<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Hello List,</p>
<p><br>
</p>
<p>I'm running <span>OMERO 5.3.1-ice36-b61</span> on a Ubuntu 14.04LTS server authenticating with LDAP. Just last week, an LDAP user noticed that they couldn't log in (Error user-side is
<span class="error">"Error: Connection not available, please check your user name and password.</span>". I checked the logs and I'm getting the following bind failure:</p>
<p><br>
</p>
<p></p>
<div>2017-07-24 10:56:38,787 ERROR [ o.s.blitz.fire.PermissionsVerifierI] (erver-2819) Exception thrown while checking password for:[myUserName]<br>
ome.conditions.InternalException: Wrapped Exception: (org.springframework.ldap.CommunicationException):<br>
</div>
simple bind failed: <span>[myServer]</span>:636; nested exception is javax.naming.CommunicationException: simple bind failed:
<span>[myServer]</span>:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors]
<p></p>
<p><br>
</p>
<p>Local users can still log in (same with Public), but LDAP is failing for a reason unbeknown to me.</p>
<p><br>
</p>
<p>Two questions:</p>
<p>1) Any thoughts on why this might happen (my IT department say nothing has changed on their side - and in fairness my other LDAP calls work - ie on another server)</p>
<p>2) I tried setting [omero.ldap.config=false] hoping that the logins would fall back to the cached database but I get the same error on login. Is this expected behaviour?</p>
<p><br>
</p>
<p>Any thoughts appreciated,</p>
<p><br>
Dave<br>
</p>
</div>
</body>
</html>