LDAP - first login fails

[peterglock]

I am having an intermittent problem with ldap login to share. Often the first login will fail with

The remote server may be unavailable or your authentication details have not been recognized.

Clicking the login button for a second time then works. I have the timeout set to 500ms. My logs show:

2013-01-13 21:13:58,975  DEBUG [authentication.ldap.LDAPAuthenticationComponentImpl] [http-apr-18080-exec-5] Failed to authenticate user "peterglock" org.alfresco.repo.security.authentication.AuthenticationException: 00130083 Unable to connect to LDAP Server; check LDAP configuration   at org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryImpl.buildInitialDirContext(LDAPInitialDirContextFactoryImpl.java:123)   at org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryImpl.getInitialDirContext(LDAPInitialDirContextFactoryImpl.java:202)   at org.alfresco.repo.security.authentication.ldap.LDAPAuthenticationComponentImpl.authenticateImpl(LDAPAuthenticationComponentImpl.java:122)   at org.alfresco.repo.security.authentication.AbstractAuthenticationComponent.authenticate(AbstractAuthenticationComponent.java:158)   at org.alfresco.repo.security.authentication.AuthenticationServiceImpl.authenticate(AuthenticationServiceImpl.java:65)   at org.alfresco.repo.security.authentication.AbstractChainingAuthenticationService.authenticate(AbstractChainingAuthenticationService.java:195)   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)   at java.lang.reflect.Method.invoke(Method.java:601)   at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:309)   at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:183)   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150)   at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:80)   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:46)   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)   at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:159)   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:110)   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)   at $Proxy61.authenticate(Unknown Source)   at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:66)   at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:75)   at org.springframework.extensions.webscripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:235)   at org.springframework.extensions.webscripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:64)   at org.alfresco.repo.web.scripts.RepositoryContainer$3.execute(RepositoryContainer.java:426)   at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:433)   at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:495)   at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:533)   at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:276)   at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:377)   at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:209)   at org.springframework.extensions.webscripts.servlet.WebScriptServlet.service(WebScriptServlet.java:132)   at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)   at org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:61)   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)   at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168)   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)   at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:929)   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)   at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1002)   at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:585)   at org.apache.tomcat.util.net.AprEndpoint$SocketProcessor.run(AprEndpoint.java:1813)   at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)   at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)   at java.lang.Thread.run(Thread.java:722)Caused by: javax.naming.NamingException: LDAP response read timed out, timeout used:500ms.   at com.sun.jndi.ldap.Connection.readReply(Connection.java:481)   at com.sun.jndi.ldap.LdapClient.ldapBind(LdapClient.java:358)   at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:210)   at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2740)   at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:316)   at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:193)   at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:211)   at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:154)   at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:84)   at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:684)   at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:307)   at javax.naming.InitialContext.init(InitialContext.java:242)   at javax.naming.InitialContext.<init>(InitialContext.java:216)   at javax.naming.directory.InitialDirContext.<init>(InitialDirContext.java:101)   at org.alfresco.repo.security.authentication.ldap.LDAPInitialDirContextFactoryImpl.buildInitialDirContext(LDAPInitialDirContextFactoryImpl.java:114)   … 54 more‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Any ideas?

[jaredmadams]

Would you mind sharing with me the location of that log?  I'm having some LDAP issus of my own and have been unable to trackdown the location of that log.

Thanks.

[peterglock]

Turn on debugging in tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties :

# LDAPlog4j.logger.org.alfresco.repo.importer.ImporterJob=debuglog4j.logger.org.alfresco.repo.importer.ExportSourceImporter=debuglog4j.logger.org.alfresco.repo.security.authentication.ldap=debug‍‍‍‍

[raj]

Hi Peterglock,

I am facing problem with Ldap configuration in alfresco 4.2b where it is working in 3.x version but in 4.2b version it is not ldap is not getting synchronized.

can you help me in this

thanks in Advance,

Regards,
Raj

[peterglock]

I read through the Apple server documentation at http://help.apple.com/advancedserveradmin/mac/10.8/#apd2DB8221F-ACD1-489E-A17D-7FB82752318D

Timeout for our Mountain Lion clients is set to 10 seconds so I set the LDAP timeout to 15 seconds. Now working ok.