I can't remove a user from a group

WebGreg · November 26, 2025, 11:31am

Hi.

Spark version 3.0.2
Openfire 5.0.2

The user created a local “Test” group and added contacts to it. One contact cannot be deleted now (UserBen). Even if I delete the group, I delete the Spark profile - when I log in again, the group appears with the problematic user.
On Openfire, I displayed the account properties of the user who created the group. User Options > Roster > no shared groups. Here I see the account of the user I want to delete (UserBen), but there is a padlock in the delete column: This roster item is a member of a shared group and can not be deleted via this interface.
UserBen actually belongs to other groups that are retrieved from LDAP and are shared. But that shouldn’t be a problem, as it’s the same with every other account. However, if I add another contact to a new group, I can easily remove them even though they belong to the same groups.

*SEVERE: Error removing user from contact list.
org.jivesoftware.smack.XMPPException$XMPPErrorException: XMPP error reply received from userwithgroup@domain.com: XMPPError: internal-server-error - wait
at org.jivesoftware.smack.XMPPException$XMPPErrorException.ifHasErrorThenThrow(XMPPException.java:171)
at org.jivesoftware.smack.XMPPException$XMPPErrorException.ifHasErrorThenThrow(XMPPException.java:165)
at org.jivesoftware.smack.StanzaCollector.nextResultOrThrow(StanzaCollector.java:284)
at org.jivesoftware.smack.StanzaCollector.nextResultOrThrow(StanzaCollector.java:228)
at org.jivesoftware.smack.roster.RosterGroup.removeEntry(RosterGroup.java:214)
at org.jivesoftware.spark.ui.ContactList.removeContactFromGroup(ContactList.java:1296)
at org.jivesoftware.spark.ui.ContactList.actionPerformed(ContactList.java:1238)
at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
at javax.swing.AbstractButton$Handler.actionPerformed(Unknown Source)
at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
at javax.swing.AbstractButton.doClick(Unknown Source)
at javax.swing.plaf.basic.BasicMenuItemUI.doClick(Unknown Source)
at javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(Unknown Source)
at java.awt.Component.processMouseEvent(Unknown Source)
at javax.swing.JComponent.processMouseEvent(Unknown Source)
at java.awt.Component.processEvent(Unknown Source)
at java.awt.Container.processEvent(Unknown Source)
at java.awt.Component.dispatchEventImpl(Unknown Source)
at java.awt.Container.dispatchEventImpl(Unknown Source)
at java.awt.Component.dispatchEvent(Unknown Source)
at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
at java.awt.Container.dispatchEventImpl(Unknown Source)
at java.awt.Window.dispatchEventImpl(Unknown Source)
at java.awt.Component.dispatchEvent(Unknown Source)
at java.awt.EventQueue.dispatchEventImpl(Unknown Source)
at java.awt.EventQueue.access$500(Unknown Source)
at java.awt.EventQueue$3.run(Unknown Source)
at java.awt.EventQueue$3.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)
at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)
at java.awt.EventQueue$4.run(Unknown Source)
at java.awt.EventQueue$4.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)
at java.awt.EventQueue.dispatchEvent(Unknown Source)
at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)
at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
at java.awt.EventDispatchThread.run(Unknown Source)*

guus · December 2, 2025, 8:01pm

The XMPPError: internal-server-error - wait response that your client received indicates that something went wrong on the Openfire server while processing the request. When that happens, Openfire will typically log the underlying exception or error.

To help us understand what’s causing this, could you check the Openfire logs on the server and look for any errors that occurred at the moment you tried to remove the user from the group?

The relevant logs can usually be found in: logs/openfire.log in the Openfire installation directory (or via the Admin Console: Server → Logs).

Please copy the corresponding error entry and share it here. With that information, we should be able to analyze what exactly is failing and guide you further.

WebGreg · December 3, 2025, 11:23am

Hi @guus Thank you for your reply.

2025.12.03 12:21:07.251 ERROR [socket_c2s_ssl-worker-13]: org.jivesoftware.openfire.handler.IQRosterHandler - Internal server error
java.lang.IllegalStateException: null

guus · December 3, 2025, 2:17pm

That’s probably it - are there lines logged just under this particular line?

WebGreg · December 3, 2025, 4:11pm

Yea. Full:

2025.12.03 12:21:07.251 ERROR [socket_c2s_ssl-worker-13]: org.jivesoftware.openfire.handler.IQRosterHandler - Internal server error
java.lang.IllegalStateException: null
	at java.util.LinkedList$ListItr.remove(LinkedList.java:927) ~[?:?]
	at org.jivesoftware.openfire.roster.RosterItem.setGroups(RosterItem.java:459) ~[xmppserver-5.0.2.jar:5.0.2]
	at org.jivesoftware.openfire.roster.RosterItem.setAsCopyOf(RosterItem.java:598) ~[xmppserver-5.0.2.jar:5.0.2]
	at org.jivesoftware.openfire.handler.IQRosterHandler.manageRoster(IQRosterHandler.java:246) ~[xmppserver-5.0.2.jar:5.0.2]
	at org.jivesoftware.openfire.handler.IQRosterHandler.handleIQ(IQRosterHandler.java:122) [xmppserver-5.0.2.jar:5.0.2]
	at org.jivesoftware.openfire.handler.IQHandler.process(IQHandler.java:125) [xmppserver-5.0.2.jar:5.0.2]
	at org.jivesoftware.openfire.IQRouter.handle(IQRouter.java:403) [xmppserver-5.0.2.jar:5.0.2]
	at org.jivesoftware.openfire.IQRouter.route(IQRouter.java:106) [xmppserver-5.0.2.jar:5.0.2]
	at org.jivesoftware.openfire.spi.PacketRouterImpl.route(PacketRouterImpl.java:74) [xmppserver-5.0.2.jar:5.0.2]
	at org.jivesoftware.openfire.net.StanzaHandler.processIQ(StanzaHandler.java:392) [xmppserver-5.0.2.jar:5.0.2]
	at org.jivesoftware.openfire.net.ClientStanzaHandler.processIQ(ClientStanzaHandler.java:90) [xmppserver-5.0.2.jar:5.0.2]
	at org.jivesoftware.openfire.net.StanzaHandler.process(StanzaHandler.java:334) [xmppserver-5.0.2.jar:5.0.2]
	at org.jivesoftware.openfire.net.StanzaHandler.processStanza(StanzaHandler.java:222) [xmppserver-5.0.2.jar:5.0.2]
	at org.jivesoftware.openfire.net.StanzaHandler.process(StanzaHandler.java:114) [xmppserver-5.0.2.jar:5.0.2]
	at org.jivesoftware.openfire.nio.NettyConnectionHandler.channelRead0(NettyConnectionHandler.java:142) [xmppserver-5.0.2.jar:5.0.2]
	at org.jivesoftware.openfire.nio.NettyConnectionHandler.channelRead0(NettyConnectionHandler.java:50) [xmppserver-5.0.2.jar:5.0.2]
	at io.netty.channel.SimpleChannelInboundHandler.channelRead(SimpleChannelInboundHandler.java:99) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:346) [netty-codec-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:318) [netty-codec-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.handler.timeout.IdleStateHandler.channelRead(IdleStateHandler.java:289) [netty-handler-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:442) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.handler.traffic.AbstractTrafficShapingHandler.channelRead(AbstractTrafficShapingHandler.java:506) [netty-handler-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:442) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1515) [netty-handler-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1378) [netty-handler-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1427) [netty-handler-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:530) [netty-codec-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:469) [netty-codec-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:290) [netty-codec-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1357) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:440) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:868) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:796) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:732) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:658) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:562) [netty-transport-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:998) [netty-common-4.1.118.Final.jar:4.1.118.Final]
	at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.118.Final.jar:4.1.118.Final]
	at java.lang.Thread.run(Thread.java:840) [?:?]

guus · December 3, 2025, 6:04pm

Thanks! That’s very useful, but also introduces much head-scratching.

Are there by any chance shared groups in your system that use the same name?

guus · December 3, 2025, 6:22pm

I think I’ve identified the cause for the problem (even if I haven’t reproduced it myself). I’ve created this ticket for the issue: OF-3149

guus · December 4, 2025, 10:01am

A fix for this issue is in the works in OF-3149: Prevent multiple removal attempts in RosterItem.removeSharedGroups by guusdk · Pull Request #3075 · igniterealtime/Openfire · GitHub