powered by Jive Software

Error getting groups for user

Wildfire 3.1.1 using LDAP authentication in a Windows 2003 domain. I have the server properly setup to filter by users and groups. The problem is when I login using either Spark or the Pandion client I am not presented with my group list. I get the following error in my error log on the Wildfire server.

2007.01.11 13:59:26 [org.jivesoftware.wildfire.ldap.LdapGroupProvider.getGroupNames(LdapGroupProvid er.java:383)

] Error getting groups for user: xxx0@vm-wildfiret

javax.naming.NamingException: [LDAP: error code 1 - 000020EF: SvcErr: DSID-020A0B25, problem 5012 (DIR_ERROR), data -1017

]; remaining name ‘’’’

at com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source)

at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)

at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)

at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)

at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)

at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)

at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)

at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)

at javax.naming.directory.InitialDirContext.search(Unknown Source)

at org.jivesoftware.wildfire.ldap.LdapGroupProvider.getGroupNames(LdapGroupProvide r.java:367)

at org.jivesoftware.wildfire.group.GroupManager.getGroups(GroupManager.java:346)

at org.jivesoftware.wildfire.roster.Roster.(Roster.java:90)

at org.jivesoftware.wildfire.roster.RosterManager.getRoster(RosterManager.java:94)

at org.jivesoftware.wildfire.user.User.getRoster(User.java:289)

at org.jivesoftware.wildfire.handler.IQRosterHandler.manageRoster(IQRosterHandler. java:187)

at org.jivesoftware.wildfire.handler.IQRosterHandler.handleIQ(IQRosterHandler.java :104)

at org.jivesoftware.wildfire.handler.IQHandler.process(IQHandler.java:48)

at org.jivesoftware.wildfire.IQRouter.handle(IQRouter.java:268)

at org.jivesoftware.wildfire.IQRouter.route(IQRouter.java:96)

at org.jivesoftware.wildfire.spi.PacketRouterImpl.route(PacketRouterImpl.java:67)

at org.jivesoftware.wildfire.net.SocketReader.processIQ(SocketReader.java:250)

at org.jivesoftware.wildfire.net.ClientSocketReader.processIQ(ClientSocketReader.j ava:51)

at org.jivesoftware.wildfire.net.SocketReader.process(SocketReader.java:216)

at org.jivesoftware.wildfire.net.BlockingReadingMode.readStream(BlockingReadingMod e.java:156)

at org.jivesoftware.wildfire.net.BlockingReadingMode.run(BlockingReadingMode.java: 62)

at org.jivesoftware.wildfire.net.SocketReader.run(SocketReader.java:123)

at java.lang.Thread.run(Unknown Source)

I am getting a similar error with an OpenLDAP implementation. Anyone have suggestions?

Sanitized snippett_

2007.02.12 07:16:41 org.jivesoftware.wildfire.ldap.LdapGroupProvider.getGroupNames(LdapGroupProvider .java:383) Error getting groups for user: @jabber..com

java.lang.NullPointerException

at org.jivesoftware.wildfire.ldap.LdapGroupProvider.getGroupNames(LdapGroupProvide r.java:370)

at org.jivesoftware.wildfire.group.GroupManager.getGroups(GroupManager.java:343)

at org.jivesoftware.wildfire.roster.Roster.(Roster.java:91)

at org.jivesoftware.wildfire.roster.RosterManager.getRoster(RosterManager.java:94)

at org.jivesoftware.wildfire.user.User.getRoster(User.java:289)

at org.jivesoftware.wildfire.handler.IQRosterHandler.manageRoster(IQRosterHandler. java:200)

at org.jivesoftware.wildfire.handler.IQRosterHandler.handleIQ(IQRosterHandler.java :105)

at org.jivesoftware.wildfire.handler.IQHandler.process(IQHandler.java:48)

at org.jivesoftware.wildfire.IQRouter.handle(IQRouter.java:300)

at org.jivesoftware.wildfire.IQRouter.route(IQRouter.java:104)

at org.jivesoftware.wildfire.spi.PacketRouterImpl.route(PacketRouterImpl.java:67)

at org.jivesoftware.wildfire.net.StanzaHandler.processIQ(StanzaHandler.java:283)

at org.jivesoftware.wildfire.net.ClientStanzaHandler.processIQ(ClientStanzaHandler .java:79)

at org.jivesoftware.wildfire.net.StanzaHandler.process(StanzaHandler.java:248)

at org.jivesoftware.wildfire.net.StanzaHandler.process(StanzaHandler.java:147)

at org.jivesoftware.wildfire.nio.ConnectionHandler.messageReceived(ConnectionHandl er.java:126)

at org.apache.mina.common.support.AbstractIoFilterChain$TailFilter.messageReceived (AbstractIoFilterChain.java:703)

at org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived(Ab stractIoFilterChain.java:362)

at org.apache.mina.common.support.AbstractIoFilterChain.access$1100(AbstractIoFilt erChain.java:54)

at org.apache.mina.common.support.AbstractIoFilterChain$EntryImpl$1.messageReceive d(AbstractIoFilterChain.java:800)

at org.apache.mina.filter.codec.support.SimpleProtocolDecoderOutput.flush(SimplePr otocolDecoderOutput.java:62)

at org.apache.mina.filter.codec.ProtocolCodecFilter.messageReceived(ProtocolCodecF ilter.java:186)

at org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived(Ab stractIoFilterChain.java:362)

at org.apache.mina.common.support.AbstractIoFilterChain.access$1100(AbstractIoFilt erChain.java:54)

at org.apache.mina.common.support.AbstractIoFilterChain$EntryImpl$1.messageReceive d(AbstractIoFilterChain.java:800)

at org.apache.mina.filter.executor.ExecutorFilter.processEvent(ExecutorFilter.java :250)

at org.apache.mina.filter.executor.ExecutorFilter$ProcessEventsRunnable.run(Execut orFilter.java:305)

at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)

Here is an interesting peice of info. I replicated my LDAP server and set only my wildfire server on it so I could trace it without interference . Below is the LDAP info when I click on a user name to get user properties when I do this I get an error in the log as in my last post and groups is listed as “none” on the user info page. Based on other searches this seems like a malformed query even though it is returning groups ( all of them). Shouldn’'t the filter look like this

( where = jules). "&(&(cn=)(&(memberUid=[username])(objectClass=posixGroup))(!(cn=x_)))) and the search atrr just be “memberUid” not memUid ?

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 SRCH base=“dc=**,dc=com" scope=2 deref=3 filter="(&(&(cn=)(&(cn=)(objectClass=posixGroup))(!(cn=x_))))”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 SRCH attr=memberUid jules))

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=66,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=68,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=74,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=78,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=79,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=84,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=67,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=69,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=71,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=73,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=76,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=77,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=81,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=82,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=87,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=101,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=300,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=501,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1000,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1001,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1002,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1003,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1004,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1005,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1006,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1007,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1008,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1009,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1010,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1011,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1012,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1013,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1014,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1015,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1016,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1017,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=2066,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1018,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1019,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1020,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 ENTRY dn=“gidNumber=1021,ou=group,dc=*******,dc=com”

Feb 16 10:11:26 nis23 slapd[26303]: conn=13 op=3 SEARCH RESULT tag=101 err=0 nentries=41 text=

Even with 3.2.2 I get the same problem. I think this may be the basis of my presence problems. See below for what looks like a malformed group search under 3.2.2.

Feb 20 09:09:06 nis23 slapd[26303]: conn=1704 op=431 SRCH base=“dc=**,dc=com" scope=2 deref=3 filter="(&(&(cn=)(&(cn=)(objectClass=posixGroup))(!(cn=x_))))”

Feb 20 09:09:06 nis23 slapd[26303]: conn=1704 op=431 SRCH attr=memberUid doug))

Any chance the coders may have an idea about this?

yeah, would be really nice to know… same problem for me