By: Ben Apple user 24 Aug 2015 at 9:54 a.m. CDT

2 Responses
Ben Apple gravatar
Sorry for the delayed response and bringing [this issue](https://support.gluu.org/view/other/oxtrust-login-issue/2052) up again. But following the steps presented by Aliaksandr resulted in the same error I have been getting while trying to log in with a backend user. The steps presented were as follows: > 1) While oxAuth pointed to internal db, log in as default admin, then log out. > 2) Without changing anything move to login page and attempt to login with user account from backend LDAP (using correct credentials for it); of course, you will fail > 3) Don't touch your browser now, and point oxAuth to backend LDAP by directly modifying mentioned LDAP attribute > 4) Now attempt to log in with the same user account from back-end you used on step 2) Are there any updates concerning the issue? I'm a little confused as to if this has been labeled as a bug or just a configuration problem... Below are the logs at the time of attempted logging in. ### ---------oxTrust Log--------- - 2015-08-24 14:40:08,910 INFO [org.gluu.oxtrust.action.Authenticator] accessToken : 6f23d996-fdd2-4f03-806b-bdb9357a8dd1 - 2015-08-24 14:40:08,910 INFO [org.gluu.oxtrust.action.Authenticator] validating AccessToken - 2015-08-24 14:40:08,981 INFO [org.gluu.oxtrust.action.Authenticator] response3.getStatus() : 200 - 2015-08-24 14:40:08,982 INFO [org.gluu.oxtrust.action.Authenticator] validate check session status:200 - 2015-08-24 14:40:08,982 INFO [org.gluu.oxtrust.action.Authenticator] Session validation successful. User is logged in - 2015-08-24 14:40:09,101 INFO [org.gluu.oxtrust.action.Authenticator] user uid:bapple - 2015-08-24 14:40:09,125 INFO [org.gluu.oxtrust.action.Authenticator] Authenticating user 'bapple' - 2015-08-24 14:40:10,103 ERROR [org.gluu.oxtrust.action.Authenticator] Failed to find user 'bapple' in ldap - org.gluu.site.ldap.persistence.exception.EntryPersistenceException: Failed to find entries with baseDN: ou=people,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu, filter: (&(&(objectClass=top)(objectClass=gluuPerson))(&(uid=bapple))) - at org.gluu.site.ldap.persistence.LdapEntryManager.findEntries(LdapEntryManager.java:318) - at ... (removed to save space, see [previous post](https://support.gluu.org/view/other/oxtrust-login-issue/2052) for full trace) - Caused by: LDAPSearchException(resultCode=1 (operations error), numEntries=0, numReferences=0, errorMessage='000020D6: SvcErr: DSID-031007DB, problem 5012 (DIR_ERROR), data 0 ') - at com.unboundid.ldap.sdk.LDAPConnection.search(LDAPConnection.java:3657) - at com.unboundid.ldap.sdk.AbstractConnectionPool.search(AbstractConnectionPool.java:2020) - at org.gluu.site.ldap.OperationsFacade.search(OperationsFacade.java:243) - at org.gluu.site.ldap.OperationsFacade.search(OperationsFacade.java:200) - at org.gluu.site.ldap.persistence.LdapEntryManager.findEntries(LdapEntryManager.java:313) - ... 126 more - 2015-08-24 14:40:10,107 ERROR [org.gluu.oxtrust.action.Authenticator] Person 'bapple' not found in LDAP ### ---------oxAuth Log--------- - 2015-08-24 14:40:08,972 DEBUG [xdi.oxauth.token.ws.rs.ValidateTokenRestWebServiceImpl] Attempting to validate access token: 6f23d996-fdd2-4f03-806b-bdb9357a8dd1, Is Secure = true - 2015-08-24 14:40:08,975 DEBUG [org.xdi.oxauth.service.UserService] Getting user information from LDAP: userId = bapple - 2015-08-24 14:40:08,978 DEBUG [org.xdi.oxauth.service.UserService] Found 1 entries for user id = bapple - 2015-08-24 14:40:08,979 TRACE [org.xdi.oxauth.service.ClientService] Get client from cache by Dn 'inum=@!815E.F339.D884.DE57!0008!B64C.BB0E,ou=clients,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:08,979 DEBUG [org.xdi.oxauth.service.ClientService] Found 1 entries for client id = @!815E.F339.D884.DE57!0008!B64C.BB0E - 2015-08-24 14:40:09,051 DEBUG [xdi.oxauth.userinfo.ws.rs.UserInfoRestWebServiceImpl] Attempting to request User Info, Access token = 6f23d996-fdd2-4f03-806b-bdb9357a8dd1, Is Secure = true - 2015-08-24 14:40:09,056 DEBUG [org.xdi.oxauth.service.UserService] Getting user information from LDAP: userId = bapple - 2015-08-24 14:40:09,061 DEBUG [org.xdi.oxauth.service.UserService] Found 1 entries for user id = bapple - 2015-08-24 14:40:09,064 TRACE [org.xdi.oxauth.service.ClientService] Get client from cache by Dn 'inum=@!815E.F339.D884.DE57!0008!B64C.BB0E,ou=clients,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,065 DEBUG [org.xdi.oxauth.service.ClientService] Found 1 entries for client id = @!815E.F339.D884.DE57!0008!B64C.BB0E - 2015-08-24 14:40:09,078 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!42E0,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,085 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!8F88,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,085 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!CAE3,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,088 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!29DA,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,091 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!2B29,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,092 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!0C85,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,092 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!B4B0,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,093 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!A0E8,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,094 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!5EC6,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,094 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!B52A,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,095 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!64A0,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,096 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!EC3A,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,096 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!3B47,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,096 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!3692,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,097 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!98FC,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,097 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!A901,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,098 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!36D9,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,098 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!BE64,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:09,098 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!815E.F339.D884.DE57!0001!C5D4.E583!0005!6493,ou=attributes,o=@!815E.F339.D884.DE57!0001!C5D4.E583,o=gluu' - 2015-08-24 14:40:11,898 TRACE [org.xdi.service.custom.script.CustomScriptManager] Last finished time '8/24/15 2:40 PM'

By Aliaksandr Samuseu staff 24 Aug 2015 at 9:58 a.m. CDT

Aliaksandr Samuseu gravatar
Hi, Ben. I've created a [bug report](https://github.com/GluuFederation/oxAuth/issues/64), so now it's up to our dev team to fix it. Please ignore this circumvention method, it works, but it's not even close to be convenient enough to be recommended for everyday usage.

By Ben Apple user 24 Aug 2015 at 10 a.m. CDT

Ben Apple gravatar
Okay. Thanks again for all the help!