Webtop5 with ldap problem

Hi all.
I have problem with autentication of user in webtop5 on NS machine binded via ldap to NS AD Server.
Probably the problem is born for different kernel and sssd version running on this 2 NS server ( many package as changed in the last year ).

i have try to unbind and rebind LDAP with automatic check configuration, and all check is ok.
i have try to reinstall webtop5 and nethserver-webtop5, this is the messages output

2018-03-09 12:13:51 [INFO ] c.sonicle.webtop.core.app.WebTopApp - webtop.extJsDebug = false
2018-03-09 12:13:51 [INFO ] c.sonicle.webtop.core.app.WebTopApp - webtop.soExtDevMode = false
2018-03-09 12:13:51 [INFO ] c.sonicle.webtop.core.app.WebTopApp - webtop.devMode = true
2018-03-09 12:13:51 [INFO ] c.sonicle.webtop.core.app.WebTopApp - webtop.debugMode = false
2018-03-09 12:13:51 [INFO ] c.sonicle.webtop.core.app.WebTopApp - webtop.schedulerSisabled = false
2018-03-09 12:13:51 [INFO ] c.sonicle.webtop.core.app.WebTopApp - webtop.webappsConfigPath = null
2018-03-09 12:13:53 [INFO ] c.sonicle.webtop.core.app.WebTopApp - WTA initialization started [webtop]
2018-03-09 12:13:53 [INFO ] c.s.w.core.app.ConnectionManager - Initialized
2018-03-09 12:13:53 [INFO ] c.s.webtop.core.app.SettingsManager - Initialized
2018-03-09 12:13:53 [INFO ] c.s.webtop.core.app.SessionManager - Initialized
2018-03-09 12:13:53 [INFO ] c.sonicle.webtop.core.app.WebTopApp - Checking home structure...
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.I18nManager - Initialized
2018-03-09 12:13:54 [INFO ] c.sonicle.webtop.core.app.WebTopApp - Initializing template engine
2018-03-09 12:13:54 [INFO ] c.sonicle.webtop.core.app.LogManager - Initialized
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.WebTopManager - Initialized
2018-03-09 12:13:54 [INFO ] c.sonicle.webtop.core.app.OTPManager - Initialized
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ReportManager - Initialized
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Registering service [com.sonicle.webtop.core]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - [private:true, public:true, job:true, userOptions:true]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Not upgraded! [5.1.5 = 5.1.5]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Database upgrades will be appended to 1520594034275
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Registering service [com.sonicle.webtop.core.admin]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - [private:true, public:false, job:false, userOptions:false]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Not upgraded! [5.1.5 = 5.1.5]
2018-03-09 12:13:54 [WARN ] c.s.webtop.core.app.ServiceManager - Service descriptor  for 'wtdrm' version @@webtop.service.version@@ skipped. Cause: Invalid value for property [version]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Registering service [com.sonicle.webtop.calendar]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - [private:true, public:true, job:false, userOptions:true]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Not upgraded! [5.1.9 = 5.1.9]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Registering service [com.sonicle.webtop.contacts]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - [private:true, public:false, job:false, userOptions:true]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Not upgraded! [5.1.7 = 5.1.7]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Registering service [com.sonicle.webtop.mail]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - [private:true, public:false, job:true, userOptions:true]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Not upgraded! [5.1.4 = 5.1.4]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Registering service [com.sonicle.webtop.tasks]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - [private:true, public:false, job:false, userOptions:true]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Not upgraded! [5.1.3 = 5.1.3]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Registering service [com.sonicle.webtop.vfs]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - [private:true, public:true, job:false, userOptions:true]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Not upgraded! [5.0.12 = 5.0.12]
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Maintenance mode: false
2018-03-09 12:13:54 [INFO ] c.s.webtop.core.app.ServiceManager - Initialized
2018-03-09 12:13:54 [INFO ] c.sonicle.webtop.core.app.WebTopApp - WTA initialization completed [webtop]
2018-03-09 12:13:59 [INFO ] c.sonicle.webtop.core.app.WebTopApp - Checking domains homes structure...
2018-03-09 12:13:59 [INFO ] c.sonicle.webtop.core.app.WebTopApp - Checking webapp version...
2018-03-09 12:13:59 [WARN ] c.sonicle.webtop.core.app.WebTopApp - No configuration found for TomcatManager [tomcat.manager.uri]
2018-03-09 12:13:59 [WARN ] c.sonicle.webtop.core.app.WebTopApp - Webapp version automatic check will NOT be performed!
2018-03-09 12:13:59 [INFO ] c.sonicle.webtop.core.app.WebTopApp - This webapp [webtop] is the latest
2018-03-09 12:14:59 [INFO ] c.sonicle.webtop.core.app.WebTopApp - Scheduling JobServices tasks...
2018-03-09 12:14:59 [INFO ] c.sonicle.webtop.core.app.WebTopApp - Created javax.mail.Session for localhost:587

now if try to login with user that never logged in webtop, in webtop.log

2018-03-09 13:10:15 [ERROR] com.sonicle.webtop.mail.Service - Error connecting to the mail server
javax.mail.AuthenticationFailedException: [UNAVAILABLE] Temporary authentication failure. [proxy:2018-03-09 12:10:15]
	at com.sun.mail.imap.IMAPStore.protocolConnect(IMAPStore.java:723)
	at javax.mail.Service.connect(Service.java:364)
	at com.sonicle.webtop.mail.Service.connect(Service.java:525)
	at com.sonicle.webtop.mail.Service.validateUser(Service.java:576)
	at com.sonicle.webtop.mail.Service.checkStoreConnected(Service.java:479)
	at com.sonicle.webtop.mail.Service.initialize(Service.java:393)
	at com.sonicle.webtop.core.app.ServiceManager.instantiatePrivateService(ServiceManager.java:815)
	at com.sonicle.webtop.core.app.WebTopSession.internalInitPrivateEnvironment(WebTopSession.java:479)
	at com.sonicle.webtop.core.app.WebTopSession.initPrivateEnvironment(WebTopSession.java:398)
	at com.sonicle.webtop.core.servlet.Start.processRequest(Start.java:91)
	at com.sonicle.webtop.core.app.AbstractServlet.doGet(AbstractServlet.java:73)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:624)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:731)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
	at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
	at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:61)
	at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)
	at org.apache.shiro.web.servlet.AdviceFilter.doFilterInternal(AdviceFilter.java:137)
	at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
	at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:66)
	at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)
	at org.apache.shiro.web.servlet.AdviceFilter.doFilterInternal(AdviceFilter.java:137)
	at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
	at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:66)
	at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)
	at org.apache.shiro.web.servlet.AdviceFilter.doFilterInternal(AdviceFilter.java:137)
	at com.sonicle.webtop.core.shiro.filter.GZip.doFilterInternal(GZip.java:60)
	at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
	at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:66)
	at org.apache.shiro.web.servlet.AbstractShiroFilter.executeChain(AbstractShiroFilter.java:449)
	at org.apache.shiro.web.servlet.AbstractShiroFilter$1.call(AbstractShiroFilter.java:365)
	at org.apache.shiro.subject.support.SubjectCallable.doCall(SubjectCallable.java:90)
	at org.apache.shiro.subject.support.SubjectCallable.call(SubjectCallable.java:83)
	at org.apache.shiro.subject.support.DelegatingSubject.execute(DelegatingSubject.java:383)
	at org.apache.shiro.web.servlet.AbstractShiroFilter.doFilterInternal(AbstractShiroFilter.java:362)
	at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:218)
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:110)
	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:506)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:169)
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103)
	at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:962)
	at org.apache.catalina.valves.RemoteIpValve.invoke(RemoteIpValve.java:683)
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:445)
	at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1087)
	at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:637)
	at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:318)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1152)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:622)
	at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
	at java.lang.Thread.run(Thread.java:748)
2018-03-09 13:10:15 [ERROR] com.sonicle.webtop.mail.Service - Exception
javax.mail.MessagingException: failed to create new store connection
	at com.sun.mail.imap.IMAPStore.hasCapability(IMAPStore.java:1460)
	at com.sonicle.webtop.mail.Service.initialize(Service.java:395)
	at com.sonicle.webtop.core.app.ServiceManager.instantiatePrivateService(ServiceManager.java:815)
	at com.sonicle.webtop.core.app.WebTopSession.internalInitPrivateEnvironment(WebTopSession.java:479)
	at com.sonicle.webtop.core.app.WebTopSession.initPrivateEnvironment(WebTopSession.java:398)
	at com.sonicle.webtop.core.servlet.Start.processRequest(Start.java:91)
	at com.sonicle.webtop.core.app.AbstractServlet.doGet(AbstractServlet.java:73)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:624)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:731)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
	at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
	at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:61)
	at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)
	at org.apache.shiro.web.servlet.AdviceFilter.doFilterInternal(AdviceFilter.java:137)
	at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
	at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:66)
	at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)
	at org.apache.shiro.web.servlet.AdviceFilter.doFilterInternal(AdviceFilter.java:137)
	at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
	at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:66)
	at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)
	at org.apache.shiro.web.servlet.AdviceFilter.doFilterInternal(AdviceFilter.java:137)
	at com.sonicle.webtop.core.shiro.filter.GZip.doFilterInternal(GZip.java:60)
	at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
	at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:66)
	at org.apache.shiro.web.servlet.AbstractShiroFilter.executeChain(AbstractShiroFilter.java:449)
	at org.apache.shiro.web.servlet.AbstractShiroFilter$1.call(AbstractShiroFilter.java:365)
	at org.apache.shiro.subject.support.SubjectCallable.doCall(SubjectCallable.java:90)
	at org.apache.shiro.subject.support.SubjectCallable.call(SubjectCallable.java:83)
	at org.apache.shiro.subject.support.DelegatingSubject.execute(DelegatingSubject.java:383)
	at org.apache.shiro.web.servlet.AbstractShiroFilter.doFilterInternal(AbstractShiroFilter.java:362)
	at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:218)
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:110)
	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:506)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:169)
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103)
	at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:962)
	at org.apache.catalina.valves.RemoteIpValve.invoke(RemoteIpValve.java:683)
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:445)
	at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1087)
	at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:637)
	at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:318)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1152)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:622)
	at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
	at java.lang.Thread.run(Thread.java:748)
Caused by: com.sun.mail.iap.ConnectionException: failed to create new store connection
	at com.sun.mail.imap.IMAPStore.getStoreProtocol(IMAPStore.java:1084)
	at com.sun.mail.imap.IMAPStore.hasCapability(IMAPStore.java:1457)
	... 52 common frames omitted
2018-03-09 13:10:17 [ERROR] com.sonicle.webtop.mail.Service - Error in PortletMail
java.lang.NullPointerException: null
	at com.sonicle.webtop.mail.Service.processPortletMail(Service.java:5198)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:606)
	at com.sonicle.webtop.core.servlet.BaseRequest.invokeMethod(BaseRequest.java:109)
	at com.sonicle.webtop.core.servlet.PrivateRequest.processRequest(PrivateRequest.java:83)
	at com.sonicle.webtop.core.servlet.PrivateRequest.doGet(PrivateRequest.java:119)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:624)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:731)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
	at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
	at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:61)
	at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)
	at org.apache.shiro.web.servlet.AdviceFilter.doFilterInternal(AdviceFilter.java:137)
	at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
	at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:66)
	at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)
	at org.apache.shiro.web.servlet.AdviceFilter.doFilterInternal(AdviceFilter.java:137)
	at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
	at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:66)
	at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)
	at org.apache.shiro.web.servlet.AdviceFilter.doFilterInternal(AdviceFilter.java:137)
	at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
	at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:66)
	at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)
	at org.apache.shiro.web.servlet.AdviceFilter.doFilterInternal(AdviceFilter.java:137)
	at com.sonicle.webtop.core.shiro.filter.GZip.doFilterInternal(GZip.java:60)
	at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
	at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:66)
	at org.apache.shiro.web.servlet.AbstractShiroFilter.executeChain(AbstractShiroFilter.java:449)
	at org.apache.shiro.web.servlet.AbstractShiroFilter$1.call(AbstractShiroFilter.java:365)
	at org.apache.shiro.subject.support.SubjectCallable.doCall(SubjectCallable.java:90)
	at org.apache.shiro.subject.support.SubjectCallable.call(SubjectCallable.java:83)
	at org.apache.shiro.subject.support.DelegatingSubject.execute(DelegatingSubject.java:383)
	at org.apache.shiro.web.servlet.AbstractShiroFilter.doFilterInternal(AbstractShiroFilter.java:362)
	at org.apache.shiro.web.servlet.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:125)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:218)
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:110)
	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:506)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:169)
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103)
	at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:962)
	at org.apache.catalina.valves.RemoteIpValve.invoke(RemoteIpValve.java:683)
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:445)
	at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1087)
	at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:637)
	at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:318)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1152)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:622)
	at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
	at java.lang.Thread.run(Thread.java:748)
2018-03-09 13:10:22 [ERROR] c.s.webtop.core.xmpp.XMPPClient - Unable to login
org.jivesoftware.smack.SmackException$NoResponseException: No response received within reply timeout. Timeout was 5000ms (~5s). While waiting for successful SASL authentication
	at org.jivesoftware.smack.SmackException$NoResponseException.newWith(SmackException.java:92)
	at org.jivesoftware.smack.SASLAuthentication.authenticate(SASLAuthentication.java:223)
	at org.jivesoftware.smack.tcp.XMPPTCPConnection.loginInternal(XMPPTCPConnection.java:385)
	at org.jivesoftware.smack.AbstractXMPPConnection.login(AbstractXMPPConnection.java:491)
	at org.jivesoftware.smack.AbstractXMPPConnection.login(AbstractXMPPConnection.java:448)
	at com.sonicle.webtop.core.xmpp.XMPPClient.internalLogin(XMPPClient.java:918)
	at com.sonicle.webtop.core.xmpp.XMPPClient.checkAuthentication(XMPPClient.java:1000)
	at com.sonicle.webtop.core.xmpp.XMPPClient.updatePresence(XMPPClient.java:204)
	at com.sonicle.webtop.core.Service.processManageIM(Service.java:1321)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:606)
	at com.sonicle.webtop.core.servlet.BaseRequest.invokeMethod(BaseRequest.java:109)
	at com.sonicle.webtop.core.servlet.PrivateRequest.processRequest(PrivateRequest.java:83)
	at com.sonicle.webtop.core.servlet.PrivateRequest.doPost(PrivateRequest.java:114)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:650)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:731)
	at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1087)
	at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:637)
	at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:318)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1152)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:622)
	at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
	at java.lang.Thread.run(Thread.java:748)
Caused by: com.sonicle.webtop.core.xmpp.XMPPClientException: org.jivesoftware.smack.SmackException$NoResponseException: No response received within reply timeout. Timeout was 5000ms (~5s). While waiting for successful SASL authentication
	at com.sonicle.webtop.core.xmpp.XMPPClient.checkAuthentication(XMPPClient.java:1003)
	at com.sonicle.webtop.core.xmpp.XMPPClient.updatePresence(XMPPClient.java:204)
	at com.sonicle.webtop.core.Service.processManageIM(Service.java:1321)
	... 57 common frames omitted
Caused by: org.jivesoftware.smack.SmackException$NoResponseException: No response received within reply timeout. Timeout was 5000ms (~5s). While waiting for successful SASL authentication
	at org.jivesoftware.smack.SmackException$NoResponseException.newWith(SmackException.java:92)
	at org.jivesoftware.smack.SASLAuthentication.authenticate(SASLAuthentication.java:223)
	at org.jivesoftware.smack.tcp.XMPPTCPConnection.loginInternal(XMPPTCPConnection.java:385)
	at org.jivesoftware.smack.AbstractXMPPConnection.login(AbstractXMPPConnection.java:491)
	at org.jivesoftware.smack.AbstractXMPPConnection.login(AbstractXMPPConnection.java:448)
	at com.sonicle.webtop.core.xmpp.XMPPClient.internalLogin(XMPPClient.java:918)
	at com.sonicle.webtop.core.xmpp.XMPPClient.checkAuthentication(XMPPClient.java:1000)
	... 59 common frames omitted

another error is this

[root@proxy ~]# yum update postgresql
Loaded plugins: changelog, fastestmirror, nethserver_events
Loading mirror speeds from cached hostfile
 * base: it.centos.contactlab.it
 * epel: pkg.adfinis-sygroup.ch
 * extras: it.centos.contactlab.it
 * nethforge: mirror2.nethserver.org
 * nethserver-base: mirror2.nethserver.org
 * nethserver-updates: mirror2.nethserver.org
 * rpmfusion-free-updates: fr2.rpmfind.net
 * updates: it.centos.contactlab.it
Resolving Dependencies
--> Running transaction check
---> Package postgresql.x86_64 0:9.2.23-1.el7_4 will be updated
--> Processing Dependency: postgresql(x86-64) = 9.2.23-1.el7_4 for package: postgresql-server-9.2.23-1.el7_4.x86_64
---> Package postgresql.x86_64 0:9.2.23-3.el7_4 will be an update
--> Finished Dependency Resolution
Error: Package: postgresql-server-9.2.23-1.el7_4.x86_64 (@updates)
           Requires: postgresql(x86-64) = 9.2.23-1.el7_4
           Removing: postgresql-9.2.23-1.el7_4.x86_64 (@updates)
               postgresql(x86-64) = 9.2.23-1.el7_4
           Updated By: postgresql-9.2.23-3.el7_4.x86_64 (updates)
               postgresql(x86-64) = 9.2.23-3.el7_4
           Available: postgresql-9.2.21-1.el7.x86_64 (base)
               postgresql(x86-64) = 9.2.21-1.el7
 You could try using --skip-broken to work around the problem
** Found 5 pre-existing rpmdb problem(s), 'yum check' output follows:
dracut-033-502.el7_4.1.x86_64 is a duplicate with dracut-033-502.el7.x86_64
php-pear-Mail-Mime-1.10.2-1.el7.noarch is a duplicate with php-pear-Mail-Mime-1.10.1-1.el7.noarch
postgresql-9.2.23-3.el7_4.x86_64 is a duplicate with postgresql-9.2.23-1.el7_4.x86_64
postgresql-libs-9.2.23-3.el7_4.x86_64 is a duplicate with postgresql-libs-9.2.23-1.el7_4.x86_64
postgresql-server-9.2.23-3.el7_4.x86_64 is a duplicate with postgresql-server-9.2.23-1.el7_4.x86_64 

Are these errors connected?

fixed this with

yum reinstall dracut php-pear-Mail-Mime postgresql postgresql-libs postgresql-server --setopt=protected_multilib=false

I have change Account provider from LDAP to Join AD.

it went better but it was not enough.

it is possible that if I create an AD domain, but the user never login via joined windows client, this will create problems for third-party ldap applications?

the accounts that gave me problems had never logged in windows. I uncheck the password expiration, blocked the user, unlocked the user and now everything seems working

Just read better.

Expired password means it needs to be changed before the account is valid again. This happens during logon.

If you let passwords expire, users can change it using the nethserver admin page, or by logging on to a domain-joined workstation.