Hello,
Yesterday we patched from 8213 to 8217, tested and it was ok. We
then patched from 8217 to 9000 and now the LDAP auth doesn't work
anymore. I need help to troubleshoot.
I reviewed the config and the logs. There was an issue with
certificates (can build PKIX path) so I switched to ldap instead of
ldaps to at least test and bring back the auth. Still no go, can't
authenticate. When I save the config (ldap://server:389 - anon bind) I
*CAN* import the users.. But then can't login in the app when ldap
users (tested with multiple accounts, yes we're sure the username
and pass are good).
Any pointers ?
Log:
---------------------
[14:00:22:693]|[03-06-2015]|[com.adventnet.authentication.internal.WebClientAuthenticationManager]|[INFO]|[30]|:
authenticating user : mrichard|
[14:00:22:693]|[03-06-2015]|[com.adventnet.servicedesk.authentication.internal.LDAPLoginModule]|[INFO]|[30]|:
Going to authorize the user|
[14:00:22:693]|[03-06-2015]|[com.adventnet.servicedesk.authentication.internal.LDAPLoginModule]|[INFO]|[30]|:
received data >>> LoginName:mrichard domain:nullisLocalAuth--->false|
[14:00:22:793]|[03-06-2015]|[SYSOUT]|[INFO]|[30]|:
javax.security.auth.login.FailedLoginException: Invalid Password|
[14:00:22:793]|[03-06-2015]|[SYSOUT]|[INFO]|[30]|: at com.adventnet.servicedesk.authentication.internal.LDAPLoginModule.login(LDAPLoginModule.java:357)|
[14:00:22:793]|[03-06-2015]|[SYSOUT]|[INFO]|[30]|: at
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)|
[14:00:22:794]|[03-06-2015]|[SYSOUT]|[INFO]|[30]|: at
sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)|
[....snipped....]
[14:00:22:796]|[03-06-2015]|[SYSOUT]|[INFO]|[30]|: at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683)|
[14:00:22:796]|[03-06-2015]|[SYSOUT]|[INFO]|[30]|: at
java.lang.Thread.run(Unknown Source)|
[14:00:22:796]|[03-06-2015]|[com.adventnet.authentication.PAM]|[WARNING]|[30]|:
FailedLoginException occured with message : Invalid Password|
[14:00:22:796]|[03-06-2015]|[com.adventnet.servicedesk.setup.util.SSOUtil]|[INFO]|[30]|:
User Or Domain Is Empty inside SSOUtil|
[14:00:22:796]|[03-06-2015]|[com.adventnet.servicedesk.setup.util.LDAPUtil]|[INFO]|[30]|:
IsLDAPAuthentication Result : true|
[14:00:35:813]|[03-06-2015]|[SYSOUT]|[INFO]|[22]|: here inside Login.jsp---->|
:
--------------------------------------