<div dir="ltr"><div dir="ltr">13:22:11:543 INFO [137.229.114.251] net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstJAAS:255 > Profile Action ValidateUsernamePasswordAgainstJAAS: Login by 'dberry9' via 'ShibUserPassAuth' failedjavax.security.auth.login.LoginException: Authentication failed: [org.ldaptive.auth.AuthenticationResponse@1572247851::authenticationResultCode=AUTHENTICATION_HANDLER_FAILURE, ldapEntry=[dn=CN=dberry9,OU=userAccounts,DC=ua,DC=ad,DC=alaska,DC=edu[]], accountState=null, result=false, resultCode=LDAP_TIMEOUT, message=javax.naming.NamingException: LDAP response read timed out, timeout used:3000ms., controls=null] at org.ldaptive.jaas.LdapLoginModule.login(LdapLoginModule.java:160)<br><br>17:46:24:316 INFO [204.90.98.254] net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstJAAS:255 > Profile Action ValidateUsernamePasswordAgainstJAAS: Login by 'mcampbell10' via 'ShibUserPassAuth' failedjavax.security.auth.login.LoginException: Authentication failed: [org.ldaptive.auth.AuthenticationResponse@1668002417::authenticationResultCode=AUTHENTICATION_HANDLER_FAILURE, ldapEntry=[dn=CN=mcampbell10,OU=userAccounts,DC=ua,DC=ad,DC=alaska,DC=edu[]], accountState=null, result=false, resultCode=LDAP_TIMEOUT, message=javax.naming.NamingException: LDAP response read timed out, timeout used:3000ms., controls=null] at org.ldaptive.jaas.LdapLoginModule.login(LdapLoginModule.java:160)<br><br>----<div><br>### Operating Environment Information<br>operating_system: Linux<br>operating_system_version: 3.10.0-957.12.2.el7.x86_64<br>operating_system_architecture: amd64<br>jdk_version: 1.8.0_91<br>available_cores: 2<br>used_memory: 2683 MB<br>maximum_memory: 3641 MB<br>### Identity Provider Information<br>idp_version: 3.4.6<br>start_time: 2020-10-19T13:40:22-08:00<br>current_time: 2020-10-22T09:36:15-08:00<br>uptime: 244553116 ms
</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Oct 22, 2020 at 4:39 AM Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On 10/21/20, 10:25 PM, "users on behalf of IAM David Bantz" <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:dabantz@alaska.edu" target="_blank">dabantz@alaska.edu</a>> wrote:<br>
<br>
> I do have multiple modules (= application blocks). The connection timeout in the first listed URL terminates not just that<br>
> module but the jaas-based authentication entirely. The next in line module is not invoked as far as I can tell from the<br>
> single log message indicating failed authentication because the first connection attempt timed out.<br>
<br>
Barring a bug (*) that would be impossible because it's my code that runs them. The timeout should raise a LoginException and I catch that, and just run the next module.<br>
<br>
-- Scott<br>
<br>
(*) The bug would be the LDAP module raising a runtime exception and the logging, if any, might indicate that.<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div></div>