Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-2193

LDAP error message with stack trace in xwiki.log when processing invalid LDAP credentials. User gets "Internal Error" feedback on UI.

    XMLWordPrintable

Details

    • LDAP log AD

    Description

      Invalid credentials shouldn't generate an error message in the log file. Such error message is also generated when a valid "xwiki db" credential is used with LDAP authenticaion and ldap.trylocal are enabled.

      User also gets an "Internal Error" feedback on UI when invalid credentials were provided instead of something more appropriate.

      Here are the error message excerpt when login using using Admin/admin:

      10:19:20,911 http://bl.local:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin [http-8080-3] ERROR ldap.XWikiLDAPConnection - LDAP bind failed with LDAPException.
      LDAPException: Invalid Credentials (49) Invalid Credentials
      LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece
      LDAPException: Matched DN:
      at com.novell.ldap.LDAPResponse.getResultException(Unknown Source)
      ...
      10:19:20,926 http://bl.local:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin [http-8080-3] ERROR LDAP.XWikiLDAPAuthServiceImpl - LDAP authentication failed.
      com.xpn.xwiki.XWikiException: Error number 8001 in 8: Bind to LDAP server failed.
      at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:162)
      ...
      10:19:21,082 http://bl.local:8080/xwiki/bin/view/Main/ [http-8080-1] ERROR ldap.XWikiLDAPConnection - LDAP bind failed with LDAPException.
      LDAPException: Invalid Credentials (49) Invalid Credentials
      LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece
      LDAPException: Matched DN:
      at com.novell.ldap.LDAPResponse.getResultException(Unknown Source)
      ...
      10:19:21,082 http://bl.local:8080/xwiki/bin/view/Main/ [http-8080-1] ERROR LDAP.XWikiLDAPAuthServiceImpl - LDAP authentication failed.
      com.xpn.xwiki.XWikiException: Error number 8001 in 8: Bind to LDAP server failed.
      at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:162)
      ...

      Attachments

        1. xwiki.log
          58 kB
          Benjamin Leung

        Activity

          People

            tmortagne Thomas Mortagne
            bleung Benjamin Leung
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: