Details
-
Bug
-
Resolution: Fixed
-
Minor
-
1.3.1
-
None
-
Windows XP, Tomcat 6.0.16, Oracle 10g, Active Directory, Intranet
-
LDAP log AD
-
Description
Invalid credentials shouldn't generate an error message in the log file. Such error message is also generated when a valid "xwiki db" credential is used with LDAP authenticaion and ldap.trylocal are enabled.
User also gets an "Internal Error" feedback on UI when invalid credentials were provided instead of something more appropriate.
Here are the error message excerpt when login using using Admin/admin:
10:19:20,911 http://bl.local:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin [http-8080-3] ERROR ldap.XWikiLDAPConnection - LDAP bind failed with LDAPException.
LDAPException: Invalid Credentials (49) Invalid Credentials
LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece
LDAPException: Matched DN:
at com.novell.ldap.LDAPResponse.getResultException(Unknown Source)
...
10:19:20,926 http://bl.local:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin [http-8080-3] ERROR LDAP.XWikiLDAPAuthServiceImpl - LDAP authentication failed.
com.xpn.xwiki.XWikiException: Error number 8001 in 8: Bind to LDAP server failed.
at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:162)
...
10:19:21,082 http://bl.local:8080/xwiki/bin/view/Main/ [http-8080-1] ERROR ldap.XWikiLDAPConnection - LDAP bind failed with LDAPException.
LDAPException: Invalid Credentials (49) Invalid Credentials
LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece
LDAPException: Matched DN:
at com.novell.ldap.LDAPResponse.getResultException(Unknown Source)
...
10:19:21,082 http://bl.local:8080/xwiki/bin/view/Main/ [http-8080-1] ERROR LDAP.XWikiLDAPAuthServiceImpl - LDAP authentication failed.
com.xpn.xwiki.XWikiException: Error number 8001 in 8: Bind to LDAP server failed.
at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:162)
...