[xwiki-users] ldap auth fails : "LDAPException: Matched DN: "
Hello again, seems my previous ldap problem is corrected (a mix of using "old" LDAP auth class + duplicate deploy under different names in test env). However, now that ldap connects properly to server, i have the following problem: 2008-03-31 14:00:17,931 [http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-8080-Processor4] ERROR LDAP.XWikiLDAPAuthServiceImpl - LDAP authentication failed. LDAPException: Invalid Credentials (49) Invalid Credentials LDAPException: Matched DN: at com.novell.ldap.LDAPResponse.getResultException(Unknown Source) at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source) at com.novell.ldap.LDAPConnection.chkResultCode(Unknown Source) at com.novell.ldap.LDAPConnection.bind(Unknown Source) at com.novell.ldap.LDAPConnection.bind(Unknown Source) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:243) Am not sure to understand fully, but it seems that LDAP auth class is prefereing some property in XWiki.<username> to the xwiki.cfg. The property in question is "ldap_dn". I don't know exactly what it's supposed to contain (can someone gime an example?). I saw it's presence in "xwiki.authentication.ldap.fields_mapping", which tells how to map ldap attributes to xwiki attributes. However, i have no idea which ldap attribute am supposed to map there. The default value was for active directory, we don't use active directory. My problem is that, currently, it's set to an empty string in xwiki database, and the ldap class don't like it very much.
Hi, On Mon, Mar 31, 2008 at 3:11 PM, David Delbecq <[email protected]> wrote:
Hello again,
seems my previous ldap problem is corrected (a mix of using "old" LDAP auth class + duplicate deploy under different names in test env).
However, now that ldap connects properly to server, i have the following problem:
2008-03-31 14:00:17,931 [http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-8080-Processor4] ERROR LDAP.XWikiLDAPAuthServiceImpl - LDAP authentication failed. LDAPException: Invalid Credentials (49) Invalid Credentials LDAPException: Matched DN: at com.novell.ldap.LDAPResponse.getResultException(Unknown Source) at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source) at com.novell.ldap.LDAPConnection.chkResultCode(Unknown Source) at com.novell.ldap.LDAPConnection.bind(Unknown Source) at com.novell.ldap.LDAPConnection.bind(Unknown Source) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:243)
Am not sure to understand fully, but it seems that LDAP auth class is prefereing some property in XWiki.<username> to the xwiki.cfg. The property in question is "ldap_dn". I don't know exactly what it's supposed to contain (can someone gime an example?). I saw it's presence in "xwiki.authentication.ldap.fields_mapping", which tells how to map ldap attributes to xwiki attributes. However, i have no idea which ldap attribute am supposed to map there. The default value was for active directory, we don't use active directory. My problem is that, currently, it's set to an empty string in xwiki database, and the ldap class don't like it very much.
ldap_dn is supposed to contains the complete user LDAP DN in the LDAP server (like cn=William Bush,ou=people,o=sevenSeas) and the default mapping (ldap_dn=dn) is supposed to work with any LDAP server. The goal of this mapping is to speed up the search of user in the LDAP server.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
En l'instant précis du 31/03/08 16:41, Thomas Mortagne s'exprimait en ces termes:
Hi,
On Mon, Mar 31, 2008 at 3:11 PM, David Delbecq <[email protected]> wrote:
Hello again,
seems my previous ldap problem is corrected (a mix of using "old" LDAP auth class + duplicate deploy under different names in test env).
However, now that ldap connects properly to server, i have the following problem:
2008-03-31 14:00:17,931 [http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] [http-8080-Processor4] ERROR LDAP.XWikiLDAPAuthServiceImpl - LDAP authentication failed. LDAPException: Invalid Credentials (49) Invalid Credentials LDAPException: Matched DN: at com.novell.ldap.LDAPResponse.getResultException(Unknown Source) at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source) at com.novell.ldap.LDAPConnection.chkResultCode(Unknown Source) at com.novell.ldap.LDAPConnection.bind(Unknown Source) at com.novell.ldap.LDAPConnection.bind(Unknown Source) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:243)
Am not sure to understand fully, but it seems that LDAP auth class is prefereing some property in XWiki.<username> to the xwiki.cfg. The property in question is "ldap_dn". I don't know exactly what it's supposed to contain (can someone gime an example?). I saw it's presence in "xwiki.authentication.ldap.fields_mapping", which tells how to map ldap attributes to xwiki attributes. However, i have no idea which ldap attribute am supposed to map there. The default value was for active directory, we don't use active directory. My problem is that, currently, it's set to an empty string in xwiki database, and the ldap class don't like it very much.
ldap_dn is supposed to contains the complete user LDAP DN in the LDAP server (like cn=William Bush,ou=people,o=sevenSeas) and the default mapping (ldap_dn=dn) is supposed to work with any LDAP server. The goal of this mapping is to speed up the search of user in the LDAP server.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Thanks :)
participants (2)
-
David Delbecq -
Thomas Mortagne