Hi IS team,
I have configured both R/W and Read only LDAP secondary user store manager
by using same ldap connection and I could not be able to login via user
created under RW ldap user store. But note that I could view the same user
under both secondary store's domain (Users & Roles -> List -> select each
domain and search).
I want to check with you whether the above behavior is expected or not,
please clarify..
Steps followed:
- Configure R/W secondary user store - ReadWriteLDAPUserStoreManager -
using open ldap connectoin 1
- Configure Read only secondary user store - ReadOnlyLDAPUserStoreManager
- using open ldap connectoin 1
- Create a user1 under R/W ldap domain
- Login by user1
When try to login without domain, log shows as below:
----------------------------------------------------------------------------
[2015-10-13 16:32:55,232] DEBUG
{org.wso2.carbon.user.core.jdbc.JDBCUserStoreManager} - SELECT * FROM
UM_USER WHERE UM_USER_NAME=? AND UM_TENANT_ID=?
[2015-10-13 16:32:55,241] DEBUG
{org.wso2.carbon.user.core.jdbc.JDBCUserStoreManager} - User userkavirw3
login attempt. Login success :: false
[2015-10-13 16:32:55,241] DEBUG
{org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} -
Authenticating user userkavirw3
[2015-10-13 16:32:55,241] DEBUG
{org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} - Cache hit.
Using DN uid=userkavirw3,ou=People,ou=WSO2,o=Opensource,dc=ITIndustry,dc=sl
[2015-10-13 16:32:55,252] DEBUG
{org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} - User:
uid=userkavirw3,ou=People,ou=WSO2,o=Opensource,dc=ITIndustry,dc=sl is
authnticated: true
[2015-10-13 16:32:55,253] DEBUG
{org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} -
Authorization cache hit. roldap.com/userkavirw3 user is not Authorized to
perform ui.execute on /permission/admin/login
[2015-10-13 16:32:55,253] WARN
{org.wso2.carbon.core.services.util.CarbonAuthenticationUtil} - Failed
Administrator login attempt 'ROLDAP.COM/userkavirw3[-1234]' at [2015-10-13
16:32:55,253+0530]
When try to login with domain, log shows as below:
---------------------------------------------------------------------------
[2015-10-13 16:33:14,424] DEBUG
{org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} -
Authenticating user userkavirw3
[2015-10-13 16:33:14,425] DEBUG
{org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} - Cache hit.
Using DN uid=userkavirw3,ou=People,ou=WSO2,o=Opensource,dc=ITIndustry,dc=sl
[2015-10-13 16:33:14,458] DEBUG
{org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} - User:
uid=userkavirw3,ou=People,ou=WSO2,o=Opensource,dc=ITIndustry,dc=sl is
authnticated: true
[2015-10-13 16:33:14,463] DEBUG
{org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} -
Authorization cache hit. rwldap.com/userkavirw3 user is not Authorized to
perform ui.execute on /permission/admin/login
[2015-10-13 16:33:14,463] WARN
{org.wso2.carbon.core.services.util.CarbonAuthenticationUtil} - Failed
Administrator login attempt 'RWLDAP.COM/userkavirw3[-1234]' at [2015-10-13
16:33:14,463+0530]
Thanks & Kind regards,
--
Kavitha.S
*Software Engineer -QA*
Mobile : +94 (0) 771538811 <%2B94%20%280%29%20773%20451194>
[email protected] <[email protected]>
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev