RE: [xwiki-users] LDAP Integration of xwiki
I've been able to boil down the exact error to the one shown below. I tried a variety of combinations, but it doesn't seem to work with my company user id and password. Any pointers here? Regards, Mrudula Error StackTrace MyLDAPAuthServiceImpl:Bind:508 - LDAP Bind failed with thus Exception Invalid Credentials LDAPException: Invalid Credentials (49) Invalid Credentials LDAPException: Server Message: 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece LDAPException: Matched DN: at com.novell.ldap.LDAPResponse.getResultException(Unknown Source) at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source) at com.novell.ldap.LDAPConnection.chkResultCode(Unknown Source) at com.novell.ldap.LDAPConnection.bind(Unknown Source) at com.novell.ldap.LDAPConnection.bind(Unknown Source) Configuration File authentication.ldap=1 authentication.ldap.server=blr-ec-dc01.wipro.com authentication.ldap.port=389 authentication.ldap.check_level=1 authentication.ldap.base_DN=dc=wipro,dc=com authentication.ldap.bind_DN=uid=wipro\<< my user id>>,ou=USERS,dc=wipro,dc=com authentication.ldap.bind_pass=<<my password>> authentication.ldap.UID_attr=Mrudula Madiraju authentication.ldap.fields_mapping=name=Mrudula Madiraju,last_name=sn,first_name=givenName,fullname=displayName,mail=mai l,ldap_dn=dn -----Original Message----- From: Richard Lach [mailto:rla@debian.org] Sent: Friday, September 01, 2006 7:17 PM To: xwiki-users@objectweb.org Subject: Re: [xwiki-users] LDAP Integration of xwiki On Fri, Sep 01, 2006 at 09:36:20AM -0400, Srinivasa Pulugurtha wrote:
Also, it seems that you are binding to Active Directory (?). You might try DOMAINNAME\\USERNAME format, if you have trouble finding the right DN's while binding to LDAP.
In that case it should be pretty easy, if you have console access to domain controller. Try 'ldifde' command line tool with filter "(sAMAccountName=<your_login_name>)" R. -- "First they ignore you. Then they laugh at you. Then they fight you. Then you win." - Mohandas Gandhi. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com
On Tue, Sep 05, 2006 at 11:12:36AM +0530, mrudula.madiraju@wipro.com wrote:
I've been able to boil down the exact error to the one shown below. I tried a variety of combinations, but it doesn't seem to work with my company user id and password. Any pointers here?
Are you sure you can connect to your LDAP using your credentials? I suggest to install some ldap client on your xwiki machine (e.g. ldap-utils) and try to connect to LDAP with entered in xwiki.cfg values. Taking your config try something like that:
authentication.ldap=1 authentication.ldap.server=blr-ec-dc01.wipro.com authentication.ldap.port=389 authentication.ldap.check_level=1 authentication.ldap.base_DN=dc=wipro,dc=com authentication.ldap.bind_DN=uid=wipro\<< my user id>>,ou=USERS,dc=wipro,dc=com
authentication.ldap.bind_pass=<<my password>> authentication.ldap.UID_attr=Mrudula Madiraju authentication.ldap.fields_mapping=name=Mrudula Madiraju,last_name=sn,first_name=givenName,fullname=displayName,mail=mail,ldap_dn=dn
ldapsearch -h blr-ec-dc01.wipro.com -p 389 \ -D 'uid=wipro\<< my user id>>,ou=USERS,dc=wipro,dc=com' -b 'dc=wipro,dc=com' \ -x -W \ '(<UID_attr>=<xwiki loginname>)' As you can see I've used in search filter '<UID_attr>', becaues I suppose that you don't have a field named 'Mrudula Madiraju' in you LDAP ;-). If your ldap was Active Directory you would have authentication.ldap.UID_attr=sAMAccountName in xwiki.cfg, and search field (sAMAccountName=<xwiki_loginname>) in your ldapsearch test. R. -- "First they ignore you. Then they laugh at you. Then they fight you. Then you win." - Mohandas Gandhi.
participants (2)
-
mrudula.madiraju＠wipro.com -
Ryszard Lach