Error logging in with Active Directory plugin 1.15

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Error logging in with Active Directory plugin 1.15

Hayes, Peter
Error logging in with Active Directory plugin 1.15

I received a stack overflow error while logging in with the latest Active Directory plugin:

INFO   | jvm 1    | 2009/07/02 13:49:37 | 2009-07-02 13:49:37.674::WARN:  Error for /j_acegi_security_check

INFO   | jvm 1    | 2009/07/02 13:49:37 | java.lang.StackOverflowError

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at sun.nio.cs.UTF_8$Decoder.decodeArrayLoop(UTF_8.java:241)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at sun.nio.cs.UTF_8$Decoder.decodeLoop(UTF_8.java:305)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.nio.charset.CharsetDecoder.decode(CharsetDecoder.java:544)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.lang.StringCoding$StringDecoder.decode(StringCoding.java:140)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.lang.StringCoding.decode(StringCoding.java:173)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.lang.String.<init>(String.java:444)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.lang.String.<init>(String.java:516)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.BerDecoder.parseStringWithTag(BerDecoder.java:245)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.BerDecoder.parseString(BerDecoder.java:204)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapClient.parseAttribute(LdapClient.java:688)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapClient.getSearchReply(LdapClient.java:632)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:534)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1957)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapCtx.doSearchOnce(LdapCtx.java:1906)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapCtx.c_getAttributes(LdapCtx.java:1299)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_getAttributes(ComponentDirContext.java:213)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.getAttributes(PartialCompositeDirContext.java:121)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.getAttributes(PartialCompositeDirContext.java:109)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:143)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

Peter Hayes

Strategic Advisors Technology, Fidelity Investments

Reply | Threaded
Open this post in threaded view
|

RE: Error logging in with Active Directory plugin 1.14

Hayes, Peter
Error logging in with Active Directory plugin 1.15

Sorry, that should be Active Directory plugin 1.14.

 

From: Hayes, Peter
Sent: Thursday, July 02, 2009 1:54 PM
To: [hidden email]
Subject: Error logging in with Active Directory plugin 1.15

 

I received a stack overflow error while logging in with the latest Active Directory plugin:

INFO   | jvm 1    | 2009/07/02 13:49:37 | 2009-07-02 13:49:37.674::WARN:  Error for /j_acegi_security_check

INFO   | jvm 1    | 2009/07/02 13:49:37 | java.lang.StackOverflowError

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at sun.nio.cs.UTF_8$Decoder.decodeArrayLoop(UTF_8.java:241)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at sun.nio.cs.UTF_8$Decoder.decodeLoop(UTF_8.java:305)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.nio.charset.CharsetDecoder.decode(CharsetDecoder.java:544)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.lang.StringCoding$StringDecoder.decode(StringCoding.java:140)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.lang.StringCoding.decode(StringCoding.java:173)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.lang.String.<init>(String.java:444)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.lang.String.<init>(String.java:516)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.BerDecoder.parseStringWithTag(BerDecoder.java:245)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.BerDecoder.parseString(BerDecoder.java:204)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapClient.parseAttribute(LdapClient.java:688)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapClient.getSearchReply(LdapClient.java:632)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:534)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1957)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapCtx.doSearchOnce(LdapCtx.java:1906)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapCtx.c_getAttributes(LdapCtx.java:1299)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_getAttributes(ComponentDirContext.java:213)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.getAttributes(PartialCompositeDirContext.java:121)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.getAttributes(PartialCompositeDirContext.java:109)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:143)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

Peter Hayes

Strategic Advisors Technology, Fidelity Investments

Reply | Threaded
Open this post in threaded view
|

RE: RE: Error logging in with Active Directory plugin 1.14

Nord, James
Error logging in with Active Directory plugin 1.15
Hi Peter,
 
My initial thought is this was releated to the new group resovlving but there is an exlplicit check to prevent this type of thing unless GrantedAuthorityImpl doesn't implement equals correctly which is seems to.
 
Looking at the stack you have at least 10 nested levels of groups (possible more as the bottom of the stack is missing) and I wonder just how many levels you have in your AD setup.
 
Either it's just too many for java stack and I need not to do a recursive call and change the way it grabs all groups or there is a circular reference and there is something fishy in some Hudson auth code.
 
I don't suppose you have a circular group reference do you such that you have several groups A, B, C
and you are a member of A.
A is a member of B
B is a member of C
and C is a member of A..
 
or could tell me what the tree for your group membership looks like? (and all it's groups etc....)
 
If you can't get this information easily are you willing to try a debug build with some more logging in the plugin or a little test app (I can send the source if your worried about entering domain credentials into a random application!)?
 
Regards,
 
    /James


From: Hayes, Peter [mailto:[hidden email]]
Sent: 02 July 2009 18:55
To: [hidden email]
Subject: RE: Error logging in with Active Directory plugin 1.14

Sorry, that should be Active Directory plugin 1.14.

 

From: Hayes, Peter
Sent: Thursday, July 02, 2009 1:54 PM
To: [hidden email]
Subject: Error logging in with Active Directory plugin 1.15

 

I received a stack overflow error while logging in with the latest Active Directory plugin:

INFO   | jvm 1    | 2009/07/02 13:49:37 | 2009-07-02 13:49:37.674::WARN:  Error for /j_acegi_security_check

INFO   | jvm 1    | 2009/07/02 13:49:37 | java.lang.StackOverflowError

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at sun.nio.cs.UTF_8$Decoder.decodeArrayLoop(UTF_8.java:241)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at sun.nio.cs.UTF_8$Decoder.decodeLoop(UTF_8.java:305)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.nio.charset.CharsetDecoder.decode(CharsetDecoder.java:544)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.lang.StringCoding$StringDecoder.decode(StringCoding.java:140)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.lang.StringCoding.decode(StringCoding.java:173)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.lang.String.<init>(String.java:444)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at java.lang.String.<init>(String.java:516)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.BerDecoder.parseStringWithTag(BerDecoder.java:245)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.BerDecoder.parseString(BerDecoder.java:204)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapClient.parseAttribute(LdapClient.java:688)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapClient.getSearchReply(LdapClient.java:632)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:534)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1957)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapCtx.doSearchOnce(LdapCtx.java:1906)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.ldap.LdapCtx.c_getAttributes(LdapCtx.java:1299)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_getAttributes(ComponentDirContext.java:213)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.getAttributes(PartialCompositeDirContext.java:121)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.getAttributes(PartialCompositeDirContext.java:109)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:143)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

INFO   | jvm 1    | 2009/07/02 13:49:37 |       at hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider.resolveGroups(ActiveDirectoryUnixAuthenticationProvider.java:149)

Peter Hayes

Strategic Advisors Technology, Fidelity Investments


**************************************************************************************
This message is confidential and intended only for the addressee. If you have received this message in error, please immediately notify the [hidden email] and delete it from your system as well as any copies. The content of e-mails as well as traffic data may be monitored by NDS for employment and security purposes. To protect the environment please do not print this e-mail unless necessary.

NDS Limited. Registered Office: One London Road, Staines, Middlesex, TW18 4EX, United Kingdom. A company registered in England and Wales. Registered no. 3080780. VAT no. GB 603 8808 40-00
**************************************************************************************