The Ignore value for Lightweight Directory Access Protocol (LDAP) Referral Property is not working as expected.

Description

Error Message

2025-05-14 11:41:50,260 ERROR [ui.servlet.ErrorMap] (https-jsse-nio2-443-exec-6-superuser:[]) CaseName:[] UserName:[superuser-520672623] Unexpected error: com.teneo.esa.common.exception.TeneoException com.teneo.esa.ui.util.Error: #320004 Directory search failed: null at com.teneo.esa.ui.common.LDAPUserPickerModel.fetchUsers(LDAPUserPickerModel.java:232) ~[testclasses/:?] at com.teneo.esa.ui.common.LDAPUserPickerModel.fetchUsers(LDAPUserPickerModel.java:104) ~[testclasses/:?] at com.teneo.esa.ui.ajax.common.LDAPUserPicker.fetchUsers(LDAPUserPicker.java:63) ~[testclasses/:?] at sun.reflect.GeneratedMethodAccessor1636.invoke(Unknown Source) ~[?:?] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_301] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_301] at com.teneo.esa.ui.servlet.AjaxServlet.doGet(AjaxServlet.java:128) [testclasses/:?] at javax.servlet.http.HttpServlet.service(HttpServlet.java:655) [servlet-api.jar:?] at javax.servlet.http.HttpServlet.service(HttpServlet.java:764) [servlet-api.jar:?] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231) [catalina.jar:8.5.72] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.72] at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) [tomcat-websocket.jar:8.5.72] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.72] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.72] at com.teneo.esa.ui.servlet.XSSFilter.doFilter(XSSFilter.java:150) [testclasses/:?] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.72] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.72] at com.teneo.esa.ui.servlet.CSRFDetectionFilter.doFilter(CSRFDetectionFilter.java:276) [testclasses/:?] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.72] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.72] at com.teneo.esa.ui.auth.SecurityFilter.doFilter(SecurityFilter.java:343) [testclasses/:?] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.72] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.72] at org.apache.catalina.filters.HttpHeaderSecurityFilter.doFilter(HttpHeaderSecurityFilter.java:126) [catalina.jar:8.5.72] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.72] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.72] at com.teneo.esa.ui.session.SessionTrackingFilter.doFilter(SessionTrackingFilter.java:139) [testclasses/:?] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.72] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.72] at com.teneo.esa.ui.servlet.ErrorHandlingFilter.doFilter(ErrorHandlingFilter.java:75) [testclasses/:?] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.72] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.72] at com.teneo.esa.ui.servlet.CacheDisablingFilter.doFilter(CacheDisablingFilter.java:74) [testclasses/:?] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.72] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.72] at com.teneo.esa.ui.servlet.SessionLoggingFilter.doFilter(SessionLoggingFilter.java:55) [testclasses/:?] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.72] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.72] at com.teneo.esa.ui.servlet.RequestAndResponseLoggingFilter.doFilter(RequestAndResponseLoggingFilter.java:661) [testclasses/:?] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.72] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.72] at com.teneo.esa.ui.servlet.ContextSetupFilter.doFilter(ContextSetupFilter.java:84) [testclasses/:?] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.72] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.72] at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:196) [catalina.jar:8.5.72] at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:97) [catalina.jar:8.5.72] at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:542) [catalina.jar:8.5.72] at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:135) [catalina.jar:8.5.72] at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81) [catalina.jar:8.5.72] at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:698) [catalina.jar:8.5.72] at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:78) [catalina.jar:8.5.72] at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:364) [catalina.jar:8.5.72] at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:624) [tomcat-coyote.jar:8.5.72] at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65) [tomcat-coyote.jar:8.5.72] at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:831) [tomcat-coyote.jar:8.5.72] at org.apache.tomcat.util.net.Nio2Endpoint$SocketProcessor.doRun(Nio2Endpoint.java:1615) [tomcat-coyote.jar:8.5.72] at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) [tomcat-coyote.jar:8.5.72] at org.apache.tomcat.util.net.AbstractEndpoint.processSocket(AbstractEndpoint.java:1111) [tomcat-coyote.jar:8.5.72] at org.apache.tomcat.util.net.Nio2Endpoint$Nio2SocketWrapper$2.completed(Nio2Endpoint.java:564) [tomcat-coyote.jar:8.5.72] at org.apache.tomcat.util.net.Nio2Endpoint$Nio2SocketWrapper$2.completed(Nio2Endpoint.java:542) [tomcat-coyote.jar:8.5.72] at org.apache.tomcat.util.net.SecureNio2Channel$1.completed(SecureNio2Channel.java:1010) [tomcat-coyote.jar:8.5.72] at org.apache.tomcat.util.net.SecureNio2Channel$1.completed(SecureNio2Channel.java:938) [tomcat-coyote.jar:8.5.72] at sun.nio.ch.Invoker.invokeUnchecked(Invoker.java:126) [?:1.8.0_301] at sun.nio.ch.Invoker$2.run(Invoker.java:218) [?:1.8.0_301] at sun.nio.ch.AsynchronousChannelGroupImpl$1.run(AsynchronousChannelGroupImpl.java:112) [?:1.8.0_301] at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191) [tomcat-util.jar:8.5.72] at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659) [tomcat-util.jar:8.5.72] at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) [tomcat-util.jar:8.5.72] at java.lang.Thread.run(Thread.java:750) [?:1.8.0_301] Caused by: javax.naming.PartialResultException at com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMoreImpl(AbstractLdapNamingEnumeration.java:237) ~[?:1.8.0_301] at com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMore(AbstractLdapNamingEnumeration.java:189) ~[?:1.8.0_301] at com.teneo.esa.ui.common.LDAPUserPickerModel.fetchUsers(LDAPUserPickerModel.java:210) ~[testclasses/:?] ... 68 more Caused by: javax.naming.CommunicationException: edp.com:389 at com.sun.jndi.ldap.LdapReferralContext.(LdapReferralContext.java:96) ~[?:1.8.0_301] at com.sun.jndi.ldap.LdapReferralException.getReferralContext(LdapReferralException.java:151) ~[?:1.8.0_301] at com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMoreReferrals(AbstractLdapNamingEnumeration.java:325) ~[?:1.8.0_301] at com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMoreImpl(AbstractLdapNamingEnumeration.java:227) ~[?:1.8.0_301] at com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMore(AbstractLdapNamingEnumeration.java:189) ~[?:1.8.0_301] at com.teneo.esa.ui.common.LDAPUserPickerModel.fetchUsers(LDAPUserPickerModel.java:210) ~[testclasses/:?] ... 68 more Caused by: java.net.SocketTimeoutException: connect timed out at java.net.DualStackPlainSocketImpl.waitForConnect(Native Method) ~[?:1.8.0_301] at java.net.DualStackPlainSocketImpl.socketConnect(DualStackPlainSocketImpl.java:81) ~[?:1.8.0_301] at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:476) ~[?:1.8.0_301] at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:218) ~[?:1.8.0_301] at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:200) ~[?:1.8.0_301] at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:162) ~[?:1.8.0_301] at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:394) ~[?:1.8.0_301] at java.net.Socket.connect(Socket.java:606) ~[?:1.8.0_301] at sun.reflect.GeneratedMethodAccessor1634.invoke(Unknown Source) ~[?:?] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_301] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_301] at com.sun.jndi.ldap.Connection.createSocket(Connection.java:369) ~[?:1.8.0_301] at com.sun.jndi.ldap.Connection.(Connection.java:222) ~[?:1.8.0_301] at com.sun.jndi.ldap.LdapClient.(LdapClient.java:137) ~[?:1.8.0_301] at com.sun.jndi.ldap.LdapClient.getInstance(LdapClient.java:1615) ~[?:1.8.0_301] at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2847) ~[?:1.8.0_301] at com.sun.jndi.ldap.LdapCtx.(LdapCtx.java:348) ~[?:1.8.0_301] at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxFromUrl(LdapCtxFactory.java:225) ~[?:1.8.0_301] at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:189) ~[?:1.8.0_301] at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:152) ~[?:1.8.0_301] at com.sun.jndi.url.ldap.ldapURLContextFactory.getObjectInstance(ldapURLContextFactory.java:52) ~[?:1.8.0_301] at javax.naming.spi.NamingManager.getURLObject(NamingManager.java:611) ~[?:1.8.0_301] at javax.naming.spi.NamingManager.processURL(NamingManager.java:391) ~[?:1.8.0_301] at javax.naming.spi.NamingManager.processURLAddrs(NamingManager.java:371) ~[?:1.8.0_301] at javax.naming.spi.NamingManager.getObjectInstance(NamingManager.java:343) ~[?:1.8.0_301] at com.sun.jndi.ldap.LdapReferralContext.(LdapReferralContext.java:119) ~[?:1.8.0_301] at com.sun.jndi.ldap.LdapReferralException.getReferralContext(LdapReferralException.java:151) ~[?:1.8.0_301] at com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMoreReferrals(AbstractLdapNamingEnumeration.java:325) ~[?:1.8.0_301] at com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMoreImpl(AbstractLdapNamingEnumeration.java:227) ~[?:1.8.0_301] at com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMore(AbstractLdapNamingEnumeration.java:189) ~[?:1.8.0_301] at com.teneo.esa.ui.common.LDAPUserPickerModel.fetchUsers(LDAPUserPickerModel.java:210) ~[testclasses/:?] ... 68 more

Cause

Unknown. Being researched by engineering.

Resolution

Workaround: Create local user accounts in eDP and login with the local user accounts.

This issue is currently under investigation by Arctera US LLC. Pending the outcome of the investigation, this issue may be resolved by way of a patch or hotfix in current or future revisions of the software. However, this particular issue is not currently scheduled for any release. If you feel this issue has a direct business impact for you and your continued use of the product, please contact your Arctera Sales representative or the Arctera Sales group to discuss these concerns.

Issue/Introduction

Multiple referrals were configured within Lightweight Directory Access Protocol (LDAP) configuration that pointed to other regions, causing LDAP lookup within eDiscovery Platform (eDP) to timeout and fail. The eDP property esa.ldap.referrals was modified from the value follow to ignore. With the account being on the local server and ignoring the referrals, the account should be authenticated and the socket connections not timeout. For this reported issue, authentication was not working with the ignore value and session connections were still timing out.

Additional Information

JIRA: CFT-7284 JIRA: ESA-65372

Welcome to "KB Articles"