HELP wanted! Very important! Openfire + LDAP + Domino

Nikolay · November 21, 2007, 1:29pm

Hello world!

The situation is the following:

I’ve got an OpenFire 3.4.1 with embedded DB. First time I installed it with built in users and all was fine.

Now I try to integrate it with LDAP service provided by Lotus Domino 7.

During install I’ve set the admin account and the button “test” has said “Success”. But the login to admin page with this login doesn’t work. There are no errors, just login page refreshes and fields are reset. If I change the password it returns error, so I think that my LDAP credentials are correct. LDAP service writes that all is OK.

I’ve tried to check log files in Log directory and found nothing there.

:_|

LG1 · November 21, 2007, 9:40pm

Hi Nikolay,

you should add to conf/openfire.xml

<log><debug><enabled>true</enabled></debug></log>

to enable the debug log

and

<ldap><debugEnabled>true</debugEnabled>...your_other_ldap_stuff...</ldap>

to enable LDAP debug logging. Replace “…your_other_ldap_stuff…” with your current LDAP settings or simply add “” within your ldap tag.

Restart Openfire, it should log then.

LG

Nikolay · November 22, 2007, 12:30am

thanks, but I nave these options in my xml. I mean that there are no error messages in the log files.

Nikolay · November 22, 2007, 12:49am

Sorry, previously there was “”

now there are a lot of charactrers in server’s console:

Created new LdapManager() instance, fields:

host:

port: 389

usernamefield: uid

usernameSuffix:

baseDN: O=Amtel

alternateBaseDN: null

nameField: cn

emailField: mail

adminDN: null

adminPassword: CN=admin,O=amtel

searchFilter: null

subTreeSearch:true

ldapDebugEnabled: true

sslEnabled: false

initialContextFactory: com.sun.jndi.ldap.LdapCtxFactory

connectionPoolEnabled: false

autoFollowReferrals: true

groupNameField: cn

groupMemberField: member

groupDescriptionField: description

posixMode: false

groupSearchFilter: null

Openfire 3.4.1

Admin console listening at:

http://desktop:9090

https://desktop:9091

-> notebook:389

0000: 30 58 02 01 01 63 53 04 07 4F 3D 41 6D 74 65 6C 0X…cS…O=Amtel

0010: 0A 01 02 0A 01 03 02 01 00 02 01 00 01 01 00 A3 …

0020: 1E 04 02 63 6E 04 18 D0 A2 D0 B5 D1 81 D1 82 D0 …cn…

0030: B8 D1 80 D0 BE D0 B2 D1 89 D0 B8 D0 BA D0 B8 30 …0

0040: 19 04 02 63 6E 04 0B 64 65 73 63 72 69 70 74 69 …cn…descripti

0050: 6F 6E 04 06 6D 65 6D 62 65 72 on…member

<- notebook:389

0000: 30 0C 02 01 01 65 07 0A 01 00 04 00 04 00 0…e…

-> notebook:389

0000: 30 32 02 01 01 63 2D 04 07 4F 3D 41 6D 74 65 6C 02…c-…O=Amtel

0010: 0A 01 02 0A 01 03 02 01 00 02 01 00 01 01 00 A3 …

0020: 0C 04 03 75 69 64 04 05 61 64 6D 69 6E 30 05 04 …uid…admin0…

0030: 03 75 69 64 .uid

<- notebook:389

0000: 30 29 02 01 01 64 24 04 10 43 4E 3D 61 64 6D 69 0)…d$…CN=admi

0010: 6E 2C 4F 3D 41 6D 74 65 6C 30 10 30 0E 04 03 75 n,O=Amtel0.0…u

0020: 69 64 31 07 04 05 61 64 6D 69 6E id1…admin

<- notebook:389

0000: 30 0C 02 01 01 65 07 0A 01 00 04 00 04 00 0…e…

-> notebook:389

0000: 30 1F 02 01 01 60 1A 02 01 03 04 12 43 4E 3D 22 0…`…CN="

0010: 61 64 6D 69 6E 22 2C 4F 3D 41 6D 74 65 6C 80 01 admin",O=Amtel…

0020: 31 1

<- notebook:389

0000: 30 0C 02 01 01 61 07 0A 01 00 04 00 04 00 0…a…

-> notebook:389

0000: 30 05 02 01 02 42 00 0…B.

-> notebook:389

0000: 30 32 02 01 01 63 2D 04 07 4F 3D 41 6D 74 65 6C 02…c-…O=Amtel

0010: 0A 01 02 0A 01 03 02 01 00 02 01 00 01 01 00 A3 …

0020: 0C 04 03 75 69 64 04 05 61 64 6D 69 6E 30 05 04 …uid…admin0…

0030: 03 75 69 64 .uid

<- notebook:389

0000: 30 29 02 01 01 64 24 04 10 43 4E 3D 61 64 6D 69 0)…d$…CN=admi

0010: 6E 2C 4F 3D 41 6D 74 65 6C 30 10 30 0E 04 03 75 n,O=Amtel0.0…u

0020: 69 64 31 07 04 05 61 64 6D 69 6E id1…admin

<- notebook:389

0000: 30 0C 02 01 01 65 07 0A 01 00 04 00 04 00 0…e…

-> notebook:389

0000: 30 32 02 01 01 63 2D 04 07 4F 3D 41 6D 74 65 6C 02…c-…O=Amtel

0010: 0A 01 02 0A 01 03 02 01 00 02 01 00 01 01 00 A3 …

0020: 0C 04 03 75 69 64 04 05 61 64 6D 69 6E 30 05 04 …uid…admin0…

0030: 03 75 69 64 .uid

<- notebook:389

0000: 30 29 02 01 01 64 24 04 10 43 4E 3D 61 64 6D 69 0)…d$…CN=admi

0010: 6E 2C 4F 3D 41 6D 74 65 6C 30 10 30 0E 04 03 75 n,O=Amtel0.0…u

0020: 69 64 31 07 04 05 61 64 6D 69 6E id1…admin

<- notebook:389

0000: 30 0C 02 01 01 65 07 0A 01 00 04 00 04 00 0…e…

-> notebook:389

0000: 30 68 02 01 01 63 63 04 12 43 4E 3D 22 61 64 6D 0h…cc…CN="adm

0010: 69 6E 22 2C 4F 3D 41 6D 74 65 6C 0A 01 00 0A 01 in",O=Amtel…

0020: 03 02 01 00 02 01 00 01 01 00 87 0B 6F 62 6A 65 …obje

0030: 63 74 43 6C 61 73 73 30 31 04 03 75 69 64 04 02 ctClass01…uid…

0040: 63 6E 04 04 6D 61 69 6C 04 0F 63 72 65 61 74 65 cn…mail…create

0050: 54 69 6D 65 73 74 61 6D 70 04 0F 6D 6F 64 69 66 Timestamp…modif

0060: 79 54 69 6D 65 73 74 61 6D 70 yTimestamp

<- notebook:389

0000: 30 13 02 01 01 65 0E 0A 01 20 04 07 4F 3D 41 6D 0…e… …O=Am

0010: 74 65 6C 04 00 tel…

LG1 · November 22, 2007, 9:20pm

Hi Nikolay,

adminDN: null

adminPassword: CN=admin,O=amtel

looks weird to me.Your adminDN should be “CN=admin,O=amtel” and your password should be kept private. You do not need an admin account, Openfire needs only read access, so you may want to create an “cn=openfire,o=amtel” user with read access to LDAP.

LG

Denis · April 9, 2008, 12:15pm

I have same issue

test connection passed but then I test Profile Settings: User Mapping I’m getting in logs:

2008.04.09 15:11:12 org.jivesoftware.admin.LdapUserTester.getAttributes(LdapUserTester.java:182)

javax.naming.NameNotFoundException: LDAP: error code 32 - No Such Object; remaining name ‘CN=“Denis Kot”’

at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3030)

at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2951)

at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2758)

at com.sun.jndi.ldap.LdapCtx.c_getAttributes(LdapCtx.java:1295)

at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_getAttributes(ComponentDirContex t.java:213)

at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.getAttributes(PartialCompos iteDirContext.java:121)

at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.getAttributes(PartialCompos iteDirContext.java:109)

at javax.naming.directory.InitialDirContext.getAttributes(InitialDirContext.java:1 23)

at org.jivesoftware.admin.LdapUserTester.getAttributes(LdapUserTester.java:159)

at org.jivesoftware.openfire.admin.setup.setup_002dldap_002duser_005ftest_jsp._jsp Service(setup_002dldap_002duser_005ftest_jsp.java:97)

at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:97)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)

at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:487)

at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1093)

at com.opensymphony.module.sitemesh.filter.PageFilter.doFilter(PageFilter.java:39)

at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1084)

at org.jivesoftware.util.LocaleFilter.doFilter(LocaleFilter.java:65)

at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1084)

at org.jivesoftware.util.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingF ilter.java:41)

at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1084)

at org.jivesoftware.admin.PluginFilter.doFilter(PluginFilter.java:69)

at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1084)

at org.jivesoftware.admin.AuthCheckFilter.doFilter(AuthCheckFilter.java:98)

at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1084)

at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:360)

at org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)

at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:181)

at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:726)

at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:405)

at org.mortbay.jetty.handler.ContextHandlerCollection.handle(ContextHandlerCollect ion.java:206)

at org.mortbay.jetty.handler.HandlerCollection.handle(HandlerCollection.java:114)

at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:139)

at org.mortbay.jetty.Server.handle(Server.java:324)

at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:505)

at org.mortbay.jetty.HttpConnection$RequestHandler.headerComplete(HttpConnection.j ava:828)

at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:514)

at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:211)

at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:380)

at org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:395)

at org.mortbay.thread.BoundedThreadPool$PoolThread.run(BoundedThreadPool.java:450)

2008.04.09 15:11:18 org.jivesoftware.admin.LdapUserTester.getAttributes(LdapUserTester.java:182)

javax.naming.NameNotFoundException: LDAP: error code 32 - No Such Object; remaining name ‘CN=“Alan Mitchell”’