Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-22169

Internal/Local artifactory users are being searched in LDAP, causing massive unnecessary LDAP lookups and log spam

    XMLWordPrintable

    Details

    • Severity:
      Critical

      Description

      Hello,

      Just like the title says, we have been plagued by this issue since version 5.x...

      We have some local users that are only used for local Artifactory operations, and some of them are quite spammy.

      • This is causing some unnecessary load on our LDAP servers
      • Also a lot of spams in our logs as you can see below

      Is there any way of preventing this to happen? For example, there could be some sort of flag for disabling LDAP Auth for local users, or just some of them with some sort of caching for users not found in the ldap server.

      Below are some logs that we extracted from Artifactory demonstrating this issue:

      2020-05-19 09:48:02,738 [http-nio-8081-exec-107] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:02,870 [http-nio-8081-exec-106] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:03,814 [http-nio-8081-exec-152] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:04,654 [http-nio-8081-exec-167] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:05,993 [http-nio-8081-exec-37] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:06,206 [http-nio-8081-exec-74] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:06,957 [http-nio-8081-exec-114] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:07,672 [http-nio-8081-exec-93] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:07,789 [http-nio-8081-exec-187] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:08,081 [http-nio-8081-exec-124] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:09,447 [http-nio-8081-exec-190] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:09,568 [http-nio-8081-exec-131] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:10,390 [http-nio-8081-exec-29] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:12,683 [http-nio-8081-exec-69] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:12,885 [http-nio-8081-exec-55] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:14,087 [http-nio-8081-exec-96] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:16,830 [http-nio-8081-exec-169] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:16,983 [http-nio-8081-exec-73] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:18,114 [http-nio-8081-exec-34] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:18,244 [http-nio-8081-exec-158] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:18,441 [http-nio-8081-exec-72] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:20,404 [http-nio-8081-exec-187] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:21,164 [http-nio-8081-exec-124] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:21,285 [http-nio-8081-exec-141] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:21,440 [http-nio-8081-exec-183] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:21,708 [http-nio-8081-exec-131] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM
2020-05-19 09:48:22,448 [http-nio-8081-exec-103] [INFO ] (o.a.s.l.LdapServiceImpl:147) - Couldn't find user named "flux" in COMPANY.COM

       

        Attachments

          Issue Links

          is cloned by

          Improvement - An improvement or enhancement to an existing feature or task RTFACT-7630 Internal Authentication tries LDAP first if a LDAP Server is configured

          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product RTFACT-17129 Trying to search user "_internal" when using ldap

          • Done

            Activity

                People

                Assignee:
                Unassigned
                Reporter:
                calexandre Carlos Alexandre
                Votes:
                4 Vote for this issue
                Watchers:
                7 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved:

                    Sync Status

                    Connection: RTFACT Sync
                    RTMID-22169 -
                    SYNCHRONIZED
                    • Last Sync Date: