search

grealish / pwm

Automatically exported from code.google.com/p/pwm
0 stars 0 forks source link

Helpdesk module incorrect DN #356

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. Configure PWM to Enable the Helpdesk module
2. Login as user (member of pwm helpdesk Group).
3. Search for a User in the helpdesk module and try to change his/ her password
4. Autogenerate Password gives no password at all.

Catalina.out shows that the DN of the search results starts with ou= instead of 
cn=. The LDAP backend is eDir so this must be a mistake within PWM:

2013-04-05 15:21:37, TRACE, pwm.SessionFilter, {2e,Dhr Drs. S. Veldhuisen} GET 
request for: /pwm/private/Helpdesk (no params)  [127.0.0.1/localhost]
2013-04-05 15:21:37, TRACE, util.PwmMacroMachine, replaced Macro @User:ID@ with 
value: Dhr Drs. S. Veldhuisen
2013-04-05 15:21:43, TRACE, pwm.SessionFilter, {2e,Dhr Drs. S. Veldhuisen} POST 
request for: /pwm/private/Helpdesk  [127.0.0.1/localhost]
  username='tuit'
  pwmFormID='hpnFMeBk9z82zDK00qf9Ln0OaryJ9F4f13dda5bd887av1w8w'
  processAction='search'
2013-04-05 15:21:43, DEBUG, operations.UserSearchEngine, {2e,Dhr Drs. S. 
Veldhuisen} beginning user search process [127.0.0.1/localhost]
2013-04-05 15:21:43, DEBUG, operations.UserSearchEngine, {2e,Dhr Drs. S. 
Veldhuisen} performing ldap search for user, base=ou=users,o=meta 
filter=SearchHelper: filter: 
(&(objectClass=ULCNperson)(|(sn=*tuit*)(ULCNuser=*tuit*))(!(loginDisabled=true))
), scope: SUBTREE, attributes: [WorkforceID, sn, ULCNuser, givenName, CN] 
[127.0.0.1/localhost]
2013-04-05 15:21:43, TRACE, operations.UserSearchEngine, {2e,Dhr Drs. S. 
Veldhuisen} found 2 results in context: ou=users,o=meta [127.0.0.1/localhost]
2013-04-05 15:21:43, DEBUG, operations.UserSearchEngine, {2e,Dhr Drs. S. 
Veldhuisen} completed user search process in 270ms, resultSize=2 
[127.0.0.1/localhost]
2013-04-05 15:21:43, TRACE, util.PwmMacroMachine, replaced Macro @User:ID@ with 
value: Dhr Drs. S. Veldhuisen
2013-04-05 15:21:47, TRACE, pwm.SessionFilter, {2e,Dhr Drs. S. Veldhuisen} POST 
request for: /pwm/private/Helpdesk  [127.0.0.1/localhost]
  pwmFormID='hpnFMeBk9z82zDK00qf9Ln0OaryJ9F4f13dda5bd887av1w8w'
  userKey='H4sIAAAAAAAAAAFAAL__CPOp37iY_FLSZ-LvP3T46YMx6NadNv8r8E2qMkZiGlU6BlDjt8-i0SmX-X5dBQn1UPUFKmmQAa23oEyn1qpr6rZ6oNhAAAAA'
  processAction='detail'
2013-04-05 15:21:47, TRACE, entry.EdirEntries, using active universal password 
policy for user ou=x,ou=users,o=meta at cn=unipwd-nvl-employee,cn=Password 
Policies,cn=Security
2013-04-05 15:21:47, DEBUG, operations.PasswordUtility, {2e,Dhr Drs. S. 
Veldhuisen} discovered assigned password policy for ou=x,ou=users,o=meta 
PwmPasswordPolicy: {MinimumLowerCase=1, MinimumSpecial=0, MaximumUpperCase=0, 
MaximumNumeric=0, MinimumLifetime=0, MinimumUnique=0, DisallowedAttributes=[CN, 
Full Name, Surname, ULCNuser], UniqueRequired=TRUE, AllowNumeric=TRUE, 
CaseSensitive=TRUE, ChangeMessage=, ExpirationInterval=15724800, 
MaximumLowerCase=0, AllowSpecial=FALSE, MaximumLength=13, 
AllowFirstCharNumeric=TRUE, MinimumLength=8, MaximumSequentialRepeat=0, 
MinimumNumeric=1, AllowLastCharSpecial=TRUE, PolicyEnabled=true, 
MaximumSpecial=0, MinimumUpperCase=1, AllowFirstCharSpecial=TRUE, 
DisallowedValues=[], AllowLastCharNumeric=TRUE} [127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.PasswordUtility, {2e,Dhr Drs. S. 
Veldhuisen} readPasswordPolicyForUser completed in 11ms [127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, edir.NmasCrFactory, challengeSetDN is null, return 
null for readNmasAssignedChallengeSetPolicy()
2013-04-05 15:21:47, TRACE, entry.EdirEntries, using active universal password 
policy for user ou=x,ou=users,o=meta at cn=unipwd-nvl-employee,cn=Password 
Policies,cn=Security
2013-04-05 15:21:47, TRACE, edir.NmasCrFactory, challengeSetDN is null, return 
null for readNmasAssignedChallengeSetPolicy()
2013-04-05 15:21:47, DEBUG, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
no nmas c/r policy found for user ou=x,ou=users,o=meta [127.0.0.1/localhost]
2013-04-05 15:21:47, DEBUG, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
using pwm c/r policy for user ou=x,ou=users,o=meta: ChallengeSet identifier: 
pwm-defined v1.7.0 b1216 (RC1), minRandom: 2, locale: en, (Challenge: "What is 
the name of the main character in your favorite book?", required: false, 
adminDefined: true, minLength: 4, maxLength: 200) (Challenge: "What is the name 
of your favorite teacher?", required: false, adminDefined: true, minLength: 4, 
maxLength: 200) (Challenge: "What is the name of your favorite pet?", required: 
false, adminDefined: true, minLength: 4, maxLength: 200) (Challenge: "What was 
the name of your childhood best friend?", required: false, adminDefined: true, 
minLength: 4, maxLength: 200) (Challenge: "What was your favorite show as a 
child?", required: false, adminDefined: true, minLength: 4, maxLength: 200) 
(Challenge: "Who is your favorite author?", required: false, adminDefined: 
true, minLength: 4, maxLength: 200) (Challenge: "What is your favorite food?", 
required: false, adminDefined: true, minLength: 4, maxLength: 200) (Challenge: 
"What is your partner's nickname?", required: false, adminDefined: true, 
minLength: 4, maxLength: 200) (Challenge: "What is your favorite team?", 
required: false, adminDefined: true, minLength: 4, maxLength: 200) (Challenge: 
"What street did you grow up on?", required: false, adminDefined: true, 
minLength: 4, maxLength: 200) (Challenge: "What city / town were you born in?", 
required: false, adminDefined: true, minLength: 4, maxLength: 200) (Challenge: 
"What is your favorite vehicle?", required: false, adminDefined: true, 
minLength: 4, maxLength: 200) (Challenge: "If you could meet someone from 
history, who would it be?", required: false, adminDefined: true, minLength: 4, 
maxLength: 200) (Challenge: "What is your least favorite film of all time?", 
required: false, adminDefined: true, minLength: 4, maxLength: 200) (Challenge: 
"Who was your least favorite teacher?", required: false, adminDefined: true, 
minLength: 4, maxLength: 200) (Challenge: "What food do you dislike the most?", 
required: false, adminDefined: true, minLength: 4, maxLength: 200)  
[127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
readUserChallengeSet completed in 26ms [127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, util.Helper, read VENDORGUID value for user 
ou=x,ou=users,o=meta: 749a104cc5403943ad92749a104cc540
2013-04-05 15:21:47, TRACE, operations.UserStatusHelper, {2e,Dhr Drs. S. 
Veldhuisen} beginning password status check process for ou=x,ou=users,o=meta 
[127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.UserStatusHelper, {2e,Dhr Drs. S. 
Veldhuisen} password for ou=x,ou=users,o=meta does not appear to be expired 
[127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.UserStatusHelper, 
ldapPasswordExpirationTime (ou=x,ou=users,o=meta): Fri Jun 21 13:00:10 CEST 
2013 (1371812410232 ms)
2013-04-05 15:21:47, DEBUG, operations.UserStatusHelper, {2e,Dhr Drs. S. 
Veldhuisen} completed user password status check for ou=x,ou=users,o=meta 
PasswordStatus {expired=false, pre-expired=false, warn=false, 
violatesPolicy=false} (10ms) [127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
beginning check to determine if responses need to be configured for user 
[127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
beginning read of user response sequence [127.0.0.1/localhost]
2013-04-05 15:21:47, DEBUG, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
will attempt to read the following storage methods: LDAP [127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
attempting read of responses via storage method: LDAP [127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
no responses read using method LDAP [127.0.0.1/localhost]
2013-04-05 15:21:47, DEBUG, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
checkIfResponseConfigNeeded: ou=x,ou=users,o=meta does not have good responses: 
no responses configured [127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.UserStatusHelper, {2e,Dhr Drs. S. 
Veldhuisen} read last user password change timestamp (via chai) as: Fri Dec 21 
12:00:10 CET 2012 [127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.UserStatusHelper, {2e,Dhr Drs. S. 
Veldhuisen} populateUserInfoBean for ou=x,ou=users,o=meta completed in 84ms 
[127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
beginning read of user response sequence [127.0.0.1/localhost]
2013-04-05 15:21:47, DEBUG, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
will attempt to read the following storage methods: LDAP [127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
attempting read of responses via storage method: LDAP [127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
no responses read using method LDAP [127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
beginning read of user response sequence [127.0.0.1/localhost]
2013-04-05 15:21:47, DEBUG, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
will attempt to read the following storage methods: LDAP [127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
attempting read of responses via storage method: LDAP [127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, operations.CrUtility, {2e,Dhr Drs. S. Veldhuisen} 
no responses read using method LDAP [127.0.0.1/localhost]
2013-04-05 15:21:47, TRACE, util.PwmMacroMachine, replaced Macro @User:ID@ with 
value: Dhr Drs. S. Veldhuisen

What version of the product are you using?
Daily build (data-pwm-version="1.7.0 (RC1)" data-pwm-build="1216")

On what operating system?
SLES 11 SP1

Please provide any additional information below.

eDirectory for Linux x86_64 v8.8 SP7 is used as a LDAP directory.

Original issue reported on code.google.com by sebastia...@gmail.com on 5 Apr 2013 at 1:34

GoogleCodeExporter commented 9 years ago 
I have analyzed this problem a bit further. It was specific to one User Object 
in my LDAP Directory that had two naming attributes specified.

Please regard this issue as non-existent :)

Original comment by sebastia...@gmail.com on 1 May 2013 at 1:47

GoogleCodeExporter commented 9 years ago

Original comment by jrivard on 1 May 2013 at 1:48