You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@archiva.apache.org by "JOSEPH C EDDY (Jira)" <ji...@apache.org> on 2022/03/23 18:51:00 UTC

[jira] [Created] (MRM-2045) LDAP Authentication Can't connect to Active Director server

JOSEPH C EDDY created MRM-2045:
----------------------------------

             Summary: LDAP Authentication Can't connect to Active Director server
                 Key: MRM-2045
                 URL: https://issues.apache.org/jira/browse/MRM-2045
             Project: Archiva
          Issue Type: Bug
          Components: redback
    Affects Versions: 2.2.6
         Environment: CentOS 8
            Reporter: JOSEPH C EDDY


I am setting up an Archiva instance and trying to enable LDAP Authentication via our Active Directory server(s).

I entered the settings like this (they mirror the settings used for our Gitlab setup of LDAP authentication):

{{<ldapConfiguration>}}
{{<ssl>false</ssl>}}
{{<bindAuthenticatorEnabled>true</bindAuthenticatorEnabled>}}
{{<writable>false</writable>}}
{{<useRoleNameAsGroup>false</useRoleNameAsGroup>}}
{{<hostName>dev.oati.local</hostName>}}
{{<port>389</port>}}
{{<baseDn>DC=dev</baseDn>}}
{{<baseDn>DC=company</baseDn>}}
{{<baseDn>DC=local</baseDn>}}
{{<baseGroupsDn>DC=dev</baseGroupsDn>}}
{{<baseGroupsDn>DC=company</baseGroupsDn>}}
{{<baseGroupsDn>DC=local</baseGroupsDn>}}
{{<contextFactory>com.sun.jndi.ldap.LdapCtxFactory</contextFactory>}}
{{<bindDn>CN=gitlabldap</bindDn>}}
{{<bindDn>CN=Users</bindDn>}}
{{<bindDn>DC=dev</bindDn>}}
{{<bindDn>DC=company</bindDn>}}
{{<bindDn>DC=local</bindDn>}}
{{<password>password</password>}}
{{<authenticationMethod/>}}
{{</ldapConfiguration>}}

I have verified that these settings work on this server using ldapquery.

When I attempt to verify in the Redback Runtime Configuration GUI, I get a "Could not connect to server." error, and I see this stack trace in the log:

??2022-03-23 11:36:25,307 [qtp1795749389-25] WARN  org.apache.archiva.rest.services.DefaultRedbackRuntimeConfigurationService [] - fail to get ldapConnection: Could not connect to the server.??
??org.apache.archiva.redback.common.ldap.connection.LdapException: Could not connect to the server.??
??        at org.apache.archiva.redback.common.ldap.connection.DefaultLdapConnection.<init>(DefaultLdapConnection.java:85) ~[redback-common-ldap-2.6.1.jar:2.6.1]??
??        at org.apache.archiva.redback.common.ldap.connection.ConfigurableLdapConnectionFactory.getConnection(ConfigurableLdapConnectionFactory.java:114) ~[redback-common-ldap-2.6.1.jar:2.6.1]??
??        at org.apache.archiva.redback.common.ldap.connection.ConfigurableLdapConnectionFactory.getConnection(ConfigurableLdapConnectionFactory.java:41) ~[redback-common-ldap-2.6.1.jar:2.6.1]??
??        at org.apache.archiva.rest.services.DefaultRedbackRuntimeConfigurationService.checkLdapConnection(DefaultRedbackRuntimeConfigurationService.java:311) [archiva-rest-services-2.2.6.jar:?]??
??        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_322]??
??        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_322]??
??        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_322]??
??        at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_322]??
??        at org.apache.cxf.service.invoker.AbstractInvoker.performInvocation(AbstractInvoker.java:181) [cxf-core-3.0.3.jar:3.0.3]??
??        at org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:97) [cxf-core-3.0.3.jar:3.0.3]??
??        at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:200) [cxf-rt-frontend-jaxrs-3.0.3.jar:3.0.3]??
??        at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:99) [cxf-rt-frontend-jaxrs-3.0.3.jar:3.0.3]??
??        at org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:59) [cxf-core-3.0.3.jar:3.0.3]??
??        at org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:96) [cxf-core-3.0.3.jar:3.0.3]??
??        at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307) [cxf-core-3.0.3.jar:3.0.3]??
??        at org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121) [cxf-core-3.0.3.jar:3.0.3]??
??        at org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:251) [cxf-rt-transports-http-3.0.3.jar:3.0.3]??
??        at org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:223) [cxf-rt-transports-http-3.0.3.jar:3.0.3]??
??        at org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:197) [cxf-rt-transports-http-3.0.3.jar:3.0.3]??
??        at org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:149) [cxf-rt-transports-http-3.0.3.jar:3.0.3]??
??        at org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.java:171) [cxf-rt-transports-http-3.0.3.jar:3.0.3]??
??        at org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:290) [cxf-rt-transports-http-3.0.3.jar:3.0.3]??
??        at org.apache.cxf.transport.servlet.AbstractHTTPServlet.doGet(AbstractHTTPServlet.java:214) [cxf-rt-transports-http-3.0.3.jar:3.0.3]??
??        at javax.servlet.http.HttpServlet.service(HttpServlet.java:735) [javax.servlet-3.0.0.v201112011016.jar:?]??
??        at org.apache.cxf.transport.servlet.AbstractHTTPServlet.service(AbstractHTTPServlet.java:265) [cxf-rt-transports-http-3.0.3.jar:3.0.3]??
??        at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:684) [jetty-servlet-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1496) [jetty-servlet-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:85) [spring-web-4.2.1.RELEASE.jar:4.2.1.RELEASE]??
??        at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) [spring-web-4.2.1.RELEASE.jar:4.2.1.RELEASE]??
??        at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1476) [jetty-servlet-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:499) [jetty-servlet-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137) [jetty-server-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:557) [jetty-security-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231) [jetty-server-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1086) [jetty-server-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:428) [jetty-servlet-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193) [jetty-server-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1020) [jetty-server-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135) [jetty-server-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:255) [jetty-server-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:154) [jetty-server-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116) [jetty-server-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.server.Server.handle(Server.java:370) [jetty-server-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:494) [jetty-server-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.server.AbstractHttpConnection.headerComplete(AbstractHttpConnection.java:971) [jetty-server-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.headerComplete(AbstractHttpConnection.java:1033) [jetty-server-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:644) [jetty-http-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:235) [jetty-http-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82) [jetty-server-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:667) [jetty-io-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:52) [jetty-io-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:608) [jetty-util-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:543) [jetty-util-8.1.14.v20131031.jar:8.1.14.v20131031]??
??        at java.lang.Thread.run(Thread.java:750) [?:1.8.0_322]??
??Caused by: javax.naming.AuthenticationNotSupportedException:??
??        at com.sun.jndi.ldap.sasl.LdapSasl.saslBind(LdapSasl.java:119) ~[?:1.8.0_322]??
??        at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:236) ~[?:1.8.0_322]??
??        at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2897) ~[?:1.8.0_322]??
??        at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:347) ~[?:1.8.0_322]??
??        at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxFromUrl(LdapCtxFactory.java:225) ~[?:1.8.0_322]??
??        at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:189) ~[?:1.8.0_322]??
??        at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:243) ~[?:1.8.0_322]??
??        at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:154) ~[?:1.8.0_322]??
??        at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:84) ~[?:1.8.0_322]??
??        at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:695) ~[?:1.8.0_322]??
??        at org.apache.archiva.redback.common.ldap.connection.DefaultLdapConnection.<init>(DefaultLdapConnection.java:81) ~[redback-common-ldap-2.6.1.jar:2.6.1]??
??        ... 53 more??

 

I don't know where to go from here to debug the issue further.

 



--
This message was sent by Atlassian Jira
(v8.20.1#820001)