Uploaded image for project: 'LDAP'
  1. LDAP
  2. LDAP-94

LDAP Authenticator (XWikiLDAPUtils) does not synchronize, uses cache only

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Cannot Reproduce
    • Affects Version/s: 9.4.5
    • Fix Version/s: None
    • Component/s: Authenticator
    • Labels:
      None
    • Environment:
      XWiki 11.10.3, with LDAP Application 9.4.5, running in a Docker Container
    • Difficulty:
      Easy
    • Similar issues:

      Description

      First I removed the user zzz123 completely, from LDAP and also from XWiki, then I try to login as user zzz123 with the last known credentials, then this happens

      ...
      DEBUG o.x.c.l.XWikiLDAPUtils         - Found cache entry for group [ou=Xwiki,ou=nwa,ou=groups,dc=acme,dc=net] ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - Found group [ou=Xwiki,ou=nwa,ou=groups,dc=acme,dc=net] members [{..., cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net=zzz123, ...}] ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - Found user dn in user group [cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net] ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - Found user dn in user group [cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net] ,
      DEBUG o.x.c.l.XWikiLDAPConnection    - Binding to LDAP server with credentials login=[cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net] ,
      DEBUG o.x.c.l.XWikiLDAPConnection    - Binding to LDAP server with credentials login=[cn=readonly,dc=acme,dc=net] ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - LDAP attributes will be used to update XWiki attributes. ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - Getting the list of user fields to synchronize ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - LDAP avatar photo synchronisation is enabled ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - LDAP avatar photo field name: jpegPhoto ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - LDAP user fields to synchronize: [sn, givenName, mail, displayName, jpegPhoto] ,
      DEBUG o.x.c.l.PagedLDAPSearchResults - LDAP pagined search: base=[cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net] query=[null] attrs=[[sn, givenName, mail, displayName, jpegPhoto]] scope=[0] typesOnly=[false] pageSize=[500], cookie=[null] ,
      DEBUG o.x.c.l.XWikiLDAPConnection    -   - values for attribute [displayName] ,
      DEBUG o.x.c.l.XWikiLDAPConnection    -     |- [Test User] ,
      DEBUG o.x.c.l.XWikiLDAPConnection    -   - values for attribute [sn] ,
      DEBUG o.x.c.l.XWikiLDAPConnection    -     |- [User1] ,
      DEBUG o.x.c.l.XWikiLDAPConnection    -   - values for attribute [givenName] ,
      DEBUG o.x.c.l.XWikiLDAPConnection    -     |- [Test1] ,
      DEBUG o.x.c.l.XWikiLDAPConnection    - LDAP search found attributes [[{name=dn value=cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net}, {name=displayName value=Test User}, {name=sn value=User1}, {name=givenName value=Test1}]] ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - UserPageName: zzz123 ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - Creating new XWiki user based on LDAP attribues located at [cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net] ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - Start first synchronization of LDAP profile [[{name=dn value=cn=zzz test user,ou=rds,ou=nl,ou=btn,ou=ndcs,dc=acme,dc=net}, {name=displayName value=Test User}, {name=sn value=User1}, {name=givenName value=Test1}]] with new user profile based on mapping [{mail=email, givenname=first_name, displayname=fullname, sn=last_name}] ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - New XWiki user created: [xwiki:XWiki.zzz123] ,
      DEBUG o.x.c.l.XWikiLDAPConfig        - Groupmapping found [XWikiAllGroup] [[cn=xwiki-users,ou=Xwiki,ou=nwa,ou=groups,dc=acme,dc=net]] ,
      DEBUG o.x.c.l.XWikiLDAPConfig        - Groupmapping found [XWikiAdminGroup] [[cn=xwiki-admin,ou=Xwiki,ou=nwa,ou=groups,dc=acme,dc=net]] ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - Updating group membership for the user [XWiki.zzz123] ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - The user belongs to following XWiki groups:  ,
      DEBUG o.x.c.l.XWikiLDAPUtils         - XWiki.XWikiAllGroup ,
      
      ...

      So I'm able to login with the removed user zzz123.
      After a restart of Xwiki it works fine, until I remove another user in Xwiki or LDAP.

       

       

       

        Attachments

          Activity

            People

            Assignee:
            tmortagne Thomas Mortagne
            Reporter:
            Holman Johan
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Date of First Response:
              Date of last seen failure for flicker: