Some LDAP users cannot log in after xwiki upgrade

Help / Discuss
, , ,
#1

Hi,

We successfully upgraded xwiki from 10.6.1 to 13.1 by performing a fresh install and then importing all the previously exported content. The installation method is apt-based, with the default package manager of Ubuntu 16.04.5 LTS.
Everything is working fine and all the pages and configurations are the same as before, but we have some issues with the users.

Some users cannot log in, their page just crashes after the login attempt. Superadmin user and some other users can log in with no problem.

Other clues of this: in the global administration page,
/xwiki/bin/admin/XWiki/XWikiPreferences?editor=globaladmin&section=Users,
the users list is unable to load. It keeps loading but it never ends, while it should be immediate.
But if we search for a specific user in the “rights” section, we can find it with no problem.
When we try to load this users list, we get some errors in the javascript console:

js_error_userslist

and some warnings in the logs:

catalina.out.txt (40.1 KB)


Apart from this, we can't find any other clue in the logs. No "ERROR" lines while trying to login or to load the users list. The only suspicious lines are those written during the last .xar import of all the content:

2021-06-07 17:32:55,365 [http-nio-8080-exec-10 - http:/10.20.28.8:8080/xwiki/bin/import/XWiki/XWikiPreferences?editor=globaladmin&section=Import&srid=oAxZ8aab] ERROR c.x.x.w.ImportAction - Failed to register translation bundle from document [xwiki:Clienti.Communication Valley.Main.ActivityTranslations]
2021-06-07 17:32:55,365 [http-nio-8080-exec-10 - http:/10.20.28.8:8080/xwiki/bin/import/XWiki/XWikiPreferences?editor=globaladmin&section=Import&srid=oAxZ8aab] ERROR c.x.x.w.ImportAction - Failed to register translation bundle from document [xwiki:Clienti.Communication Valley.Main.SolrTranslations]
2021-06-07 17:32:55,365 [http-nio-8080-exec-10 - http:/10.20.28.8:8080/xwiki/bin/import/XWiki/XWikiPreferences?editor=globaladmin&section=Import&srid=oAxZ8aab] ERROR c.x.x.w.ImportAction - Failed to register translation bundle from document [xwiki:Encryption.Translations]
2021-06-07 17:32:55,366 [http-nio-8080-exec-10 - http:/10.20.28.8:8080/xwiki/bin/import/XWiki/XWikiPreferences?editor=globaladmin&section=Import&srid=oAxZ8aab] ERROR c.x.x.w.ImportAction - Failed to register translation bundle from document [xwiki:FAQCode.Translations]
2021-06-07 17:32:55,366 [http-nio-8080-exec-10 - http:/10.20.28.8:8080/xwiki/bin/import/XWiki/XWikiPreferences?editor=globaladmin&section=Import&srid=oAxZ8aab] ERROR c.x.x.w.ImportAction - Failed to register translation bundle from document [xwiki:Home_.ActivityTranslations]
2021-06-07 17:32:55,366 [http-nio-8080-exec-10 - http:/10.20.28.8:8080/xwiki/bin/import/XWiki/XWikiPreferences?editor=globaladmin&section=Import&srid=oAxZ8aab] ERROR c.x.x.w.ImportAction - Failed to register translation bundle from document [xwiki:Home_.SolrTranslations]
2021-06-07 17:32:55,366 [http-nio-8080-exec-10 - http:/10.20.28.8:8080/xwiki/bin/import/XWiki/XWikiPreferences?editor=globaladmin&section=Import&srid=oAxZ8aab] ERROR c.x.x.w.ImportAction - Failed to register translation bundle from document [xwiki:NotesCode.Translations]
2021-06-07 17:32:55,367 [http-nio-8080-exec-10 - http:/10.20.28.8:8080/xwiki/bin/import/XWiki/XWikiPreferences?editor=globaladmin&section=Import&srid=oAxZ8aab] ERROR c.x.x.w.ImportAction - Failed to register translation bundle from document [xwiki:XPoll.Translation]


The authentication type is LDAP. The ldap server is reachable, because some users can log in and navigate successfully. Here the configurations in xwiki.cfg:

#-# LDAP configuration imported from old xwiki (22/08/2018)
xwiki.authentication.authclass=org.xwiki.contrib.ldap.XWikiLDAPAuthServiceImpl
xwiki.authentication.ldap=1
xwiki.authentication.ldap.server=10.20.28.16
xwiki.authentication.ldap.bind_DN=CN=PACO CONSEGNA,OU=Service Accounts,OU=CV Utenti,DC=communicationvalley,DC=it
xwiki.authentication.ldap.bind_pass=…
xwiki.authentication.ldap.base_DN=OU=CV Utenti,DC=communicationvalley,DC=it
xwiki.authentication.ldap.user_search_fmt=(sAMAccountName={1})

Can you help us understand what could be the issue?
As said, we could not find out why some users can login and some other could not. We reset their password to make sure that was not part of the problem. Some users who can log in even tried to use the pc of those who cannot, and it worked so it’s not a pdl issue, only user related.
The configurations on ldap servers are the same among the users, but some cannot access.

What other aspect can we inspect?
Thanks,