topic Re: LDAP integration – users list is empty in Alfresco Archive

LDAP integration – users list is empty

tombo — Mon, 23 Sep 2013 09:24:31 GMT

I have activity-explorer 5.13 integrated with Active Directory by provided activiti-ldap client. Users are being authenticated and authorized as they should (aside SSO problem mentioned in another post).However, I can't assign any task to other user as user list is empty and search doesn't find any

Re: LDAP integration – users list is empty

jonnycarter — Mon, 23 Sep 2013 16:22:22 GMT

I have precisely the same situation with my MS AD connection. I can sign in. I can even make processes that specify potential assignees based on username, and they work.

However, when I try to reassign and search for a user (by name or username), nothing brings up any results. There's a little spinner in the upper right hand corner; its background alternates between yellow and white, then briefly flashes red before it quits.

The only changes I see in the logs are in the localhost_access_log.<date>.txt, which has content like this around the time I make the attempt to search for a user:

<code>
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:04:52 -0500] "POST /activiti-explorer/ui/UIDL?windowName=1 HTTP/1.1" 200 108
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:04:58 -0500] "POST /activiti-explorer/ui/UIDL?windowName=1 HTTP/1.1" 200 1846
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:05:01 -0500] "POST /activiti-explorer/ui/UIDL?windowName=1 HTTP/1.1" 200 108
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:05:03 -0500] "GET /activiti-explorer/VAADIN/themes/base/common/img/loading-indicator-delay.gif HTTP/1.1" 200 1590
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:05:03 -0500] "POST /activiti-explorer/ui/UIDL?windowName=1 HTTP/1.1" 200 107
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:05:05 -0500] "POST /activiti-explorer/ui/UIDL?windowName=1 HTTP/1.1" 200 110
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:05:06 -0500] "GET /activiti-explorer/VAADIN/themes/base/common/img/loading-indicator-wait.gif HTTP/1.1" 200 1590
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:05:07 -0500] "POST /activiti-explorer/ui/UIDL?windowName=1 HTTP/1.1" 200 110
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:05:09 -0500] "POST /activiti-explorer/ui/UIDL?windowName=1 HTTP/1.1" 200 110
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:05:11 -0500] "POST /activiti-explorer/ui/UIDL?windowName=1 HTTP/1.1" 200 111
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:06:02 -0500] "POST /activiti-explorer/ui/UIDL?windowName=1 HTTP/1.1" 200 533
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:06:44 -0500] "POST /activiti-explorer/ui/UIDL?windowName=1 HTTP/1.1" 200 1847
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:06:44 -0500] "POST /activiti-explorer/ui/UIDL?windowName=1 HTTP/1.1" 200 108
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:06:46 -0500] "POST /activiti-explorer/ui/UIDL?windowName=1 HTTP/1.1" 200 108
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:06:48 -0500] "POST /activiti-explorer/ui/UIDL?windowName=1 HTTP/1.1" 200 111
0:0:0:0:0:0:0:1%0 - - [23/Sep/2013:11:06:50 -0500] "POST /activiti-explorer/ui/UIDL?windowName=1 HTTP/1.1" 200 111
</code>

Here's my (somewhat obfuscated) LDAPConfigurator bean from activiti-standalone-context.xml:
http://pastebin.com/GgqX3hvp

Would have used the code tags, but forum helps a little too much on that score by adding a bunch of hyperlinks.

Re: LDAP integration – users list is empty

tombo — Tue, 24 Sep 2013 06:58:14 GMT

Thank you for confirming that I'm not alone with that problem. My LDAP configuration is practically the same. I tried with userIdAttribute= „cn“ as well but, there was no change.

Re: LDAP integration – users list is empty

trademak — Tue, 24 Sep 2013 10:08:24 GMT

Hmm, could you check if the LDAP query we are performing works for MS AD? If you have an idea what the query should be we can see how we can get it fixed. We didn't test it against a MS AD.

Best regards,

Re: LDAP integration – users list is empty

tombo — Tue, 24 Sep 2013 12:56:03 GMT

I've tested queries and result is mostly OK.

queryUserByUserId (&(objectClass=user)(sAMAccontName=some.user)) is OK
queryUserByUserId (&(objectClass=user)(cn=Some User)) is OK

queryUserByFullNameLike (&(objectClass=user)(|(givenName=*Some*)(sn=*User))) doesn't return user
queryUserByFullNameLike (&(objectClass=user)(givenName=*Some*)(sn=*User*)) is OK
Correcting this query definition in the activiti-standalone-context.xml doesnt solve problem.

queryGroupsForUser" value="(&(objectClass=group)(member=Some User,OU=SomeOrganizationUnit,DC=domainname,DC=local)) is OK

It looks like search action is not triggered after entering several letters to the form field.
I had the same behaviour in activity-explorer 5.12.1. while user cache was misconfigured through activity-ui-context.xml.

Re: LDAP integration – users list is empty

tombo — Tue, 24 Sep 2013 17:00:50 GMT

Well, I've just performed test against the Apache DS LDAP and situation is exactly the same: empty users list and no errors thrown.

Regards,
Boris

Re: LDAP integration – users list is empty

tombo — Thu, 26 Sep 2013 07:51:53 GMT

I had more time to carefully test Active Directory queries and can confirm that all are OK. Typo was reson that one was not returning user. So, problem is somewhere else.

Regards,
Boris

Re: LDAP integration – users list is empty

frederikherema1 — Wed, 02 Oct 2013 08:02:45 GMT

Ok, thanks for double-checking…

Re: LDAP integration – users list is empty

clnyx — Tue, 08 Oct 2013 14:35:26 GMT

Hello,

I got the same problem. Is there something new how to fix this/get this working?

Greetings

Re: LDAP integration – users list is empty

jbarrez — Mon, 21 Oct 2013 09:58:05 GMT

Well, the previous indicates it works (he had a typo). We also test against apache DS in our test suite.

Re: LDAP integration – users list is empty

clnyx — Mon, 21 Oct 2013 11:47:43 GMT

Hmm, it's my understanding that the query works now, but the list is still empty.
And thats why he was assuming: "So, problem is somewhere else."!?

Re: LDAP integration – users list is empty

tombo — Mon, 21 Oct 2013 19:11:49 GMT

Sorry for not being clear enough in my last post, but users list is empty no matter if I test against Microsoft Ad or Apache DS. That's reason for my conclusion that problem is somewhere else and not caused by LDAP client queries.
User is authenticated and authorized in both cases, but it’s impossible to assign task to anyone but yourself as user list is always empty.

Boris

Re: LDAP integration – users list is empty

tombo — Thu, 24 Oct 2013 09:16:53 GMT

Problem isn't related with LDAP/AD integration. After checking 5.14 version with default configuration (h2 database and no ldap integration) I've found the same situation: empty users list.
Tried with the chrome and IE browser and on the weblogic and tomcat application servers.

Regards,
Boris

Re: LDAP integration – users list is empty

werners — Sat, 09 Aug 2014 18:56:38 GMT

Hello all,

have these problems with (Apache) LDAP solved in the meanwhile? Im still working with version 5.14, have the same issues concerning detecting the usergroups and would like to know if these problems are done in latest version 5.16. ?

If someone solved this topic in a different way, i would be thankful if you could give me a hint.

Thanks for help.
Werner

Re: LDAP integration – users list is empty

santosh1 — Tue, 16 Jun 2015 13:02:49 GMT

Hi,

we have written a custom rendererfor our list box. But its not getting called.

import org.activiti.engine.form.FormProperty;
import org.activiti.explorer.ui.form.AbstractFormPropertyRenderer;

import com.vaadin.ui.Field;
import com.vaadin.ui.TextField;

public class AlistFormPropertyRenderer extends AbstractFormPropertyRenderer {
    public AlistFormPropertyRenderer() {
        super(AlistFormType.class);
    }

    public Field getPropertyField(FormProperty formProperty) {
        TextField textField = new TextField();
        textField.setRequired(formProperty.isRequired());
        textField.setEnabled(formProperty.isWritable());
        textField.setRequiredError(getMessage("form.field.required", new Object[]{getPropertyLabel(formProperty)}));
System.out.println("formProperty.getValue() "+formProperty.getValue());
        if (formProperty.getValue() != null) {
            textField.setValue(formProperty.getValue());
        }
        return textField;
    }
}

    <div class="form-group">
        <label for="${form?.id}" class="${form?.required ? 'required' : ''}">${raw(form?.name)}</label>
        <select name="${form?.id}" class="form-control" ${form?.required ? 'required' : ''}>
        <option value="${form?.value}">${form?.value} </option>
        <option value="Santosh">Santosh </option>
        </select>
    </div>

Here ${form?.value} is coming as null. Any thoughts on this.

Re: LDAP integration – users list is empty

jbarrez — Tue, 30 Jun 2015 18:41:29 GMT

This is a completely different topic than the original post. Please create a new post.

Re: LDAP integration – users list is empty

potitius — Fri, 07 Aug 2015 08:51:42 GMT

Hey,
I am on activiti 5.16 and I still have the same problem.

Re: LDAP integration – users list is empty

vasile_dirla — Sat, 08 Aug 2015 07:29:53 GMT

hi potitius,
considering the ldap settings you have posted here: http://forums.activiti.org/content/anyone-can-connect-ldap-no-users-password-verification
it's normal to have problems with the queries.

Here you have an example of ldap config (nothing special it's part of the open source project):
<code>
<bean class="org.activiti.ldap.LDAPConfigurator">

          <!– Server connection params –>
                <property name="server" value="ldap://localhost" />
                <property name="port" value="33389" />
                <property name="user" value="uid=admin, ou=users, o=activiti" />
                <property name="password" value="pass" />

                <!– Query params –>
                <property name="baseDn" value="o=activiti" />
                <property name="queryUserByUserId" value="(&(objectClass=inetOrgPerson)(uid={0}))" />
                <property name="queryUserByFullNameLike" value="(&(objectClass=inetOrgPerson)(|({0}=*{1}*)({2}=*{3}*)))" />
                <property name="queryGroupsForUser" value="(&(objectClass=groupOfUniqueNames)(uniqueMember={0}))" />

                <!– Attribute config –>
                <property name="userIdAttribute" value="uid" />
                <property name="userFirstNameAttribute" value="cn" />
                <property name="userLastNameAttribute" value="sn" />

                <property name="groupIdAttribute" value="uid" />
                <property name="groupNameAttribute" value="cn" />

        </bean>
</code>

Re: LDAP integration – users list is empty

vasile_dirla — Sat, 08 Aug 2015 08:53:03 GMT

hi potitius,
check your LDAP config (focus on the queries you provide)