tried with a new Xwiki 1.6 installation and the new xwiki-core and LDAP worked fine -> Finaly i found that i (must have been) have added the LDAP definitions in the XWikiPrefferences. I think they were the same definitions but obviously they were not (or can there be a conflict when there are definition in the Preferences and the xwiki.cfg). Thanks again Helmut -- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1332099.html Sent from the XWiki- Users mailing list archive at Nabble.com.
On Tue, Oct 14, 2008 at 12:00 PM, hel-o <[email protected]> wrote:
Hi,
and first of all thanks for your help. Found the problem in the end and in fact it was my own fault:blush:
Ok great, anyway it made me improve LDAP log ;)
Thomas Mortagne wrote:
On Mon, Oct 13, 2008 at 9:35 AM, hel-o <[email protected]> wrote: Seems you enabled all debug log and not just LDAP authentication, you should not get any log from JBossCache I think. Anyway this log seems just informational not error.
There are some funny things happening in our installation so wether the log4j.properties File is ignored or theres something else wrong.
Thomas Mortagne wrote:
I really don't see what could makes authentication fail with the right credentials specifically on linux and if it's working on Windows. The log print exactly what is directly used to bind, except for a bug in the Novell LDAP implementation we are using I don't have much idea right now if the right LDAP server is pointed in the configuration. Does password contains non-ASCII characters ?
I tried with a new Xwiki 1.6 installation and the new xwiki-core and LDAP worked fine -> Finaly i found that i (must have been) have added the LDAP definitions in the XWikiPrefferences.
I think they were the same definitions but obviously they were not (or can there be a conflict when there are definition in the Preferences and the xwiki.cfg).
Thanks again Helmut
-- View this message in context: http://n2.nabble.com/LDAP-Auth-problem-in-1.6-tp1303665p1332099.html Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Contentview.vm document an increase in the query why some of the implementation of some non-implementation of the chat, for example: an increase in the document # set ($ names = $ tdoc.web +'.'+$ tdoc.name) # set ($ resultds = $ xwiki.search ( "select max (do.pageViews) from DocumentStats do where do.name = '$ names'", 5,0)) [$ resultds.size ()] after the implementation of the page for some 0, the database can query the data and $ resultds.size () = 0 why?
participants (4)
-
hel-o -
Jamison Novak -
Thomas Mortagne -
xiaoyao1118