You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@openmeetings.apache.org by Johannes Zarl <jo...@jku.at> on 2012/10/03 18:07:19 UTC
Problems with LDAP integration
Hi,
I''ve been testing OpenMeetings 2.0 for a short while now, and now I'd like to
try the LDAP integration. So far, I could not get this to work correctly:
Symptoms:
----------------
When I log in as any user, I get a message that that user belongs to several
organisations and that I should choose one. There is nothing to actually
choose from, but I can hit "Select" and get partially? logged in as user
"null". With "partially" I mean that I get the header line, with Contacts,
profile, logout, etc. but nothing else.
Someone seems to have reported this before:
http://mail-archives.apache.org/mod_mbox/incubator-openmeetings-
dev/201206.mbox/%3c4FE08DEF.4050309@rezopole.net%3e
What I already tried:
-------------------------------
1) I verified that ldaps queries work from the openmeetings host.
2) I created a keystore file for java and added the according parameters to
JAVA_OPTS in red5.sh
3) I verified the path of the ldap config file
(The documentation is a little misleading on that one, because the GUI says
that the config file should reside in the same folder as persistence.xml)
4) I tried with and without ldap_admin_dn and ldap_passwd set
(because of this mail:
http://mail-archives.apache.org/mod_mbox/incubator-openmeetings-
user/201205.mbox/%3cCAGtq6hhqM4ySW28mEe-
VoQ09b9QM+M8ja30YRxmSZ-5zDEwYoA@mail.gmail.com%3e
)
What the log files say
---------------------------------
As you can see in the attached log file, some null pointer exceptions get
thrown, and subsequently the openmeetings server uses the user 'null' for the
session. (Username and LDAP hostname in the attached files have been
anonymised, in case anyone wonders about the example.com domain)
Any idea what the problem might be?
Cheers,
Johannes
Re: Problems with LDAP integration
Posted by "seba.wagner@gmail.com" <se...@gmail.com>.
The log is actually quite what all what you can get, but it also tells you
what went wrong:
Authentification on LDAP Server failed : simple bind failed:
ldapserver.example.com:636
ERROR 10-03 17:53:54.240 LdapAuthBase.java 5607719 124
org.openmeetings.app.ldap.LdapAuthBase [NioProcessor-13] -
[Authentification on LDAP Server failed]
javax.naming.CommunicationException: simple bind failed:
ldapserver.example.com:636
=>Authentification on LDAP Server failed => so it was possible to connect
but the admin user is wrong.
That would be at least my interpretation.
Sebastian
2012/10/22 Johannes Zarl <jo...@jku.at>
> On Wednesday, 17. October 2012, 16:00:12, seba.wagner@gmail.com wrote:
> > [Authentification on LDAP Server failed]
> > javax.naming.CommunicationException: simple bind failed:
> > ldapserver.example.com:636
> >
> > I don't think your actual server is "ldapserver.example.com" so you
> should
> > configure the ldap config file with appropriate values.
>
> Sorry for the misleading entry. I substituted "ldapserver.example.com"
> for the
> actual hostname in the config and log files. I should have chosen some
> name that
> made this more evident. The actual config uses the correct hostname.
>
> > The box with the dropdown actually means that there is an issue in the
> user
> > mapping, login was not successful to LDAP.
>
> Is there any way I can get a more informative error message out of
> openmeetings? Or maybe let openmeetings display the queries it sends to the
> server, so I can replicate the on the commandline using ldapsearch?
>
> >
> > I don't think that the LDAP config files should be in the same folder as
> > persistence.xml.
> > http://incubator.apache.org/openmeetings/LdapAndADS.html
> > In: $RED5_HOME/webapps/openmeetings/conf you should place your configs.
>
> Yes, I found that out, too. I just wanted to mention that the in-page-docs
> in
> the OpenMeetings LDAP-Settings page ("Administration" -> "LDAP") state the
> wrong location (at least in the german locale).
>
> Johannes
>
--
Sebastian Wagner
https://twitter.com/#!/dead_lock
http://www.webbase-design.de
http://www.wagner-sebastian.com
seba.wagner@gmail.com
Re: Problems with LDAP integration
Posted by Johannes Zarl <jo...@jku.at>.
On Wednesday, 17. October 2012, 16:00:12, seba.wagner@gmail.com wrote:
> [Authentification on LDAP Server failed]
> javax.naming.CommunicationException: simple bind failed:
> ldapserver.example.com:636
>
> I don't think your actual server is "ldapserver.example.com" so you should
> configure the ldap config file with appropriate values.
Sorry for the misleading entry. I substituted "ldapserver.example.com" for the
actual hostname in the config and log files. I should have chosen some name that
made this more evident. The actual config uses the correct hostname.
> The box with the dropdown actually means that there is an issue in the user
> mapping, login was not successful to LDAP.
Is there any way I can get a more informative error message out of
openmeetings? Or maybe let openmeetings display the queries it sends to the
server, so I can replicate the on the commandline using ldapsearch?
>
> I don't think that the LDAP config files should be in the same folder as
> persistence.xml.
> http://incubator.apache.org/openmeetings/LdapAndADS.html
> In: $RED5_HOME/webapps/openmeetings/conf you should place your configs.
Yes, I found that out, too. I just wanted to mention that the in-page-docs in
the OpenMeetings LDAP-Settings page ("Administration" -> "LDAP") state the
wrong location (at least in the german locale).
Johannes
Re: Problems with LDAP integration
Posted by "seba.wagner@gmail.com" <se...@gmail.com>.
[Authentification on LDAP Server failed]
javax.naming.CommunicationException: simple bind failed:
ldapserver.example.com:636
I don't think your actual server is "ldapserver.example.com" so you should
configure the ldap config file with appropriate values.
The box with the dropdown actually means that there is an issue in the user
mapping, login was not successful to LDAP.
I don't think that the LDAP config files should be in the same folder as
persistence.xml.
http://incubator.apache.org/openmeetings/LdapAndADS.html
In: $RED5_HOME/webapps/openmeetings/conf you should place your configs.
Sebastian
2012/10/3 Johannes Zarl <jo...@jku.at>
> Hi,
>
> I''ve been testing OpenMeetings 2.0 for a short while now, and now I'd
> like to
> try the LDAP integration. So far, I could not get this to work correctly:
>
> Symptoms:
> ----------------
>
> When I log in as any user, I get a message that that user belongs to
> several
> organisations and that I should choose one. There is nothing to actually
> choose from, but I can hit "Select" and get partially? logged in as user
> "null". With "partially" I mean that I get the header line, with Contacts,
> profile, logout, etc. but nothing else.
>
> Someone seems to have reported this before:
>
> http://mail-archives.apache.org/mod_mbox/incubator-openmeetings-
> dev/201206.mbox/%3c4FE08DEF.4050309@rezopole.net%3e
>
> What I already tried:
> -------------------------------
>
> 1) I verified that ldaps queries work from the openmeetings host.
>
> 2) I created a keystore file for java and added the according parameters to
> JAVA_OPTS in red5.sh
>
> 3) I verified the path of the ldap config file
> (The documentation is a little misleading on that one, because the GUI
> says
> that the config file should reside in the same folder as persistence.xml)
>
> 4) I tried with and without ldap_admin_dn and ldap_passwd set
> (because of this mail:
> http://mail-archives.apache.org/mod_mbox/incubator-openmeetings-
> user/201205.mbox/%3cCAGtq6hhqM4ySW28mEe-
> VoQ09b9QM+M8ja30YRxmSZ-5zDEwYoA@mail.gmail.com%3e
> )
>
>
> What the log files say
> ---------------------------------
>
> As you can see in the attached log file, some null pointer exceptions get
> thrown, and subsequently the openmeetings server uses the user 'null' for
> the
> session. (Username and LDAP hostname in the attached files have been
> anonymised, in case anyone wonders about the example.com domain)
>
> Any idea what the problem might be?
>
> Cheers,
> Johannes
>
--
Sebastian Wagner
https://twitter.com/#!/dead_lock
http://www.webbase-design.de
http://www.wagner-sebastian.com
seba.wagner@gmail.com