AnsweredAssumed Answered

LDAP authentication problem with server down

Question asked by agz on Sep 5, 2013
Latest reply on Sep 5, 2013 by agz
Hi all,
I have a problem in my Alfresco 4.0.e with LDAP authetication:
I configured an authentication chain with many ldap servers

<em>alfresco-global.properties</em>

authentication.chain=ldap_hq1:ldap-ad,ldap_hq2:ldap-ad,ldap_hq3:ldap-ad,ldap_pos1:ldap-ad,ldap_pos2:ldap-ad,ldap_pos3:ldap-ad,ldap_obs1:ldap-ad,ldap_wh1:ldap-ad,alfinst:alfrescoNtlm


I have the synchronization not active:

ldap.synchronization.active=false


For each server of chain I created the folder in ../extension/susystems/Authentication with the parameter of server.

When the servers are up the authentication works fine…but there is a problem with chain, this is the case:
I set, for the first ldap server in chain, an IP not available (like a server not reachable)

At Alfresco startup it shows an error

Unable to connect to LDAP Server; check LDAP configuration
javax.naming.CommunicationException: 192.168.228.32:389 [Root exception is java.net.ConnectException: Connection timed out]
   at com.sun.jndi.ldap.Connection.<init>(Connection.java:210)

and this is correct!

<strong>The problem affect users that try to login for the first time (that are not still present in Alfresco):they are not able to access!</strong>

The log return me a Login Failed and the user is not able to access

Exception from executeScript - redirecting to status template error: 08050002 Login failed
org.springframework.extensions.webscripts.WebScriptException: 08050002 Login failed
   at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:75)
   at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:73)
   at org.springframework.extensions.webscripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:235)
   at org.springframework.extensions.webscripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:64)
   at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:393)
   at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:388)
   at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:462)
   at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:500)
   at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:275)
   at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:372)
   at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:209)
   at org.springframework.extensions.webscripts.servlet.WebScriptServlet.service(WebScriptServlet.java:118)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:58)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
   at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:470)
   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
   at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:857)
   at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
   at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
   at java.lang.Thread.run(Thread.java:662)


Someone has the same problem or have any suggestions ?

Thans all.

Outcomes