topic Betreff: Bimcloud 2024.3 some ldap users are "denied" after login in Teamwork & BIMcloud

Bimcloud 2024.3 some ldap users are "denied" after login

markom — Mon, 10 Feb 2025 07:37:39 GMT

Bimcloud is local, not SaaS. Ldap sync has been used for years, only after 2024 installation the problem appeared for some users. Few of them did not meet the password requirements, but even after they changed their passwords they are denied access.

Betreff: Bimcloud 2024.3 some ldap users are "denied" after login

torben_wadlinger — Wed, 19 Mar 2025 21:51:06 GMT

Same problem here. Running bimcloud manager on 2024.3, bimcloud server on 29.0.68.5901 only a short login is possible (2 to 3 seconds). With bimcloud server 27.0.358.4103 everything works fine (with same manager).

Betreff: Bimcloud 2024.3 some ldap users are "denied" after login

markom — Thu, 20 Mar 2025 07:22:23 GMT

Do you get these in the C:\Program Files\GRAPHISOFT\BIMcloud\Manager-*version*\Logs\appServer...log:

{"severity":"WARNING","level":40,"time":"2025-03-12T11:53:57.641Z","process":"appServer","hostname":"bimedu","pid":5128,"name":"_","msg":"NetworkActiveDirectoryImporter.convertUserDefs: User def does not contain pwdLastSet! Principal: cn=user1,ou=people,dc=corp,dc=fi"}

and:

{"severity":"WARNING","level":40,"time":"2025-03-12T11:54:39.302Z","process":"appServer","hostname":"bimedu","pid":5128,"name":"_","msg":"BimcloudTokenProvider.refreshableByLdap: Update failed. No password last set timestamp information associated with the LDAP user. User id: f88532af-8c23-1974-f726-686f4be890ec, principal: cn=user,ou=people,dc=corp,dc=fi"}

I am having hard time getting my local dealer to contact Graphisoft about the issue..

Betreff: Bimcloud 2024.3 some ldap users are "denied" after login

torben_wadlinger — Thu, 20 Mar 2025 12:28:03 GMT

OK, the problem must be with Archicad 28. Something must have been changed there in the authentication (the login dialogue is now also a website and no longer the modal dialogue).

How do I find out? Quite simply: I have also released the BC Server 29.0.68.5901 (host for AC28) as a storage location for AC26 and the BC Server 27.0.358.4103 (host for AC26) for AC28.

Result: AC26 on BC Server for v28 works, but not the other way round. The problem is therefore with AC28 and only affects LDAP users. Users that are created directly on the Manager work perfectly!

BTW: I have similar errors in the log. But it works anyway with AC26 and below.

Betreff: Bimcloud 2024.3 some ldap users are "denied" after login

markom — Thu, 20 Mar 2025 13:12:32 GMT

We have the same problem with the AC 27. They did enforce new password rules, 12 chars atleast, lower and uppercase letters, numbers and special characters. Seemed to work for a start after people changed their passwords to meet the rules, but then the "Denied" came to haunt them too.

Betreff: Bimcloud 2024.3 some ldap users are "denied" after login

torben_wadlinger — Thu, 20 Mar 2025 13:42:29 GMT

OMG. It is the password! After changing the password into something like that 3v>3LKz=!N2aH;> it worked. I searched Google up and down, but found nothing about bimcloud and password complexitiy. Or I'm to dumb to search the internet ...

Re: Bimcloud 2024.3 some ldap users are "denied" after login

tkrepler_fjc — Thu, 20 Mar 2025 23:37:11 GMT

Hi All, We have been battling the same problem since January — we updated our local BIMcloud (Pro, with LDAP synch) over the Christmas break.

The really intriguing nature of the problem is:

— denied people can log in to the BIMcloud from the web interface during the “denied” period from the same computer
— another person with an LDAP setup can log in from the same computer while the rightful user cannot
— the phenomenon never happened before the 2024.3 update of BIMcloud, though we have been using it with the same settings since 2018
— nothing has changed in our LDAP setup

— we got the same result when people tried to log in from Archicad 25 Mac, Archicad 26 Mac and Windows (we did not try 24, but I fear it would have ended up the same way)

Nevertheless, the next time it occurs, we will try to change the LDAP password of these people to 12 characters with all the extra requirements and will let you know about the results. Thanks, Torben!

Betreff: Bimcloud 2024.3 some ldap users are "denied" after login

markom — Fri, 21 Mar 2025 06:06:25 GMT

Hope it helps for you, for us it worked only for a while.

Betreff: Bimcloud 2024.3 some ldap users are "denied" after login

markom — Fri, 21 Mar 2025 06:07:46 GMT

And I think the only mention I can see is when I create a user manually and send them the password change link, that page tells what kind of complexity it needs now.

Re: Bimcloud 2024.3 some ldap users are "denied" after login

tkrepler_fjc — Fri, 21 Mar 2025 06:15:44 GMT

Well, that has been our workaround — I created a "proxy" user manually, and they used that, they were able to log in and do their work. But this is less than ideal for more than one reason.

Let me add, that the LDAP account always works for the denied people the next day, however, the problem might return a few weeks later in a sort of random way. The strange thing is, that when the issue returns the second time, some people can solve it simply by fiddling with the Network Diagnostic.
Pretty mysterious so far.

Re: Bimcloud 2024.3 some ldap users are "denied" after login

markom — Fri, 21 Mar 2025 06:24:22 GMT

Have you tried contacting Graphisoft about this? I am kind of stuck because as education institute I have to contact thru local reseller and for some reason the matter does not seem to go forward.

Re: Bimcloud 2024.3 some ldap users are "denied" after login

tkrepler_fjc — Fri, 21 Mar 2025 06:32:16 GMT

Oh, yes, of course. They had a look at all sorts of logs and suggested it is a problem with our LDAP setup. But nothing seems to be untoward there. LDAP logs show no problems (and you can log in with the same LDAP-account to the BIMcloud via the web interface, and the email and server connection are uninterrupted as well).
So, they found this thread just yesterday and said we are not alone, and maybe it needs more investigation on their side. They also suggested I have a look at this conversation as well, and maybe I find something here.

Betreff: Bimcloud 2024.3 some ldap users are "denied" after login

torben_wadlinger — Sat, 22 Mar 2025 08:29:04 GMT

Hey guys, I've got an answer from the German Support, which was really helpfull (there is one single guy at German GS Support who is excellent). Here is his answer:

Hello Mr Wadlinger,

that does sound a bit unusual, but it could possibly have something to do with the way Archicad connects to the BIMcloud.
From Archicad 27 onwards, a so-called ‘modern or new authentication method’ is used in the case of BIMcloud Software as a Service; if you want to work with Archicad 26 and lower, you have to switch to the so-called ‘legacy authentication method’.
This means that there is a difference in the way Archicad 26 and lower and 27 and higher connect to the BIMcloud.

See e.g.

Working with older versions of Archicad and DDScad
https://help.graphisoft.com/BCSAAS/GER/index.htm#t=Topics%2FSaaS_Licensing_topics%2FLegacyAuthentication.html

Work with older versions of Archicad and DDScad
https://help.graphisoft.com/BCSAAS/INT/Topics/SaaS_Licensing_topics/LegacyAuthentication.html

Betreff: Bimcloud 2024.3 some ldap users are "denied" after login

markom — Mon, 24 Mar 2025 06:42:37 GMT

We have on-prem Bim server so there are not those options in General Settings..

Re: Bimcloud 2024.3 some ldap users are "denied" after login

tkrepler_fjc — Mon, 24 Mar 2025 06:49:41 GMT

Yes, same here. I think this is a unique setting in BIMcloud Basic — perhaps it should be in the on-prem BIMcloud (Pro) as well?
Cheers,

Re: Bimcloud 2024.3 some ldap users are "denied" after login

markom — Mon, 24 Mar 2025 06:53:55 GMT

Hopefully in the 2024.4 update:)

Betreff: Bimcloud 2024.3 some ldap users are "denied" after login

torben_wadlinger — Mon, 24 Mar 2025 15:29:39 GMT

Sorry, just translated the answer without really looking at the PDF's, because I got it working. After reading I realized that the content of the PDF's didn't match with the problem, well, it does in some kind, but there is no such option to switch between different auth-methods.

That's a bummer.

Re: Bimcloud 2024.3 some ldap users are "denied" after login

tkrepler_fjc — Mon, 24 Mar 2025 22:59:03 GMT

More like the 2025.4 update. 😐

Re: Bimcloud 2024.3 some ldap users are "denied" after login

tkrepler_fjc — Wed, 26 Mar 2025 00:13:16 GMT

We received a workaround from Graphisoft, which involves stopping the BIMcloud Manager and editing the PortalServer.config file.

As our BIMcloud is used day and night, this change has to be made over the weekend.

The "denied" issue is sporadic, but I'll let you know how we go.

Re: Bimcloud 2024.3 some ldap users are "denied" after login

torben_wadlinger — Wed, 26 Mar 2025 08:02:30 GMT

Can you attach the workaround?