I was waiting to report so that I could see how it fared over time, but I have also had success going to 5.0.7 (was on 5.0.3) and using the poolPassivator = BIND setting. We were already using the bindDN as our users are spread across OUs.
Thanks much for finding the issue reports that led to this fix! Tim From: <[email protected]> on behalf of Carlos Fernandez <[email protected]> Reply-To: "[email protected]" <[email protected]> Date: Monday, July 10, 2017 at 21:37 To: "[email protected]" <[email protected]> Subject: Re: [cas-user] CAS 5.0.5 - LDAP check out validation failure results in failed authentication Follow-up: I bit the bullet and changed the LDAP handler type to AUTHENTICATED, stuffed it with the bind DN used by another application, and set the pool passivator to BIND. Now all authentication attempts and attribute resolutions work properly. Best regards, -- Carlos M. Fernández Enterprise Systems Manager Saint Joseph’s University Philadelphia PA 19131 T: +1 610 660 1501 On Mon, Jul 10, 2017 at 6:21 PM, Carlos Fernandez <[email protected]<mailto:[email protected]>> wrote: I included a link to the logs here: https://drive.google.com/a/sju.edu/file/d/0B-j8Pz4AXloHczFURXdhaGYwU1E/view?usp=drive_web Basically it looks like this: ---8<--- 2017-07-10 13:02:40,170 DEBUG [org.apereo.cas.authentication.LdapAuthenticationHandler] - <Attempting LDAP authentication for jb617017> 2017-07-10 13:02:40,171 DEBUG [org.ldaptive.auth.FormatDnResolver] - <Formatting DN for jb617017 with uid=%s,ou=people,o=sju.edu<http://sju.edu>> 2017-07-10 13:02:40,171 DEBUG [org.ldaptive.auth.Authenticator] - <authenticate dn=uid=jb617017,ou=people,o=sju.edu<http://sju.edu> with request=[org.ldaptive.auth.AuthenticationRequest@1587638954::user=[org.ldaptive.auth.User@1520364966::identifier=jb617017, context=null], returnAttributes=[udcid, uid, employeeType, mail, displayName, givenName, departmentNumber, pswUserName, sn, employeeNumber]]> 2017-07-10 13:02:40,171 DEBUG [org.ldaptive.auth.PooledBindAuthenticationHandler] - <authenticate criteria=[org.ldaptive.auth.AuthenticationCriteria@530348177::dn=uid=jb617017,ou=people,o=sju.edu<http://sju.edu>, authenticationRequest=[org.ldaptive.auth.AuthenticationRequest@2074611074::user=[org.ldaptive.auth.User@1520364966::identifier=jb617017, context=null], returnAttributes=[udcid, uid, employeeType, mail, displayName, givenName, departmentNumber, pswUserName, sn, employeeNumber, udcid, uid, employeeType, mail, displayName, givenName, departmentNumber, pswUserName, sn, employeeNumber]]]> 2017-07-10 13:02:40,171 DEBUG [org.ldaptive.SearchOperation] - <execute request=[org.ldaptive.SearchRequest@600881066::baseDn=, searchFilter=[org.ldaptive.SearchFilter@1642584434::filter=(objectClass=*), parameters={}], returnAttributes=[1.1], searchScope=OBJECT, timeLimit=PT0S, sizeLimit=1, derefAliases=null, typesOnly=false, binaryAttributes=null, sortBehavior=UNORDERED, searchEntryHandlers=null, searchReferenceHandlers=null, controls=null, referralHandler=null, intermediateResponseHandlers=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@1236378265::config=[org.ldaptive.ConnectionConfig@2142472158::ldapUrl=ldaps://axldap.sju.edu<http://axldap.sju.edu>, connectTimeout=PT1H23M20S, responseTimeout=null, sslConfig=[org.ldaptive.ssl.SslConfig@1154240951::credentialConfig=[org.ldaptive.ssl.X509CredentialConfig@-747746929::trustCertificates=file:/etc/cas/credentials/axldap.crt, authenticationCertificate=null, authenticationKey=null], trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=true, useStartTLS=false, connectionInitializer=null, connectionStrategy=org.ldaptive.DefaultConnectionStrategy@22c0dfad], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@412312959::metadata=[ldapUrl=ldaps://axldap.sju.edu<http://axldap.sju.edu>, count=1], environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory, com.sun.jndi.ldap.connect.timeout=5000000, java.naming.ldap.version=3, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.security.protocol=ssl}, classLoader=null, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@2080218308::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, controlProcessor=org.ldaptive.provider.ControlProcessor@5d1a2be5, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], classLoader=null, sslSocketFactory=null, hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@7983aa5c]> 2017-07-10 13:02:40,182 DEBUG [org.ldaptive.SearchOperation] - <execute response=[org.ldaptive.Response@2058915982::result=[org.ldaptive.SearchResult@-1951941189::entries=[[dn=[], responseControls=null, messageId=-1]], references=[]], resultCode=SUCCESS, message=null, matchedDn=null, responseControls=null, referralURLs=null, messageId=-1] for request=[org.ldaptive.SearchRequest@600881066::baseDn=, searchFilter=[org.ldaptive.SearchFilter@1642584434::filter=(objectClass=*), parameters={}], returnAttributes=[1.1], searchScope=OBJECT, timeLimit=PT0S, sizeLimit=1, derefAliases=null, typesOnly=false, binaryAttributes=null, sortBehavior=UNORDERED, searchEntryHandlers=null, searchReferenceHandlers=null, controls=null, referralHandler=null, intermediateResponseHandlers=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@1236378265::config=[org.ldaptive.ConnectionConfig@2142472158::ldapUrl=ldaps://axldap.sju.edu<http://axldap.sju.edu>, connectTimeout=PT1H23M20S, responseTimeout=null, sslConfig=[org.ldaptive.ssl.SslConfig@1154240951::credentialConfig=[org.ldaptive.ssl.X509CredentialConfig@-747746929::trustCertificates=file:/etc/cas/credentials/axldap.crt, authenticationCertificate=null, authenticationKey=null], trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=true, useStartTLS=false, connectionInitializer=null, connectionStrategy=org.ldaptive.DefaultConnectionStrategy@22c0dfad], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@412312959::metadata=[ldapUrl=ldaps://axldap.sju.edu<http://axldap.sju.edu>, count=1], environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory, com.sun.jndi.ldap.connect.timeout=5000000, java.naming.ldap.version=3, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.security.protocol=ssl}, classLoader=null, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@2080218308::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, controlProcessor=org.ldaptive.provider.ControlProcessor@5d1a2be5, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], classLoader=null, sslSocketFactory=null, hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@7983aa5c]> 2017-07-10 13:02:40,182 DEBUG [org.ldaptive.BindOperation] - <execute request=[org.ldaptive.BindRequest@1840527521::bindDn=uid=jb617017,ou=people,o=sju.edu<http://sju.edu>, saslConfig=null, controls=[[org.ldaptive.control.PasswordPolicyControl@-350057371::criticality=false, timeBeforeExpiration=0, graceAuthNsRemaining=0, error=null]], referralHandler=null, intermediateResponseHandlers=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@1236378265::config=[org.ldaptive.ConnectionConfig@2142472158::ldapUrl=ldaps://axldap.sju.edu<http://axldap.sju.edu>, connectTimeout=PT1H23M20S, responseTimeout=null, sslConfig=[org.ldaptive.ssl.SslConfig@1154240951::credentialConfig=[org.ldaptive.ssl.X509CredentialConfig@-747746929::trustCertificates=file:/etc/cas/credentials/axldap.crt, authenticationCertificate=null, authenticationKey=null], trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=true, useStartTLS=false, connectionInitializer=null, connectionStrategy=org.ldaptive.DefaultConnectionStrategy@22c0dfad], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@412312959::metadata=[ldapUrl=ldaps://axldap.sju.edu<http://axldap.sju.edu>, count=1], environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory, com.sun.jndi.ldap.connect.timeout=5000000, java.naming.ldap.version=3, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.security.protocol=ssl}, classLoader=null, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@2080218308::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, controlProcessor=org.ldaptive.provider.ControlProcessor@5d1a2be5, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], classLoader=null, sslSocketFactory=null, hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@7983aa5c]> 2017-07-10 13:02:40,189 DEBUG [org.ldaptive.BindOperation] - <execute response=[org.ldaptive.Response@1635611633::result=null, resultCode=SUCCESS, message=null, matchedDn=null, responseControls=[[org.ldaptive.control.PasswordPolicyControl@-350057371::criticality=false, timeBeforeExpiration=0, graceAuthNsRemaining=0, error=null]], referralURLs=null, messageId=-1] for request=[org.ldaptive.BindRequest@1840527521::bindDn=uid=jb617017,ou=people,o=sju.edu<http://sju.edu>, saslConfig=null, controls=[[org.ldaptive.control.PasswordPolicyControl@-350057371::criticality=false, timeBeforeExpiration=0, graceAuthNsRemaining=0, error=null]], referralHandler=null, intermediateResponseHandlers=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@1236378265::config=[org.ldaptive.ConnectionConfig@2142472158::ldapUrl=ldaps://axldap.sju.edu<http://axldap.sju.edu>, connectTimeout=PT1H23M20S, responseTimeout=null, sslConfig=[org.ldaptive.ssl.SslConfig@1154240951::credentialConfig=[org.ldaptive.ssl.X509CredentialConfig@-747746929::trustCertificates=file:/etc/cas/credentials/axldap.crt, authenticationCertificate=null, authenticationKey=null], trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=true, useStartTLS=false, connectionInitializer=null, connectionStrategy=org.ldaptive.DefaultConnectionStrategy@22c0dfad], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@412312959::metadata=[ldapUrl=ldaps://axldap.sju.edu<http://axldap.sju.edu>, count=1], environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory, com.sun.jndi.ldap.connect.timeout=5000000, java.naming.ldap.version=3, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.security.protocol=ssl}, classLoader=null, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@2080218308::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, controlProcessor=org.ldaptive.provider.ControlProcessor@5d1a2be5, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], classLoader=null, sslSocketFactory=null, hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@7983aa5c]> 2017-07-10 13:02:40,189 DEBUG [org.ldaptive.auth.PooledBindAuthenticationHandler] - <authenticate response=[org.ldaptive.auth.AuthenticationHandlerResponse@88667336::connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@1236378265::config=[org.ldaptive.ConnectionConfig@2142472158::ldapUrl=ldaps://axldap.sju.edu<http://axldap.sju.edu>, connectTimeout=PT1H23M20S, responseTimeout=null, sslConfig=[org.ldaptive.ssl.SslConfig@1154240951::credentialConfig=[org.ldaptive.ssl.X509CredentialConfig@-747746929::trustCertificates=file:/etc/cas/credentials/axldap.crt, authenticationCertificate=null, authenticationKey=null], trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=true, useStartTLS=false, connectionInitializer=null, connectionStrategy=org.ldaptive.DefaultConnectionStrategy@22c0dfad], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@412312959::metadata=[ldapUrl=ldaps://axldap.sju.edu<http://axldap.sju.edu>, count=1], environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory, com.sun.jndi.ldap.connect.timeout=5000000, java.naming.ldap.version=3, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.security.protocol=ssl}, classLoader=null, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@2080218308::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, controlProcessor=org.ldaptive.provider.ControlProcessor@5d1a2be5, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], classLoader=null, sslSocketFactory=null, hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@7983aa5c], result=true, resultCode=SUCCESS, message=null, controls=[[org.ldaptive.control.PasswordPolicyControl@-350057371::criticality=false, timeBeforeExpiration=0, graceAuthNsRemaining=0, error=null]]] for criteria=[org.ldaptive.auth.AuthenticationCriteria@530348177::dn=uid=jb617017,ou=people,o=sju.edu<http://sju.edu>, authenticationRequest=[org.ldaptive.auth.AuthenticationRequest@2074611074::user=[org.ldaptive.auth.User@1520364966::identifier=jb617017, context=null], returnAttributes=[udcid, uid, employeeType, mail, displayName, givenName, departmentNumber, pswUserName, sn, employeeNumber, udcid, uid, employeeType, mail, displayName, givenName, departmentNumber, pswUserName, sn, employeeNumber]]]> 2017-07-10 13:02:40,189 DEBUG [org.ldaptive.auth.PooledSearchEntryResolver] - <resolve criteria=[org.ldaptive.auth.AuthenticationCriteria@530348177::dn=uid=jb617017,ou=people,o=sju.edu<http://sju.edu>, authenticationRequest=[org.ldaptive.auth.AuthenticationRequest@2074611074::user=[org.ldaptive.auth.User@1520364966::identifier=jb617017, context=null], returnAttributes=[udcid, uid, employeeType, mail, displayName, givenName, departmentNumber, pswUserName, sn, employeeNumber, udcid, uid, employeeType, mail, displayName, givenName, departmentNumber, pswUserName, sn, employeeNumber]]]> 2017-07-10 13:02:40,190 DEBUG [org.ldaptive.SearchOperation] - <execute request=[org.ldaptive.SearchRequest@600881066::baseDn=, searchFilter=[org.ldaptive.SearchFilter@1642584434::filter=(objectClass=*), parameters={}], returnAttributes=[1.1], searchScope=OBJECT, timeLimit=PT0S, sizeLimit=1, derefAliases=null, typesOnly=false, binaryAttributes=null, sortBehavior=UNORDERED, searchEntryHandlers=null, searchReferenceHandlers=null, controls=null, referralHandler=null, intermediateResponseHandlers=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@716181532::config=[org.ldaptive.ConnectionConfig@1003104271::ldapUrl=ldaps://axldap.sju.edu<http://axldap.sju.edu>, connectTimeout=PT1H23M20S, responseTimeout=null, sslConfig=[org.ldaptive.ssl.SslConfig@2004319975::credentialConfig=[org.ldaptive.ssl.X509CredentialConfig@-747746929::trustCertificates=file:/etc/cas/credentials/axldap.crt, authenticationCertificate=null, authenticationKey=null], trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=true, useStartTLS=false, connectionInitializer=null, connectionStrategy=org.ldaptive.DefaultConnectionStrategy@7d9f6903], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@1060322508::metadata=[ldapUrl=ldaps://axldap.sju.edu<http://axldap.sju.edu>, count=1], environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory, com.sun.jndi.ldap.connect.timeout=5000000, java.naming.ldap.version=3, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.security.protocol=ssl}, classLoader=null, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@1431560565::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, controlProcessor=org.ldaptive.provider.ControlProcessor@191f3d7e, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], classLoader=null, sslSocketFactory=null, hostnameVerifier=null]], providerConnection=null]> 2017-07-10 13:02:40,190 DEBUG [org.ldaptive.pool.SearchValidator] - <validation failed for search request [org.ldaptive.SearchRequest@600881066::baseDn=, searchFilter=[org.ldaptive.SearchFilter@1642584434::filter=(objectClass=*), parameters={}], returnAttributes=[1.1], searchScope=OBJECT, timeLimit=PT0S, sizeLimit=1, derefAliases=null, typesOnly=false, binaryAttributes=null, sortBehavior=UNORDERED, searchEntryHandlers=null, searchReferenceHandlers=null, controls=null, referralHandler=null, intermediateResponseHandlers=null]> java.lang.IllegalStateException: Connection is not open at org.ldaptive.DefaultConnectionFactory$DefaultConnection.getProviderConnection(DefaultConnectionFactory.java:244) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.SearchOperation.executeSearch(SearchOperation.java:103) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.SearchOperation.invoke(SearchOperation.java:85) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.SearchOperation.invoke(SearchOperation.java:15) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.AbstractOperation.execute(AbstractOperation.java:126) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.pool.SearchValidator.validate(SearchValidator.java:82) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.pool.SearchValidator.validate(SearchValidator.java:20) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.pool.AbstractPool.validate(AbstractPool.java:210) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.pool.AbstractConnectionPool.activateAndValidateConnection(AbstractConnectionPool.java:630) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.pool.BlockingConnectionPool.getConnection(BlockingConnectionPool.java:151) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.pool.PooledConnectionFactory.getConnection(PooledConnectionFactory.java:68) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.auth.PooledSearchEntryResolver.performLdapSearch(PooledSearchEntryResolver.java:60) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.auth.AbstractSearchEntryResolver.resolve(AbstractSearchEntryResolver.java:321) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.auth.Authenticator.resolveEntry(Authenticator.java:393) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.auth.Authenticator.authenticate(Authenticator.java:259) ~[ldaptive-1.2.0.jar:?] ... 2017-07-10 13:02:40,190 WARN [org.ldaptive.pool.BlockingConnectionPool] - <connection failed check out validation: org.ldaptive.pool.AbstractConnectionPool$DefaultPooledConnectionProxy@2ab0ee23> 2017-07-10 13:02:40,190 DEBUG [org.ldaptive.pool.BlockingConnectionPool] - <attempt to remove unknown available connection: org.ldaptive.pool.AbstractConnectionPool$DefaultPooledConnectionProxy@2ab0ee23> 2017-07-10 13:02:40,190 INFO [org.ldaptive.pool.BlockingConnectionPool] - <destroyed connection: org.ldaptive.pool.AbstractConnectionPool$DefaultPooledConnectionProxy@2ab0ee23> 2017-07-10 13:02:40,190 DEBUG [org.ldaptive.auth.Authenticator] - <entry resolution failed for resolver=[org.ldaptive.auth.PooledSearchEntryResolver@525244463::factory=[org.ldaptive.pool.PooledConnectionFactory@960299606::pool=[org.ldaptive.pool.BlockingConnectionPool@1932465229::name=null, poolConfig=[org.ldaptive.pool.PoolConfig@322642843::minPoolSize=10, maxPoolSize=200, validateOnCheckIn=false, validateOnCheckOut=true, validatePeriodically=true, validatePeriod=PT5M], activator=null, passivator=org.ldaptive.pool.ClosePassivator@785f5e33, validator=[org.ldaptive.pool.SearchValidator@698469596::searchRequest=[org.ldaptive.SearchRequest@600881066::baseDn=, searchFilter=[org.ldaptive.SearchFilter@1642584434::filter=(objectClass=*), parameters={}], returnAttributes=[1.1], searchScope=OBJECT, timeLimit=PT0S, sizeLimit=1, derefAliases=null, typesOnly=false, binaryAttributes=null, sortBehavior=UNORDERED, searchEntryHandlers=null, searchReferenceHandlers=null, controls=null, referralHandler=null, intermediateResponseHandlers=null]] pruneStrategy=[org.ldaptive.pool.IdlePruneStrategy@572991705::prunePeriod=PT5M, idleTime=PT5M], connectOnCreate=true, connectionFactory=[org.ldaptive.DefaultConnectionFactory@1749737725::provider=org.ldaptive.provider.jndi.JndiProvider@6a669501, config=[org.ldaptive.ConnectionConfig@1003104271::ldapUrl=ldaps://axldap.sju.edu<http://axldap.sju.edu>, connectTimeout=PT1H23M20S, responseTimeout=null, sslConfig=[org.ldaptive.ssl.SslConfig@2004319975::credentialConfig=[org.ldaptive.ssl.X509CredentialConfig@-747746929::trustCertificates=file:/etc/cas/credentials/axldap.crt, authenticationCertificate=null, authenticationKey=null], trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=true, useStartTLS=false, connectionInitializer=null, connectionStrategy=org.ldaptive.DefaultConnectionStrategy@7d9f6903]], initialized=true, availableCount=6, activeCount=0]], baseDn=ou=people,o=sju.edu<http://sju.edu>, userFilter=null, userFilterParameters=null, allowMultipleEntries=false, subtreeSearch=true, derefAliases=null, referralHandler=null, searchEntryHandlers=null]> org.ldaptive.pool.ValidationException: Validation of connection failed at org.ldaptive.pool.AbstractConnectionPool.activateAndValidateConnection(AbstractConnectionPool.java:633) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.pool.BlockingConnectionPool.getConnection(BlockingConnectionPool.java:151) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.pool.PooledConnectionFactory.getConnection(PooledConnectionFactory.java:68) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.auth.PooledSearchEntryResolver.performLdapSearch(PooledSearchEntryResolver.java:60) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.auth.AbstractSearchEntryResolver.resolve(AbstractSearchEntryResolver.java:321) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.auth.Authenticator.resolveEntry(Authenticator.java:393) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.auth.Authenticator.authenticate(Authenticator.java:259) ~[ldaptive-1.2.0.jar:?] at org.ldaptive.auth.Authenticator.authenticate(Authenticator.java:224) ~[ldaptive-1.2.0.jar:?] ... ---8<--- The LDAP server isn't mine, and the fellow who manages it was out of the office today. I'll ask him to check tomorrow. Best regards, -- Carlos M. Fernández Enterprise Systems Manager Saint Joseph’s University Philadelphia PA 19131 T: +1 610 660 1501 On Mon, Jul 10, 2017 at 5:23 PM, Daniel Fisher <[email protected]<mailto:[email protected]>> wrote: On Mon, Jul 10, 2017 at 12:44 PM, Carlos Fernandez <[email protected]<mailto:[email protected]>> wrote: 2017-07-10 12:26:33,172 WARN [org.ldaptive.pool.BlockingConnectionPool] - <connection failed check out validation: org.ldaptive.pool.AbstractConnectionPool$DefaultPooledConnectionProxy@3b167a90> Some debug logs for org.ldaptive may shed some light on this. Or take a look at your LDAP logs to see why validation is failing. --Daniel Fisher -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html<http://spamburger.sju.edu/canit/urlproxy.php?_q=aHR0cHM6Ly9hcGVyZW8uZ2l0aHViLmlvL2Nhcy9NYWlsaW5nLUxpc3RzLmh0bWw%3D&_s=Y2Zlcm5hbmQ%3D&_c=77a03ca9> - CAS documentation website: https://apereo.github.io/cas<http://spamburger.sju.edu/canit/urlproxy.php?_q=aHR0cHM6Ly9hcGVyZW8uZ2l0aHViLmlvL2Nhcw%3D%3D&_s=Y2Zlcm5hbmQ%3D&_c=9d7960c0> - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFC6YwR5m2%2BAFZMwx8H8UYpsYUGHMwxq7G9km0jWE9HYGWm-dQ%40mail.gmail.com<https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFC6YwR5m2%2BAFZMwx8H8UYpsYUGHMwxq7G9km0jWE9HYGWm-dQ%40mail.gmail.com?utm_medium=email&utm_source=footer>. -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAE7KU84cY_krQ3y0YENoHChu4Hzc73ZcKvoX6DiOR7vR9uZesA%40mail.gmail.com<https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAE7KU84cY_krQ3y0YENoHChu4Hzc73ZcKvoX6DiOR7vR9uZesA%40mail.gmail.com?utm_medium=email&utm_source=footer>. -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/3FE72129-94CC-4C81-9756-E0D96AAB0766%40wwu.edu.
