LDAP Identity Service not working

Current Situation

• When used with the built-in JOC Cokcpit LDAP Identity Service then
  • login is not possible when LDAP Servers are used with the attribute memberOf
  • login is not possible when using startTLS

Desired Behavior

• It should be possible to login to LDAP servers that make use of the memberOf attribute.
• Login should be possible using startTLS.

Workaround

Users can fallback to use the Shiro Identity Service that supports LDAP authentication.

Patch

Apply

• Download: https://download.sos-berlin.com/patches/patch-20220311-JOC-1256-JOC-1235-2.2.2_2.2.3.jar
• Copy sos_ldap_for_2.2.2_patch.jar to the WEB-INF/classes directory, for example to /var/sos-berlin.com/js7/joc/webapps/joc/WEB-INF/classes
  • verify the correct directory by checking if the file api-schema-version.json is available in this directory
• Navigate to the WEB-INF/classes directory
• Execute the command: jar xf sos_ldap_for_2.2.2_patch.jar
• Execute the command: rm sos_ldap_for_2.2.2_patch.jar