Uploaded image for project: 'JBoss Enterprise Portal Platform'
  1. JBoss Enterprise Portal Platform
  2. JBEPP-1469

Deleting a group causes IdentityException with openldap

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Migrated to another ITS
    • Affects Version/s: 5.2.0.GA
    • Fix Version/s: 5.2.1.GA
    • Component/s: Portal
    • Labels:
      None
    • NEEDINFO:
      Nobody

      Description

      Deleting a group causes IdentityException with openldap.

      18:04:16,922 INFO  [GroupDAOImpl] Identity operation error: 
      org.picketlink.idm.common.exception.IdentityException: Identity object search failed.
      	at org.picketlink.idm.impl.store.ldap.LDAPIdentityStoreImpl.findIdentityObject(LDAPIdentityStoreImpl.java:886)
      	at org.picketlink.idm.impl.store.ldap.LDAPIdentityStoreImpl.findIdentityObject(LDAPIdentityStoreImpl.java:1240)
      	at org.picketlink.idm.impl.store.ldap.LDAPIdentityStoreImpl.findIdentityObject(LDAPIdentityStoreImpl.java:1125)
      	at org.picketlink.idm.impl.repository.FallbackIdentityStoreRepository.findIdentityObject(FallbackIdentityStoreRepository.java:967)
      	at org.picketlink.idm.impl.api.session.managers.RelationshipManagerImpl.findAssociatedGroups(RelationshipManagerImpl.java:946)
      	at org.picketlink.idm.impl.api.session.managers.RelationshipManagerImpl.findAssociatedGroups(RelationshipManagerImpl.java:1006)
      	at org.exoplatform.services.organization.idm.GroupDAOImpl.findGroups(GroupDAOImpl.java:489)
      	at org.exoplatform.organization.webui.component.UIGroupExplorer.changeGroup(UIGroupExplorer.java:123)
      	at org.exoplatform.organization.webui.component.UIGroupManagement$DeleteGroupActionListener.execute(UIGroupManagement.java:160)
      	at org.exoplatform.webui.event.Event.broadcast(Event.java:89)
      	at org.exoplatform.webui.core.lifecycle.Lifecycle.processAction(Lifecycle.java:56)
      	at org.exoplatform.webui.core.UIComponent.processAction(UIComponent.java:133)
      ...
      Caused by: javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object]; remaining name 'cn=BBBB,ou=Platform,o=portal,o=gatein,dc=my-domain,dc=com'
      	at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3066)
      	at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2987)
      	at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2794)
      	at com.sun.jndi.ldap.LdapCtx.c_getAttributes(LdapCtx.java:1309)
      	at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_getAttributes(ComponentDirContext.java:213)
      	at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.getAttributes(PartialCompositeDirContext.java:121)
      	at javax.naming.directory.InitialDirContext.getAttributes(InitialDirContext.java:133)
      	at javax.naming.directory.InitialDirContext.getAttributes(InitialDirContext.java:128)
      	at org.picketlink.idm.impl.store.ldap.LDAPIdentityStoreImpl.findIdentityObject(LDAPIdentityStoreImpl.java:854)
      	... 142 more
      18:04:17,007 ERROR [portal:UIPortalApplication] Error during the processAction phase
      org.picketlink.idm.common.exception.IdentityException: Identity object search failed.
      	at org.picketlink.idm.impl.store.ldap.LDAPIdentityStoreImpl.findIdentityObject(LDAPIdentityStoreImpl.java:886)
      	at org.picketlink.idm.impl.store.ldap.LDAPIdentityStoreImpl.resolveRelationships(LDAPIdentityStoreImpl.java:1649)
      	at org.picketlink.idm.impl.store.ldap.LDAPIdentityStoreImpl.getRelationshipsCount(LDAPIdentityStoreImpl.java:1570)
      	at org.picketlink.idm.impl.repository.FallbackIdentityStoreRepository.getRelationshipsCount(FallbackIdentityStoreRepository.java:1254)
      	at org.picketlink.idm.impl.api.session.managers.RoleManagerImpl.getRolesCount(RoleManagerImpl.java:883)
      	at org.exoplatform.services.organization.idm.IDMMembershipListAccess.getSize(IDMMembershipListAccess.java:173)
      	at org.exoplatform.organization.webui.component.UIUserInGroup.setValues(UIUserInGroup.java:138)
      	at org.exoplatform.organization.webui.component.UIGroupInfo.setGroup(UIGroupInfo.java:46)
      	at org.exoplatform.organization.webui.component.UIGroupExplorer.changeGroup(UIGroupExplorer.java:141)
      	at org.exoplatform.organization.webui.component.UIGroupManagement$DeleteGroupActionListener.execute(UIGroupManagement.java:160)
      	at org.exoplatform.webui.event.Event.broadcast(Event.java:89)
      	at org.exoplatform.webui.core.lifecycle.Lifecycle.processAction(Lifecycle.java:56)
      	at org.exoplatform.webui.core.UIComponent.processAction(UIComponent.java:133)
      ...
      

      The group explorer keeps throwing this exception until you remove the parent group('AAAA').

      IDM seems to remove only a group but not a relationship??
      I observe that the relationship remains in AAAA even though BBBB itself was removed.

      dn: cn=AAAA,ou=Platform,o=portal,o=gatein,dc=my-domain,dc=com
      objectClass: top
      objectClass: groupOfNames
      cn: AAAA
      member: ou=placeholder,o=portal,o=gatein,dc=my-domain,dc=com
      member: cn=BBBB,ou=Platform,o=portal,o=gatein,dc=my-domain,dc=com
      

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  bdaw Boleslaw Dawidowicz
                  Reporter:
                  tkobayashi Toshiya Kobayashi
                • Votes:
                  1 Vote for this issue
                  Watchers:
                  2 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: