Login OMERO with LDAP authentication only works sometimes

[albot]

Hi all,

Any help would be appreciated with the following issue:

We have set up an OMERO 4.3.4 server and use LDAP authentication to the university's LDAP server.

Most of our users experience a somewhat rare problem:
Upon login with their user account OMERO insight seems to hang for a while. Only if you try repeatedly, you can login to OMERO.
The same behavior is observed via the web client.

Once you have successfully logged in and you login again with the same or another user account, the login works immediately.

Did anyone else have a similar issue? I suppose that it is related to the nature of the LDAP server.
Any suggestions more than welcome.

Best,
Alexander

[cxallan]

We've had some of the same problems with our University LDAP server. Basically queries were timing out, and of course if OMERO cannot make queries to your LDAP server... it's not going to let you login. You'd want to have a look at the Blitz-0.log and see if you have any query timeouts there.

[rdccmemg]

Dear,

I've attached a zip file containing a failure.txt and success.txt.
Failure contains part of the log file where I failed to logon to the omero webclient

success contains part of the log file where, with the same account, I am able to login the webclient.

Everything looks sort of the same to me up to line 143.
In the failure version he starts closing the session. I can't find the reason for that ...

any help is much appreciated.

Best,
Raf

PS: This is the system Alexander is talking about.

[jmoore]

Hi Raf,

in both logs, I see only 1 login (as your user) and both are successful. The closing of the sessions that you see at line 143 may be an unrelated event caused by a timeout in a client. Do you still have the entire logs, and perhaps even master.err or master.out (from under var/log) that you could provide us?

Thanks,
~Josh

[rdccmemg]

Hi Josh,

I've uploaded the entire log from 14h00.
I had a non-logon at 14h10

I had a look at master.err I found these 2 entries probably caused by a restart of the system:
06/25/12 13:57:02.237 icegridnode: warning: exception occurred while deactivating `OMERO.IceStorm' using process proxy:
Network.cpp:1220: Ice::ConnectionRefusedException:
connection refused: Connection refused
06/25/12 13:57:02.237 icegridnode: warning: exception occurred while deactivating `OMERO.Glacier2' using process proxy:
Network.cpp:1220: Ice::ConnectionRefusedException:
connection refused: Connection refused

master.out showed completely nothing.

Thanks for your help.

Best,
Raf

[jmoore]

Hi Raf,

just an update that I have been looking through your files, but so far can't figure out what's going wrong or where. If you notice anything new, please let me know.

~Josh