Author Message
KameswaranSubbaraman
Joined: Jun 28, 2006
Messages: 0
Offline
Hi,

I am trying to start a session with DMCC dashboard application with a user created in ADS(authenitcation with External LDAP). I am getting authentication failed exception. Here is the trace.

WARNING: Login failed on External LDAP: user=aes, clientID=XML Unencrypted:172.42.102.121:4468
2009-05-29 11.50.55,082 com.avaya.sessionsvc.SessionObjectImpl validate
WARNING: Authentication failed: clientID=XML Unencrypted:172.42.102.121:4468, user=aes
javax.security.auth.login.FailedLoginException: User not known to the underlying authentication module.
   at com.avaya.sessionsvc.JpamLoginModule.login(JpamLoginModule.java:158)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
   at java.lang.reflect.Method.invoke(Method.java:585)
   at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
   at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
   at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
   at java.security.AccessController.doPrivileged(Native Method)
   at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
   at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
   at com.avaya.sessionsvc.SessionObjectImpl.pamValidate(SessionObjectImpl.java:455)
   at com.avaya.sessionsvc.SessionObjectImpl.pamValidate(SessionObjectImpl.java:427)
   at com.avaya.sessionsvc.SessionObjectImpl.validate(SessionObjectImpl.java:310)
   at com.avaya.sessionsvc.SessionServicesImpl.startApplicationSession(SessionServicesImpl.java:215)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
   at java.lang.reflect.Method.invoke(Method.java:585)
   at com.avaya.platform.broker.impl.ServiceMethodImpl.invoke(ServiceMethodImpl.java:96)
   at com.avaya.workflow.impl.RouterImpl.routeRequest(RouterImpl.java:97)
   at com.avaya.mvcs.proxy.CstaRouter.routeRequest(CstaRouter.java:173)
   at com.avaya.mvcs.proxy.CstaRouterService.routeRequest(CstaRouterService.java:141)
   at com.avaya.mvcs.proxy.CstaRouterNode.processPacket(CstaRouterNode.java:327)
   at com.avaya.mvcs.proxy.AbstractPipelineNode.process(AbstractPipelineNode.java:130)
   at com.avaya.mvcs.proxy.Pipeline$PipelineSubscriber.inform(Pipeline.java:430)
   at com.avaya.common.eventservice.UnfilteredSubscription.notify(UnfilteredSubscription.java:70)
   at com.avaya.common.multicaster.Multicaster.notify(Multicaster.java:386)
   at com.avaya.common.channel.Channel.publish(Channel.java:115)
   at com.avaya.common.eventservice.EventService.publish(EventService.java:123)
   at com.avaya.common.eventservice.EventServiceManager.publish(EventServiceManager.java:156)
   at com.avaya.common.eventservice.Publisher.publish(Publisher.java:110)
   at com.avaya.mvcs.proxy.CstaUnmarshallerNode$CstaUnmarshallerProcessorThread.run(CstaUnmarshallerNode.java:224)
   at com.avaya.common.util.concurrent.impl.RunnableWrapper.run(RunnableWrapper.java:47)
   at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:650)
   at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:675)
   at java.lang.Thread.run(Thread.java:595)
2009-05-29 11.50.55,083 com.avaya.sessionsvc.SessionServicesImpl startApplicationSession
WARNING: Could not validate new session info: Authentication failed: clientID=XML Unencrypted:172.42.102.121:4468, user=aes
2009-05-29 11.50.55,084 com.avaya.sessionsvc.SessionServicesImpl logThrowable
WARNING: Authentication failed: clientID=XML Unencrypted:172.42.102.121:4468, user=aes
com.avaya.api.sessionsvc.exceptions.UnableToValidateException: Authentication failed: clientID=XML Unencrypted:172.42.102.121:4468, user=aes
   at com.avaya.sessionsvc.SessionObjectImpl.validate(SessionObjectImpl.java:322)
   at com.avaya.sessionsvc.SessionServicesImpl.startApplicationSession(SessionServicesImpl.java:215)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
   at java.lang.reflect.Method.invoke(Method.java:585)
   at com.avaya.platform.broker.impl.ServiceMethodImpl.invoke(ServiceMethodImpl.java:96)
   at com.avaya.workflow.impl.RouterImpl.routeRequest(RouterImpl.java:97)
   at com.avaya.mvcs.proxy.CstaRouter.routeRequest(CstaRouter.java:173)
   at com.avaya.mvcs.proxy.CstaRouterService.routeRequest(CstaRouterService.java:141)
   at com.avaya.mvcs.proxy.CstaRouterNode.processPacket(CstaRouterNode.java:327)
   at com.avaya.mvcs.proxy.AbstractPipelineNode.process(AbstractPipelineNode.java:130)
   at com.avaya.mvcs.proxy.Pipeline$PipelineSubscriber.inform(Pipeline.java:430)
   at com.avaya.common.eventservice.UnfilteredSubscription.notify(UnfilteredSubscription.java:70)
   at com.avaya.common.multicaster.Multicaster.notify(Multicaster.java:386)
   at com.avaya.common.channel.Channel.publish(Channel.java:115)
   at com.avaya.common.eventservice.EventService.publish(EventService.java:123)
   at com.avaya.common.eventservice.EventServiceManager.publish(EventServiceManager.java:156)
   at com.avaya.common.eventservice.Publisher.publish(Publisher.java:110)
   at com.avaya.mvcs.proxy.CstaUnmarshallerNode$CstaUnmarshallerProcessorThread.run(CstaUnmarshallerNode.java:224)
   at com.avaya.common.util.concurrent.impl.RunnableWrapper.run(RunnableWrapper.java:47)
   at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:650)
   at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:675)
   at java.lang.Thread.run(Thread.java:595)
2009-05-29 11.50.55,084 com.avaya.mvcs.proxy.CstaRouterNode processPacket
FINE: Received session[null] ch.ecma.csta.binding.start.StartApplicationSessionNegResponse@13864d9 in response to session[session 6D6B45579A70C1C597F731BEC250EB3A-10] ch.ecma.csta.binding.start.StartApplicationSession@201dbc
2009-05-29 11.50.55,092 com.avaya.common.packet.TPacketizer readChannel
INFO: End of stream from DefaultTCPChannel Bound to SocketAddress: /172.42.176.121:4721 Connected to SocketAddress: /172.42.102.121:4468
2009-05-29 11.50.55,092 com.avaya.mvcs.proxy.ExceptionEventHandlerNode handleEvent
FINE: Normal Operation: The far end closed the socket, event=ExceptionEvent[com.avaya.mvcs.proxy.TPacketReaderNode@1d6c275, com.avaya.common.packet.EndOfStreamException: End of stream from DefaultTCPChannel Bound to SocketAddress: /172.42.176.121:4721 Connected to SocketAddress: /172.42.102.121:4468, session[session 6D6B45579A70C1C597F731BEC250EB3A-10,DefaultTCPChannel Bound to SocketAddress: /172.42.176.121:4721 Connected to SocketAddress: /172.42.102.121:4468]]
2009-05-29 11.50.55,093 com.avaya.mvcs.proxy.TPacketReaderNode handlePipelineCommand
INFO: Closing channel=DefaultTCPChannel Bound to SocketAddress: /172.42.176.121:4721 Not connected. and marking session=session 6D6B45579A70C1C597F731BEC250EB3A-10 as inactive
2009-05-29 11.51.04,753 com.avaya.sessionsvc.CleanupTimerTask run
FINE: CleanupTimerTask cleaning up: session 42785B7D9C8D6D51ABC06BBBFB29BB99-9
2009-05-29 11.51.04,754 com.avaya.sessionsvc.SessionObjectImpl fireSessionCleanedupEvent
FINE: Finished firing Session cleanedup: session 42785B7D9C8D6D51ABC06BBBFB29BB99-9
2009-05-29 11.51.14,954 com.avaya.sessionsvc.CleanupTimerTask run
FINE: CleanupTimerTask cleaning up: session 6D6B45579A70C1C597F731BEC250EB3A-10
2009-05-29 11.51.14,954 com.avaya.sessionsvc.SessionObjectImpl fireSessionCleanedupEvent
FINE: Finished firing Session cleanedup: session 6D6B45579A70C1C597F731BEC250EB3A-10


Any clue on why this could happen.
AnthonyGreway
Joined: Feb 12, 2007
Messages: 0
Offline
Kameswaran,

Typically this an LDAP configuration problem in your external LDAP settings. I would recommend that you use a LDAP browser tool to nail down the exact values that you need for you external LDAP. I typically use an open source tool called JXplorer to connect and browse a LDAP directory if I am having configuration problems. You will want to verify that your login DN, password, and base DN for your search are correct to locate the user you are trying to authenticate.

In addition, you will want to verify that the user ID attribute you are using has been updated to correspond with your external LDAP. "uid" may work as a default for some however something like "samAccountName" may be more appropriate for Active Directory. The user role attribute name must also be a valid directory attribute (populating this entry in your external LDAP is optional).

Thanks,
Tony
JoelEzell
Joined: Nov 15, 2013
Messages: 780
Offline
Kameswaran, please don't work the same issue on different threads. Can we please consider this thread closed and instead continue working on the other thread under the AES system platform forum.
Go to:   
Mobile view