JSATTR-33

Mark Boyce Mark.Boyce at ucop.edu
Wed Oct 16 15:22:23 UTC 2024 

Morning all,

I'm experiencing what would be best described as the LDAP Connection intermittently reverting to the default values as described in bug JSATTR-33. We're running the latest Shibboleth, v5.1.3, which is supposed to have included a fix for the issue. So I'm at a loss here...

>From the IdP Process log:
2024-10-11 14:03:33,012 - 10.49.173.183 - WARN [org.ldaptive.auth.Authenticator:509] - Entry resolution failed for resolver=[org.ldaptive.auth.SearchEntryResolver at 1229362959::factory=null, baseDn=, userFilter=null, userFilterParameters=null, allowMultipleEntries=false, subtreeSearch=false, derefAliases=NEVER, binaryAttributes=null, entryHandlers=null]
org.ldaptive.LdapException: Error resolving entry for [username here]@ucop.edu<mailto:ebreed at ucop.edu>. Unsuccessful search response: org.ldaptive.SearchResponse at -1954686158::messageID=4363<mailto:org.ldaptive.SearchResponse at -1954686158::messageID=4363>, controls=[], resultCode=INVALID_DN_SYNTAX, matchedDN=, diagnosticMessage=0000208F: NameErr: DSID-03100232, problem 2006 (BAD_NAME), data 8350, best match of:
        'ebreed at ucop.edu'
, referralURLs=[], entries=[], references=[]
        at org.ldaptive.auth.AbstractSearchEntryResolver.resolve(AbstractSearchEntryResolver.java:297)

and from IdP Warn Log:
2024-10-11 14:00:11,639 - 10.49.173.137 - WARN [org.ldaptive.auth.Authenticator:509] - Entry resolution failed for resolver=[org.ldaptive.auth.SearchEntryResolver at 439526332::factory=null, baseDn=, userFilter=null, userFilterParameters=null, allowMultipleEntries=false, subtreeSearch=false, derefAliases=NEVER, binaryAttributes=null, entryHandlers=null]
org.ldaptive.LdapException: Error resolving entry for[username here]@ucop.edu. Unsuccessful search response: org.ldaptive.SearchResponse at -1889380218::messageID=4317<mailto:org.ldaptive.SearchResponse at -1889380218::messageID=4317>, controls=[], resultCode=INVALID_DN_SYNTAX, matchedDN=, diagnosticMessage=0000208F: NameErr: DSID-03100232, problem 2006 (BAD_NAME), data 8350, best match of:
        'gtermini at ucop.edu'
, referralURLs=[], entries=[], references=[]
        at org.ldaptive.auth.AbstractSearchEntryResolver.resolve(AbstractSearchEntryResolver.java:297)
        at org.ldaptive.auth.Authenticator.resolveEntry(Authenticator.java:506)
        at org.ldaptive.auth.Authenticator.authenticate(Authenticator.java:365)
        at org.ldaptive.auth.Authenticator.authenticate(Authenticator.java:254)
        at net.shibboleth.idp.authn.impl.LDAPCredentialValidator.doValidate(LDAPCredentialValidator.java:163)
        at net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator.doValidate(AbstractUsernamePasswordCredentialValidator.java:228)
        at net.shibboleth.idp.authn.AbstractCredentialValidator.validate(AbstractCredentialValidator.java:138)
        at net.shibboleth.idp.authn.impl.ValidateCredentials.doExecute(ValidateCredentials.java:189)
        at net.shibboleth.idp.authn.AbstractAuthenticationAction.doExecute(AbstractAuthenticationAction.java:98)
        at org.opensaml.profile.action.AbstractProfileAction.execute(AbstractProfileAction.java:170)
        at net.shibboleth.idp.profile.AbstractProfileAction.doExecute(AbstractProfileAction.java:156)
        at net.shibboleth.idp.authn.impl.AbstractAuditingValidationAction.doExecute(AbstractAuditingValidationAction.java:111)
        at net.shibboleth.idp.profile.AbstractProfileAction.execute(AbstractProfileAction.java:127)
        at org.springframework.webflow.execution.ActionExecutor.execute(ActionExecutor.java:51)
        at org.springframework.webflow.action.EvaluateAction.doExecute(EvaluateAction.java:77)
        at org.springframework.webflow.action.AbstractAction.execute(AbstractAction.java:188)
        at org.springframework.webflow.execution.AnnotatedAction.execute(AnnotatedAction.java:145)
        at org.springframework.webflow.execution.ActionExecutor.execute(ActionExecutor.java:51)
        at org.springframework.webflow.engine.ActionState.doEnter(ActionState.java:101)
        at org.springframework.webflow.engine.State.enter(State.java:194)
        at org.springframework.webflow.engine.Transition.execute(Transition.java:228)
        at org.springframework.webflow.engine.impl.FlowExecutionImpl.execute(FlowExecutionImpl.java:395)
        at org.springframework.webflow.engine.impl.RequestControlContextImpl.execute(RequestControlContextImpl.java:214)
        at org.springframework.webflow.engine.TransitionableState.handleEvent(TransitionableState.java:116)
        at org.springframework.webflow.engine.Flow.handleEvent(Flow.java:547)
        at org.springframework.webflow.engine.impl.FlowExecutionImpl.handleEvent(FlowExecutionImpl.java:390)
        at org.springframework.webflow.engine.impl.RequestControlContextImpl.handleEvent(RequestControlContextImpl.java:210)
        at org.springframework.webflow.engine.ActionState.doEnter(ActionState.java:105)
        at org.springframework.webflow.engine.State.enter(State.java:194)
        at org.springframework.webflow.engine.Transition.execute(Transition.java:228)
        at org.springframework.webflow.engine.impl.FlowExecutionImpl.execute(FlowExecutionImpl.java:395)
        at org.springframework.webflow.engine.impl.RequestControlContextImpl.execute(RequestControlContextImpl.java:214)
        at org.springframework.webflow.engine.TransitionableState.handleEvent(TransitionableState.java:116)
        at org.springframework.webflow.engine.Flow.handleEvent(Flow.java:547)
        at org.springframework.webflow.engine.impl.FlowExecutionImpl.handleEvent(FlowExecutionImpl.java:390)
        at org.springframework.webflow.engine.impl.RequestControlContextImpl.handleEvent(RequestControlContextImpl.java:210)
        at org.springframework.webflow.engine.ViewState.handleEvent(ViewState.java:231)
        at org.springframework.webflow.engine.ViewState.resume(ViewState.java:195)
        at org.springframework.webflow.engine.Flow.resume(Flow.java:537)
        at org.springframework.webflow.engine.impl.FlowExecutionImpl.resume(FlowExecutionImpl.java:259)
        at org.springframework.webflow.executor.FlowExecutorImpl.resumeExecution(FlowExecutorImpl.java:168)
        at org.springframework.webflow.mvc.servlet.FlowHandlerAdapter.handle(FlowHandlerAdapter.java:254)
        at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:1089)
        at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:979)
        at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:1014)
        at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:914)
        at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:590)
        at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:885)
        at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:658)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:205)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:149)
        at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:174)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:149)
        at net.shibboleth.shared.spring.servlet.impl.ChainingFilter$Chain.doFilter(ChainingFilter.java:116)
        at net.shibboleth.shared.spring.servlet.impl.RequestResponseContextFilter.runFilter(RequestResponseContextFilter.java:69)
        at net.shibboleth.shared.servlet.AbstractConditionalFilter.doFilter(AbstractConditionalFilter.java:83)
        at net.shibboleth.shared.spring.servlet.impl.ChainingFilter$Chain.doFilter(ChainingFilter.java:114)
        at net.shibboleth.shared.spring.servlet.impl.DynamicResponseHeaderFilter.runFilter(DynamicResponseHeaderFilter.java:129)
        at net.shibboleth.shared.servlet.AbstractConditionalFilter.doFilter(AbstractConditionalFilter.java:83)
        at net.shibboleth.shared.spring.servlet.impl.ChainingFilter$Chain.doFilter(ChainingFilter.java:114)
        at net.shibboleth.shared.spring.servlet.impl.CookieBufferingFilter.runFilter(CookieBufferingFilter.java:71)
        at net.shibboleth.shared.servlet.AbstractConditionalFilter.doFilter(AbstractConditionalFilter.java:83)
        at net.shibboleth.shared.spring.servlet.impl.ChainingFilter$Chain.doFilter(ChainingFilter.java:114)
        at net.shibboleth.idp.conf.impl.SLF4JMDCServletFilter.runFilter(SLF4JMDCServletFilter.java:115)
        at net.shibboleth.shared.servlet.AbstractConditionalFilter.doFilter(AbstractConditionalFilter.java:83)
        at net.shibboleth.shared.spring.servlet.impl.ChainingFilter$Chain.doFilter(ChainingFilter.java:114)
        at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201)
        at net.shibboleth.shared.spring.servlet.impl.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:80)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:116)
        at net.shibboleth.shared.spring.servlet.impl.ChainingFilter$Chain.doFilter(ChainingFilter.java:114)
        at net.shibboleth.shared.spring.servlet.impl.ChainingFilter$Chain.doFilter(ChainingFilter.java:110)
        at net.shibboleth.shared.spring.servlet.impl.ChainingFilter.doFilter(ChainingFilter.java:76)
        at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:352)
        at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:268)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:174)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:149)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:166)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:90)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:597)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:115)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:93)
        at org.apache.catalina.valves.StuckThreadDetectionValve.invoke(StuckThreadDetectionValve.java:188)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:341)
        at org.apache.coyote.ajp.AjpProcessor.service(AjpProcessor.java:429)
        at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)
        at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:894)
        at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1741)
        at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)
        at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)
        at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
        at java.base/java.lang.Thread.run(Thread.java:840)


Any thoughts?

Thanks,
m.


Mark L. Boyce
Senior Identity Management Analyst
University of California, Office of the President
Office: 510.987.9681
Cell: 209.851.0196

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241016/711dcc23/attachment.htm>

More information about the users mailing list