"Credentials not recognized."

[Jason Holland]

That was it! I should have thought of that but I think I was just too
deep in a mental fog trying to learn SAML and Shib that my problem
solving skills went out the window.

 

Thanks Nate!

 

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Nate Klingenstein
Sent: Tuesday, December 20, 2011 1:05 AM
To: Shib Users
Subject: Re: "Credentials not recognized."

 

Jason,

 

	14:46:28.365 - DEBUG
[edu.vt.middleware.ldap.jaas.LdapLoginModule:164] -
	Error occured attempting authentication
	javax.naming.NoPermissionException: [LDAP: error code 50 -
Insufficient
	Access Rights]
	          at
com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3049)
	~[na:1.6.0_26]
	          at ...
	...
	
	I'm a programmer and I have to "wing it" when it comes to Linux
admin
	stuff. Does anyone know what I should check to resolve this
error? I can
	connect to the LDAP server with my other web apps and Apache
Directory
	Studio.

 

Your LDAP configuration in the IdP is apparently not the same as the
configuration in the other webapps or in Apache DS.  I would suspect
that the IdP is attempting to bind anonymously with your IdP's
configuration(login.config) while in the other webapps and Apache DS,
you're binding with a service account.  This could easily happen by
omission by following other configuration examples.

 

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass

 

If this is indeed the case, you can either enable anonymous binds to
your directory, or add a username and password(bindDn and
bindCredential) to your login.config so that the IdP uses a service
account to authenticate users.

 

Hope this helps,

Nate.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111220/fa6422b6/attachment.html