LemonLDAP randomly turns in demonstration mode
This occured 2 times in our production environment. After making an action on the manager IHM (adding a new SAML identity provider), and saving the new configuration, LemonLDAP suddenly turns in demonstration mode. A restart of Apache was required to retrieve the normal behavior.
Here are the Apache logs during the issue when someone try to authenticate:
[Mon Feb 12 15:00:02.700765 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Now using configuration: 110
[Mon Feb 12 15:00:02.700897 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::Menu loaded
[Mon Feb 12 15:00:02.700956 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::Display loaded
[Mon Feb 12 15:00:02.701021 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::AuthDemo loaded
[Mon Feb 12 15:00:02.701347 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::UserDBMulti loaded
[Mon Feb 12 15:00:02.701410 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::PasswordDBLDAP loaded
[Mon Feb 12 15:00:02.701754 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::RegisterDBDemo loaded
[Mon Feb 12 15:00:02.702006 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Try issuerDB module SAML
[Mon Feb 12 15:00:02.702018 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Activation flag set to off, trying next
[Mon Feb 12 15:00:02.702025 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Try issuerDB module OpenID
[Mon Feb 12 15:00:02.702031 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Activation flag set to off, trying next
[Mon Feb 12 15:00:02.702037 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Try issuerDB module CAS
[Mon Feb 12 15:00:02.702043 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Activation flag set to off, trying next
[Mon Feb 12 15:00:02.702049 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Try issuerDB module OpenIDConnect
[Mon Feb 12 15:00:02.702055 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Activation flag set to off, trying next
[Mon Feb 12 15:00:02.702060 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Try issuerDB module Get
[Mon Feb 12 15:00:02.702066 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Activation flag set to off, trying next
[Mon Feb 12 15:00:02.702156 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::IssuerDBNull loaded
[Mon Feb 12 15:00:02.702169 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] IssuerDB module Null loaded
[Mon Feb 12 15:00:02.702233 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::_SOAP loaded
[Mon Feb 12 15:00:02.702351 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: processing to sub controlUrlOrigin
[Mon Feb 12 15:00:02.702417 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: processing to sub checkNotifBack
[Mon Feb 12 15:00:02.702429 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: processing to sub controlExistingSession
[Mon Feb 12 15:00:02.702474 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: processing to sub issuerDBInit
[Mon Feb 12 15:00:02.702492 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: processing to sub authInit
[Mon Feb 12 15:00:02.702536 2018] [perl:debug] [pid 30330] CGI.pm(114): /usr/share/perl5/vendor_perl/Lemonldap/NG/Portal/AuthDemo.pm 42:
[Mon Feb 12 15:00:02.702544 2018] [perl:warn] [pid 30330] Using demonstration mode, go in Manager to edit the configuration
[Mon Feb 12 15:00:02.702552 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: processing to sub issuerForUnAuthUser
[Mon Feb 12 15:00:02.702568 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: processing to sub extractFormInfo
[Mon Feb 12 15:00:02.702654 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Use customized message for error 9
[Mon Feb 12 15:00:02.702730 2018] [perl:debug] [pid 30330] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Display type standardform
Here are the Apache logs when it correctly works:
[Mon Feb 12 15:00:52.380004 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Now using configuration: 110
[Mon Feb 12 15:00:52.380112 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::Menu loaded
[Mon Feb 12 15:00:52.380166 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::Display loaded
[Mon Feb 12 15:00:52.380231 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::AuthMulti loaded
[Mon Feb 12 15:00:52.380284 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::UserDBMulti loaded
[Mon Feb 12 15:00:52.380335 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::PasswordDBLDAP loaded
[Mon Feb 12 15:00:52.380623 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::RegisterDBDemo loaded
[Mon Feb 12 15:00:52.380826 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Try issuerDB module SAML
[Mon Feb 12 15:00:52.380837 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Activation flag set to off, trying next
[Mon Feb 12 15:00:52.380843 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Try issuerDB module OpenID
[Mon Feb 12 15:00:52.380849 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Activation flag set to off, trying next
[Mon Feb 12 15:00:52.380854 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Try issuerDB module CAS
[Mon Feb 12 15:00:52.380868 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Activation flag set to off, trying next
[Mon Feb 12 15:00:52.380874 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Try issuerDB module OpenIDConnect
[Mon Feb 12 15:00:52.380880 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Activation flag set to off, trying next
[Mon Feb 12 15:00:52.380886 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Try issuerDB module Get
[Mon Feb 12 15:00:52.380891 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] Activation flag set to off, trying next
[Mon Feb 12 15:00:52.380968 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::IssuerDBNull loaded
[Mon Feb 12 15:00:52.380979 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: [IssuerDB activation] IssuerDB module Null loaded
[Mon Feb 12 15:00:52.381035 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::_SOAP loaded
[Mon Feb 12 15:00:52.381139 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: processing to sub controlUrlOrigin
[Mon Feb 12 15:00:52.381196 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: processing to sub checkNotifBack
[Mon Feb 12 15:00:52.381208 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: processing to sub controlExistingSession
[Mon Feb 12 15:00:52.381251 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: processing to sub issuerDBInit
[Mon Feb 12 15:00:52.381269 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: processing to sub authInit
[Mon Feb 12 15:00:52.381377 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::AuthSAML loaded
[Mon Feb 12 15:00:52.381458 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::AuthLDAP loaded
[Mon Feb 12 15:00:52.381567 2018] [perl:debug] [pid 24364] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Module Lemonldap::NG::Portal::UserDBLDAP loaded
I notice in the first lines that "AuthDemo" is loaded instead of "AuthMulti". Do you have any idea what could be the problem? Same action was done other times without any problem. It only happened 2 times but it was very critical as it avoids any new connection. Do we need to make an Apache restart every time we make that kind of modification?
Thank you