And it seems you do not pr used the domain name when authenticating in the
last case. Can you login providing the domain of the RW userstore and share
the log.

On Wednesday, 14 October 2015, Darshana Gunawardana <[email protected]>
wrote:

> There seems to issue with domain handling as per following log,
>
> DEBUG {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} -
>  ROLDAP.COM/userkavirw2 <http://roldap.com/userkavirw2> user is not in
> role :  rwldap.com/rolekavirw
>
>
> Please raise a JIRA.
>
> Thanks,
> Darshana
>
> On Wednesday, 14 October 2015, Darshana Gunawardana <[email protected]
> <javascript:_e(%7B%7D,'cvml','[email protected]');>> wrote:
>
>>
>>
>> On Wednesday, 14 October 2015, Maduranga Siriwardena <[email protected]>
>> wrote:
>>
>>> Hi Kavitha,
>>>
>>> Have you assigned login permission to the user?
>>>
>>
>> As Maduranga mentioned, user "http://rwldap.com/userkavirw3"; doesn't
>> seems to have given login permission caused this behavior.
>>
>> Thanks,
>>
>>>
>>> Thanks,
>>> Maduranga.
>>>
>>> On Wed, Oct 14, 2015 at 10:09 AM, Kavitha Subramaniyam <[email protected]
>>> > wrote:
>>>
>>>> Hi IS team,
>>>>
>>>> I have configured both R/W and Read only LDAP secondary user store
>>>> manager by using same ldap connection and I could not be able to login via
>>>> user created under RW ldap user store. But note that I could view the same
>>>> user under both secondary store's domain (Users & Roles -> List -> select
>>>> each domain and search).
>>>>
>>>> I want to check with you whether the above behavior is expected or not,
>>>> please clarify..
>>>>
>>>> Steps followed:
>>>> - Configure R/W secondary user store - ReadWriteLDAPUserStoreManager -
>>>> using open ldap connectoin 1
>>>> - Configure Read only secondary user store -
>>>> ReadOnlyLDAPUserStoreManager - using open ldap connectoin 1
>>>> - Create a user1 under R/W ldap domain
>>>> - Login by user1
>>>>
>>>> When try to login without domain, log shows as below:
>>>>
>>>> ----------------------------------------------------------------------------
>>>> [2015-10-13 16:32:55,232] DEBUG
>>>> {org.wso2.carbon.user.core.jdbc.JDBCUserStoreManager} -  SELECT * FROM
>>>> UM_USER WHERE UM_USER_NAME=? AND UM_TENANT_ID=?
>>>> [2015-10-13 16:32:55,241] DEBUG
>>>> {org.wso2.carbon.user.core.jdbc.JDBCUserStoreManager} -  User userkavirw3
>>>> login attempt. Login success :: false
>>>> [2015-10-13 16:32:55,241] DEBUG
>>>> {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} -
>>>>  Authenticating user userkavirw3
>>>> [2015-10-13 16:32:55,241] DEBUG
>>>> {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} -  Cache hit.
>>>> Using DN uid=userkavirw3,ou=People,ou=WSO2,o=Opensource,dc=ITIndustry,dc=sl
>>>> [2015-10-13 16:32:55,252] DEBUG
>>>> {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} -  User:
>>>> uid=userkavirw3,ou=People,ou=WSO2,o=Opensource,dc=ITIndustry,dc=sl is
>>>> authnticated: true
>>>> [2015-10-13 16:32:55,253] DEBUG
>>>> {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} -
>>>>  Authorization cache hit. roldap.com/userkavirw3 user is not
>>>> Authorized to perform ui.execute on /permission/admin/login
>>>> [2015-10-13 16:32:55,253]  WARN
>>>> {org.wso2.carbon.core.services.util.CarbonAuthenticationUtil} -  Failed
>>>> Administrator login attempt 'ROLDAP.COM/userkavirw3[-1234]
>>>> <http://ROLDAP.COM/userkavirw3%5B-1234%5D>' at [2015-10-13
>>>> 16:32:55,253+0530]
>>>>
>>>>
>>>> When try to login with domain, log shows as below:
>>>>
>>>> ---------------------------------------------------------------------------
>>>> [2015-10-13 16:33:14,424] DEBUG
>>>> {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} -
>>>>  Authenticating user userkavirw3
>>>> [2015-10-13 16:33:14,425] DEBUG
>>>> {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} -  Cache hit.
>>>> Using DN uid=userkavirw3,ou=People,ou=WSO2,o=Opensource,dc=ITIndustry,dc=sl
>>>> [2015-10-13 16:33:14,458] DEBUG
>>>> {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} -  User:
>>>> uid=userkavirw3,ou=People,ou=WSO2,o=Opensource,dc=ITIndustry,dc=sl is
>>>> authnticated: true
>>>> [2015-10-13 16:33:14,463] DEBUG
>>>> {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} -
>>>>  Authorization cache hit. rwldap.com/userkavirw3 user is not
>>>> Authorized to perform ui.execute on /permission/admin/login
>>>> [2015-10-13 16:33:14,463]  WARN
>>>> {org.wso2.carbon.core.services.util.CarbonAuthenticationUtil} -  Failed
>>>> Administrator login attempt 'RWLDAP.COM/userkavirw3[-1234]
>>>> <http://RWLDAP.COM/userkavirw3%5B-1234%5D>' at [2015-10-13
>>>> 16:33:14,463+0530]
>>>>
>>>>
>>>> Thanks & Kind regards,
>>>> --
>>>> Kavitha.S
>>>> *Software Engineer -QA*
>>>> Mobile : +94 (0) 771538811 <%2B94%20%280%29%20773%20451194>
>>>> [email protected]
>>>>
>>>> _______________________________________________
>>>> Dev mailing list
>>>> [email protected]
>>>> http://wso2.org/cgi-bin/mailman/listinfo/dev
>>>>
>>>>
>>>
>>>
>>> --
>>> Maduranga Siriwardena
>>> Software Engineer
>>> WSO2 Inc.
>>>
>>> email: [email protected]
>>> mobile: +94718990591
>>>
>>
>>
>> --
>> Regards,
>>
>>
>> *Darshana Gunawardana*Senior Software Engineer
>> WSO2 Inc.; http://wso2.com
>>
>> *E-mail: [email protected]*
>> *Mobile: +94718566859*Lean . Enterprise . Middleware
>>
>>
>
> --
> Regards,
>
>
> *Darshana Gunawardana*Senior Software Engineer
> WSO2 Inc.; http://wso2.com
>
> *E-mail: [email protected]
> <javascript:_e(%7B%7D,'cvml','[email protected]');>*
> *Mobile: +94718566859*Lean . Enterprise . Middleware
>
>

-- 
Regards,


*Darshana Gunawardana*Senior Software Engineer
WSO2 Inc.; http://wso2.com

*E-mail: [email protected] <[email protected]>*
*Mobile: +94718566859*Lean . Enterprise . Middleware
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to