Error Authenticating User in Realm LDAP null

Products

• CA Application Performance Management Agent (APM / Wily / Introscope)
• CA Application Performance Management (APM / Wily / Introscope)
• INTROSCOPE
• DX Application Performance Management

Issue/Introduction

Unable to Authenticate to LDAP. Seeing in EM/Webview Logs:

[DEBUG] [PO:main Mailman 6] [Manager.SessionBean] Called SessionBean.authenticateWorkstation(<user>,***)
[DEBUG] [PO:main Mailman 6] [Manager.SessionBean] Called SessionBean.authenticate(<user>,***)
[DEBUG] [PO:main Mailman 6] [Manager.UserManagementService] javaNamingReferral=follow

[DEBUG] [PO:main Mailman 6] [Manager.UserManagementService] Error authenticating user <user> in realm <realm>: null
 

Environment

Release : 10.7.0

Component : APM Agents

Cause

Invalid password or issue with authentication

Resolution

Customer determined the issue when using clear text passwords. The password or the encryption of the password was incorrect.

Set in realms.xml

        <property name="plainTextPasswords">
            <value>true</value>
        </property>

 

Additional Information

A DEBUG Jar indicated the issue 

The DEBUG logs captured the exception call stack similar to the one below:

 

[DEBUG] [PO:main Mailman 4] [Manager.UserManagementService] Error authenticating user <user> in realm <realm>: null
[DEBUG] [PO:main Mailman 4] [Manager.UserManagementService] 

org.jasypt.exceptions.EncryptionOperationNotPossibleException
    at org.jasypt.encryption.pbe.StandardPBEByteEncryptor.decrypt(StandardPBEByteEncryptor.java:974)
    at org.jasypt.encryption.pbe.StandardPBEStringEncryptor.decrypt(StandardPBEStringEncryptor.java:725)
    at com.wily.authentication.ldap.LdapRealm.getInitialDirContext(LdapRealm.java:511)
    at com.wily.authentication.ldap.LdapRealm.getSafeUser(LdapRealm.java:279)
    at com.wily.introscope.server.beans.usermgmt.ARealm.userExists(ARealm.java:199)
    at com.wily.introscope.server.beans.usermgmt.internal.UserManagementServiceBean.authenticate(UserManagementServiceBean.java:446)
    at com.wily.introscope.server.beans.session.SessionBean.authenticateWebConnections(SessionBean.java:1509)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at com.wily.isengard.messageprimitives.MethodCallUtilities.callInterface(MethodCallUtilities.java:75)
    at com.wily.isengard.messageprimitives.MethodCallUtilities.callInterface(MethodCallUtilities.java:29)
    at com.wily.isengard.messageprimitives.service.MessageService.attemptMethodCall(MessageService.java:183)
    at com.wily.isengard.messageprimitives.service.MessageService.handleMethodCallMessage(MessageService.java:135)
    at com.wily.isengard.messageprimitives.service.MessageService.receiveMessage(MessageService.java:161)
    at com.wily.isengard.postoffice.Mailbox.handleMessage(Mailbox.java:252)
    at com.wily.isengard.postoffice.PostOffice.deliverInternal(PostOffice.java:532)
    at com.wily.isengard.postoffice.PostOffice.access$2(PostOffice.java:478)
    at com.wily.isengard.postoffice.PostOffice$DeliveryItem.run(PostOffice.java:886)
    at com.wily.EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(PooledExecutor.java:728)
    at java.lang.Thread.run(Thread.java:745)
 

It indicates an issue in decrypting the password.  Please double check the password encryption and the encrypted string.