My guess is that you are using default ldap config which we use wso2Person
type objects and your ldap doesn't have that type defined. So please try
changing that to inetOrgPerson in user-mgt.cml

Thanks & Regards
Danushka Fernando
Senior Software Engineer
WSO2 inc. http://wso2.com/
Mobile : +94716332729

On Tue, Dec 6, 2016 at 7:18 PM, Hanen Ben Rhouma <hanen...@gmail.com> wrote:

> Hello,
>
> I'm facing an issue while trying to authenticate external users (coming
> from an external OpenLDAP user store) through WSO2 IS. There are missing
> claims that are required and even through I commented all what my LDAP
> doesn't provide in  claim-config.xml I'm still not able to authenticate
> users:
>
> [2016-12-06 13:32:39,159] DEBUG 
> {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager}
> -  User: admin exist: true
> [2016-12-06 13:32:39,161] DEBUG 
> {org.wso2.carbon.user.core.ldap.ReadWriteLDAPUserStoreManager}
> -  Replace escape characters configured to: true
> [2016-12-06 13:32:39,161] DEBUG 
> {org.wso2.carbon.user.core.ldap.ReadWriteLDAPUserStoreManager}
> -  Replace escape characters configured to: true
> [2016-12-06 13:32:39,204] DEBUG 
> {org.wso2.carbon.user.core.ldap.ReadWriteLDAPUserStoreManager}
> -  One or more attributes you are trying to add/update are not supported by
> underlying LDAP for user : admin
> javax.naming.directory.InvalidAttributeIdentifierException: [LDAP: error
> code 17 - failedLoginAttempts: attribute type undefined]; remaining name
> 'cn=admin'
> at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3205)
> at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3082)
> at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2888)
> at com.sun.jndi.ldap.LdapCtx.c_modifyAttributes(LdapCtx.java:1408)
> at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_modifyAttributes(
> ComponentDirContext.java:257)
> at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.modifyAttributes(
> PartialCompositeDirContext.java:167)
> at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.modifyAttributes(
> PartialCompositeDirContext.java:156)
> at org.wso2.carbon.user.core.ldap.ReadWriteLDAPUserStoreManager.
> doSetUserClaimValues(ReadWriteLDAPUserStoreManager.java:917)
> at org.wso2.carbon.user.core.common.AbstractUserStoreManager.
> setUserClaimValues(AbstractUserStoreManager.java:1211)
> at org.wso2.carbon.identity.governance.store.
> UserStoreBasedIdentityDataStore.store(UserStoreBasedIdentityDataStor
> e.java:72)
> at org.wso2.carbon.identity.governance.listener.
> IdentityStoreEventListener.doPreSetUserClaimValues(
> IdentityStoreEventListener.java:110)
> at org.wso2.carbon.user.core.common.AbstractUserStoreManager.
> setUserClaimValues(AbstractUserStoreManager.java:1205)
> at org.wso2.carbon.identity.handler.event.account.lock.AccountLockHandler.
> handlePostAuthentication(AccountLockHandler.java:221)
> at org.wso2.carbon.identity.handler.event.account.lock.AccountLockHandler.
> handleEvent(AccountLockHandler.java:141)
> at org.wso2.carbon.identity.event.services.IdentityEventServiceImpl.
> handleEvent(IdentityEventServiceImpl.java:56)
> at org.wso2.carbon.identity.governance.listener.IdentityMgtEventListener.
> handleEvent(IdentityMgtEventListener.java:595)
> at org.wso2.carbon.identity.governance.listener.IdentityMgtEventListener.
> handleEvent(IdentityMgtEventListener.java:547)
> at org.wso2.carbon.identity.governance.listener.IdentityMgtEventListener.
> doPostAuthenticate(IdentityMgtEventListener.java:101)
> at org.wso2.carbon.user.core.common.AbstractUserStoreManager.
> authenticateInternal(AbstractUserStoreManager.java:558)
> at org.wso2.carbon.user.core.common.AbstractUserStoreManager.access$100(
> AbstractUserStoreManager.java:71)
> at org.wso2.carbon.user.core.common.AbstractUserStoreManager$4.
> run(AbstractUserStoreManager.java:466)
> at org.wso2.carbon.user.core.common.AbstractUserStoreManager$4.
> run(AbstractUserStoreManager.java:463)
> at java.security.AccessController.doPrivileged(Native Method)
> at org.wso2.carbon.user.core.common.AbstractUserStoreManager.authenticate(
> AbstractUserStoreManager.java:463)
> at org.wso2.carbon.user.core.common.AbstractUserStoreManager$3.
> run(AbstractUserStoreManager.java:451)
> at org.wso2.carbon.user.core.common.AbstractUserStoreManager$3.
> run(AbstractUserStoreManager.java:442)
> at java.security.AccessController.doPrivileged(Native Method)
> at org.wso2.carbon.user.core.common.AbstractUserStoreManager.authenticate(
> AbstractUserStoreManager.java:442)
> at org.wso2.carbon.core.services.authentication.AuthenticationAdmin.login(
> AuthenticationAdmin.java:100)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:498)
> at org.apache.axis2.rpc.receivers.RPCUtil.invokeServiceClass(RPCUtil.
> java:212)
> at org.apache.axis2.rpc.receivers.RPCMessageReceiver.invokeBusinessLogic(
> RPCMessageReceiver.java:117)
> at org.apache.axis2.receivers.AbstractInOutMessageReceiver.
> invokeBusinessLogic(AbstractInOutMessageReceiver.java:40)
> at org.apache.axis2.receivers.AbstractMessageReceiver.receive(
> AbstractMessageReceiver.java:110)
> at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:180)
> at org.apache.axis2.transport.local.LocalTransportReceiver.processMessage(
> LocalTransportReceiver.java:169)
> at org.apache.axis2.transport.local.LocalTransportReceiver.processMessage(
> LocalTransportReceiver.java:82)
> at org.wso2.carbon.core.transports.local.CarbonLocalTransportSender.
> finalizeSendWithToAddress(CarbonLocalTransportSender.java:45)
> at org.apache.axis2.transport.local.LocalTransportSender.
> invoke(LocalTransportSender.java:77)
> at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:442)
> at org.apache.axis2.description.OutInAxisOperationClient.send(
> OutInAxisOperation.java:430)
> at org.apache.axis2.description.OutInAxisOperationClient.executeImpl(
> OutInAxisOperation.java:225)
> at org.apache.axis2.client.OperationClient.execute(
> OperationClient.java:149)
> at org.wso2.carbon.authenticator.stub.AuthenticationAdminStub.
> login(AuthenticationAdminStub.java:659)
> at org.wso2.carbon.authenticator.proxy.AuthenticationAdminClient.login(
> AuthenticationAdminClient.java:64)
> at org.wso2.carbon.ui.DefaultCarbonAuthenticator.doAuthentication(
> DefaultCarbonAuthenticator.java:119)
> at org.wso2.carbon.ui.AbstractCarbonUIAuthenticator.handleSecurity(
> AbstractCarbonUIAuthenticator.java:218)
> at org.wso2.carbon.ui.BasicAuthUIAuthenticator.authenticate(
> BasicAuthUIAuthenticator.java:83)
> at org.wso2.carbon.ui.CarbonUILoginUtil.handleLogin(
> CarbonUILoginUtil.java:390)
> at org.wso2.carbon.ui.CarbonSecuredHttpContext.handleSecurity(
> CarbonSecuredHttpContext.java:246)
> at org.eclipse.equinox.http.servlet.internal.ServletRegistration.service(
> ServletRegistration.java:60)
> at org.eclipse.equinox.http.servlet.internal.ProxyServlet.
> processAlias(ProxyServlet.java:128)
> at org.eclipse.equinox.http.servlet.internal.ProxyServlet.
> service(ProxyServlet.java:68)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:731)
> at org.wso2.carbon.tomcat.ext.servlet.DelegationServlet.
> service(DelegationServlet.java:68)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(
> ApplicationFilterChain.java:303)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(
> ApplicationFilterChain.java:208)
> at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(
> ApplicationFilterChain.java:241)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(
> ApplicationFilterChain.java:208)
> at org.apache.catalina.filters.HttpHeaderSecurityFilter.doFilter(
> HttpHeaderSecurityFilter.java:120)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(
> ApplicationFilterChain.java:241)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(
> ApplicationFilterChain.java:208)
> at org.wso2.carbon.tomcat.ext.filter.CharacterSetFilter.
> doFilter(CharacterSetFilter.java:61)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(
> ApplicationFilterChain.java:241)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(
> ApplicationFilterChain.java:208)
> at org.apache.catalina.filters.HttpHeaderSecurityFilter.doFilter(
> HttpHeaderSecurityFilter.java:120)
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(
> ApplicationFilterChain.java:241)
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(
> ApplicationFilterChain.java:208)
> at org.apache.catalina.core.StandardWrapperValve.invoke(
> StandardWrapperValve.java:218)
> at org.apache.catalina.core.StandardContextValve.invoke(
> StandardContextValve.java:122)
> at org.apache.catalina.authenticator.AuthenticatorBase.invoke(
> AuthenticatorBase.java:505)
> at org.apache.catalina.core.StandardHostValve.invoke(
> StandardHostValve.java:169)
> at org.apache.catalina.valves.ErrorReportValve.invoke(
> ErrorReportValve.java:103)
> at org.wso2.carbon.tomcat.ext.valves.CompositeValve.continueInvocation(
> CompositeValve.java:99)
> at org.wso2.carbon.tomcat.ext.valves.CarbonTomcatValve$1.
> invoke(CarbonTomcatValve.java:47)
> at org.wso2.carbon.webapp.mgt.TenantLazyLoaderValve.invoke(
> TenantLazyLoaderValve.java:57)
> at org.wso2.carbon.tomcat.ext.valves.TomcatValveContainer.invokeValves(
> TomcatValveContainer.java:47)
> at org.wso2.carbon.tomcat.ext.valves.CompositeValve.invoke(
> CompositeValve.java:62)
> at org.wso2.carbon.tomcat.ext.valves.CarbonStuckThreadDetectionValv
> e.invoke(CarbonStuckThreadDetectionValve.java:159)
> at org.apache.catalina.valves.AccessLogValve.invoke(
> AccessLogValve.java:956)
> at org.wso2.carbon.tomcat.ext.valves.CarbonContextCreatorValve.invoke(
> CarbonContextCreatorValve.java:57)
> at org.apache.catalina.core.StandardEngineValve.invoke(
> StandardEngineValve.java:116)
> at org.apache.catalina.connector.CoyoteAdapter.service(
> CoyoteAdapter.java:442)
> at org.apache.coyote.http11.AbstractHttp11Processor.process(
> AbstractHttp11Processor.java:1082)
> at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.
> process(AbstractProtocol.java:623)
> at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.
> doRun(NioEndpoint.java:1756)
> at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.
> run(NioEndpoint.java:1715)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(
> ThreadPoolExecutor.java:1142)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(
> ThreadPoolExecutor.java:617)
> at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(
> TaskThread.java:61)
> at java.lang.Thread.run(Thread.java:745)
> [2016-12-06 13:32:39,207] ERROR {org.wso2.carbon.core.
> services.authentication.AuthenticationAdmin} -  System error while
> Authenticating/Authorizing User : Error when handling event :
> POST_AUTHENTICATION
>
>
> Do you have any idea how can I overcome this ?
>
>
> Regards,
> Hanen
>
>
> _______________________________________________
> Dev mailing list
> Dev@wso2.org
> http://wso2.org/cgi-bin/mailman/listinfo/dev
>
>
_______________________________________________
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to