shibtest and active directory: CREDENTIALS NOT RECOGNIZED

[Daniel Fisher]

On Thu, Sep 6, 2012 at 8:07 PM, Mauro Minella
<Mauro.Minella at microsoft.com> wrote:
> Actually my config was created by the setup program, taking information from the fields required in the wizard.
> However I replaced my config with yours:
> ///////////////////////////////////////////////////////////
> edu.vt.middleware.ldap.jaas.LdapLoginModule sufficient
>   ldapUrl="ldap://shibidp.shibdomain.local:389"
>   baseDn="CN=Users,DC=shibdomain,DC=local"
>   bindDn="CN=Administrator,CN=Users,DC=shibdomain,DC=local"
>   bindCredential="WRONGPASSWORD"
>   subtreeSearch="true"
>   ssl="true"
>   tls="false"
>   userField="sAMAccountName,uaIdentifier";
> ///////////////////////////////////////////////////////////
>  but still - Authentication failed.
>
> , I get a different error, also reported in the id_process.log:
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> 02:05:01.484 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:73] - Bind with the following parameters:
> 02:05:01.484 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:74] -   authtype = simple
> 02:05:01.484 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:75] -   dn = administrator at shibdomain.local
> 02:05:01.484 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:82] -   credential = <suppressed>
> 02:05:01.515 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:167] - Error connecting to LDAP URL: ldap://SHIBDOMAIN.LOCAL:389
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>

There should be a stacktrace somewhere indicating why a connection
could not be established. What happens if you change the url to
ldap://shibidp.eduteamit.com:389 ?

--Daniel Fisher