Problem with IFOLDER + LDAP Synchronisation

Skip Toolbar

Actions
- Access Control...

--Not rated--

593 Visits 4 Replies

jimmy jimmy jimmy

Aug 26, 2010 3:29 PM

143. Problem with IFOLDER + LDAP Synchronisation

I have a little problem with my installation. I'm using ldap and ifolder but i can't create user to access ifolder.

All is ok for both of the configuration. But when synchronization happens, no user is detected? I don't know where do i have to create them.

Is it necessary a user in a specific organizational unit ?

I hope that someone could help me.

Thanks

Here it's what I've got in my simias server setup

LDAP Admin DN? cn=admin,dc=example,dc=com
LDAP Admin Password? novell

System Admin? cn=ifolderadmin,dc=example,dc=com
System Admin Password? novell

LDAP Proxy DN? cn=simiasproxy,dc=example,dc=com
LDAP Proxy Password? novell

LDAP Search Context? dc=example,dc=com
..........................................

objectClass: value :top
OpenLDAP
Creating cn=ifolderadmin,dc=example,dc=com...
Skipped (User Exists)
Creating cn=simiasproxy,dc=example,dc=com...
Checking cn=simiasproxy,dc=example,dc=com...
Done
Skipped (User Exists)
Checked cn=simiasproxy,dc=example,dc=com...
Checking cn=ifolderadmin,dc=example,dc=com...
Done
Adding LDAP settings to /var/simias/data/simias/Simias.config...
Checking cn=simiasproxy,dc=example,dc=com...
Done
Done
Configuring User Movement plugin..

Configuring Ldap plugin..

Setting up Log4Net file...
Done
Setting up permissions...
Done

SUCCESS

LDAP configuration

# Exportation LDIF pour :
# Généré par phpLDAPadmin ( http://phpldapadmin.sourceforge.net/ ) pour August 26, 2010 3:26 pm
# Serveur: My LDAP Server (127.0.0.1)
# Portée de la recherche: sub
# Filtre de recherche: (objectClass=*)
# Entrées totales: 5

dn: dc=example,dc=com
objectClass: top
objectClass: dcObject
objectClass: organization
o: novell
dc: example

dn: cn=admin,dc=example,dc=com
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator
userPassword: novell

dn: cn=ifolderadmin,dc=example,dc=com
sn: ifolderadmin
givenName: ifolderadmin
displayName: ifolderadmin
userPassword: novell
objectClass: inetOrgPerson
uid: ifolderadmin
cn: ifolderadmin

dn: cn=simiasproxy,dc=example,dc=com
sn: simiasproxy
givenName: simiasproxy
displayName: simiasproxy
userPassword: novell
objectClass: inetOrgPerson
uid: simiasproxy
cn: simiasproxy

dn: ou=novell,dc=example,dc=com
objectClass: organizationalUnit
objectClass: top
ou: novell

SIMIAS.LOG

2010-08-26 17:13:08,393 [User Move thread] DEBUG Simias.UserMovement.iFolderUserMove - UpdateUserMoveQueue: Updating user Reprovision queue, There are 0 users to be Reprovisioned
2010-08-26 17:13:38,394 [User Move thread] DEBUG Simias.UserMovement.iFolderUserMove - UpdateUserMoveQueue: Updating user Reprovision queue, There are 0 users to be Reprovisioned
2010-08-26 17:14:08,395 [User Move thread] DEBUG Simias.UserMovement.iFolderUserMove - UpdateUserMoveQueue: Updating user Reprovision queue, There are 0 users to be Reprovisioned
2010-08-26 17:14:38,396 [User Move thread] DEBUG Simias.UserMovement.iFolderUserMove - UpdateUserMoveQueue: Updating user Reprovision queue, There are 0 users to be Reprovisioned
2010-08-26 17:15:08,397 [User Move thread] DEBUG Simias.UserMovement.iFolderUserMove - UpdateUserMoveQueue: Updating user Reprovision queue, There are 0 users to be Reprovisioned
2010-08-26 17:15:38,398 [User Move thread] DEBUG Simias.UserMovement.iFolderUserMove - UpdateUserMoveQueue: Updating user Reprovision queue, There are 0 users to be Reprovisioned

Replies(4)

Attachments(0)

Entry History

Tags

Johnny Jacob

Aug 31, 2010 7:41 AM

143.1. Re: Problem with IFOLDER + LDAP Synchronisation

When you are in iFolder Admin, you are not able to see any users ?

The logs you've posted looks little unrelated. It is for 'UserMove' feature, which is used move user's data across iFolder servers.

CR JI JI

Sep 6, 2010 9:01 AM

143.1.1. Re : Re: Problem with IFOLDER + LDAP Synchronisation

Hye,

Thanks for reply. There isn't any user in the ifolder interface because i can't login anymore. The admin profile disapear when configuring server simias setup for LDAP. All the users seem disabeled.Installation is a succes, but there isn't any user in IFOLDER.

Sincerely yours

CR JI JI

Sep 6, 2010 10:16 AM

143.2. Re : Problem with IFOLDER + LDAP Synchronisation

I've got more informations about the simias log file here. And LDAP profile in attachement.

Thanks a lot.

010-09-06 12:03:25,089 [Simias Manager Start] DEBUG Simias.Identity.IdentityManagement - created sync provider instance

2010-09-06 12:03:25,089 [Simias Manager Start] DEBUG Simias.DomainProvider - Registering provider Enterprise Authentication Provider.

2010-09-06 12:03:25,090 [Simias Manager Start] INFO Simias.Service.Manager - "Simias iIdentity Sync Provider" service started.

2010-09-06 12:03:25,092 [-1319109776] DEBUG Simias.IdentitySynchronization.Service - Ldap Sync will wait for 86400 seconds

2010-09-06 12:03:25,092 [Simias Manager Start] INFO Simias.Service.Manager - "Simias Journal" service started.

2010-09-06 12:03:25,093 [Simias Manager Start] DEBUG Simias.Server.Service - Start called

2010-09-06 12:03:25,134 [Simias Manager Start] DEBUG Simias.Server.ProvisionService - Registering The new provider

2010-09-06 12:03:25,134 [Simias Manager Start] DEBUG Simias.Server.ProvisionService - Provision assembly: IdentityManagement class: Simias.Identity.UserProvisionProvider

2010-09-06 12:03:25,137 [Simias Manager Start] DEBUG Simias.Server.Service - Identity assembly: Simias.Identity.OpenLdapProvider class: Simias.OpenLdapProvider.User

2010-09-06 12:03:25,137 [Simias Manager Start] DEBUG Simias.Server.Service - Identity assemblytype name : Simias.OpenLdapProvider.User namespace: Simias.OpenLdapProvider

2010-09-06 12:03:25,140 [Simias Manager Start] DEBUG Simias.Server.Service - CreateInstance returned null userProvider

2010-09-06 12:03:25,141 [Simias Manager Start] INFO Simias.Server.Service - Could not load the configured user provider - loading InternalUser

2010-09-06 12:03:25,153 [-1321215120] DEBUG Simias.Server.Catalog - Starting collection scan...

2010-09-06 12:03:25,154 [Simias Manager Start] DEBUG Simias.Server.Catalog - Collection Catalog service started...

2010-09-06 12:03:25,155 [Simias Manager Start] DEBUG Simias.Server.Service - ExtractMemberPoliciesOnMaster: entered

2010-09-06 12:03:25,175 [-1321215120] DEBUG Simias.Server.Catalog - catalog entry exists for iFolder-ifolder-Reports

2010-09-06 12:03:25,175 [-1321215120] DEBUG Simias.Server.Catalog - Collection scan finished

2010-09-06 12:03:27,048 [Simias Manager Start] DEBUG Simias.Storage.Store - RSA Load XML string <RSAKeyValue><Modulus>h8gJIL4F2BnNPgu+XVeXvdzEZ1G/CcJ36V28FJPKfQDmAayPD5eL0ikRcRJbYyMaYW+cnE5May7cCVZ2Ii8iRLRcNoofclVddFyHN3XPD2Pe1ViVS3Zp6dQnqgy8DCmJide1rUwThpVR7Lx4vgeYcHSgf2Z6IcM++CkZHpK5F38=</Modulus><Exponent>EQ

</Exponent><P>v7QaU7L62NaW2kDhBO/qvf5yGxgDNO5t8w4Gbaslr8KUrtk76cM3wznFEzGtTfZWBMyFtfamYrqMhEH++ddlNQ

</P><Q>tVJj66x6V/d9WSXd0J3vrug+OUFAwzaeW3JZ7yFKzFb9AVlG69XpF/1pAwBCNpzcoCtY+azE9veRDOqFfxukYw

</Q><DP>OGIl3GHRTtWz5dbYxTeBRvB76dni01UvZZq2mLnd6GZn9zDVYt8QZpiFQeFvNQw3atK96jl8OyfO+bkOwfQOtQ

</DP><DQ>aqjve5KiUdzgUo6+tvN97mp+9IC8rxER23BxI0DCllFJiFKiMF+2SljUXB5FERD6QBl/oe0okUZVUuROhwEzhQ

</DQ><InverseQ>lwbPs0cs2mBOtcL9w/NraIUwC226jw8C4tBVBbzgM8UUlhJZuy3ajeSPjDPA/ZHmOrGI81mu0UvLjbFwb7ZJag

</InverseQ><D>B/y1PilLo0zP1nkpUMjqzu7eYG44afxhaBSSl8x1UqWzLUZixK6PwRF5fx8yjVxq9qw2Y4winOSjiBQlERHU1sd9g0+w8MXqUPNcQ1S4iqUdp9MSlwdtdnFGE2Szvd0GliBxIJ2OurCYKVUTOVMATu4Y+mUbsGCP0J+GY2rtiFk=</D></RSAKeyValue>

2010-09-06 12:03:27,050 [Simias Manager Start] INFO Simias.Service.Manager - "Simias Server" service started.

2010-09-06 12:03:27,059 [Simias Manager Start] DEBUG Simias.Server.ReportService - Started reporting service.

2010-09-06 12:03:27,059 [Simias Manager Start] INFO Simias.Service.Manager - "Simias Report" service started.

2010-09-06 12:03:27,061 [Simias Manager Start] DEBUG Simias.UserMovement.UserMove - Starting User Move service...

2010-09-06 12:03:27,062 [Simias Manager Start] DEBUG Simias.UserMovement.UserMove - SetQueueEvent: UserMove Queue Process event set

2010-09-06 12:03:27,062 [Simias Manager Start] DEBUG Simias.UserMovement.UserMove - User Move service started...

2010-09-06 12:03:27,063 [Simias Manager Start] DEBUG Simias.UserMovement.DataMove - Starting data Move thread...

2010-09-06 12:03:27,067 [User Move thread] DEBUG Simias.UserMovement.iFolderUserMove - UpdateUserMoveQueue: Updating user Reprovision queue, There are 0 users to be Reprovisioned

2010-09-06 12:03:27,068 [Simias Manager Start] DEBUG Simias.UserMovement.DataMove - SetQueueEvent: DataMove Queue Process event set

2010-09-06 12:03:27,068 [Simias Manager Start] DEBUG Simias.UserMovement.DataMove - Data Move thread started...

2010-09-06 12:03:27,068 [Simias Manager Start] INFO Simias.Service.Manager - "Simias User Movement Plugin" service started.

2010-09-06 12:03:27,068 [Simias Manager Start] INFO Simias.Service.Manager - Services started.

2010-09-06 12:03:27,831 [-1237296272] DEBUG Simias.Security.Web.AuthenticationModule - In verify[rincipalfromrequest: soapmethod is GetAuthenticatedUser

2010-09-06 12:03:27,835 [-1237296272] DEBUG Simias.DomainProvider - domainID 39cc16b0-2824-46f9-9139-65fb50cd1676

2010-09-06 12:03:27,835 [-1237296272] DEBUG Simias.Identity.Authentication - OwnsDomain called

2010-09-06 12:03:27,836 [-1237296272] DEBUG Simias.Identity.Authentication - with domain: 39cc16b0-2824-46f9-9139-65fb50cd1676

2010-09-06 12:03:27,837 [-1237296272] DEBUG Simias.Identity.Authentication - returning true

2010-09-06 12:03:27,838 [-1237296272] DEBUG Simias.Identity.Authentication - Authenticate called

2010-09-06 12:03:27,845 [-1237296272] DEBUG Simias.OpenLdapProvider.User - VerifyPassword for: admin

2010-09-06 12:03:27,847 [-1237296272] DEBUG Simias.OpenLdapProvider.User - failed to get the user's distinguished name

2010-09-06 12:03:27,847 [-1237296272] INFO Simias.Identity.Authentication - UnknownUser : admin

Attachments

	File Name	Version	Status	Date	Size	Modified by	Actions	Edit
	Sans titre.png	V1.0		Sep 6, 2010 10:16 AM	33KB	CR JI JI	File Actions View This File Download This File in a Zip File Download All Files WebDAV URL

Mahabalesh Asundi

Sep 13, 2010 5:55 AM

143.3. Re: Problem with IFOLDER + LDAP Synchronisation

Here are few possible reasons for the failure,

1. I am not sure what attribute is selected as iFolder login attribute ? "cn", "uid" or something else. Some of the ldap entries does not have these attributes(e.x. non user objects).

from your data path open Simias.config file and look for "NamingAttribute" field value, to see what is the naming attribute set. Make sure this attribute is present in all the objects in ldap.

2. Set the value for "LdapSyncOnRestart" to "Yes" and restart the server to trigger LDAP sync on iFolder restart. As of now in the log you are not seeing any LDAP sync content and that is because, iFolder thinks it is not time to sync LDAP entries. LDAP sync on iFolder restart/start is triggered by value of this filed and sync interval set and time when last time ldap sync took place.

3. The reason for admin login is failure is due to the fact that LDAP sync has never taken place and users are not imported to iFolder.

when you login from admin console, you provide admin user name as "ifadmin", internally iFolder looks for the user with name "ifadmin" and gets the FDN to connect to LDAP(in this case it has to be "cn=admin,dc=example,dc=com", but it is null as this info is not yet imported from LDAP )

Even after doing the above, probably it might still fail. In that case attach the log, so that we can further analyze this issue.

Skip Footer Toolbar

Permalink