hola,
current version of LdapLoginmanagement contains some unnecessary code -
> Admin user is authenticated 3 times :
lAuth.authenticateUser(ldap_admin_dn, ldap_passwd); -> this causes
authentication + internal bind within authenticate user
if(!lAuth.authenticateUser(user, passwd))
return new Long(-11); -> this
again causes bind of the
admin user + auth of the user himself
u could try to uncomment "lAuth.authenticateUser(ldap_admin_dn,
ldap_passwd);" -> the bind of the admin user is already done within
Auth.authenticateUser(user, passwd), so maybe that causes problems on
authentication...
btw : the authentication of the admin user is done via DN, while the
users login is done with his normal login name (in your case
sAMAccountName ?).
see ya
Smoeker
On 29 Apr., 11:59, Dmitry Tikhomirov <[email protected]> wrote:
> Hi again.
>
> if iam trying to login with "chain" i am getting a "Invalid password"
> message. Its strange coz i use this user as admin for ldap-bind an its
> successful.
>
> <log>
> DEBUG 04-29 13:46:37.701 LdapLoginManagement.java 99679 100
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> LdapLoginmanagement.isLdapConfigured
> WARN 04-29 13:46:37.209 MainService.java 99187 254
> org.openmeetings.app.remote.MainService [NioProcessor-1] - loginUser 111:
> 4d798f37bb403bb68ec778ded8f5a628 chain
> DEBUG 04-29 13:46:37.210 Usermanagement.java 99188 1384
> org.openmeetings.app.data.user.Usermanagement [NioProcessor-1] -
> Usermanagement.getUserByLoginOrEmail : chain
> DEBUG 04-29 13:46:37.223 MainService.java 99201 271
> org.openmeetings.app.remote.MainService [NioProcessor-1] - Ldap Login
> DEBUG 04-29 13:46:37.224 LdapLoginManagement.java 99202 173
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> LdapLoginmanagement.doLdapLogin
> DEBUG 04-29 13:46:37.225 LdapLoginManagement.java 99203 126
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> LdapLoginmanagement.getLdapConfigData
> DEBUG 04-29 13:46:37.235 LdapLoginManagement.java 99213 149
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> LdapLoginmanagement.readConfig :
> /home/chani/red5/webapps/openmeetings/conf/om_ldap.cfg
> DEBUG 04-29 13:46:37.236 LdapLoginManagement.java 99214 78
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> isValidAuthType
> DEBUG 04-29 13:46:37.237 LdapLoginManagement.java 99215 223
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Searching
> userdata with LDAP Search Filter :(sAMAccountName=chain)
> DEBUG 04-29 13:46:37.237 LdapAuthBase.java 99215 65
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - LdapAuthBase
> DEBUG 04-29 13:46:37.238 LdapLoginManagement.java 99216 231
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> authenticating admin...
> DEBUG 04-29 13:46:37.238 LdapAuthBase.java 99216 82
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - authenticateUser
> DEBUG 04-29 13:46:37.239 LdapAuthBase.java 99217 98
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
>
> Authentification to LDAP - Server start
> DEBUG 04-29 13:46:37.239 LdapAuthBase.java 99217 130
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - loginToLdapServer
> DEBUG 04-29 13:46:37.249 LdapLoginManagement.java 99227 234
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Checking
> server type...
> DEBUG 04-29 13:46:37.250 LdapLoginManagement.java 99228 238
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LDAP server
> is OpenLDAP
> DEBUG 04-29 13:46:37.250 LdapLoginManagement.java 99228 239
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LDAP search
> baseOU:Users,DC:ru,DC:group,DC:global,DC:network
> DEBUG 04-29 13:46:37.887 LdapAuthBase.java 99865 82
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - authenticateUser
> DEBUG 04-29 13:46:37.888 LdapAuthBase.java 99866 98
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
>
> Authentification to LDAP - Server start
> DEBUG 04-29 13:46:37.889 LdapAuthBase.java 99867 130
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - loginToLdapServer
> ERROR 04-29 13:46:38.003 LdapAuthBase.java 99981 104
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
>
> Authentification on LDAP Server failed : [LDAP: error code 49 - 80090308:
> LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece]
> ERROR 04-29 13:46:38.004 LdapLoginManagement.java 99982 247
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - chain not
> authenticated.
>
> </log>
>
> if "ru\chain" or "[email protected]" i am getting "Username not
> found".
>
> <log>
>
> DEBUG 04-29 13:55:05.991 LdapLoginManagement.java 607969 100
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> LdapLoginmanagement.isLdapConfigured
> WARN 04-29 13:55:05.498 MainService.java 607476 254
> org.openmeetings.app.remote.MainService [NioProcessor-1] - loginUser 111:
> 4d798f37bb403bb68ec778ded8f5a628 ru\chain
> DEBUG 04-29 13:55:05.498 Usermanagement.java 607476 1384
> org.openmeetings.app.data.user.Usermanagement [NioProcessor-1] -
> Usermanagement.getUserByLoginOrEmail : ru\chain
> DEBUG 04-29 13:55:05.504 MainService.java 607482 271
> org.openmeetings.app.remote.MainService [NioProcessor-1] - Ldap Login
> DEBUG 04-29 13:55:05.504 LdapLoginManagement.java 607482 173
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> LdapLoginmanagement.doLdapLogin
> DEBUG 04-29 13:55:05.505 LdapLoginManagement.java 607483 126
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> LdapLoginmanagement.getLdapConfigData
> DEBUG 04-29 13:55:05.510 LdapLoginManagement.java 607488 149
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> LdapLoginmanagement.readConfig :
> /home/chani/red5/webapps/openmeetings/conf/om_ldap.cfg
> DEBUG 04-29 13:55:05.512 LdapLoginManagement.java 607490 78
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> isValidAuthType
> DEBUG 04-29 13:55:05.512 LdapLoginManagement.java 607490 223
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Searching
> userdata with LDAP Search Filter :(sAMAccountName=ru\chain)
> DEBUG 04-29 13:55:05.513 LdapAuthBase.java 607491 65
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - LdapAuthBase
> DEBUG 04-29 13:55:05.513 LdapLoginManagement.java 607491 231
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> authenticating admin...
> DEBUG 04-29 13:55:05.514 LdapAuthBase.java 607492 82
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - authenticateUser
> DEBUG 04-29 13:55:05.514 LdapAuthBase.java 607492 98
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
>
> Authentification to LDAP - Server start
> DEBUG 04-29 13:55:05.515 LdapAuthBase.java 607493 130
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - loginToLdapServer
> DEBUG 04-29 13:55:05.529 LdapLoginManagement.java 607507 234
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Checking
> server type...
> DEBUG 04-29 13:55:05.530 LdapLoginManagement.java 607508 238
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LDAP server
> is OpenLDAP
> DEBUG 04-29 13:55:05.530 LdapLoginManagement.java 607508 239
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LDAP search
> baseOU:Users,DC:ru,DC:group,DC:global,DC:network
> DEBUG 04-29 13:55:05.647 LdapAuthBase.java 607625 82
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - authenticateUser
> DEBUG 04-29 13:55:05.648 LdapAuthBase.java 607626 98
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
>
> Authentification to LDAP - Server start
> DEBUG 04-29 13:55:05.649 LdapAuthBase.java 607627 130
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - loginToLdapServer
> DEBUG 04-29 13:55:05.657 Usermanagement.java 607635 1358
> org.openmeetings.app.data.user.Usermanagement [NioProcessor-1] -
> Usermanagement.getUserByLogin : ru\chain
> DEBUG 04-29 13:55:05.666 LdapLoginManagement.java 607644 277
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - user doenst
> exist local -> create new
> DEBUG 04-29 13:55:05.667 LdapAuthBase.java 607645 153
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - getData
> ERROR 04-29 13:55:05.669 LdapAuthBase.java 607647 209
> org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - Error occured on
> LDAP Search : invalid escape sequence: [...@637a7476
> ERROR 04-29 13:55:05.669 LdapLoginManagement.java 607647 295
> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Error on
> Ldap request - no result for user ru\chain
> </log>
>
> Cant find, what i do wrong ? How can i check this ?
> Thanks for any help
>
> 29.04.2010, в 10:12, smoeker написал(а):
>
> > hola,
>
> > regarding your log it seems, as if the admin user can create a bind,
> > but the user login itself crashes...
> > (authenticateuser is called twice - once for admin and afterwards for
> > user himself...).
>
> > i would recommend playing with entered username, for example adding
> > the domain to the username ([email protected]) or (domain\cher)...
>
> > see ya
>
> > Smoeker
>
> > On 27 Apr., 16:34, chani <[email protected]> wrote:
> >> Hi All, first of all, thanks for your great system.
>
> >> i am trying to setup ldap auth with ActiveDirectory.
>
> >> here is my om_ldap.cfg:
>
> >> ldap_server_type=ActiveDirectory
> >> ldap_conn_url=ldap://10.7.1.1:389
> >> ldap_admin_dn=CN:chain,OU:Users,DC:ru,DC:group,DC:global,DC:network
> >> ldap_passwd=********
> >> ldap_search_base=OU:Users,DC:ru,DC:group,DC:global,DC:network
> >> field_user_principal=sAMAccountName
> >> ldap_auth_type=SIMPLE
>
> >> I am getting "Invalid password" error. Plz help.
>
> >> Here is a log:
>
> >> DEBUG 04-27 18:29:56.486 LdapLoginManagement.java 599302 100
> >> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> >> LdapLoginmanagement.isLdapConfigured
> >> WARN 04-27 18:29:56.500 MainService.java 599316 254
> >> org.openmeetings.app.remote.MainService [NioProcessor-1] - loginUser
> >> 111: e44794f39cbce6fd6321b54a4e5ba293 cher
> >> DEBUG 04-27 18:29:56.501 Usermanagement.java 599317 1384
> >> org.openmeetings.app.data.user.Usermanagement [NioProcessor-1] -
> >> Usermanagement.getUserByLoginOrEmail : cher
> >> DEBUG 04-27 18:29:56.505 MainService.java 599321 271
> >> org.openmeetings.app.remote.MainService [NioProcessor-1] - Ldap Login
> >> DEBUG 04-27 18:29:56.506 LdapLoginManagement.java 599322 173
> >> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> >> LdapLoginmanagement.doLdapLogin
> >> DEBUG 04-27 18:29:56.507 LdapLoginManagement.java 599323 126
> >> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
> >> LdapLoginmanagement.getLdapConfigData
> >> DEBUG 04-27 18:29:56.510 LdapLoginManagement.java 599326 149
> >> org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] -
>
> ...
>
> Erfahren Sie mehr »
--
You received this message because you are subscribed to the Google Groups
"OpenMeetings User" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/openmeetings-user?hl=en.
