LDAP Authentication Err: Failed to compute the privilege for the user. socket closed

[WillWhite1]

Hi All

I'm wondering if anyone has thoughts on an issue I am having with ArcGIS Server 10.1 SP1.

I am managing users via an LDAP server. If I am accessing mapservices or indeed Manager/Admin Directory from a browser, following after a period of inactivity (2 hours I think) I am unable to re-authenticate. I get a message saying that the user doesn't have permission to access. I need to clear the browser cache, or re-open the browser/clear cache in order to be able to re-authenticate.

In the server logs I am getting:

"Failed to compute the privilege for the user '<user>'. <ldapserver>:<port>; socket closed"

I dont think there are any firewalls between my ArcGIS Server and the LDAP server.

I am using a webadaptor, with web authentication.

Any thoughts on how to either extend this time out or remove it all together?

Thanks in advance

Will

[BubbaHey]

Does the username contain a comma or other non-standard character? IF so, there is a bug on this, remove the character

[WillWhite1]

Does the username contain a comma or other non-standard character? IF so, there is a bug on this, remove the character

Thanks for your suggestion: It contains a couple of hyphens: ie a bit like this "abcde-f-ghi". Is this considered a non-standard charater?

[BubbaHey]

That should be fine.  Did you find a resolution?

[JustinRodriguez]

I think this is just saying that the user isn't found. First, does windows authentication work at the GIS Tier? Thanks-

[WillWhite1]

I think this is just saying that the user isn't found. First, does windows authentication work at the GIS Tier? Thanks-

Thanks for your comments. I've not tried GIS Tier Authentication - would this model support Windows Authentication?

I'm investigating increasing the TCP timeout to see if this helps.

[JustinRodriguez]

Hello again,
No GIS Tier does not support the Windows Authentication, but you can use Windows to Authenticate. It would be a way to tell if the issue is on the server side or the web tier side. Thanks-

Justin

[BubbaHey]

I agree with Justin, try GIS. The only advantage (really) with Web Tier is single sign-on. Problem is it limits you, and I've seen problems publishing using Web tier.

[NathanSommers]

Good Morning,

I too have this same issue and I was wondering if you have found a solution to this problem.  In my instance I have found that the user group the user is a member of has lost all privileges for a specific service.  Once I go into ArcGIS Manager and restore the permissions for that user group all is well.  I do not however have any idea as to why the permissions get removed in the first place.  Any thoughts would be greatly appreciated.

Thanks,
Ian

[JamesCameron1]

I too am having this issue.....

We have a large AD with a large number of groups.... I wonder if it is a Kerberos token size issue......

This issue sound kind of like it http://support.esri.com/en/bugs/nimbus/TklNMDg2ODA3

Apart from I am using 10.2 so it should be resolved....

Had the same issue on upgrade and fresh install (on a new OS).....