Nacos 3.2.0 LDAP Failed to introspect Class

[jy00278439]

Caused by: java.lang.IllegalStateException: Failed to introspect Class [com.alibaba.nacos.plugin.auth.impl.ldap.LdapAuthPluginConfig] from ClassLoader [org.springframework.boot.loader.launch.LaunchedClassLoader@1b2c6ec2]

[shiyiyue1102]

Thanks for reporting this. To help reproduce and investigate the Failed to introspect Class [LdapAuthPluginConfig] issue, could you provide:

• Exact Nacos server version (3.2.0 or 3.2.1?)
• JDK version (e.g., JDK 17, JDK 21)
• Deployment method (standalone binary, Docker image + tag, or built from source)
• Your LDAP-related configuration in application.properties (with sensitive values redacted)
• Full startup stack trace (not just the Caused-by line)

This will help determine whether it's a classpath/dependency conflict or a version-specific regression.

---

感谢反馈。为了复现和排查 Failed to introspect Class [LdapAuthPluginConfig] 问题，麻烦补充以下信息：

• 具体的 Nacos 服务端版本（3.2.0 还是 3.2.1？）
• JDK 版本（如 JDK 17、JDK 21）
• 部署方式（直接使用发行包、Docker 镜像+具体 tag、还是源码编译）
• application.properties 中 LDAP 相关的配置（敏感信息可脱敏）
• 完整的启动异常堆栈（不只是 Caused by 这一行）

这些信息有助于判断是类路径/依赖冲突还是版本特定的回归问题。

[KomachiSion]

I see the PR fix way, I think it's time to discuss spilt ldap plugin and default plugin.

[elnafateh]

@KomachiSion ok, so what do have in mind?

[KomachiSion]

@KomachiSion ok, so what do have in mind?

Move LDAP relative codes into a single module like ldap-plugin-impl from default-plugin-impl. And add ldap pre condition check in ldap-plugin-impl. If not found spring-ldap, log hint let users add it into plugins.

The target is to control the release package sizes.

[KomachiSion]

@KomachiSion ok, so what do have in mind?

Move LDAP relative codes into a single module like ldap-plugin-impl from default-plugin-impl. And add ldap pre condition check in ldap-plugin-impl. If not found spring-ldap, log hint let users add it into plugins.

The target is to control the release package sizes.

Why database plugin can auto import depend to plugins?

Due to database plugin is the key plugins which if not contains it, nacos will not work. But auth plugin is optional.

Even database plugin is the key plugin, For oracle we also can't auto import jdbc jar into plugins, There is conflicts with license.

How about community think?

[elnafateh]

@KomachiSion understood, you're steering toward:

1. clean refactor
2. graceful check
3. optionally load LDAP plugin

This is more architecturally sound then just a single missing plugin fix.
I can rework the PR #15118 to aligned with this intent.

[daguimu]

Thanks for the clarification.

I agree that splitting LDAP out of default-plugin-impl is the cleaner long-term direction.

I can help rework the PR to:

1. Move LDAP-related auth code into a separate LDAP auth plugin module.
2. Keep LDAP out of the default plugin package by default.
3. Add a startup/precondition check in the LDAP plugin so that if spring-ldap-core is missing, Nacos logs a clear hint telling users to add the
   required LDAP dependency into plugins/.

Before I start the rework, could you confirm whether this direction is acceptable?

Also, where would you prefer the new module to live?

• under plugin-default-impl/, for example plugin-default-impl/nacos-ldap-auth-plugin
• as a sibling module outside plugin-default-impl
• somewhere else