Re: LDAP authentication not working

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 8/12/05 9:16 AM, Ludovic Dubost wrote: The plot thickens. I can see your debug messages, and it lead me to look at the code. Remember that I am using e-mail address as the userid (bind_DN is "mail={0},ou=People,dc=OhioLINK,dc=edu"). Near the top of the authenticate() method in LDAPAuthServiceImpl.java is this chunk of code: if (context!=null) { String susername = username; int i = username.indexOf("."); if (i!=-1) susername = username.substring(i+1); String DN = getLDAP_DN(susername, context); Initially I think why I was failing is the part that is taking just the left segment of the string up the first period. My e-mail address, of course, has a period, so it was in effect getting truncated before being passed to getLDAP_DN. So I switched to using just a uid (no periods) and I get a little farther in xwiki.log: DEBUG LDAPAuthServiceImpl:checkUserPassword:230 - LDAP Password check for user peter DEBUG LDAPAuthServiceImpl:checkUserPassword:253 - LDAP Connect successfull to host ldap.ohiolink.edu and port 389 DEBUG LDAPAuthServiceImpl:Bind:441 - LDAP Bind starting DEBUG LDAPAuthServiceImpl:Bind:451 - LDAP Bind successfull INFO MyFormAuthenticator:processLogin:142 - User peter login has failed (references to Hibernate and DBCPConnectionProvider have been removed). I'm looking at this again after a few hours, and I still can't figure out why I'm falling through to line 142 of MyFormAuthenticator. FWIW, I am hoping to make use of the dynamic account creation feature out of LDAP information, so there isn't (yet) a "peter" login in the XWiki user database. Could that be where the next problem is? Peter - -- Peter Murray http://www.pandc.org/peter/work/ Assistant Director, Multimedia Systems tel:+1-614-728-3600;ext=338 OhioLINK: the Ohio Library and Information Network Columbus, Ohio