The purpose of this thread is to discuss upgrade issues.
I upgraded our TEST environment from 6.7.0 to 7.0.3, and found the Active Directory authentication failed to work. Users using their AD credentials could NOT login to the CMS server
I logged into Rhythmyx Server Administrator using a DB side username/password. Inside the Security tab I can use the AD connection to search/find/add Active Directory users/groups to a role. Clearly there is nothing wrong in the connection from CMS to AD server. When I login to CMS server using my correct NIH credentials, NO error spit out in 7.0.3 server log. However, if I try to login with some random user name and password which do NOT exist in either AD server nor DB side, the server log displays error like
2012-01-20 08:22:00,536 INFO [com.percussion.services.security.loginmods.impl.PSLoginMgr] The security provider “ADConnection/ADConnection” could not authenticate user “qwe” : Authentication failed for directory ‘ADConnection_nas08’ and " + authentication ‘ADConnection’. The error was: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1772]
Authentication failed for directory ‘ADConnection_nas07’ and " + authentication ‘ADConnection’. The error was: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1772]
Authentication failed for directory ‘ADConnection_nas06’ and " + authentication ‘ADConnection’. The error was: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1772]
Authentication failed for directory ‘ADConnection_nas05’ and " + authentication ‘ADConnection’. The error was: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1772]
Authentication failed for directory ‘ADConnection_nas04’ and " + authentication ‘ADConnection’. The error was: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1772]
Authentication failed for directory ‘ADConnection_nas03’ and " + authentication ‘ADConnection’. The error was: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1772]
Authentication failed for directory ‘ADConnection_nas02’ and " + authentication ‘ADConnection’. The error was: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1772]
Authentication failed for directory ‘ADConnection_nas09’ and " + authentication ‘ADConnection’. The error was: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1772]
Authentication failed for directory ‘ADConnection_nas01’ and " + authentication ‘ADConnection’. The error was: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1772]
Authentication failed for directory ‘ADConnection_NINR’ and " + authentication ‘ADConnection’. The error was: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1772]
; The security provider “BackEndTable/rxmaster” could not authenticate user “qwe”.;
I was told the AD connection directory configuration must be detailed to the immediate ou where the user accounts is under. That is why you see ADConnection_nas01 all the way to ADConnection_nas09
Percussion PSO consultant helped us configured the AD configuration which works under 6.7.0. Do you know what changes in 7.0.3 would cause the AD authentication fail?
Thanks, Hua
This issue was caused mainly by a performance error retrieving all groups under the LDAP group provider. It was resolved by adding a filter to the directory node for the group provider. Syntax is: <directory node>?(filter)
Example: OU=Groups,DC=company,DC=com?(CN=perc_*)
Does installation count as a part of upgrade experiences. I tried installing 7 on a windows server 2008 R2 and the installation was not sucessful. The log returned the following message:
BUILD FAILED
C:\Users~\AppData\Local\Temp\2\054170.tmp\system\installResources\install.xml:548: The following error occurred while executing this line:
C:\Users~\AppData\Local\Temp\2\054170.tmp\system\installResources\install.xml:1230: Unable to remove existing file D:\Rhythmyx\AppServer\server\rx\lib\javax.servlet.jar
Please help