Question concerning JAAS LDAP problem.

[Brewer, Edward L]

To all,

I currently have a 2.3.6 IdP running under JBOSS 5.1 that is working.  I have configured JASS auth for UserPassword and it also works.  I have a need to reconfigure the setup to a differing LDAP.  When I stop the instance and edit the login.config file with the new LDAP reference it still goes to the old LDAP server that was previously listed.  I verified in the handler.xml that it points to the correct login.config file and I have logging pinned at ALL.  I see references to LDAP connection  listed for attribute resolution (because I have not changed that to the new LDAP) but I don't see anything but the following when I grep the idp-process log for my credentials (after I have loggedin).

15:45:56.538 - TRACE [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:-1] - setting connectionStrategy: ACTIVE_PASSIVE
15:45:56.540 - TRACE [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:-1] - setting connectionRetryExceptions: [class javax.naming.NamingException]
15:45:56.540 - TRACE [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:-1] - {43} Attempting connection to ldaps://OLD HOSTNAME for strategy ACTIVE_PASSIVE
15:45:56.541 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:-1] - Bind with the following parameters:
15:45:56.542 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:-1] -   authtype = simple
15:45:56.542 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:-1] -   dn = <OMITTED>
15:45:56.543 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:-1] -   credential = <suppressed>
15:45:56.544 - TRACE [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:-1] -   env = {java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.provider.url=ldaps://OLD Hostname}
15:45:56.610 - DEBUG [edu.vt.middleware.ldap.Ldap:-1] - Search with the following parameters:
15:45:56.611 - DEBUG [edu.vt.middleware.ldap.Ldap:-1] -   dn = ou=people,dc=vanderbilt,dc=edu
15:45:56.612 - DEBUG [edu.vt.middleware.ldap.Ldap:-1] -   filter = (uid=brewerel)
15:45:56.613 - DEBUG [edu.vt.middleware.ldap.Ldap:-1] -   filterArgs = []
15:45:56.614 - DEBUG [edu.vt.middleware.ldap.Ldap:-1] -   searchControls = javax.naming.directory.SearchControls at 7fd9af09
15:45:56.615 - DEBUG [edu.vt.middleware.ldap.Ldap:-1] -   handler = [edu.vt.middleware.ldap.handler.FqdnSearchResultHandler at 16b61e92, edu.vt.middleware.ldap.handler.EntryDnSearchResultHandler at e910ee4, edu.vt.middleware.ldap.handler.BinarySearchResultHandler at 5568a234]
15:45:56.616 - TRACE [edu.vt.middleware.ldap.Ldap:-1] -   config = {java.naming.provider.url=ldaps://OLD HOSTNAME, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory}
15:45:56.634 - TRACE [edu.vt.middleware.ldap.pool.DefaultLdapFactory:-1] - destroyed ldap object: edu.vt.middleware.ldap.Ldap at 1737334678::config=edu.vt.middleware.ldap.LdapConfig at 1190029155::env={java.naming.provider.url=ldaps://its-hclnap16-ts.its.vanderbilt.edu:3636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory}


Any ideas?

Lee Brewer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121015/a1a901c8/attachment-0001.html