LDAP Stopped Working (11.1)

Help / Discuss
#41

Which log(s) am I a supposed to be looking at anyway? I’m always just guessing and flipping through every log that has been recently modified.

#42

In standard Tomcat the log file is usually catalina.out but maybe it’s different on Windows.

#43

Well, I was wrong, the this is showing up in tomcat8-stdout..log. I have no idea why my search tool did not find it yesterday, but found it today.

2019-03-28 08:32:30,369 [https://wiki.pridedallas.com:8443/xwiki/rest/notifications/count?media=json&userId=xwiki%3AXWiki.keithdavis&useUserPreferences=true&currentWiki=xwiki&async=true&asyncId[asyncId]=2608&=1553779155896] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.keithdavis
2019-03-28 08:32:32,381 [https://wiki.pridedallas.com:8443/xwiki/rest/notifications/count?media=json&userId=xwiki%3AXWiki.keithdavis&useUserPreferences=true&currentWiki=xwiki&async=true&asyncId[asyncId]=2609&=1553779155897] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.keithdavis
2019-03-28 08:32:32,381 [https://wiki.pridedallas.com:8443/xwiki/rest/notifications/count?media=json&userId=xwiki%3AXWiki.keithdavis&useUserPreferences=true&currentWiki=xwiki&async=true&asyncId[asyncId]=2609&_=1553779155897] DEBUG x.c.l.XWikiLDAPAuthServiceImpl - XWikiUser: XWiki.keithdavis

#44

Looks like it indeed.

#45

Has not happened since we updated from 11.1 to 11.2.

#46

I suppose https://jira.xwiki.org/browse/LDAP-70 can be closed.

#47

We just updated to 11.4 (from 11.3) and this is happening again, except that one user (myself), can login and nobody else can.

Updated Jira (https://jira.xwiki.org/browse/LDAP-70), but I don’t seem to be able to reopen.

#48

OK, must have been caching my credentials, because it’s failing for me now as well.

#49

Maybe this is not the same issue:

2019-06-24 13:20:55,626 [https://wiki.pridedallas.com:8443/xwiki/bin/loginsubmit/XWiki/XWikiLogin] ERROR o.x.c.l.XWikiLDAPUtils - Unknown error with cache
org.xwiki.cache.CacheException: Cache with name [ldap.groups] already exist
at org.xwiki.cache.infinispan.internal.InfinispanCacheFactory.newCache(InfinispanCacheFactory.java:149)
at org.xwiki.cache.internal.DefaultCacheManager.createNewCache(DefaultCacheManager.java:112)
at org.xwiki.cache.internal.DefaultCacheManager.createNewCache(DefaultCacheManager.java:85)
at org.xwiki.contrib.ldap.XWikiLDAPUtils.getGroupCache(XWikiLDAPUtils.java:325)
at org.xwiki.contrib.ldap.XWikiLDAPUtils.getGroupMembers(XWikiLDAPUtils.java:851)
at org.xwiki.contrib.ldap.XWikiLDAPUtils.isInGroup(XWikiLDAPUtils.java:1034)
at org.xwiki.contrib.ldap.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:593)
at org.xwiki.contrib.ldap.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:366)
at org.xwiki.contrib.ldap.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:300)
at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:272)
at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:192)
at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:174)
at com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:239)
at org.xwiki.contrib.ldap.XWikiLDAPAuthServiceImpl.checkAuth(XWikiLDAPAuthServiceImpl.java:167)
at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:4150)
at org.xwiki.security.authorization.internal.XWikiCachingRightService.authenticateUser(XWikiCachingRightService.java:241)
at org.xwiki.security.authorization.internal.XWikiCachingRightService.checkAccess(XWikiCachingRightService.java:271)
at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:4168)
at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:5308)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:401)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:215)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:425)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:228)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1913)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:462)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:661)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:742)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at com.xpn.xwiki.web.ActionFilter.doFilter(ActionFilter.java:112)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.xwiki.wysiwyg.filter.ConversionFilter.doFilter(ConversionFilter.java:109)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.xwiki.container.servlet.filters.internal.SetHTTPHeaderFilter.doFilter(SetHTTPHeaderFilter.java:63)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.xwiki.container.servlet.filters.internal.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:208)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.xwiki.container.servlet.filters.internal.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:111)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.xwiki.resource.servlet.RoutingFilter.doFilter(RoutingFilter.java:132)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:595)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:80)
at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:650)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:799)
at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:868)
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1457)
at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.lang.Thread.run(Thread.java:748)

#50

Also, it’s locking the other users’ AD accounts.

#51

Wow, never mind. The issue was stupid. I’m still concerned with those log entries, but the issue was Chromium auto-filling my username and password into these boxes:

image