DaanHoogland commented on PR #13953:
URL: https://github.com/apache/cloudstack/pull/13953#issuecomment-6285960469
> @DaanHoogland
>
> Issue is present
>
> 1. Configure LDAP server . add a ldap account
> 2. Log in as the ldap user
>
> ```
> (localcloud) 🐱 > list users username=kiran listall=true
filter=username,id,usersource
> ⣷ 😸 trying to log in...
> {
> "count": 1,
> "user": [
> {
> "id": "ad5e867e-5ce2-43e0-ac4c-3c5450f8f8ca",
> "username": "kiran",
> "usersource": "ldap"
> }
> ]
> }
> ```
>
> 3. Ldap login succesfull
> 4. Configure saml on the ldap user
>
> ```
> (localcloud) 🐱 > list users username=kiran listall=true
filter=username,id,usersource
> {
> "count": 1,
> "user": [
> {
> "id": "ad5e867e-5ce2-43e0-ac4c-3c5450f8f8ca",
> "username": "kiran",
> "usersource": "saml2"
> }
> ]
> }
> ```
>
> 5. Saml login successfull
> 6. Disable Saml authentication on the user
>
> ```
> (localcloud) 🐱 > list users username=kiran listall=true
filter=username,id,usersource
> {
> "count": 1,
> "user": [
> {
> "id": "ad5e867e-5ce2-43e0-ac4c-3c5450f8f8ca",
> "username": "kiran",
> "usersource": "saml2disabled"
> }
> ]
> }
> ```
>
> 7. Unable to login with ldap
>
> ```
> mysql> select * from user_details;
> +----+---------+---------------+-------+---------+
> | id | user_id | name | value | display |
> +----+---------+---------------+-------+---------+
> | 2 | 5 | PreSamlSource | LDAP | 1 |
> +----+---------+---------------+-------+---------+
> 1 row in set (0.00 sec)
> ```
>
> 8. logs
>
> ```
> 2026-09-15 10:48:28,138 DEBUG [c.c.a.ApiServlet]
(qtp1151704483-16:[ctx-c49d6da0]) (logid:a8550e5c) ===START=== 10.0.3.251 --
POST login
> 2026-09-15 10:48:28,138 DEBUG [c.c.a.ApiSessionListener]
(qtp1151704483-16:[ctx-c49d6da0]) (logid:a8550e5c) Session created by Id :
node0tjykvf1cdsxl1kne3qnrxnejw9 , session:
Session@add86b1{id=node0tjykvf1cdsxl1kne3qnrxnejw9,x=node0tjykvf1cdsxl1kne3qnrxnejw9.node0,req=1,res=true}
, source:
Session@add86b1{id=node0tjykvf1cdsxl1kne3qnrxnejw9,x=node0tjykvf1cdsxl1kne3qnrxnejw9.node0,req=1,res=true}
, event:
javax.servlet.http.HttpSessionEvent[source=Session@add86b1{id=node0tjykvf1cdsxl1kne3qnrxnejw9,x=node0tjykvf1cdsxl1kne3qnrxnejw9.node0,req=1,res=true}]
> 2026-09-15 10:48:28,142 DEBUG [c.c.u.AccountManagerImpl]
(qtp1151704483-16:[ctx-c49d6da0]) (logid:a8550e5c) Attempting to log in user:
kiran in domain 1
> 2026-09-15 10:48:28,143 DEBUG [c.c.u.AccountManagerImpl]
(qtp1151704483-16:[ctx-c49d6da0]) (logid:a8550e5c) Unable to authenticate user
with username kiran in domain 1
> 2026-09-15 10:48:28,144 DEBUG [c.c.u.AccountManagerImpl]
(qtp1151704483-16:[ctx-c49d6da0]) (logid:a8550e5c) User: kiran in domain 1 has
failed to log in
> 2026-09-15 10:48:28,555 DEBUG [c.c.a.ApiSessionListener]
(qtp1151704483-16:[ctx-c49d6da0]) (logid:a8550e5c) Session destroyed by Id :
node0tjykvf1cdsxl1kne3qnrxnejw9 , session:
Session@add86b1{id=node0tjykvf1cdsxl1kne3qnrxnejw9,x=node0tjykvf1cdsxl1kne3qnrxnejw9.node0,req=1,res=true}
, source:
Session@add86b1{id=node0tjykvf1cdsxl1kne3qnrxnejw9,x=node0tjykvf1cdsxl1kne3qnrxnejw9.node0,req=1,res=true}
, event:
javax.servlet.http.HttpSessionEvent[source=Session@add86b1{id=node0tjykvf1cdsxl1kne3qnrxnejw9,x=node0tjykvf1cdsxl1kne3qnrxnejw9.node0,req=1,res=true}]
> 2026-09-15 10:48:28,556 DEBUG [c.c.a.ApiServlet]
(qtp1151704483-16:[ctx-c49d6da0]) (logid:a8550e5c) Authentication failure:
{"loginresponse":{"uuidList":[],"errorcode":531,"errortext":"Failed to
authenticate user kiran in domain 1; please provide valid credentials"}}
> 2026-09-15 10:48:28,556 DEBUG [c.c.a.ApiServlet]
(qtp1151704483-16:[ctx-c49d6da0]) (logid:a8550e5c) ===END=== 10.0.3.251 --
POST login
> ```
@kiranchavala , did you set enable.login.with.disabled.saml=true during this
test?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
