LDAP Auth with AD Problems in 1.8
286 views
Skip to first unread message
João Vitor Arruda
Sep 15, 2011, 8:38:52 AM9/15/11
to openmeet...@googlegroups.com
Using 1.8 we are having problems with AD auth by LDAP.
We use same om_ldap.cfg that was running on previous version. In 1.8 version we are getting the following error.
The authentication itself seems to work, if I use wrong password it warns that the password is incorrect.
The problem appears to be after the authentication. User is created already on Openmeetings as "username@domain", we are entering just username on the login box and the LDAP config is set to add @domain.
WARN 09-15 09:32:02.787 MainService.java 30686 318 org.openmeetings.app.remote.MainService [NioProcessor-1] - loginUser: 0aee60wew2acwewe8d7b7460wed7307 username
DEBUG 09-15 09:32:02.788 MainService.java 30687 329 org.openmeetings.app.remote.MainService [NioProcessor-1] - Ldap Login
Logger context selector method found
DEBUG 09-15 09:32:02.801 LdapLoginManagement.java 30700 230 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.doLdapLogin
DEBUG 09-15 09:32:02.801 LdapLoginManagement.java 30700 186 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.getLdapConfigData
DEBUG 09-15 09:32:02.801 LdapLoginManagement.java 30700 205 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.readConfig : /usr/local/src/singlewebapp/dist/red5/webapps/openmeetings/conf/om_ldap.cfg
DEBUG 09-15 09:32:02.803 LdapLoginManagement.java 30702 126 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - isValidAuthType
DEBUG 09-15 09:32:02.803 LdapLoginManagement.java 30702 361 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Searching userdata with LDAP Search Filter :(sAMAccountName=username@domain)
Logger context selector method found
DEBUG 09-15 09:32:02.804 LdapAuthBase.java 30703 66 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - LdapAuthBase
DEBUG 09-15 09:32:02.804 LdapLoginManagement.java 30703 372 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - authenticating admin...
DEBUG 09-15 09:32:02.805 LdapAuthBase.java 30704 83 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - authenticateUser
DEBUG 09-15 09:32:02.805 LdapAuthBase.java 30704 99 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
Authentification to LDAP - Server start
DEBUG 09-15 09:32:02.805 LdapAuthBase.java 30704 133 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - loginToLdapServer
DEBUG 09-15 09:32:02.991 LdapLoginManagement.java 30890 375 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Checking server type...
DEBUG 09-15 09:32:02.992 LdapAuthBase.java 30891 83 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - authenticateUser
DEBUG 09-15 09:32:02.992 LdapAuthBase.java 30891 99 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
Authentification to LDAP - Server start
DEBUG 09-15 09:32:02.992 LdapAuthBase.java 30891 133 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - loginToLdapServer
ERROR 09-15 09:32:03.002 LdapLoginManagement.java 30901 415 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Error retrieving Userdata : null
DEBUG 09-15 09:32:03.002 LdapLoginManagement.java 30901 421 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - user doesnt exist local -> create new
DEBUG 09-15 09:32:03.002 LdapAuthBase.java 30901 156 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - getData
ERROR 09-15 09:32:03.006 LdapLoginManagement.java 30905 452 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Error on Ldap request - no result for user username@domain
[INFO] [NioProcessor-1] org.red5.server.net.rtmp.codec.RTMPProtocolDecoder - Action errorservice.getErrorByCode
We use same om_ldap.cfg that was running on previous version. In 1.8 version we are getting the following error.
The authentication itself seems to work, if I use wrong password it warns that the password is incorrect.
The problem appears to be after the authentication. User is created already on Openmeetings as "username@domain", we are entering just username on the login box and the LDAP config is set to add @domain.
WARN 09-15 09:32:02.787 MainService.java 30686 318 org.openmeetings.app.remote.MainService [NioProcessor-1] - loginUser: 0aee60wew2acwewe8d7b7460wed7307 username
DEBUG 09-15 09:32:02.788 MainService.java 30687 329 org.openmeetings.app.remote.MainService [NioProcessor-1] - Ldap Login
Logger context selector method found
DEBUG 09-15 09:32:02.801 LdapLoginManagement.java 30700 230 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.doLdapLogin
DEBUG 09-15 09:32:02.801 LdapLoginManagement.java 30700 186 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.getLdapConfigData
DEBUG 09-15 09:32:02.801 LdapLoginManagement.java 30700 205 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.readConfig : /usr/local/src/singlewebapp/dist/red5/webapps/openmeetings/conf/om_ldap.cfg
DEBUG 09-15 09:32:02.803 LdapLoginManagement.java 30702 126 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - isValidAuthType
DEBUG 09-15 09:32:02.803 LdapLoginManagement.java 30702 361 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Searching userdata with LDAP Search Filter :(sAMAccountName=username@domain)
Logger context selector method found
DEBUG 09-15 09:32:02.804 LdapAuthBase.java 30703 66 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - LdapAuthBase
DEBUG 09-15 09:32:02.804 LdapLoginManagement.java 30703 372 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - authenticating admin...
DEBUG 09-15 09:32:02.805 LdapAuthBase.java 30704 83 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - authenticateUser
DEBUG 09-15 09:32:02.805 LdapAuthBase.java 30704 99 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
Authentification to LDAP - Server start
DEBUG 09-15 09:32:02.805 LdapAuthBase.java 30704 133 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - loginToLdapServer
DEBUG 09-15 09:32:02.991 LdapLoginManagement.java 30890 375 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Checking server type...
DEBUG 09-15 09:32:02.992 LdapAuthBase.java 30891 83 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - authenticateUser
DEBUG 09-15 09:32:02.992 LdapAuthBase.java 30891 99 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
Authentification to LDAP - Server start
DEBUG 09-15 09:32:02.992 LdapAuthBase.java 30891 133 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - loginToLdapServer
ERROR 09-15 09:32:03.002 LdapLoginManagement.java 30901 415 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Error retrieving Userdata : null
DEBUG 09-15 09:32:03.002 LdapLoginManagement.java 30901 421 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - user doesnt exist local -> create new
DEBUG 09-15 09:32:03.002 LdapAuthBase.java 30901 156 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - getData
ERROR 09-15 09:32:03.006 LdapLoginManagement.java 30905 452 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Error on Ldap request - no result for user username@domain
[INFO] [NioProcessor-1] org.red5.server.net.rtmp.codec.RTMPProtocolDecoder - Action errorservice.getErrorByCode
seba....@gmail.com
Sep 15, 2011, 8:53:51 AM9/15/11
to openmeet...@googlegroups.com
Hi,
it seems like OpenMeetings is unable to fetch the user from the LDAP
to simulate the user in OpenMeetings:
LdapLoginManagement [NioProcessor-1] - Error on Ldap request - no
result for user username@domain
=> Means this line of code:
http://code.google.com/p/openmeetings/source/browse/trunk/singlewebapp/src/app/org/openmeetings/app/ldap/LdapLoginManagement.java#451
This fails:
Vector<HashMap<String, String>> result = lAuth.getData(
ldap_search_scope,
ldap_search_filter, attributes);
result is NULL
Can you verify that you get a valid response from the LDAP server in
the fetch of the user?
Sebastian
2011/9/15 João Vitor Arruda <joao....@gmail.com>
> --
> You received this message because you are subscribed to the Google Groups "OpenMeetings User" group.
> To view this discussion on the web visit https://groups.google.com/d/msg/openmeetings-user/-/ltsvPe8Cb44J.
> To post to this group, send email to openmeet...@googlegroups.com.
> To unsubscribe from this group, send email to openmeetings-u...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/openmeetings-user?hl=en.
--
Sebastian Wagner
http://www.webbase-design.de
http://openmeetings.googlecode.com
http://www.wagner-sebastian.com
seba....@gmail.com
João Vitor Arruda
Sep 15, 2011, 9:18:02 AM9/15/11
to openmeet...@googlegroups.com
Sebastian,
Thanks for the reply. I do a tcpdump in the ldap traffic between the Domain Controller and Openmeetings.
For both (previous and 1.8) versions I see to requests:
1st is the Bind to Authenticate the user. It sends the username and password and receives a Bind Response with Status = Success
2nd is a Search. It sends the Base Search and the sAMAccountName correct and receives a search Result Done with Status = Success but MatchedDN: NULL
The processes seems to be exact the same on both versions. But just 1.8 give me the error.
Regards,
João Vitor Arruda
Thanks for the reply. I do a tcpdump in the ldap traffic between the Domain Controller and Openmeetings.
For both (previous and 1.8) versions I see to requests:
1st is the Bind to Authenticate the user. It sends the username and password and receives a Bind Response with Status = Success
2nd is a Search. It sends the Base Search and the sAMAccountName correct and receives a search Result Done with Status = Success but MatchedDN: NULL
The processes seems to be exact the same on both versions. But just 1.8 give me the error.
Regards,
João Vitor Arruda
seba....@gmail.com
Sep 15, 2011, 9:37:17 AM9/15/11
to openmeet...@googlegroups.com
hm well in theory it is possible that we add a configuration or ignore
that those data is empty but to really fix your integration it would
be much better if you have a look why MatchedDN is Null.
Otherwise all users have not even an EMail in their user-profile in
OpenMeetings.
Missing emails can lead subsequently to errors when your users try to
send emails to each other via the private message center in
OpenMeetings for example.
that those data is empty but to really fix your integration it would
be much better if you have a look why MatchedDN is Null.
Otherwise all users have not even an EMail in their user-profile in
OpenMeetings.
Missing emails can lead subsequently to errors when your users try to
send emails to each other via the private message center in
OpenMeetings for example.
Sebastian
2011/9/15 João Vitor Arruda <joao....@gmail.com>:
> --
> You received this message because you are subscribed to the Google Groups
> "OpenMeetings User" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/openmeetings-user/-/d57YimuQgkQJ.
João Vitor Arruda
Sep 15, 2011, 12:35:39 PM9/15/11
to openmeet...@googlegroups.com
Sebastian,
I do the test again, in fact the 2nd request (the search which returns NULL) just happen on 1.8 version.
On previous version we have just the bind.
This process changed on this version? My ldap config file apears to be ok. The query uses "ldap_search_base" recursively right?
Thanks,
I do the test again, in fact the 2nd request (the search which returns NULL) just happen on 1.8 version.
On previous version we have just the bind.
This process changed on this version? My ldap config file apears to be ok. The query uses "ldap_search_base" recursively right?
Thanks,
seba....@gmail.com
Sep 15, 2011, 1:57:58 PM9/15/11
to openmeet...@googlegroups.com
Actually the process did not change, there was only a system-wide refactoring.
But if you compare those two revision of the file:
http://code.google.com/p/openmeetings/source/diff?spec=svn4243&r=3924&format=side&path=/trunk/singlewebapp/src/app/org/openmeetings/app/ldap/LdapLoginManagement.java&old_path=/trunk/singlewebapp/src/app/org/openmeetings/app/ldap/LdapLoginManagement.java&old=4243#sc_svn4243_447
There is no difference about the application logic in this area.
Sebastian
2011/9/15 João Vitor Arruda <joao....@gmail.com>:
> --
> You received this message because you are subscribed to the Google Groups
> "OpenMeetings User" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/openmeetings-user/-/cksXdtEkIccJ.
João Vitor Arruda
Sep 16, 2011, 2:45:39 PM9/16/11
to openmeet...@googlegroups.com
Sebastian,
I figure out why the MatchedDN is Null on LDAP Search response. Changing the field_user_principal var to userPrincipalName instead of sAMAccountname resolve the issue.
Now the search result in LDAP match the right DN and brings the user information. But now I get another error as follow:
[INFO] [NioProcessor-1] org.red5.server.net.rtmp.codec.RTMPProtocolDecoder - Action xmlcrm.loginUser
WARN 09-16 15:07:41.011 MainService.java 226704 318 org.openmeetings.app.remote.MainService [NioProcessor-1] - loginUser: 0599afdefe0d1fefe48c420b1a51da9e username
DEBUG 09-16 15:07:41.011 MainService.java 226704 329 org.openmeetings.app.remote.MainService [NioProcessor-1] - Ldap Login
DEBUG 09-16 15:07:41.014 LdapLoginManagement.java 226707 230 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.doLdapLogin
DEBUG 09-16 15:07:41.014 LdapLoginManagement.java 226707 186 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.getLdapConfigData
DEBUG 09-16 15:07:41.014 LdapLoginManagement.java 226707 205 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.readConfig : /usr/local/src/singlewebapp/dist/red5/webapps/openmeetings/conf/om_ldap.cfg
DEBUG 09-16 15:07:41.015 LdapLoginManagement.java 226708 126 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - isValidAuthType
DEBUG 09-16 15:07:41.015 LdapLoginManagement.java 226708 361 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Searching userdata with LDAP Search Filter :(userPrincipalName=username@domain)
DEBUG 09-16 15:07:41.015 LdapAuthBase.java 226708 66 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - LdapAuthBase
DEBUG 09-16 15:07:41.015 LdapLoginManagement.java 226708 372 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - authenticating admin...
DEBUG 09-16 15:07:41.016 LdapAuthBase.java 226709 83 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - authenticateUser
DEBUG 09-16 15:07:41.016 LdapAuthBase.java 226709 99 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
Authentification to LDAP - Server start
DEBUG 09-16 15:07:41.016 LdapAuthBase.java 226709 133 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - loginToLdapServer
DEBUG 09-16 15:07:41.026 LdapLoginManagement.java 226719 375 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Checking server type...
DEBUG 09-16 15:07:41.027 LdapAuthBase.java 226720 83 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - authenticateUser
DEBUG 09-16 15:07:41.027 LdapAuthBase.java 226720 99 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
Authentification to LDAP - Server start
DEBUG 09-16 15:07:41.027 LdapAuthBase.java 226720 133 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - loginToLdapServer
ERROR 09-16 15:07:41.037 LdapLoginManagement.java 226730 415 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Error retrieving Userdata : null
DEBUG 09-16 15:07:41.037 LdapLoginManagement.java 226730 421 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - user doesnt exist local -> create new
DEBUG 09-16 15:07:41.037 LdapAuthBase.java 226730 156 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - getData
DEBUG 09-16 15:07:41.043 LdapLoginManagement.java 226736 471 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Synching Ldap user to OM DB with RANDOM password: 1m3td5i00nhsd
DEBUG 09-16 15:07:41.043 LdapLoginManagement.java 226736 568 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.createUserFromLdapData
ERROR 09-16 15:07:41.044 LdapLoginManagement.java 226737 516 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Error on Working Userdata :
java.lang.NullPointerException: null
at org.openmeetings.app.ldap.LdapLoginManagement.createUserFromLdapData(LdapLoginManagement.java:621) ~[openmeetings.jar:na]
at org.openmeetings.app.ldap.LdapLoginManagement.doLdapLogin(LdapLoginManagement.java:473) ~[openmeetings.jar:na]
at org.openmeetings.app.remote.MainService.loginUser(MainService.java:344) [openmeetings.jar:na]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[na:1.6.0_24]
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) ~[na:1.6.0_24]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) ~[na:1.6.0_24]
at java.lang.reflect.Method.invoke(Method.java:597) ~[na:1.6.0_24]
at org.red5.server.service.ServiceInvoker.invoke(ServiceInvoker.java:200) [red5.jar:na]
at org.red5.server.service.ServiceInvoker.invoke(ServiceInvoker.java:118) [red5.jar:na]
at org.red5.server.net.rtmp.RTMPHandler.invokeCall(RTMPHandler.java:163) [red5.jar:na]
at org.red5.server.net.rtmp.RTMPHandler.onInvoke(RTMPHandler.java:410) [red5.jar:na]
at org.red5.server.net.rtmp.BaseRTMPHandler.messageReceived(BaseRTMPHandler.java:134) [red5.jar:na]
at org.red5.server.net.rtmp.RTMPMinaIoHandler.messageReceived(RTMPMinaIoHandler.java:206) [red5.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain$TailFilter.messageReceived(DefaultIoFilterChain.java:716) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:434) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.access$1200(DefaultIoFilterChain.java:46) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain$EntryImpl$1.messageReceived(DefaultIoFilterChain.java:796) [mina-core-2.0.2.jar:na]
at org.apache.mina.filter.codec.ProtocolCodecFilter$ProtocolDecoderOutputImpl.flush(ProtocolCodecFilter.java:427) [mina-core-2.0.2.jar:na]
at org.apache.mina.filter.codec.ProtocolCodecFilter.messageReceived(ProtocolCodecFilter.java:245) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:434) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.access$1200(DefaultIoFilterChain.java:46) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain$EntryImpl$1.messageReceived(DefaultIoFilterChain.java:796) [mina-core-2.0.2.jar:na]
at org.red5.server.net.rtmpe.RTMPEIoFilter.messageReceived(RTMPEIoFilter.java:125) [red5.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:434) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.access$1200(DefaultIoFilterChain.java:46) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain$EntryImpl$1.messageReceived(DefaultIoFilterChain.java:796) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.IoFilterAdapter.messageReceived(IoFilterAdapter.java:119) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:434) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.fireMessageReceived(DefaultIoFilterChain.java:426) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.polling.AbstractPollingIoProcessor.read(AbstractPollingIoProcessor.java:693) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.polling.AbstractPollingIoProcessor.process(AbstractPollingIoProcessor.java:646) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.polling.AbstractPollingIoProcessor.process(AbstractPollingIoProcessor.java:635) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.polling.AbstractPollingIoProcessor.access$400(AbstractPollingIoProcessor.java:67) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.run(AbstractPollingIoProcessor.java:1079) [mina-core-2.0.2.jar:na]
at org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:64) [mina-core-2.0.2.jar:na]
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886) [na:1.6.0_24]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908) [na:1.6.0_24]
at java.lang.Thread.run(Thread.java:662) [na:1.6.0_24]
[INFO] [NioProcessor-1] org.red5.server.net.rtmp.codec.RTMPProtocolDecoder - Action errorservice.getErrorByCode
DEBUG 09-16 15:07:41.113 ErrorService.java 226806 42 org.openmeetings.app.remote.ErrorService [NioProcessor-1] - errorid, language_id: -1|7
DEBUG 09-16 15:07:41.114 ErrorService.java 226807 46 org.openmeetings.app.remote.ErrorService [NioProcessor-1] - eValues.getFieldvalues_id() = 334
DEBUG 09-16 15:07:41.114 ErrorService.java 226807 48 org.openmeetings.app.remote.ErrorService [NioProcessor-1] - eValues.getErrorType() = org.openmeetings.app.persistence.beans.basic.ErrorType@8593d0
The user is created in the database as username@domain. Ldap is configured to add @domain when selected. And I´m entering just with "username" and password on login screen.
The authentication process work because if I type the wrong pass I get error telling it´s a wrong pass. The problem seems to be after the authentication portion.
I figure out why the MatchedDN is Null on LDAP Search response. Changing the field_user_principal var to userPrincipalName instead of sAMAccountname resolve the issue.
Now the search result in LDAP match the right DN and brings the user information. But now I get another error as follow:
[INFO] [NioProcessor-1] org.red5.server.net.rtmp.codec.RTMPProtocolDecoder - Action xmlcrm.loginUser
WARN 09-16 15:07:41.011 MainService.java 226704 318 org.openmeetings.app.remote.MainService [NioProcessor-1] - loginUser: 0599afdefe0d1fefe48c420b1a51da9e username
DEBUG 09-16 15:07:41.011 MainService.java 226704 329 org.openmeetings.app.remote.MainService [NioProcessor-1] - Ldap Login
DEBUG 09-16 15:07:41.014 LdapLoginManagement.java 226707 230 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.doLdapLogin
DEBUG 09-16 15:07:41.014 LdapLoginManagement.java 226707 186 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.getLdapConfigData
DEBUG 09-16 15:07:41.014 LdapLoginManagement.java 226707 205 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.readConfig : /usr/local/src/singlewebapp/dist/red5/webapps/openmeetings/conf/om_ldap.cfg
DEBUG 09-16 15:07:41.015 LdapLoginManagement.java 226708 126 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - isValidAuthType
DEBUG 09-16 15:07:41.015 LdapLoginManagement.java 226708 361 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Searching userdata with LDAP Search Filter :(userPrincipalName=username@domain)
DEBUG 09-16 15:07:41.015 LdapAuthBase.java 226708 66 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - LdapAuthBase
DEBUG 09-16 15:07:41.015 LdapLoginManagement.java 226708 372 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - authenticating admin...
DEBUG 09-16 15:07:41.016 LdapAuthBase.java 226709 83 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - authenticateUser
DEBUG 09-16 15:07:41.016 LdapAuthBase.java 226709 99 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
Authentification to LDAP - Server start
DEBUG 09-16 15:07:41.026 LdapLoginManagement.java 226719 375 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Checking server type...
DEBUG 09-16 15:07:41.027 LdapAuthBase.java 226720 83 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - authenticateUser
DEBUG 09-16 15:07:41.027 LdapAuthBase.java 226720 99 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
Authentification to LDAP - Server start
ERROR 09-16 15:07:41.037 LdapLoginManagement.java 226730 415 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Error retrieving Userdata : null
DEBUG 09-16 15:07:41.037 LdapLoginManagement.java 226730 421 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - user doesnt exist local -> create new
DEBUG 09-16 15:07:41.037 LdapAuthBase.java 226730 156 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - getData
DEBUG 09-16 15:07:41.043 LdapLoginManagement.java 226736 471 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Synching Ldap user to OM DB with RANDOM password: 1m3td5i00nhsd
DEBUG 09-16 15:07:41.043 LdapLoginManagement.java 226736 568 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.createUserFromLdapData
ERROR 09-16 15:07:41.044 LdapLoginManagement.java 226737 516 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Error on Working Userdata :
java.lang.NullPointerException: null
at org.openmeetings.app.ldap.LdapLoginManagement.createUserFromLdapData(LdapLoginManagement.java:621) ~[openmeetings.jar:na]
at org.openmeetings.app.ldap.LdapLoginManagement.doLdapLogin(LdapLoginManagement.java:473) ~[openmeetings.jar:na]
at org.openmeetings.app.remote.MainService.loginUser(MainService.java:344) [openmeetings.jar:na]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[na:1.6.0_24]
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) ~[na:1.6.0_24]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) ~[na:1.6.0_24]
at java.lang.reflect.Method.invoke(Method.java:597) ~[na:1.6.0_24]
at org.red5.server.service.ServiceInvoker.invoke(ServiceInvoker.java:200) [red5.jar:na]
at org.red5.server.service.ServiceInvoker.invoke(ServiceInvoker.java:118) [red5.jar:na]
at org.red5.server.net.rtmp.RTMPHandler.invokeCall(RTMPHandler.java:163) [red5.jar:na]
at org.red5.server.net.rtmp.RTMPHandler.onInvoke(RTMPHandler.java:410) [red5.jar:na]
at org.red5.server.net.rtmp.BaseRTMPHandler.messageReceived(BaseRTMPHandler.java:134) [red5.jar:na]
at org.red5.server.net.rtmp.RTMPMinaIoHandler.messageReceived(RTMPMinaIoHandler.java:206) [red5.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain$TailFilter.messageReceived(DefaultIoFilterChain.java:716) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:434) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.access$1200(DefaultIoFilterChain.java:46) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain$EntryImpl$1.messageReceived(DefaultIoFilterChain.java:796) [mina-core-2.0.2.jar:na]
at org.apache.mina.filter.codec.ProtocolCodecFilter$ProtocolDecoderOutputImpl.flush(ProtocolCodecFilter.java:427) [mina-core-2.0.2.jar:na]
at org.apache.mina.filter.codec.ProtocolCodecFilter.messageReceived(ProtocolCodecFilter.java:245) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:434) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.access$1200(DefaultIoFilterChain.java:46) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain$EntryImpl$1.messageReceived(DefaultIoFilterChain.java:796) [mina-core-2.0.2.jar:na]
at org.red5.server.net.rtmpe.RTMPEIoFilter.messageReceived(RTMPEIoFilter.java:125) [red5.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:434) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.access$1200(DefaultIoFilterChain.java:46) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain$EntryImpl$1.messageReceived(DefaultIoFilterChain.java:796) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.IoFilterAdapter.messageReceived(IoFilterAdapter.java:119) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:434) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.filterchain.DefaultIoFilterChain.fireMessageReceived(DefaultIoFilterChain.java:426) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.polling.AbstractPollingIoProcessor.read(AbstractPollingIoProcessor.java:693) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.polling.AbstractPollingIoProcessor.process(AbstractPollingIoProcessor.java:646) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.polling.AbstractPollingIoProcessor.process(AbstractPollingIoProcessor.java:635) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.polling.AbstractPollingIoProcessor.access$400(AbstractPollingIoProcessor.java:67) [mina-core-2.0.2.jar:na]
at org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.run(AbstractPollingIoProcessor.java:1079) [mina-core-2.0.2.jar:na]
at org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:64) [mina-core-2.0.2.jar:na]
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886) [na:1.6.0_24]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908) [na:1.6.0_24]
at java.lang.Thread.run(Thread.java:662) [na:1.6.0_24]
[INFO] [NioProcessor-1] org.red5.server.net.rtmp.codec.RTMPProtocolDecoder - Action errorservice.getErrorByCode
DEBUG 09-16 15:07:41.114 ErrorService.java 226807 46 org.openmeetings.app.remote.ErrorService [NioProcessor-1] - eValues.getFieldvalues_id() = 334
DEBUG 09-16 15:07:41.114 ErrorService.java 226807 48 org.openmeetings.app.remote.ErrorService [NioProcessor-1] - eValues.getErrorType() = org.openmeetings.app.persistence.beans.basic.ErrorType@8593d0
The user is created in the database as username@domain. Ldap is configured to add @domain when selected. And I´m entering just with "username" and password on login screen.
The authentication process work because if I type the wrong pass I get error telling it´s a wrong pass. The problem seems to be after the authentication portion.
RuZa
Sep 18, 2011, 7:42:42 AM9/18/11
to openmeet...@googlegroups.com
I also got the same problem after upgrading to 1.8 for testing.
At the same time, 1.7 works well with AD LDAP
[INFO] [NioProcessor-1] org.red5.server.net.rtmp.codec.RTMPProtocolDecoder - Action xmlcrm.getStates
[INFO] [NioProcessor-1] org.red5.server.net.rtmp.codec.RTMPProtocolDecoder - Action xmlcrm.getTimeZones
[INFO] [NioProcessor-1] org.red5.server.net.rtmp.codec.RTMPProtocolDecoder - Action userservice.getUserSalutations
[INFO] [NioProcessor-1] org.red5.server.net.rtmp.codec.RTMPProtocolDecoder - Action xmlcrm.loginByRemember
DEBUG 09-18 13:53:53.581 Sessionmanagement.java 20150 79 org.openmeetings.app.data.basic.Sessionmanagement [NioProcessor-1] - updateUser User SID:
ERROR 09-18 13:53:53.592 Sessionmanagement.java 20161 91 org.openmeetings.app.data.basic.Sessionmanagement [NioProcessor-1] - Could not find session to update:
[INFO] [NioProcessor-1] org.red5.server.net.rtmp.codec.RTMPProtocolDecoder - Action ldapconfigservice.getActiveLdapConfigs
DEBUG 09-18 13:53:54.492 LdapConfigDaoImpl.java 21061 209 org.openmeetings.app.data.basic.dao.LdapConfigDaoImpl [NioProcessor-1] - selectMaxFromConfigurations
[INFO] [NioProcessor-1] org.red5.server.net.rtmp.codec.RTMPProtocolDecoder - Action xmlcrm.getLoginOptions
[INFO] [NioProcessor-1] org.red5.server.net.rtmp.codec.RTMPProtocolDecoder - Action xmlcrm.loginUser
WARN 09-18 13:54:13.900 MainService.java 40469 318 org.openmeetings.app.remote.MainService [NioProcessor-1] - loginUser: b3c99b393f8b00cc3981d1812f14767f TestUser
DEBUG 09-18 13:54:13.900 MainService.java 40469 329 org.openmeetings.app.remote.MainService [NioProcessor-1] - Ldap Login
Logger context selector method found
DEBUG 09-18 13:54:13.916 LdapLoginManagement.java 40485 230 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.doLdapLogin
DEBUG 09-18 13:54:13.916 LdapLoginManagement.java 40485 186 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.getLdapConfigData
DEBUG 09-18 13:54:13.916 LdapLoginManagement.java 40485 205 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.readConfig : /opt/red5/webapps/openmeetings/conf/om_ldap.cfg
DEBUG 09-18 13:54:13.918 LdapLoginManagement.java 40487 126 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - isValidAuthType
DEBUG 09-18 13:54:13.918 LdapLoginManagement.java 40487 361 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Searching userdata with LDAP Search Filter :(userPrincipalName=Test...@dom-name.local)
Logger context selector method found
DEBUG 09-18 13:54:13.919 LdapAuthBase.java 40488 66 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - LdapAuthBase
DEBUG 09-18 13:54:13.919 LdapLoginManagement.java 40488 372 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - authenticating admin...
DEBUG 09-18 13:54:13.920 LdapAuthBase.java 40489 83 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - authenticateUser
DEBUG 09-18 13:54:13.920 LdapAuthBase.java 40489 99 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
Authentification to LDAP - Server start
DEBUG 09-18 13:54:13.920 LdapAuthBase.java 40489 133 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - loginToLdapServer
DEBUG 09-18 13:54:13.932 LdapLoginManagement.java 40501 375 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Checking server type...
DEBUG 09-18 13:54:13.932 LdapAuthBase.java 40501 83 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - authenticateUser
DEBUG 09-18 13:54:13.932 LdapAuthBase.java 40501 99 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] -
Authentification to LDAP - Server start
DEBUG 09-18 13:54:13.932 LdapAuthBase.java 40501 133 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - loginToLdapServer
ERROR 09-18 13:54:13.937 LdapLoginManagement.java 40506 415 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Error retrieving Userdata : null
DEBUG 09-18 13:54:13.937 LdapLoginManagement.java 40506 421 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - user doesnt exist local -> create new
DEBUG 09-18 13:54:13.938 LdapAuthBase.java 40507 156 org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-1] - getData
DEBUG 09-18 13:54:13.943 LdapLoginManagement.java 40512 471 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Synching Ldap user to OM DB with RANDOM password: mwrr0h283xpt
DEBUG 09-18 13:54:13.944 LdapLoginManagement.java 40513 568 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - LdapLoginmanagement.createUserFromLdapData
ERROR 09-18 13:54:13.944 LdapLoginManagement.java 40513 516 org.openmeetings.app.ldap.LdapLoginManagement [NioProcessor-1] - Error on Working Userdata :
java.lang.NullPointerException: null
at org.openmeetings.app.ldap.LdapLoginManagement.createUserFromLdapData(LdapLoginManagement.java:621) ~[openmeetings.jar:na]
at org.openmeetings.app.ldap.LdapLoginManagement.doLdapLogin(LdapLoginManagement.java:473) ~[openmeetings.jar:na]
at org.openmeetings.app.remote.MainService.loginUser(MainService.java:344) [openmeetings.jar:na]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[na:1.6.0_17]
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) ~[na:1.6.0_17]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[na:1.6.0_17]
at java.lang.reflect.Method.invoke(Method.java:616) ~[na:1.6.0_17]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) [na:1.6.0_17]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) [na:1.6.0_17]
at java.lang.Thread.run(Thread.java:636) [na:1.6.0_17]
[INFO] [NioProcessor-1] org.red5.server.net.rtmp.codec.RTMPProtocolDecoder - Action errorservice.getErrorByCode
DEBUG 09-18 13:54:14.012 ErrorService.java 40581 42 org.openmeetings.app.remote.ErrorService [NioProcessor-1] - errorid, language_id: -1|9
DEBUG 09-18 13:54:14.028 ErrorService.java 40597 46 org.openmeetings.app.remote.ErrorService [NioProcessor-1] - eValues.getFieldvalues_id() = 334
DEBUG 09-18 13:54:14.037 ErrorService.java 40606 48 org.openmeetings.app.remote.ErrorService [NioProcessor-1] - eValues.getErrorType() = org.openmeetings.app.persistence.beans.basic.ErrorType@3bfd4406
At the same time, 1.7 works well with AD LDAP
seba....@gmail.com
Sep 18, 2011, 8:39:56 AM9/18/11
to openmeet...@googlegroups.com
Hi Ruza,
your error is different... I will commit a patch for your problem tonight.
Sebastian
2011/9/18 RuZa <ruza...@gmail.com>:
> --
> You received this message because you are subscribed to the Google Groups
> "OpenMeetings User" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/openmeetings-user/-/DagqQp3fJFIJ.
RuZa
Sep 18, 2011, 9:16:14 AM9/18/11
to openmeet...@googlegroups.com
Hi Sebastian!
Thank you very much! I'll wait for the new patch.
Sorry for mixed errors, but logs are similar.
Thank you very much! I'll wait for the new patch.
Sorry for mixed errors, but logs are similar.
João Vitor Arruda
Sep 19, 2011, 7:06:10 AM9/19/11
to openmeet...@googlegroups.com
Sebastian,
Will this commit fix the error i´m getting too?
Will this commit fix the error i´m getting too?
seba....@gmail.com
Sep 19, 2011, 7:51:35 AM9/19/11
to openmeet...@googlegroups.com
João,
I don't think that you really have an error that has something todo
with OpenMeetings. You should fix the fetch query somehow. Then your
integration should work.
Sebastian
2011/9/19 João Vitor Arruda <joao....@gmail.com>:
> Sebastian,
> Will this commit fix the error i´m getting too?
>
> --
> You received this message because you are subscribed to the Google Groups
> "OpenMeetings User" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/openmeetings-user/-/RD9XYCILp70J.
João Vitor Arruda
Sep 19, 2011, 7:57:26 AM9/19/11
to openmeet...@googlegroups.com
Did you see my last post? The query against LDAP is returning the MatchDN now without problem.
But the error persist.
But the error persist.
seba....@gmail.com
Sep 19, 2011, 9:47:19 AM9/19/11
to openmeet...@googlegroups.com
Okay sorry João,
yes this error should be fixed.
I have commited the patch yesterday.
Sebastian
2011/9/19 João Vitor Arruda <joao....@gmail.com>:
> Did you see my last post? The query against LDAP is returning the MatchDN
> now without problem.
> But the error persist.
>
> --
> You received this message because you are subscribed to the Google Groups
> "OpenMeetings User" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/openmeetings-user/-/coa8ok7MCzwJ.
seba....@gmail.com
Sep 19, 2011, 11:18:49 AM9/19/11
to openmeet...@googlegroups.com
I have applied the patch to the release 1.8 and release a new package
in our download section.
Please check that out, it should fix the NullPointer Exception in the
Login process for Ldap Users.
in our download section.
Please check that out, it should fix the NullPointer Exception in the
Login process for Ldap Users.
http://openmeetings.googlecode.com/files/openmeetings_1_8_1_r4260.zip
Sebastian
2011/9/19 seba....@gmail.com <seba....@gmail.com>:
João Vitor Arruda
Sep 19, 2011, 4:45:59 PM9/19/11
to openmeet...@googlegroups.com
Sebastian,
It´s working with this patch!!
Thank you very much.
PS: The new mute functionality is great!! Good job.!
It´s working with this patch!!
Thank you very much.
PS: The new mute functionality is great!! Good job.!
seba....@gmail.com
Sep 19, 2011, 5:07:15 PM9/19/11
to openmeet...@googlegroups.com
Hi Joao,
well I think you refer to the latest nightly build then.
The release version 1.8.1 does not contain Mute functionality.
The mute functionality will be part of release 1.9.
Sebastian
2011/9/19 João Vitor Arruda <joao....@gmail.com>:
> --
> You received this message because you are subscribed to the Google Groups
> "OpenMeetings User" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/openmeetings-user/-/ABe6kpFD5ZgJ.
João Vitor Arruda
Sep 19, 2011, 10:34:55 PM9/19/11
to openmeet...@googlegroups.com
Sebastian,
Sure... we are compiling from Nightly Builds...
Sure... we are compiling from Nightly Builds...
Reply all
Reply to author
Forward
0 new messages