shibtest and active directory: CREDENTIALS NOT RECOGNIZED

[David Bantz]

Simple possible first tests (if you have not already verified): 
 - can you bind to AD url in login.config with the IdP's credentials in login.config using straight command-line?
 - if so, does binding with those cred's allow you retrieve the dn of a user with the end-username provided in the web login page?
 - if so, can you bind with end user's cred's in command line?

David Bantz
UA OIT IAM

On Thu, 6 Sep 2012, at 14:17 , Mauro Minella <Mauro.Minella at microsoft.com> wrote:

> Hi,
> I setup Shibboleth idp 2.3.5 on a brand new virtual machine with Windows Server 2008 R2, which is a domain controller.
> Internal domain name: SHIBIDP.LOCAL
> The same machine is reachable from the extern through SHIBIDP.EDUTEAMIT.COM I configured Shibboleth IDP following the guide on https://wiki.shibboleth.net/confluence/display/SHIB2/IdPQuickInstall,  
> 
> Dns name: shibidp.eduteamit.com
> Active directory domain: shibdomain.local
> Scope: shibdomain.local
> 
> 
> I generated the certificate with Java and now I can open the following links correctly and with no errors:
> - https://shibidp.eduteamit.com
> - https://shibidp.eduteamit.com/idp/status
> - https://shibidp.eduteamit.com/idp/profile/Metadata/SAML
> 
> So I tried to test it via https://www.testshib.org/index.html: I registered my metadata file, I configured /opt/shibboleth-idp/conf/relying-party.xml as described on https://www.testshib.org/configure.html, then I opened https://sp.testshib.org/ and entered https://shibidp.eduteamit.com/idp/shibboleth and -GREAT!- I got the Shibboleth authentication web page.
> 
> The problem is that whatever username/password I put, I get the error CREDENTIALS NOT RECOGNIZED.
> 
> 
> Any hints would be greatly appreciated.
> 
> Thank you in advance,
> 
> Mauro
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net