Problem logging in with LDAP and also running LDAP (AD) import

Problem logging in with LDAP and also running LDAP (AD) import

Hi

We are running the premium edition of PMP and presently have a problem with LDAP / AD integration.

Firstly, AD authentication is working - it was set up a few months ago and the initial import worked as well as ongoing authentication. I tested this today - changed my password on AD and logged into PMP successfully with the new password. 

So far so good.

However today a new employee reported to me that he could not log into the system. I guess the problem was that his account wasn't imported from AD, so tried to "refresh" the user list. I get the error:

LDAP server connection failed

which is misleading because LDAP is definitely working. However, I did find some errors reported in the  serverout0.txt file:

[10:37:54:105]|[10-08-2014]|[com.adventnet.db.adapter.BaseExceptionSorter]|[SEVERE]|[36]: Returning [true] from isDBAlive method|

[10:37:54:109]|[10-08-2014]|[SYSOUT]|[INFO]|[36]: java.sql.BatchUpdateException: Batch entry 0 INSERT INTO Ptrx_UserGroupMembers (USERGROUPID,USERID) VALUES ('1','3') was aborted.  Call getNextException to see the cause.|

... 100 lines of stack trace ...

[10:37:54:117]|[10-08-2014]|[SYSOUT]|[INFO]|[36]: Caused by: org.postgresql.util.PSQLException: ERROR: duplicate key value violates unique constraint "ptrx_usergroupmembers_pk"

  Detail: Key (usergroupid, userid)=(1, 3) already exists.|


It seems that no check is done by the system before the insert is fired, so the database is rejecting the SQL. 


At the moment the employee can't log into PMP even when I manually added him (he can log on locally, but not using LDAP). I see these errors in the same log file:

[10:53:04:187]|[10-08-2014]|[com.adventnet.authentication.internal.PAMImpl]|[INFO]|[48]: LoginException occured for user : xxx with msg : Invalid loginName/password|

[10:53:21:713]|[10-08-2014]|[com.adventnet.authentication.callback.LoginCallbackHandler]|[INFO]|[48]: domainName :: [@MSP] and loginName :: [xxx]|

[10:53:21:788]|[10-08-2014]|[com.adventnet.authentication.PAM]|[INFO]|[48]: Credential obtained after authentication : Credential : [

        UserId      : 608

        LoginId     : 608

        AccountId   : 608

        SessionId   : 1185

        LocaleId    : -1

        LoginName   : xxx

        ServiceName : System

        HostName    : xxx

        UserRoles   : [Password User, AccessAllTables, AccessAllMethods, User, Personal]

        TimeZone    : sun.util.calendar.ZoneInfo[id="GMT",offset=0,dstSavings=0,useDaylight=false,transitions=0,lastRule=null]

        Locale      : en_US]|

[10:53:21:788]|[10-08-2014]|[com.adventnet.authentication.realm.CustomJAASRealm]|[INFO]|[48]: successfully authenticated user : xxx in : 75ms|

What is strange is the last line - successful authentication - but he still cannot log in.

Any ideas? We are running v7.0.0

Thanks
Warren

                  New to ADSelfService Plus?