连接LDAP进行身份认证存在问题

问题一：
配置了“同步器管理”中的OpenLDAP服务，从OpenLDAP同步用户到MaxKey，从“身份管理 > 用户”中已经可以看到同步过来的用户，但配置了映射关系后，MaxKey的“姓名”字段仍然只有“姓“而不是全名；

问题二：
配置了“LDAP配置”，保存后测试通过，但从/maxkey/登录用户界面的时候发现密码不对，后来才发现到一个情况，好像认证时不是用我的用户名（jtest），部分日志片段如下：

```
2025-09-08 09:54:57.145 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.authn.jwt.AuthJwtService:131 - HMAC Verify true , now 2025-09-08T09:54:57.142+0800 , ExpirationTime 2025-09-08T09:59:33.000+0800 , is not Expiration : true
2025-09-08 09:54:57.149 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.web.contorller.LoginEntryPoint:220 - Login AuthN Type  normal
2025-09-08 09:54:57.149 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.authn.provider.impl.NormalAuthenticationProvider:71 - Trying to authenticate user 'jtest' via normalAuthenticationProvider
2025-09-08 09:54:57.149 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.authn.provider.impl.NormalAuthenticationProvider:75 - authentication LoginCredential [congress=null, username=jtest, password=Abcd@1234, state=eyXhbGciOiJIUzUxMiJ9.eyJleHAiOjE3NTcyOTY3NzMsImp0aSI6IjExNjIzNjYyNDMyNzM5NjU1NjgifX.EjYXjxYCzMiX_lmEFM0MXmQakEZOoFpQlIFhKUaA3ySAj06KvuFObEH05IDBcOZvASgrygQwKWAbGdtyF_fHCX, mobile=null, captcha=4015, otpCaptcha=null, remeberMe=false, authType=normal, jwtToken=null, onlineTicket=null, provider=null, code=null, message=success, instId=null, grantedAuthority=null, authenticated=false, roleAdministrators=false]
2025-09-08 09:54:57.151 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.authn.jwt.AuthTokenService:128 - captcha : 4015, momentary Captcha : 4015
2025-09-08 09:54:57.173 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.persistence.service.impl.LoginServiceImpl:97 - load UserInfo : [UserInfo [id=1161376604702638080, username=jtest, sharedSecret=null, sharedCounter=0, userType=EMPLOYEE, userState=null, windowsAccount=jtest, displayName=江, nickName=jtest, nameZhSpell=null, nameZhShortSpell=jtest, givenName=null, middleName=null, familyName=江, honorificPrefix=null, honorificSuffix=null, formattedName=江, married=0, gender=0, birthDate=null, idType=0, idCardNo=null, webSite=null, startWorkDate=null, authnType=0, email=null, emailVerified=0, mobile=18960780666, mobileVerified=0, passwordQuestion=null, passwordAnswer=null, appLoginAuthnType=0, appLoginPassword=null, protectedApps=null, protectedAppsMap=null, passwordLastSetTime=2025-09-05 12:25:00.0, badPasswordCount=2, badPasswordTime=2025-09-08 01:50:02.0, unLockTime=2020-01-01 01:01:01.0, isLocked=1, lastLoginTime=2025-09-08 01:32:24.0, lastLoginIp=10.10.1.2, lastLogoffTime=2025-09-08 01:32:27.0, passwordSetType=0, loginCount=2, locale=zh_CN, timeZone=Asia/Shanghai, preferredLanguage=zh_CN, workCountry=CHN, workRegion=null, workLocality=null, workStreetAddress=null, workAddressFormatted=null, workEmail=jtest@example.cn, workPhoneNumber=null, workPostalCode=null, workFax=null, workOfficeName=null, homeCountry=CHN, homeRegion=null, homeLocality=null, homeStreetAddress=null, homeAddressFormatted=null, homeEmail=null, homePhoneNumber=null, homePostalCode=null, homeFax=null, employeeNumber=null, costCenter=null, organization=null, division=null, departmentId=1, department=集团, jobTitle=null, jobLevel=null, managerId=null, manager=null, assistantId=null, assistant=null, entryDate=null, quitDate=null, defineIm=null, weixinFollow=0, theme=default, extraAttribute=null, extraAttributeName=null, extraAttributeValue=null, extraAttributeMap=null, online=0, ldapDn=null, gridList=0, createdBy=1, createdDate=2025-09-05 16:17:06.0, modifiedBy=1, modifiedDate=2025-09-05 18:51:58.0, status=1, description=null]]
2025-09-08 09:54:57.174 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.authn.provider.AbstractAuthenticationProvider:187 - User Login. 
2025-09-08 09:54:57.301 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.authn.realm.ldap.LdapAuthenticationRealm:68 - Attempting to authenticate jtest at org.dromara.maxkey.authn.realm.ldap.StandardLdapServer@4ba8281b
2025-09-08 09:54:57.302 INFO  [http-nio-9527-exec-8] org.dromara.maxkey.authn.realm.ldap.StandardLdapServer:52 -  filter : (objectClass=posixAccount)
2025-09-08 09:54:57.318 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.authn.realm.ldap.StandardLdapServer:68 - Directory user dn is uid=huyq,cn=users,cn=compat,dc=example,dc=cn .
2025-09-08 09:54:57.319 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.authn.realm.ldap.StandardLdapServer:68 - Directory user dn is uid=dengll,cn=users,cn=compat,dc=example,dc=cn .

此处省略若干行，内容和上面两行一样，是列出用户目录……

2025-09-08 09:54:57.384 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.authn.realm.ldap.StandardLdapServer:68 - Directory user dn is uid=liuzk,cn=users,cn=accounts,dc=example,dc=cn .
2025-09-08 09:54:57.384 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.authn.realm.ldap.StandardLdapServer:68 - Directory user dn is uid=zhenglq,cn=users,cn=accounts,dc=example,dc=cn .
2025-09-08 09:54:57.385 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.authn.realm.ldap.StandardLdapServer:68 - Directory user dn is uid=dengll,cn=users,cn=accounts,dc=example,dc=cn .
2025-09-08 09:54:57.386 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.authn.realm.ldap.StandardLdapServer:68 - Directory user dn is uid=huyq,cn=users,cn=accounts,dc=example,dc=cn .
2025-09-08 09:54:57.386 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.ldap.LdapUtils:122 - PROVIDER_URL ldap://192.168.199.98:389
2025-09-08 09:54:57.387 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.ldap.LdapUtils:123 - SECURITY_PRINCIPAL uid=huyq,cn=users,cn=accounts,dc=example,dc=cn
2025-09-08 09:54:57.397 ERROR [http-nio-9527-exec-8] org.dromara.maxkey.ldap.LdapUtils:113 - connect to ldap ldap://192.168.199.98:389  fail.
2025-09-08 09:54:57.397 ERROR [http-nio-9527-exec-8] org.dromara.maxkey.ldap.LdapUtils:114 - [LDAP: error code 49 - Invalid Credentials]
2025-09-08 09:54:57.398 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.authn.realm.jdbc.JdbcAuthenticationRealm:127 - passwordvalid : false
2025-09-08 09:54:57.405 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.persistence.mapper.UserInfoMapper.badPasswordCount:135 - ==>  Preparing: update mxk_userinfo set badpasswordcount = badpasswordcount + 1 , badpasswordtime = current_timestamp where id = ?
2025-09-08 09:54:57.406 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.persistence.mapper.UserInfoMapper.badPasswordCount:135 - ==> Parameters: 1161376604702638080(String)
2025-09-08 09:54:57.418 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.persistence.mapper.UserInfoMapper.badPasswordCount:135 - <==    Updates: 1
2025-09-08 09:54:57.420 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.authn.realm.AbstractAuthenticationRealm:139 - user session id is 1162367600848535552 . 
2025-09-08 09:54:57.423 DEBUG [Thread-31] org.dromara.maxkey.persistence.service.impl.HistoryLoginServiceImpl:62 - History Login HistoryLogin [id=1162367600856924160, sessionId=1162367600848535552, userId=1161376604702638080, username=jtest, displayName=江, loginType=Local Login, message=password error, code=xe00000004, provider=, sourceIp=10.10.1.2, country=null, province=null, city=null, location=内网IP, browser=Chrome/141, platform=Macintosh; Intel Ma, application=null, loginTime=null, logoutTime=null, instId=1, instName=null, sessionStatus=7, startDate=null, endDate=null]
2025-09-08 09:54:57.424 ERROR [http-nio-9527-exec-8] org.dromara.maxkey.authn.provider.impl.NormalAuthenticationProvider:111 - Failed to authenticate user jtest via normalAuthenticationProvider: 用户名或密码无效.
2025-09-08 09:54:57.424 DEBUG [http-nio-9527-exec-8] org.dromara.maxkey.web.contorller.LoginEntryPoint:240 - login fail , message 用户名或密码无效.
2025-09-08 09:54:57.429 DEBUG [Thread-31] org.dromara.maxkey.persistence.mapper.HistoryLoginMapper.insert:135 - ==>  Preparing: INSERT INTO mxk_history_login (id, sessionid, category, userid, username, displayname, logintype, message, code, sourceip, location, browser, platform, sessionstatus, instid) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
2025-09-08 09:54:57.431 DEBUG [Thread-31] org.dromara.maxkey.persistence.mapper.HistoryLoginMapper.insert:135 - ==> Parameters: 1162367600856924160(String), 1162367600848535552(String), 1(Integer), 1161376604702638080(String), jtest(String), 江(String), Local Login(String), password error(String), xe00000004(String), 10.10.1.2(String), 内网IP(String), Chrome/141(String), Macintosh; Intel Ma(String), 7(Integer), 1(String)
2025-09-08 09:54:57.447 DEBUG [Thread-31] org.dromara.maxkey.persistence.mapper.HistoryLoginMapper.insert:135 - <==    Updates: 1
2025-09-08 09:54:57.471 DEBUG [http-nio-9527-exec-10] org.dromara.maxkey.authn.jwt.AuthJwtService:131 - HMAC Verify true , now 2025-09-08T09:54:57.470+0800 , ExpirationTime 2025-09-08T09:59:33.000+0800 , is not Expiration : true
```

GVP dromara/MaxKey

内容风险标识

评论 (1)

GVPdromara/MaxKey

内容风险标识