You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cloudstack.apache.org by Francois Gaudreault <fg...@cloudops.com> on 2013/05/27 18:55:30 UTC

LDAP auth broken?

Hi,

I am using 4.1 commit "8a9206fd28872dd436b22b847e93466f06e043bc", and I 
am getting this error when trying to authenticate using LDAP:

java.lang.NullPointerException
     at 
com.sun.jndi.ldap.LdapNamingEnumeration.getNextBatch(LdapNamingEnumeration.java:129)
     at 
com.sun.jndi.ldap.LdapNamingEnumeration.nextAux(LdapNamingEnumeration.java:263)
     at 
com.sun.jndi.ldap.LdapNamingEnumeration.nextImpl(LdapNamingEnumeration.java:254)
     at 
com.sun.jndi.ldap.LdapNamingEnumeration.next(LdapNamingEnumeration.java:202)
     at 
com.cloud.server.auth.LDAPUserAuthenticator.authenticate(LDAPUserAuthenticator.java:115)
     at 
com.cloud.user.AccountManagerImpl.getUserAccount(AccountManagerImpl.java:1912)
     at 
com.cloud.user.AccountManagerImpl.authenticateUser(AccountManagerImpl.java:1784)
     at com.cloud.api.ApiServer.loginUser(ApiServer.java:766)
     at com.cloud.api.ApiServlet.processRequest(ApiServlet.java:210)
     at com.cloud.api.ApiServlet.doPost(ApiServlet.java:71)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
     at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
     at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
     at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
     at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
     at 
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:555)
     at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
     at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
     at 
org.apache.coyote.http11.Http11NioProcessor.process(Http11NioProcessor.java:889)
     at 
org.apache.coyote.http11.Http11NioProtocol$Http11ConnectionHandler.process(Http11NioProtocol.java:721)
     at 
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:2274)
     at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)
     at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
     at java.lang.Thread.run(Thread.java:679)
WARN  [server.auth.LDAPUserAuthenticator] (catalina-exec-21:) Unknown 
error encountered null

Any ideas?

I tested using ldapsearch and it works fine.

-- 
Francois Gaudreault
Architecte de Solution Cloud | Cloud Solutions Architect
fgaudreault@cloudops.com
514-629-6775
- - -
CloudOps
420 rue Guy
Montréal QC  H3J 1S6
www.cloudops.com
@CloudOps_


Re: LDAP auth broken?

Posted by Francois Gaudreault <fg...@cloudops.com>.
Abhi,

I looked again at the query this morning, and you are right, the filter 
was incorrect.  There was a weird char in it. Fixing the filter 
corrected the issue.

Sorry for the spam :)

Francois

On 2013-05-28 12:46 AM, Abhinandan Prateek wrote:
> Check if the query filter is going to get the valid identifier for the
> particular user. If that looks fine then can you tell us what LDAP server
> you are using and also specifiy the query filter that you have configured.
>
> -abhi
>
> On 27/05/13 10:25 PM, "Francois Gaudreault" <fg...@cloudops.com>
> wrote:
>
>> Hi,
>>
>> I am using 4.1 commit "8a9206fd28872dd436b22b847e93466f06e043bc", and I
>> am getting this error when trying to authenticate using LDAP:
>>
>> java.lang.NullPointerException
>>      at
>> com.sun.jndi.ldap.LdapNamingEnumeration.getNextBatch(LdapNamingEnumeration
>> .java:129)
>>      at
>> com.sun.jndi.ldap.LdapNamingEnumeration.nextAux(LdapNamingEnumeration.java
>> :263)
>>      at
>> com.sun.jndi.ldap.LdapNamingEnumeration.nextImpl(LdapNamingEnumeration.jav
>> a:254)
>>      at
>> com.sun.jndi.ldap.LdapNamingEnumeration.next(LdapNamingEnumeration.java:20
>> 2)
>>      at
>> com.cloud.server.auth.LDAPUserAuthenticator.authenticate(LDAPUserAuthentic
>> ator.java:115)
>>      at
>> com.cloud.user.AccountManagerImpl.getUserAccount(AccountManagerImpl.java:1
>> 912)
>>      at
>> com.cloud.user.AccountManagerImpl.authenticateUser(AccountManagerImpl.java
>> :1784)
>>      at com.cloud.api.ApiServer.loginUser(ApiServer.java:766)
>>      at com.cloud.api.ApiServlet.processRequest(ApiServlet.java:210)
>>      at com.cloud.api.ApiServlet.doPost(ApiServlet.java:71)
>>      at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
>>      at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
>>      at
>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applicati
>> onFilterChain.java:290)
>>      at
>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilter
>> Chain.java:206)
>>      at
>> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.
>> java:233)
>>      at
>> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.
>> java:191)
>>      at
>> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:1
>> 27)
>>      at
>> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:1
>> 02)
>>      at
>> org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:555)
>>      at
>> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.ja
>> va:109)
>>      at
>> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298
>> )
>>      at
>> org.apache.coyote.http11.Http11NioProcessor.process(Http11NioProcessor.jav
>> a:889)
>>      at
>> org.apache.coyote.http11.Http11NioProtocol$Http11ConnectionHandler.process
>> (Http11NioProtocol.java:721)
>>      at
>> org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.jav
>> a:2274)
>>      at
>> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:
>> 1146)
>>      at
>> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java
>> :615)
>>      at java.lang.Thread.run(Thread.java:679)
>> WARN  [server.auth.LDAPUserAuthenticator] (catalina-exec-21:) Unknown
>> error encountered null
>>
>> Any ideas?
>>
>> I tested using ldapsearch and it works fine.
>>
>> -- 
>> Francois Gaudreault
>> Architecte de Solution Cloud | Cloud Solutions Architect
>> fgaudreault@cloudops.com
>> 514-629-6775
>> - - -
>> CloudOps
>> 420 rue Guy
>> Montréal QC  H3J 1S6
>> www.cloudops.com
>> @CloudOps_
>>
>
>


-- 
Francois Gaudreault
Architecte de Solution Cloud | Cloud Solutions Architect
fgaudreault@cloudops.com
514-629-6775
- - -
CloudOps
420 rue Guy
Montréal QC  H3J 1S6
www.cloudops.com
@CloudOps_


Re: LDAP auth broken?

Posted by Abhinandan Prateek <cl...@aprateek.com>.
Check if the query filter is going to get the valid identifier for the
particular user. If that looks fine then can you tell us what LDAP server
you are using and also specifiy the query filter that you have configured.

-abhi

On 27/05/13 10:25 PM, "Francois Gaudreault" <fg...@cloudops.com>
wrote:

>Hi,
>
>I am using 4.1 commit "8a9206fd28872dd436b22b847e93466f06e043bc", and I
>am getting this error when trying to authenticate using LDAP:
>
>java.lang.NullPointerException
>     at 
>com.sun.jndi.ldap.LdapNamingEnumeration.getNextBatch(LdapNamingEnumeration
>.java:129)
>     at 
>com.sun.jndi.ldap.LdapNamingEnumeration.nextAux(LdapNamingEnumeration.java
>:263)
>     at 
>com.sun.jndi.ldap.LdapNamingEnumeration.nextImpl(LdapNamingEnumeration.jav
>a:254)
>     at 
>com.sun.jndi.ldap.LdapNamingEnumeration.next(LdapNamingEnumeration.java:20
>2)
>     at 
>com.cloud.server.auth.LDAPUserAuthenticator.authenticate(LDAPUserAuthentic
>ator.java:115)
>     at 
>com.cloud.user.AccountManagerImpl.getUserAccount(AccountManagerImpl.java:1
>912)
>     at 
>com.cloud.user.AccountManagerImpl.authenticateUser(AccountManagerImpl.java
>:1784)
>     at com.cloud.api.ApiServer.loginUser(ApiServer.java:766)
>     at com.cloud.api.ApiServlet.processRequest(ApiServlet.java:210)
>     at com.cloud.api.ApiServlet.doPost(ApiServlet.java:71)
>     at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
>     at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
>     at 
>org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applicati
>onFilterChain.java:290)
>     at 
>org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilter
>Chain.java:206)
>     at 
>org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.
>java:233)
>     at 
>org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.
>java:191)
>     at 
>org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:1
>27)
>     at 
>org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:1
>02)
>     at 
>org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:555)
>     at 
>org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.ja
>va:109)
>     at 
>org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298
>)
>     at 
>org.apache.coyote.http11.Http11NioProcessor.process(Http11NioProcessor.jav
>a:889)
>     at 
>org.apache.coyote.http11.Http11NioProtocol$Http11ConnectionHandler.process
>(Http11NioProtocol.java:721)
>     at 
>org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.jav
>a:2274)
>     at 
>java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:
>1146)
>     at 
>java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java
>:615)
>     at java.lang.Thread.run(Thread.java:679)
>WARN  [server.auth.LDAPUserAuthenticator] (catalina-exec-21:) Unknown
>error encountered null
>
>Any ideas?
>
>I tested using ldapsearch and it works fine.
>
>-- 
>Francois Gaudreault
>Architecte de Solution Cloud | Cloud Solutions Architect
>fgaudreault@cloudops.com
>514-629-6775
>- - -
>CloudOps
>420 rue Guy
>Montréal QC  H3J 1S6
>www.cloudops.com
>@CloudOps_
>