Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-2193

LDAP error message with stack trace in xwiki.log when processing invalid LDAP credentials. User gets "Internal Error" feedback on UI.

    XMLWordPrintable

    Details

    • keywords:
      LDAP log AD
    • Similar issues:

      Description

      Invalid credentials shouldn't generate an error message in the log file. Such error message is also generated when a valid "xwiki db" credential is used with LDAP authenticaion and ldap.trylocal are enabled.

      User also gets an "Internal Error" feedback on UI when invalid credentials were provided instead of something more appropriate.

      Here are the error message excerpt when login using using Admin/admin:

      10:19:20,911 http://bl.local:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin [http-8080-3] ERROR ldap.XWikiLDAPConnection - LDAP bind failed with LDAPException.
      LDAPException: Invalid Credentials (49) Invalid Credentials
      LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece
      LDAPException: Matched DN:
      at com.novell.ldap.LDAPResponse.getResultException(Unknown Source)
      ...
      10:19:20,926 http://bl.local:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin [http-8080-3] ERROR LDAP.XWikiLDAPAuthServiceImpl - LDAP authentication failed.
      com.xpn.xwiki.XWikiException: Error number 8001 in 8: Bind to LDAP server failed.
      at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:162)
      ...
      10:19:21,082 http://bl.local:8080/xwiki/bin/view/Main/ [http-8080-1] ERROR ldap.XWikiLDAPConnection - LDAP bind failed with LDAPException.
      LDAPException: Invalid Credentials (49) Invalid Credentials
      LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece
      LDAPException: Matched DN:
      at com.novell.ldap.LDAPResponse.getResultException(Unknown Source)
      ...
      10:19:21,082 http://bl.local:8080/xwiki/bin/view/Main/ [http-8080-1] ERROR LDAP.XWikiLDAPAuthServiceImpl - LDAP authentication failed.
      com.xpn.xwiki.XWikiException: Error number 8001 in 8: Bind to LDAP server failed.
      at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:162)
      ...

        Attachments

          Activity

            People

            Assignee:
            tmortagne Thomas Mortagne
            Reporter:
            bleung Benjamin Leung
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Date of First Response: