xmlrpc with ldap authentication 
--------------------------------

                 Key: CONTINUUM-2576
                 URL: http://jira.codehaus.org/browse/CONTINUUM-2576
             Project: Continuum
          Issue Type: Bug
          Components: Security, XMLRPC Interface
    Affects Versions: 1.3.6
         Environment: continuum 136
mysql
linux
java 1.6
            Reporter: Luca


We have an xmlrpc client, using continuum with default authentication all works 
well.
if we enable ldap authentication, the xmlrpc client works, but for each action 
continuum seems to make a mixed auth with standard and ldap. For each remote 
call the failed auth count is increased and the user became locked.
in the fact we have the user remoteuser in old user database and in ldap with 
different password. Continuum checks both database and ldap. If we set the user 
password in db the same of ldap then works.

2010-10-25 14:21:06,191 [TP-Processor24] INFO  
org.codehaus.plexus.redback.authentication.ldap.LdapBindAuthenticator  - 
Searching for users with filter: 
'(&(objectClass=user)(sAMAccountName=remoteuser))' from base dn: dc=prov,dc=bz
2010-10-25 14:21:06,199 [TP-Processor24] INFO  
org.codehaus.plexus.redback.authentication.ldap.LdapBindAuthenticator  - Found 
user?: true
2010-10-25 14:21:06,200 [TP-Processor24] INFO  
org.codehaus.plexus.redback.authentication.ldap.LdapBindAuthenticator  - 
Attempting Authenication: + CN=remoteuser,OU=9.1,OU=9,OU=Central 
Administration,OU=prov.bz,DC=prov,DC=bz
2010-10-25 14:21:06,211 [TP-Processor24] INFO  
org.codehaus.plexus.redback.users.ldap.ctl.DefaultLdapController  - Searching 
for users with filter: '(&(objectClass=user)(sAMAccountName=remoteuser))' from 
base dn: dc=prov,dc=bz
2010-10-25 14:21:06,217 [TP-Processor24] INFO  
org.codehaus.plexus.redback.users.ldap.ctl.DefaultLdapController  - Searching 
for user: remoteuser
2010-10-25 14:21:06,217 [TP-Processor24] INFO  
org.codehaus.plexus.redback.users.ldap.ctl.DefaultLdapController  - Searching 
for users with filter: '(&(objectClass=user)(sAMAccountName=remoteuser))' from 
base dn: dc=prov,dc=bz
2010-10-25 14:21:06,265 [TP-Processor24] INFO  
net.sf.dozer.util.mapping.util.CustomMappingsLoader  - Using the following xml 
files to load custom mappings for the bean mapper instance: 
[dozerBeanMapping.xml]
2010-10-25 14:21:06,266 [TP-Processor24] INFO  
net.sf.dozer.util.mapping.util.CustomMappingsLoader  - Trying to find xml 
mapping file: dozerBeanMapping.xml
2010-10-25 14:21:06,268 [TP-Processor24] INFO  
net.sf.dozer.util.mapping.util.CustomMappingsLoader  - Using URL 
[jar:file:/opt/egovapps/continuum-1.3.6/WEB-INF/lib/continuum-xmlrpc-server-1.3.6.jar!/dozerBeanMapping.xml]
 to load custom xml mappings
2010-10-25 14:21:06,330 [TP-Processor24] INFO  
net.sf.dozer.util.mapping.util.CustomMappingsLoader  - Successfully loaded 
custom xml mappings from URL: 
[jar:file:/opt/egovapps/continuum-1.3.6/WEB-INF/lib/continuum-xmlrpc-server-1.3.6.jar!/dozerBeanMapping.xml]
2010-10-25 14:21:08,752 [TP-Processor21] WARN  
org.codehaus.plexus.redback.authentication.users.UserManagerAuthenticator  - 
Password is Invalid for user remoteuser.
2010-10-25 14:21:08,758 [TP-Processor21] INFO  
org.codehaus.plexus.redback.authentication.ldap.LdapBindAuthenticator  - 
Searching for users with filter: 
'(&(objectClass=user)(sAMAccountName=remoteuser))' from base dn: dc=prov,dc=bz
2010-10-25 14:21:08,765 [TP-Processor21] INFO  
org.codehaus.plexus.redback.authentication.ldap.LdapBindAuthenticator  - Found 
user?: true
2010-10-25 14:21:08,765 [TP-Processor21] INFO  
org.codehaus.plexus.redback.authentication.ldap.LdapBindAuthenticator  - 
Attempting Authenication: + CN=remoteuser,OU=9.1,OU=9,OU=Central 
Administration,OU=prov.bz,DC=prov,DC=bz
2010-10-25 14:21:08,775 [TP-Processor21] INFO  
org.codehaus.plexus.redback.users.ldap.ctl.DefaultLdapController  - Searching 
for users with filter: '(&(objectClass=user)(sAMAccountName=remoteuser))' from 
base dn: dc=prov,dc=bz
2010-10-25 14:21:08,780 [TP-Processor21] INFO  
org.codehaus.plexus.redback.users.ldap.ctl.DefaultLdapController  - Searching 
for user: remoteuser
2010-10-25 14:21:08,780 [TP-Processor21] INFO  
org.codehaus.plexus.redback.users.ldap.ctl.DefaultLdapController  - Searching 
for users with filter: '(&(objectClass=user)(sAMAccountName=remoteuser))' from 
base dn: dc=prov,dc=bz
2010-10-25 14:21:08,798 [TP-Processor20] WARN  
org.codehaus.plexus.redback.authentication.users.UserManagerAuthenticator  - 
Password is Invalid for user remoteuser.
2010-10-25 14:21:08,801 [TP-Processor20] INFO  
org.codehaus.plexus.redback.authentication.ldap.LdapBindAuthenticator  - 
Searching for users with filter: 
'(&(objectClass=user)(sAMAccountName=remoteuser))' from base dn: dc=prov,dc=bz
2010-10-25 14:21:08,807 [TP-Processor20] INFO  
org.codehaus.plexus.redback.authentication.ldap.LdapBindAuthenticator  - Found 
user?: true
2010-10-25 14:21:08,807 [TP-Processor20] INFO  
org.codehaus.plexus.redback.authentication.ldap.LdapBindAuthenticator  - 
Attempting Authenication: + CN=remoteuser,OU=9.1,OU=9,OU=Central 
Administration,OU=prov.bz,DC=prov,DC=bz
2010-10-25 14:21:08,818 [TP-Processor20] INFO  
org.codehaus.plexus.redback.users.ldap.ctl.DefaultLdapController  - Searching 
for users with filter: '(&(objectClass=user)(sAMAccountName=remoteuser))' from 
base dn: dc=prov,dc=bz
2010-10-25 14:21:08,823 [TP-Processor20] INFO  
org.codehaus.plexus.redback.users.ldap.ctl.DefaultLdapController  - Searching 
for user: remoteuser
2010-10-25 14:21:08,823 [TP-Processor20] INFO  
org.codehaus.plexus.redback.users.ldap.ctl.DefaultLdapController  - Searching 
for users with filter: '(&(objectClass=user)(sAMAccountName=remoteuser))' from 
base dn: dc=prov,dc=bz


-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to