Bimcloud 2024.3 some ldap users are "denied" after login

[markom]

Bimcloud is local, not SaaS. Ldap sync has been used for years, only after 2024 installation the problem appeared for some users. Few of them did not meet the password requirements, but even after they changed their passwords they are denied access.

[tkrepler_fjc · Accepted solution]

Absolutely.

I have to emphasize that I haven't tried it yet. It will need to wait in our office till the weekend.

The idea is that there is a chance, the portalServer saves the incorrect password in case of an invalid login attempt. (Graphisoft hasn't found the bug yet, but they assume this can cause it.)

Workaround:

The following parameter should be set in the PortalServerConfig.xml file:

<LdapUserAuthentication passwordExpireTime="0"/>

To apply the above workaround, follow the steps below:

1. Ensure no-one is actively working in the teamwork projects
2. Stop the BIMcloud Manager with the help of - https://community.graphisoft.com/t5/Teamwork-BIMcloud/Start-and-Stop-BIMcloud-manually/ta-p/303834
3. Locate the PortalServer.config file, which on Windows by default is stored here: C:\Program Files\Graphisoft\BIMcloud\Manager-XXXX-XX-XX\Config and on macOS stored here: Applications/Graphisoft/BIMcloud/Manager-XXXX-XX-XX/Config
4. Open the PortalServer.config file in a text editor of choice and copy the <LdapUserAuthentication passwordExpireTime="0"/> parameter into it and save the file. (See also the image attached)
5. Restart the BIMcloud Manager and then monitor if users still experience access issues to the teamwork projects

Please note the Manager-XXXX-XX-XX indicates when the BIMcloud was installed e.g. 2025-03-21

Please let me know how you go. Thanks.

[tkrepler_fjc]

Hi All, I updated the PortalServerConfig.xml file over the weekend, no issues so far, but it is still early days. I think we need a few weeks without an incident to be confident that it is working.

I will keep you informed.

[markom]

Seems that there is now an update but it does not mention to cure this problem. 

BIMcloud 2025.1

In this version of BIMcloud, we introduce several new improvements and fixes for on-premises users, including:

• The BIMcloud installer now displays more detailed and relevant information about detected legacy versions, newer components, or update/repair possibilities, improving BIMcloud component version management.

Fixed issues:

• We resolved an issue that prevented the BIMcloud Basic Manager and Server from being paired properly on the latest Windows 11 version.
• We fixed an issue that could cause the Export to CSV command to fail on BIMcloud.
• We improved performance in the BIMcloud Server lists by implementing list virtualization. Only visible items load dynamically, making the UI more responsive and reducing browser lag for large datasets.
• The BIMcloud Manager no longer switches to English at first login; it now keeps the selected installation language.
• The BIMcloud installer now correctly recognizes and applies the operating system’s default language preferences.

This version of BIMcloud also includes all relevant fixes from previous BIMcloud SaaS versions since BIMcloud 2024.3.

[markom]

I finally had an opportunity to make the PortalServerConfig.xml fix, after the newest update did not help. And based on one user it worked:)

[tkrepler_fjc]

Hi Markom,

I believe Graphisoft still hasn't implemented a solution in the code as of yet, hence it was not in the latest BIMcloud version/hotfix either.

Because I had this issue reappear after updating to BIMcloud 2025.1, I have complained, and the latest information I have on this, is

Change this line:

<LdapUserAuthentication passwordExpireTime="0"/>

To this:

<LdapUserAuthentication graceTime="5000"/>

Now, while it has reduced the number of such issues significantly, it is not clear if the remaining ones are still related.

Incidentally, the above change also solved a problem in Archicad 28, where users were frequently (every hour or so) asked to login to the BIMcloud from Archicad.

Hope it helps — please let me know how you go. Thanks.