"Credentials not recognized."

[Nate Klingenstein]

Jason,

> 14:46:28.365 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule: 
> 164] -
> Error occured attempting authentication
> javax.naming.NoPermissionException: [LDAP: error code 50 -  
> Insufficient
> Access Rights]
> 	at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3049)
> ~[na:1.6.0_26]
> 	at ...
> ...
>
> I'm a programmer and I have to "wing it" when it comes to Linux admin
> stuff. Does anyone know what I should check to resolve this error? I  
> can
> connect to the LDAP server with my other web apps and Apache Directory
> Studio.

Your LDAP configuration in the IdP is apparently not the same as the  
configuration in the other webapps or in Apache DS.  I would suspect  
that the IdP is attempting to bind anonymously with your IdP's  
configuration(login.config) while in the other webapps and Apache DS,  
you're binding with a service account.  This could easily happen by  
omission by following other configuration examples.

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass

If this is indeed the case, you can either enable anonymous binds to  
your directory, or add a username and password(bindDn and  
bindCredential) to your login.config so that the IdP uses a service  
account to authenticate users.

Hope this helps,
Nate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111220/d809c0ee/attachment.html