[#JRA-8486] LDAP in 3.4 broken if TLS is unsupported

JIRA

LDAP in 3.4 broken if TLS is unsupported

Created: 10/Nov/05 10:06 PM Updated: 30/Jul/06 07:37 PM

Component/s:

Licensing

Affects Version/s:

3.4

Fix Version/s:

3.4.1

Time Tracking:

Not Specified

Issue Links:

Cause

This issue causes:

~~JRA-8495~~ LDAP authentication fails on login (but not on 'Configure LDAP authentication' screen!)

~~JRA-8474~~ LDAP authentication against Active Directory seems to be broken in 3.4 Enterprise

Duplicate

This issue is duplicated by:

~~JRA-8475~~ Error connecting to LDAP via ldap://

Participants:	Jeff Turner [Atlassian]
Since last comment:	2 years, 41 weeks, 4 days ago
Resolution Date:	10/Nov/05 10:43 PM
Labels:

Description

« Hide

When using LDAP with JIRA 3.4, user authentication will fail with the following error if TLS is unsupported by the server:

2005-11-11 14:59:01,480 [webwork.dispatcher.ServletDispatcher] Unable to find 'webwork.multipart.saveDir' property setting. Defaulting to javax.servlet.context.tempdir
2005-11-11 14:59:25,916 ERROR [user.provider.ldap.LDAPCredentialsProvider] Error negotiating TLS connection: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
	at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:150)
	at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:117)
	at com.sun.net.ssl.internal.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1542)
	at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:863)
	at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1025)
	at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1038)
	at com.sun.jndi.ldap.ext.StartTlsResponseImpl.startHandshake(StartTlsResponseImpl.java:344)
	at com.sun.jndi.ldap.ext.StartTlsResponseImpl.negotiate(StartTlsResponseImpl.java:208)
	at com.sun.jndi.ldap.ext.StartTlsResponseImpl.negotiate(StartTlsResponseImpl.java:161)
	at com.opensymphony.user.provider.ldap.LDAPCredentialsProvider.authenticate(LDAPCredentialsProvider.java:127)
	at com.opensymphony.user.User.authenticate(User.java:129)

All

Comments

Work Log

Change History

Sort Order:

[ Permlink | « Hide ]

Jeff Turner [Atlassian] added a comment - 10/Nov/05 10:42 PM

This can be fixed by replacing WEB-INF/lib/osuser-1.0-dev-patched-log4j-1.4jdk-21Oct05.jar with the jar at:

http://repository.atlassian.com/osuser/jars/osuser-latest.jar