Hi All,
I have configured LDAP in GN 2.10.3. I am able to get Ldap context from the
AD LDS server but getting Authentication request failed for the test user,
User1, that I set up there. I am providing the same password that I've set
for the user in AD LDS.
Here is the log:
[org.springframework.security.ldap.authentication.BindAuthenticator] -
Attempting to bind as
cn=User1,ou=Users,cn=LostAndFound,cn=Partition1,dc=sample,dc=org
[org.springframework.security.ldap.DefaultSpringSecurityContextSource] -
Removing pooling flag for user
cn=User1,ou=Users,cn=LostAndFound,cn=Partition1,dc=sample,dc=org
[org.springframework.ldap.core.support.AbstractContextSource] - Got Ldap
context on server 'ldap://localhost:389/cn=Partition1,dc=sample,dc=org'
[org.springframework.security.ldap.authentication.BindAuthenticator] -
Retrieving attributes...
[org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter]
- Authentication request failed:
org.springframework.security.authentication.AuthenticationServiceException:
[LDAP: error code 32 - 0000208D: NameErr: DSID-0315258B, problem 2001
(NO_OBJECT), data 0, best match of:
'CN=Partition1,DC=sample,DC=org'
nested exception is javax.naming.NameNotFoundException: [LDAP: error code 32
- 0000208D: NameErr: DSID-0315258B, problem 2001 (NO_OBJECT), data 0, best
match of:
'CN=Partition1,DC=sample,DC=org'
After getting Ldap context, it is failing to authenticate. I am using
BindAuthenticator. I also tried switching to
PasswordComparisonAuthenticator, but then I got LDAP: error code 49...
I am sure the password I am providing in the log in screen is the same that
I've setup on LDS server, for that user.
So what must be the cause of this issue? Could it be that it is not finding
any attribute with matching password? I used ADSi on LDS server to set the
password by right clicking on the user object and resetting password. Note:
I've also enabled the user account on LDS.
Thanks and Regards
Ameet
--
View this message in context: http://osgeo-org.1560.x6.nabble.com/ldap-based-authentication-issue-tp5151123.html
Sent from the GeoNetwork users mailing list archive at Nabble.com.