Skip to content

LDAP user disabled after response timed out #11199

@sureshanaparti

Description

@sureshanaparti

problem

When the LDAP server response timed out, CloudStack immediately disables the user.

javax.naming.NamingException: LDAP response read timed out, timeout used: 1000 ms.

User is disabled from here:

} catch (NoLdapUserMatchingQueryException e) {
logger.debug(e.getMessage());
disableUserInCloudStack(userAccount);

} catch (NamingException | IOException e) {
logger.debug("ldap Exception: ",e);
throw new NoLdapUserMatchingQueryException("No Ldap User found for username: "+username);

versions

ACS 4.20.1

The steps to reproduce the bug

  1. Keep LDAP server not reachable to the management server (and let the LDAP queries to timeout)
  2. Login with the LDAP user

What to do about it?

Either ignore the timed out errors from the LDAP server during user queries, or allow re-attempts based the configuration 'incorrect.login.attempts.allowed'.

Metadata

Metadata

Type

No type

Projects

Status

ready for Review

Relationships

None yet

Development

No branches or pull requests

Issue actions