AnsweredAssumed Answered

Authentication issue with Spark 2.6.3 and latest beta?

Question asked by qtitlafemme on Aug 21, 2012
Latest reply on Aug 21, 2012 by qtitlafemme

Current Setup:  Openfire 3.7.1 on CentOS 6.2 with authentication against AD via LDAP and running Spark 2.6.3 with Java 6 Update 33 on Windows 7SP1 64-bit .

 

Issue:  Several user accounts (but not all) are getting their credentials (which are valid) rejected by Openfire.  This is not related to the users' local machine or client installation or spark.properties.  I tested two accounts on the same client and machine - one was able to login successfully, the other was not.  I thought this might be a problem in AD but the failed account is not termed, expired, or locked.  Even though the password is due to expire in 14 days, I've had many users already go through password change cycles without any problems.

 

What is showing up consistently in the logs with each failed attempt:

 

2012.08.21 14:52:22 org.jivesoftware.openfire.net.SASLAuthentication - User Login Failed. PLAIN authentication failed for: (userID)

 

What I've tried so far:  Complete reinstall of Spark 2.6.3 (fail), update to Java 7 Update 5 (fail), update to 2.7.0 beta 1 (fail), deleted spark.properties (fail)

 

System Properties (first few lines omitted):

ldap.connectionPoolEnabled

true

ldap.debugEnabled

false

ldap.emailField

mail

ldap.encloseDNs

true

ldap.groupDescriptionField

description

ldap.groupMemberField

member

ldap.groupNameField

cn

ldap.groupSearchFilter

(objectClass=group)

ldap.host

10.0.32.150

ldap.ldapDebugEnabled

false

ldap.nameField

cn

ldap.override.avatar

true

ldap.port

389

ldap.posixMode

false

ldap.searchFilter

(objectClass=organizationalPerson)

ldap.sslEnabled

false

ldap.usernameField

sAMAccountName

ldap.vcard-mapping

<vCardxmlns="vcard-temp"><br> <N><br><GIVEN>{cn}</GIVEN><br> </N> <br><EMAIL><br> <INTERNET/> <br><USERID>{mail}</USERID><br> </EMAIL> <br><FN>{givenName}</FN> <br> <LN>{SN}</LN><br> <ADR><br> <HOME/> <br><STREET>{homePostalAddress}</STREET> <br><PCODE>{homeZip}</PCODE> <br><CTRY>{co}</CTRY><br> </ADR> <br><ADR><br> <WORK/> <br><STREET>{streetAddress}</STREET> <br> <LOCALITY>{l}</LOCALITY><br> <REGION>{st}</REGION> <br><PCODE>{postalCode}</PCODE> <br><CTRY>{co}</CTRY><br> </ADR> <br><TEL><br> <HOME/> <br> <VOICE/> <br><NUMBER>{homePhone}</NUMBER><br> </TEL> <br><TEL><br> <HOME/> <br> <CELL/> <br><NUMBER>{mobile}</NUMBER><br> </TEL> <br><TEL><br> <WORK/> <br> <VOICE/> <br><NUMBER>{telephoneNumber}</NUMBER><br> </TEL> <br><TEL><br> <WORK/> <br> <CELL/> <br><NUMBER>{mobile}</NUMBER><br> </TEL> <br><TEL><br> <WORK/> <br> <FAX/> <br><NUMBER>{facsimileTelephoneNumber}</NUMBER><br> </TEL><br> <TEL><br> <WORK/> <br> <PAGER/><br> <NUMBER>{pager}</NUMBER><br> </TEL><br> <TITLE>{title}</TITLE> <br> <ORG><br><ORGUNIT>{department}</ORGUNIT><br></ORG><br></vCard>]]>

locale.timeZone

America/New_York

plugin.search.excludedFields

 

plugin.search.serviceEnabled

true

plugin.search.serviceName

search

provider.auth.className

org.jivesoftware.openfire.ldap.LdapAuthProvider

provider.group.className

org.jivesoftware.openfire.ldap.LdapGroupProvider

provider.user.className

org.jivesoftware.openfire.ldap.LdapUserProvider

provider.vcard.className

org.jivesoftware.openfire.ldap.LdapVCardProvider

register.inband

false

register.password

hidden

transfer.enabled

true

update.lastCheck

1345562755852

vcard.enabled

true

xmpp.auth.anonymous

true

xmpp.auth.sharedSecretEnabled

true

xmpp.client.idle

-1

xmpp.client.idle.ping

true

xmpp.client.tls.policy

required

xmpp.domain

servername.company.com <– deliberatelychanged

xmpp.filetransfer.enabled

true

xmpp.server.certificate.accept-selfsigned

false

xmpp.server.dialback.enabled

false

xmpp.server.permission

whitelist

xmpp.server.tls.enabled

true

xmpp.session.conflict-limit

0

xmpp.socket.ssl.active

true

Outcomes