search

ma1uta / ma1sd

Federated Matrix Identity Server (formerly fork of kamax/mxisd)
GNU Affero General Public License v3.0
167 stars 55 forks source link

REST+LDAP=bypassing password #109

Closed kerneus closed 2 years ago

kerneus commented 2 years ago

Hey! I'm trying to set up LDAP authentication using ma1sd with rest authentication provider. here is the config ma1sd:

ldap:
   enabled: true
   lookup: true
   activeDirectory: false
   defaultDomain: 'domain.ltd'
   connection:
     host: 'localhost'
     port: 389
     bindDn: 'cn=use,dc=domain,dc=ltd'
     bindPassword: 'password'
     baseDNs:
       - 'o=o,dc=domain,dc=ltd'
   attribute:
     uid:
       type: 'uid'
       value: 'cn'
     name: 'givenName'

here is the homeserver config:

password_providers:
  - module: "rest_auth_provider.RestAuthProvider"
    config:
      endpoint: "http://localhost:8090"

When i try to authorize in the masd log, absolutely nothing happens. This is from the homeserver log:

фев 08 07:14:06 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-161] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.000sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/logout HTTP/1.0" >
фев 08 07:14:06 mx synapse[137259]: synapse.metrics: [] Collecting gc 1
фев 08 07:14:06 mx synapse[137259]: synapse.access.http.8008: [POST-162] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.033sec/0.000sec (0.009sec, 0.000sec) (0.003sec/0.022sec/5) 22B 200 "POST /_matrix/client/r0/logout HTT>
фев 08 07:14:06 mx synapse[137259]: synapse.access.http.8008: [GET-163] 46.173.7.9 - 8008 - {None} Processed request: 0.001sec/0.001sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 193B 200 "GET /_matrix/client/versions HTTP/1.0" "Mozilla>
фев 08 07:14:06 mx synapse[137259]: synapse.http.site: [GET-156] Error processing request <XForwardedForRequest at 0x7fd8787efd30 method='GET' uri='/_matrix/client/r0/sync?filter=0&timeout=30000&since=s1_585_0_17_1_1_1_45_1' clientproto>
фев 08 07:14:07 mx synapse[137259]: synapse.access.http.8008: [GET-164] 46.173.7.9 - 8008 - {None} Processed request: 0.001sec/0.000sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 59B 200 "GET /_matrix/client/r0/login HTTP/1.0" "Mozilla/>
фев 08 07:14:07 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-165] 46.173.7.9 - 8008 - {None} Processed request: 0.001sec/0.000sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/login HTTP/1.0" ">
фев 08 07:14:08 mx synapse[137259]: synapse.rest.client.v1.login: [POST-166] Got login request with identifier: {'type': 'm.id.user', 'user': 'user'}, medium: None, address: None, user: None
фев 08 07:14:08 mx synapse[137259]: synapse.handlers.auth: [POST-166] Logging in user @user:domain.ltd on device RHXDZCSEEO
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [POST-166] 46.173.7.9 - 8008 - {None} Processed request: 0.027sec/0.001sec (0.013sec, 0.002sec) (0.003sec/0.011sec/4) 309B 200 "POST /_matrix/client/r0/login HTTP/1.0" "Mozil>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-167] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.000sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/thirdparty/protoc>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-168] 46.173.7.9 - 8008 - {None} Processed request: 0.001sec/0.001sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/unstable/room_keys/v>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-169] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.002sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/voip/turnServer H>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-171] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.002sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/keys/upload HTTP/>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-170] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.003sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/capabilities HTTP>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [GET-172] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.007sec/0.000sec (0.004sec, 0.001sec) (0.001sec/0.003sec/1) 22B 200 "GET /_matrix/client/r0/thirdparty/p>
фев 08 07:14:08 mx synapse[137259]: synapse.handlers.e2e_keys: [POST-176] Updating device_keys for device 'RHXDZCSEEO' for user @user:domain.ltd at 1644293648261
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [GET-174] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.003sec/0.006sec (0.002sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "GET /_matrix/client/r0/voip/turnSer>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [GET-175] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.001sec/0.005sec (0.004sec, 0.000sec) (0.000sec/0.000sec/0) 149B 200 "GET /_matrix/client/r0/capabilitie>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [GET-173] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.026sec/0.000sec (0.003sec, 0.001sec) (0.001sec/0.020sec/2) 285B 200 "GET /_matrix/client/unstable/room_>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [POST-176] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.057sec/0.000sec (0.010sec, 0.001sec) (0.005sec/0.040sec/3) 47B 200 "POST /_matrix/client/r0/keys/uploa>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-177] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.003sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/pushrules/ HTTP/1>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-179] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.002sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/keys/query HTTP/1>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [GET-178] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.004sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 193B 200 "GET /_matrix/client/versions HTTP/1.0" "Mozilla>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [GET-180] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.003sec/0.004sec (0.004sec, 0.000sec) (0.000sec/0.000sec/0) 540B 200 "GET /_matrix/client/r0/pushrules/ >
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [POST-181] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.010sec/0.001sec (0.001sec, 0.002sec) (0.001sec/0.005sec/2) 957B 200 "POST /_matrix/client/r0/keys/quer>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-182] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.000sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/user/%40user%3>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [POST-183] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.008sec/0.000sec (0.005sec, 0.000sec) (0.001sec/0.002sec/1) 38B 200 "POST /_matrix/client/r0/user/%40ke>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-184] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.000sec (0.003sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/sync?filter=0&tim>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [GET-185] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.021sec/0.001sec (0.005sec, 0.001sec) (0.002sec/0.009sec/4) 1403B 200 "GET /_matrix/client/r0/sync?filte>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-187] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.002sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/profile/%40kerneu>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-188] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.002sec (0.004sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/unstable/org.matrix.>
фев 08 07:14:08 mx synapse[137259]: synapse.handlers.e2e_keys: [POST-190] Adding one_time_keys dict_keys(['signed_curve25519:AAAABQ', 'signed_curve25519:AAAABA', 'signed_curve25519:AAAAAw', 'signed_curve25519:AAAAAg', 'signed_curve25519>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-189] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.004sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/sync?filter=0&tim>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [POST-186] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.025sec/0.001sec (0.008sec, 0.001sec) (0.004sec/0.017sec/2) 957B 200 "POST /_matrix/client/r0/keys/quer>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [POST-190] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.025sec/0.000sec (0.007sec, 0.001sec) (0.007sec/0.011sec/3) 68B 200 "POST /_matrix/client/r0/keys/uploa>
фев 08 07:14:08 mx synapse[137259]: synapse.http.server: [GET-192] <XForwardedForRequest at 0x7fd878819910 method='GET' uri='/_matrix/client/unstable/org.matrix.msc2697.v2/dehydrated_device' clientproto='HTTP/1.0' site=8008> SynapseErro>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [GET-192] 46.173.7.9 - 8008 - {None} Processed request: 0.003sec/0.001sec (0.000sec, 0.002sec) (0.000sec/0.000sec/0) 75B 400 "GET /_matrix/client/unstable/org.matrix.msc2697.>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [GET-191] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.013sec/0.001sec (0.006sec, 0.000sec) (0.002sec/0.005sec/2) 46B 200 "GET /_matrix/client/r0/profile/%40k>
фев 08 07:14:08 mx synapse[137259]: synapse.handlers.e2e_keys: [POST-194] Adding one_time_keys dict_keys(['signed_curve25519:AAAACg', 'signed_curve25519:AAAACQ', 'signed_curve25519:AAAACA', 'signed_curve25519:AAAABw', 'signed_curve25519>
фев 08 07:14:08 mx synapse[137259]: synapse.access.http.8008: [POST-194] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.027sec/0.000sec (0.006sec, 0.007sec) (0.003sec/0.014sec/3) 69B 200 "POST /_matrix/client/r0/keys/uploa>
фев 08 07:14:09 mx synapse[137259]: synapse.handlers.e2e_keys: [POST-195] Adding one_time_keys dict_keys(['signed_curve25519:AAAADw', 'signed_curve25519:AAAADg', 'signed_curve25519:AAAADQ', 'signed_curve25519:AAAADA', 'signed_curve25519>
фев 08 07:14:09 mx synapse[137259]: synapse.access.http.8008: [POST-195] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.019sec/0.001sec (0.007sec, 0.001sec) (0.002sec/0.010sec/3) 69B 200 "POST /_matrix/client/r0/keys/uploa>
фев 08 07:14:09 mx synapse[137259]: synapse.handlers.e2e_keys: [POST-196] Adding one_time_keys dict_keys(['signed_curve25519:AAAAFA', 'signed_curve25519:AAAAEw', 'signed_curve25519:AAAAEg', 'signed_curve25519:AAAAEQ', 'signed_curve25519>
фев 08 07:14:09 mx synapse[137259]: synapse.access.http.8008: [POST-196] 46.173.7.9 - 8008 - {@user:domain.ltd} Processed request: 0.015sec/0.000sec (0.003sec, 0.003sec) (0.001sec/0.009sec/3) 69B 200 "POST /_matrix/client/r0/keys/uploa>
фев 08 07:14:09 mx synapse[137259]: synapse.handlers.e2e_keys: [POST-197] Adding one_time_keys dict_keys(['signed_curve25519:AAAAGQ', 'signed_curve25519:AAAAGA', 'signed_curve25519:AAAAFw', 'signed_curve25519:AAAAFg', 'signed_curve25519>

Absolutely any password is suitable for a user who is registered in the synapse local storage. At the same time, authorization, with obviously not valid data:

фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-265] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.000sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/login HTTP/1.0" ">
фев 08 07:18:55 mx synapse[137259]: synapse.rest.client.v1.login: [POST-266] Got login request with identifier: {'type': 'm.id.user', 'user': 'test'}, medium: None, address: None, user: None
фев 08 07:18:55 mx synapse[137259]: synapse.handlers.auth: [POST-266] Logging in user @test:domain.ltd on device VUHGTOWMUK
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [POST-266] 46.173.7.9 - 8008 - {None} Processed request: 0.030sec/0.000sec (0.012sec, 0.004sec) (0.003sec/0.011sec/4) 306B 200 "POST /_matrix/client/r0/login HTTP/1.0" "Mozil>
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-267] 46.173.7.9 - 8008 - {None} Processed request: 0.001sec/0.001sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/thirdparty/protoc>
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-268] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.000sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/unstable/room_keys/v>
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-269] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.002sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/voip/turnServer H>
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-271] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.001sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/keys/upload HTTP/>
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-270] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.003sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/capabilities HTTP>
фев 08 07:18:55 mx synapse[137259]: synapse.api.auth: [GET-272] Unrecognised access token - not in store.
фев 08 07:18:55 mx synapse[137259]: synapse.http.server: [GET-272] <XForwardedForRequest at 0x7fd8787aa5b0 method='GET' uri='/_matrix/client/r0/thirdparty/protocols' clientproto='HTTP/1.0' site=8008> SynapseError: 401 - Unrecognised acc>
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [GET-272] 46.173.7.9 - 8008 - {None} Processed request: 0.008sec/0.000sec (0.005sec, 0.000sec) (0.001sec/0.003sec/1) 100B 401 "GET /_matrix/client/r0/thirdparty/protocols HTT>
фев 08 07:18:55 mx synapse[137259]: synapse.api.auth: [GET-273] Unrecognised access token - not in store.
фев 08 07:18:55 mx synapse[137259]: synapse.http.server: [GET-273] <XForwardedForRequest at 0x7fd878814a00 method='GET' uri='/_matrix/client/unstable/room_keys/version' clientproto='HTTP/1.0' site=8008> SynapseError: 401 - Unrecognised >
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [GET-273] 46.173.7.9 - 8008 - {None} Processed request: 0.007sec/0.001sec (0.005sec, 0.003sec) (0.000sec/0.000sec/0) 100B 401 "GET /_matrix/client/unstable/room_keys/version >
фев 08 07:18:55 mx synapse[137259]: synapse.api.auth: [GET-274] Unrecognised access token - not in store.
фев 08 07:18:55 mx synapse[137259]: synapse.http.server: [GET-274] <XForwardedForRequest at 0x7fd878821670 method='GET' uri='/_matrix/client/r0/voip/turnServer' clientproto='HTTP/1.0' site=8008> SynapseError: 401 - Unrecognised access t>
фев 08 07:18:55 mx synapse[137259]: synapse.api.auth: [GET-275] Unrecognised access token - not in store.
фев 08 07:18:55 mx synapse[137259]: synapse.http.server: [GET-275] <XForwardedForRequest at 0x7fd87880d4c0 method='GET' uri='/_matrix/client/r0/capabilities' clientproto='HTTP/1.0' site=8008> SynapseError: 401 - Unrecognised access token
фев 08 07:18:55 mx synapse[137259]: synapse.api.auth: [POST-276] Unrecognised access token - not in store.
фев 08 07:18:55 mx synapse[137259]: synapse.http.server: [POST-276] <XForwardedForRequest at 0x7fd8787f78e0 method='POST' uri='/_matrix/client/r0/keys/upload' clientproto='HTTP/1.0' site=8008> SynapseError: 401 - Unrecognised access tok>
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [GET-274] 46.173.7.9 - 8008 - {None} Processed request: 0.003sec/0.013sec (0.004sec, 0.000sec) (0.000sec/0.000sec/0) 100B 401 "GET /_matrix/client/r0/voip/turnServer HTTP/1.0>
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [POST-276] 46.173.7.9 - 8008 - {None} Processed request: 0.002sec/0.001sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 100B 401 "POST /_matrix/client/r0/keys/upload HTTP/1.0" >
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [GET-275] 46.173.7.9 - 8008 - {None} Processed request: 0.008sec/0.005sec (0.010sec, 0.001sec) (0.000sec/0.000sec/0) 100B 401 "GET /_matrix/client/r0/capabilities HTTP/1.0" ">
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-277] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.000sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/logout HTTP/1.0" >
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-278] 46.173.7.9 - 8008 - {None} Processed request: 0.001sec/0.005sec (0.002sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/pushrules/ HTTP/1>
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-280] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.010sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/keys/query HTTP/1>
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [GET-279] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.014sec (0.003sec, 0.000sec) (0.000sec/0.000sec/0) 193B 200 "GET /_matrix/client/versions HTTP/1.0" "Mozilla>
фев 08 07:18:55 mx synapse[137259]: synapse.api.auth: [POST-281] Unrecognised access token - not in store.
фев 08 07:18:55 mx synapse[137259]: synapse.http.server: [POST-281] <XForwardedForRequest at 0x7fd8787f7610 method='POST' uri='/_matrix/client/r0/logout' clientproto='HTTP/1.0' site=8008> SynapseError: 401 - Unrecognised access token
фев 08 07:18:55 mx synapse[137259]: synapse.access.http.8008: [POST-281] 46.173.7.9 - 8008 - {None} Processed request: 0.002sec/0.000sec (0.002sec, 0.000sec) (0.000sec/0.000sec/0) 100B 401 "POST /_matrix/client/r0/logout HTTP/1.0" "Mozi>
фев 08 07:18:55 mx synapse[137259]: synapse.api.auth: [GET-282] Unrecognised access token - not in store.
фев 08 07:18:56 mx synapse[137259]: synapse.http.server: [GET-282] <XForwardedForRequest at 0x7fd87885c190 method='GET' uri='/_matrix/client/r0/pushrules/' clientproto='HTTP/1.0' site=8008> SynapseError: 401 - Unrecognised access token
фев 08 07:18:56 mx synapse[137259]: synapse.access.http.8008: [GET-282] 46.173.7.9 - 8008 - {None} Processed request: 0.005sec/0.001sec (0.004sec, 0.000sec) (0.000sec/0.000sec/0) 100B 401 "GET /_matrix/client/r0/pushrules/ HTTP/1.0" "Mo>
фев 08 07:18:56 mx synapse[137259]: synapse.api.auth: [POST-283] Unrecognised access token - not in store.
фев 08 07:18:56 mx synapse[137259]: synapse.http.server: [POST-283] <XForwardedForRequest at 0x7fd878814160 method='POST' uri='/_matrix/client/r0/keys/query' clientproto='HTTP/1.0' site=8008> SynapseError: 401 - Unrecognised access token
фев 08 07:18:56 mx synapse[137259]: synapse.access.http.8008: [POST-283] 46.173.7.9 - 8008 - {None} Processed request: 0.002sec/0.000sec (0.004sec, 0.000sec) (0.000sec/0.000sec/0) 100B 401 "POST /_matrix/client/r0/keys/query HTTP/1.0" ">

When trying to use user data contained in the LDAP database: Element error: Signed Out For security, this session has been signed out. Please sign in again.

фев 08 07:21:27 mx synapse[137259]: synapse.rest.client.v1.login: [POST-309] Got login request with identifier: {'type': 'm.id.user', 'user': 'ldap_user'}, medium: None, address: None, user: None
фев 08 07:21:28 mx synapse[137259]: synapse.handlers.auth: [POST-309] Logging in user @ldap_user:domain.ltd on device WMABEXCMVF
фев 08 07:21:28 mx synapse[137259]: synapse.access.http.8008: [POST-309] 46.173.7.9 - 8008 - {None} Processed request: 0.042sec/0.000sec (0.018sec, 0.003sec) (0.004sec/0.019sec/6) 310B 200 "POST /_matrix/client/r0/login HTTP/1.0" "Mozil>
фев 08 07:21:28 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-310] 46.173.7.9 - 8008 - {None} Processed request: 0.001sec/0.000sec (0.002sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/thirdparty/protoc>
фев 08 07:21:28 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-311] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.001sec (0.003sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/unstable/room_keys/v>
фев 08 07:21:28 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-312] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.002sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/voip/turnServer H>
фев 08 07:21:28 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-313] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.000sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/capabilities HTTP>
фев 08 07:21:28 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-314] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.000sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/keys/upload HTTP/>
фев 08 07:21:28 mx synapse[137259]: synapse.api.auth: [GET-315] Unrecognised access token - not in store.
фев 08 07:21:28 mx synapse[137259]: synapse.http.server: [GET-315] <XForwardedForRequest at 0x7fd8787b1d60 method='GET' uri='/_matrix/client/r0/thirdparty/protocols' clientproto='HTTP/1.0' site=8008> SynapseError: 401 - Unrecognised acc>
фев 08 07:21:28 mx synapse[137259]: synapse.access.http.8008: [GET-315] 46.173.7.9 - 8008 - {None} Processed request: 0.009sec/0.000sec (0.008sec, 0.000sec) (0.001sec/0.002sec/1) 100B 401 "GET /_matrix/client/r0/thirdparty/protocols HTT>
фев 08 07:21:28 mx synapse[137259]: synapse.metrics: [] Collecting gc 1
фев 08 07:21:28 mx synapse[137259]: synapse.api.auth: [GET-316] Unrecognised access token - not in store.
фев 08 07:21:28 mx synapse[137259]: synapse.http.server: [GET-316] <XForwardedForRequest at 0x7fd87882f100 method='GET' uri='/_matrix/client/unstable/room_keys/version' clientproto='HTTP/1.0' site=8008> SynapseError: 401 - Unrecognised >
фев 08 07:21:28 mx synapse[137259]: synapse.access.http.8008: [GET-316] 46.173.7.9 - 8008 - {None} Processed request: 0.003sec/0.000sec (0.002sec, 0.000sec) (0.000sec/0.000sec/0) 100B 401 "GET /_matrix/client/unstable/room_keys/version >
фев 08 07:21:28 mx synapse[137259]: synapse.api.auth: [GET-317] Unrecognised access token - not in store.
фев 08 07:21:28 mx synapse[137259]: synapse.http.server: [GET-317] <XForwardedForRequest at 0x7fd87881c3a0 method='GET' uri='/_matrix/client/r0/voip/turnServer' clientproto='HTTP/1.0' site=8008> SynapseError: 401 - Unrecognised access t>
фев 08 07:21:28 mx synapse[137259]: synapse.access.http.8008: [GET-317] 46.173.7.9 - 8008 - {None} Processed request: 0.002sec/0.000sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 100B 401 "GET /_matrix/client/r0/voip/turnServer HTTP/1.0>
фев 08 07:21:28 mx synapse[137259]: synapse.api.auth: [GET-318] Unrecognised access token - not in store.
фев 08 07:21:28 mx synapse[137259]: synapse.http.server: [GET-318] <XForwardedForRequest at 0x7fd8787ea5e0 method='GET' uri='/_matrix/client/r0/capabilities' clientproto='HTTP/1.0' site=8008> SynapseError: 401 - Unrecognised access token
фев 08 07:21:28 mx synapse[137259]: synapse.access.http.8008: [GET-318] 46.173.7.9 - 8008 - {None} Processed request: 0.002sec/0.000sec (0.004sec, 0.000sec) (0.000sec/0.000sec/0) 100B 401 "GET /_matrix/client/r0/capabilities HTTP/1.0" ">
фев 08 07:21:28 mx synapse[137259]: synapse.api.auth: [POST-319] Unrecognised access token - not in store.
фев 08 07:21:28 mx synapse[137259]: synapse.http.server: [POST-319] <XForwardedForRequest at 0x7fd87885ca30 method='POST' uri='/_matrix/client/r0/keys/upload' clientproto='HTTP/1.0' site=8008> SynapseError: 401 - Unrecognised access tok>
фев 08 07:21:28 mx synapse[137259]: synapse.access.http.8008: [POST-319] 46.173.7.9 - 8008 - {None} Processed request: 0.001sec/0.000sec (0.004sec, 0.000sec) (0.000sec/0.000sec/0) 100B 401 "POST /_matrix/client/r0/keys/upload HTTP/1.0" >
фев 08 07:21:28 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-320] 46.173.7.9 - 8008 - {None} Processed request: 0.001sec/0.001sec (0.003sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/logout HTTP/1.0" >
фев 08 07:21:28 mx synapse[137259]: synapse.access.http.8008: [OPTIONS-321] 46.173.7.9 - 8008 - {None} Processed request: 0.000sec/0.000sec (0.000sec, 0.000sec) (0.000sec/0.000sec/0) 22B 200 "OPTIONS /_matrix/client/r0/pushrules/ HTTP/1>

What have I done wrong?