<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:DengXian;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Aptos;}
@font-face
{font-family:"\@DengXian";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Morning all,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m experiencing what would be best described as the LDAP Connection intermittently reverting to the default values as described in bug JSATTR-33. We’re running the latest Shibboleth, v5.1.3, which is supposed to have included a fix for
the issue. So I’m at a loss here…<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">From the IdP Process log:<o:p></o:p></p>
<p class="MsoNormal">2024-10-11 14:03:33,012 - 10.49.173.183 - WARN [org.ldaptive.auth.Authenticator:509] - Entry resolution failed for resolver=[org.ldaptive.auth.SearchEntryResolver@1229362959::factory=null, baseDn=, userFilter=null, userFilterParameters=null,
allowMultipleEntries=false, subtreeSearch=false, derefAliases=NEVER, binaryAttributes=null, entryHandlers=null]<o:p></o:p></p>
<p class="MsoNormal">org.ldaptive.LdapException: Error resolving entry for <a href="mailto:ebreed@ucop.edu">
<span style="color:#467886">[username here]@ucop.edu</span></a>. Unsuccessful search response:
<a href="mailto:org.ldaptive.SearchResponse@-1954686158::messageID=4363"><span style="color:#467886">org.ldaptive.SearchResponse@-1954686158::messageID=4363</span></a>, controls=[], resultCode=INVALID_DN_SYNTAX, matchedDN=, diagnosticMessage=0000208F: NameErr:
DSID-03100232, problem 2006 (BAD_NAME), data 8350, best match of:<o:p></o:p></p>
<p class="MsoNormal"> 'ebreed@ucop.edu'<o:p></o:p></p>
<p class="MsoNormal">, referralURLs=[], entries=[], references=[]<o:p></o:p></p>
<p class="MsoNormal"> at org.ldaptive.auth.AbstractSearchEntryResolver.resolve(AbstractSearchEntryResolver.java:297)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">and from IdP Warn Log:<o:p></o:p></p>
<p class="MsoNormal">2024-10-11 14:00:11,639 - 10.49.173.137 - WARN [org.ldaptive.auth.Authenticator:509] - Entry resolution failed for resolver=[org.ldaptive.auth.SearchEntryResolver@439526332::factory=null, baseDn=, userFilter=null, userFilterParameters=null,
allowMultipleEntries=false, subtreeSearch=false, derefAliases=NEVER, binaryAttributes=null, entryHandlers=null]<o:p></o:p></p>
<p class="MsoNormal">org.ldaptive.LdapException: Error resolving entry for[username here]@ucop.edu. Unsuccessful search response:
<a href="mailto:org.ldaptive.SearchResponse@-1889380218::messageID=4317"><span style="color:#467886">org.ldaptive.SearchResponse@-1889380218::messageID=4317</span></a>, controls=[], resultCode=INVALID_DN_SYNTAX, matchedDN=, diagnosticMessage=0000208F: NameErr:
DSID-03100232, problem 2006 (BAD_NAME), data 8350, best match of:<o:p></o:p></p>
<p class="MsoNormal"> 'gtermini@ucop.edu'<o:p></o:p></p>
<p class="MsoNormal">, referralURLs=[], entries=[], references=[]<o:p></o:p></p>
<p class="MsoNormal"> at org.ldaptive.auth.AbstractSearchEntryResolver.resolve(AbstractSearchEntryResolver.java:297)<o:p></o:p></p>
<p class="MsoNormal"> at org.ldaptive.auth.Authenticator.resolveEntry(Authenticator.java:506)<o:p></o:p></p>
<p class="MsoNormal"> at org.ldaptive.auth.Authenticator.authenticate(Authenticator.java:365)<o:p></o:p></p>
<p class="MsoNormal"> at org.ldaptive.auth.Authenticator.authenticate(Authenticator.java:254)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.idp.authn.impl.LDAPCredentialValidator.doValidate(LDAPCredentialValidator.java:163)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.idp.authn.AbstractUsernamePasswordCredentialValidator.doValidate(AbstractUsernamePasswordCredentialValidator.java:228)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.idp.authn.AbstractCredentialValidator.validate(AbstractCredentialValidator.java:138)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.idp.authn.impl.ValidateCredentials.doExecute(ValidateCredentials.java:189)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.idp.authn.AbstractAuthenticationAction.doExecute(AbstractAuthenticationAction.java:98)<o:p></o:p></p>
<p class="MsoNormal"> at org.opensaml.profile.action.AbstractProfileAction.execute(AbstractProfileAction.java:170)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.idp.profile.AbstractProfileAction.doExecute(AbstractProfileAction.java:156)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.idp.authn.impl.AbstractAuditingValidationAction.doExecute(AbstractAuditingValidationAction.java:111)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.idp.profile.AbstractProfileAction.execute(AbstractProfileAction.java:127)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.execution.ActionExecutor.execute(ActionExecutor.java:51)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.action.EvaluateAction.doExecute(EvaluateAction.java:77)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.action.AbstractAction.execute(AbstractAction.java:188)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.execution.AnnotatedAction.execute(AnnotatedAction.java:145)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.execution.ActionExecutor.execute(ActionExecutor.java:51)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.ActionState.doEnter(ActionState.java:101)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.State.enter(State.java:194)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.Transition.execute(Transition.java:228)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.impl.FlowExecutionImpl.execute(FlowExecutionImpl.java:395)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.impl.RequestControlContextImpl.execute(RequestControlContextImpl.java:214)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.TransitionableState.handleEvent(TransitionableState.java:116)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.Flow.handleEvent(Flow.java:547)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.impl.FlowExecutionImpl.handleEvent(FlowExecutionImpl.java:390)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.impl.RequestControlContextImpl.handleEvent(RequestControlContextImpl.java:210)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.ActionState.doEnter(ActionState.java:105)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.State.enter(State.java:194)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.Transition.execute(Transition.java:228)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.impl.FlowExecutionImpl.execute(FlowExecutionImpl.java:395)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.impl.RequestControlContextImpl.execute(RequestControlContextImpl.java:214)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.TransitionableState.handleEvent(TransitionableState.java:116)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.Flow.handleEvent(Flow.java:547)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.impl.FlowExecutionImpl.handleEvent(FlowExecutionImpl.java:390)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.impl.RequestControlContextImpl.handleEvent(RequestControlContextImpl.java:210)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.ViewState.handleEvent(ViewState.java:231)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.ViewState.resume(ViewState.java:195)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.Flow.resume(Flow.java:537)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.engine.impl.FlowExecutionImpl.resume(FlowExecutionImpl.java:259)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.executor.FlowExecutorImpl.resumeExecution(FlowExecutorImpl.java:168)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.webflow.mvc.servlet.FlowHandlerAdapter.handle(FlowHandlerAdapter.java:254)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:1089)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:979)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:1014)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:914)<o:p></o:p></p>
<p class="MsoNormal"> at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:590)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:885)<o:p></o:p></p>
<p class="MsoNormal"> at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:658)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:205)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:149)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:174)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:149)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.spring.servlet.impl.ChainingFilter$Chain.doFilter(ChainingFilter.java:116)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.spring.servlet.impl.RequestResponseContextFilter.runFilter(RequestResponseContextFilter.java:69)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.servlet.AbstractConditionalFilter.doFilter(AbstractConditionalFilter.java:83)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.spring.servlet.impl.ChainingFilter$Chain.doFilter(ChainingFilter.java:114)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.spring.servlet.impl.DynamicResponseHeaderFilter.runFilter(DynamicResponseHeaderFilter.java:129)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.servlet.AbstractConditionalFilter.doFilter(AbstractConditionalFilter.java:83)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.spring.servlet.impl.ChainingFilter$Chain.doFilter(ChainingFilter.java:114)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.spring.servlet.impl.CookieBufferingFilter.runFilter(CookieBufferingFilter.java:71)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.servlet.AbstractConditionalFilter.doFilter(AbstractConditionalFilter.java:83)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.spring.servlet.impl.ChainingFilter$Chain.doFilter(ChainingFilter.java:114)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.idp.conf.impl.SLF4JMDCServletFilter.runFilter(SLF4JMDCServletFilter.java:115)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.servlet.AbstractConditionalFilter.doFilter(AbstractConditionalFilter.java:83)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.spring.servlet.impl.ChainingFilter$Chain.doFilter(ChainingFilter.java:114)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.spring.servlet.impl.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:80)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:116)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.spring.servlet.impl.ChainingFilter$Chain.doFilter(ChainingFilter.java:114)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.spring.servlet.impl.ChainingFilter$Chain.doFilter(ChainingFilter.java:110)<o:p></o:p></p>
<p class="MsoNormal"> at net.shibboleth.shared.spring.servlet.impl.ChainingFilter.doFilter(ChainingFilter.java:76)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:352)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:268)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:174)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:149)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:166)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:90)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:597)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:115)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:93)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.catalina.valves.StuckThreadDetectionValve.invoke(StuckThreadDetectionValve.java:188)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:341)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.coyote.ajp.AjpProcessor.service(AjpProcessor.java:429)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:894)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1741)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)<o:p></o:p></p>
<p class="MsoNormal"> at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)<o:p></o:p></p>
<p class="MsoNormal"> at java.base/java.lang.Thread.run(Thread.java:840)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Any thoughts?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
<p class="MsoNormal">m.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif;color:#0070C0">Mark L. Boyce</span></b><span style="font-family:"Times New Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:#7F7F7F">Senior Identity Management Analyst<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:#7F7F7F">University of California, Office of the President<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:#7F7F7F">Office: 510.987.9681<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:#7F7F7F">Cell: 209.851.0196</span><span style="font-family:"Times New Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>