Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-4764

LDAP Auth: Only First Time Log in Allowed

    XMLWordPrintable

Details

    • Unknown

    Description

      LDAP accounts can only log in once. For the second time he tries to log in, XE gives error 'Wrong Password'. If you remove delete account from XWiki Administration the user can log in again, but yet for the first time only. Error messages (second time thereafter log in) in catalina.out are shown below:

      2010-01-18 09:52:14,205 http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin DEBUG LDAP.XWikiLDAPAuthServiceImp l - The provided user is null. We don't try to authenticate, it probably means the user is in non logged mode.
      2010-01-18 09:52:14,206 http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin DEBUG LDAP.XWikiLDAPAuthServiceImp l - LDAP authentication failed: password null or empty
      2010-01-18 09:52:14,558 http://localhost:8080/xwiki/bin/view/Main/DocumentDoesNotExist http://localhost:8080/xwiki/skins/albatross/icons/xwiki/rss%2Dmedium.png DEBUG LDAP.XWikiLDAP AuthServiceImpl - The provided user is null. We don't try to authenticate, it probably means the user is in non logged mode.
      2010-01-18 09:52:27,184 http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin DEBUG LDAP.XWikiLDAPAuthServiceImp l - The provided user is null. We don't try to authenticate, it probably means the user is in non logged mode.
      2010-01-18 09:52:27,184 http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin DEBUG ldap.XWikiLDAPConfig - ldap_group_classes: [groupofnames, groupwisedistributionlist, dynamicgroup, dynamicgroupaux, groupofuniquenames, group]
      2010-01-18 09:52:27,184 http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin DEBUG ldap.XWikiLDAPConfig - ldap_group_memberfields: [uniquemember, members]
      2010-01-18 09:52:27,185 http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin DEBUG ldap.XWikiLDAPConnection - Connection to LDAP server [ldap1.olemiss.edu:1744]
      2010-01-18 09:52:27,499 http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin DEBUG ldap.XWikiLDAPConnection - Binding to LDAP server with credentials login=[uid=****,ou=Special Users,dc=olemiss,dc=edu,c=us]
      2010-01-18 09:52:27,615 http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin DEBUG LDAP.XWikiLDAPAuthServiceImp l - Found user dn with the user object: uid=dsun, ou=People, dc=olemiss,dc=edu,c=us
      2010-01-18 09:52:27,616 http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin DEBUG ldap.XWikiLDAPConnection - Binding to LDAP server with credentials login=[uid=dsun, ou=People, dc=olemiss,dc=edu,c=us]
      2010-01-18 09:52:27,738 http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin DEBUG LDAP.XWikiLDAPAuthServiceImp l - Local LDAP authentication failed.
      LDAPException: Invalid Credentials (49) Invalid Credentials
      LDAPException: Matched DN:
      at com.novell.ldap.LDAPResponse.getResultException(Unknown Source)
      at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source)
      at com.novell.ldap.LDAPConnection.chkResultCode(Unknown Source)
      at com.novell.ldap.LDAPConnection.bind(Unknown Source)
      at com.novell.ldap.LDAPConnection.bind(Unknown Source)
      at com.xpn.xwiki.plugin.ldap.XWikiLDAPConnection.bind(XWikiLDAPConnection.java:210)
      at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:428)
      at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:202)
      at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:149)
      at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:271)
      at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:191)
      at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:174)
      at com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:234)
      at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3798)
      at com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:160)
      at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3811)
      at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4847)
      at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:189)
      at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115)
      at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
      at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236)
      at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
      at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
      at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
      at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
      at com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:152)
      at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
      at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
      at com.xpn.xwiki.web.ActionFilter.doFilter(ActionFilter.java:117)
      at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
      at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
      at com.xpn.xwiki.plugin.webdav.XWikiDavFilter.doFilter(XWikiDavFilter.java:68)
      at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
      at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
      at com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:295)
      at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
      at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
      at com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112)
      at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
      at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
      at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
      at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
      at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
      at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
      at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
      at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
      at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:849)
      at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
      at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:454)
      at java.lang.Thread.run(Thread.java:636)
      2010-01-18 09:52:27,739 http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin DEBUG LDAP.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki DB
      2010-01-18 09:52:27,739 http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin DEBUG LDAP.XWikiLDAPAuthServiceImpl - LDAP authentication failed for user [dsun]
      2010-01-18 09:52:28,241 http://localhost:8080/xwiki/bin/view/Main/DocumentDoesNotExist http://localhost:8080/xwiki/skins/albatross/icons/xwiki/rss%2Dmedium.png DEBUG LDAP.XWikiLDAPAuthServiceImpl - The provided user is null. We don't try to authenticate, it probably means the user is in non logged mode.

      Attachments

        Activity

          People

            tmortagne Thomas Mortagne
            jackyork Jack
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: