Skip to content

[FireEdge] Misleading error message in case of LDAP authentication failure when LDAP server is not reachable #6813

Open
OpenNebula/one-docs
#991

Description

@OpenNebulaSupport

Description
When the LDAP user tries to be authenticated in the FireEdge Sunstone when the LDAP server is not reachable for some reason he gets a misleading error message:

Wrong username or password

whereas oned.log file has the following entries:

Thu Dec  5 12:22:28 2024 [Z0][AuM][D]: _authenticate: Trying LDAP server server 1  Exception raised with LDAP server 1: Connection refused - connect(2) for 127.0.0.1:389 Could not authenticate user userX
Thu Dec  5 12:22:28 2024 [Z0][AuM][E]: Auth Error: Trying LDAP server server 1  Exception raised with LDAP server 1: Connection refused - connect(2) for 127.0.0.1:389 Could not authenticate user userX
Thu Dec  5 12:22:28 2024 [Z0][ReM][D]: Req:5936 UID:-1 IP:127.0.0.1 one.user.info invoked , -1, false
Thu Dec  5 12:22:28 2024 [Z0][ReM][E]: Req:5936 UID:- one.user.info result FAILURE [one.user.info] User couldn't be authenticated, aborting call.

To Reproduce
Create a user with LDAP-based authentication.
Prevent the OpenNebula to contact LDAP server.
Try to log into FSunstone as the LDAP user.

Expected behavior
The error message should be clear about a reason of failure, i.e. it should show something like:

Can't contact LDAP server at `<LDAP server endpoint>`. Couldn't authenticate the user <username>

Details

  • Affected Component: FSunstone
  • Version: 6.10.1, development

Progress Status

  • Code committed
  • Testing - QA
  • Documentation (Release notes - resolved issues, compatibility, known issues)

Metadata

Metadata

Type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions