LDAP credential

[Bo Lorentsen]

Hi ...

After a lot of reading and fiddling I now have a nice resource that send 
a request to my idP to ask for a given user, and I have enabled a 
UsernamePassword  handler (and disabled the RemoteUser handler), and 
configured an LDAP (local server) login login.config.

I can find my users using ldapsearch (after some LDAP skill hunting :-))

I now get a nice default UsernamePassword login page, and and I can 
enter my credentials in my form, and submit it but i get this (I cleaned 
up the log bit to make it more easy to read) in my log :

15:24:08.088 - DEBUG  - Bind with the following parameters:
15:24:08.088 - DEBUG  -   authtype = simple
15:24:08.088 - DEBUG  -   dn = null
15:24:08.089 - DEBUG  -   credential = <suppressed>
15:24:08.101 - DEBUG  - Bind with the following parameters:
15:24:08.101 - DEBUG  -   authtype = simple
15:24:08.101 - DEBUG  -   dn = cn=Bo Lorentsen,ou=essens,dc=moch,dc=dk
15:24:08.101 - DEBUG  -   credential = <suppressed>
15:24:08.107 - DEBUG  - Error connecting to LDAP URL: ldap:///
javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid 
Credentials]

1. Does the idP make 2 look up in LDAP ? one using "uid" (configured in 
login) and the over using the resulting dn ?
2. Where are the password meant to be ?
3. Are there any attribute mapping / storage needed before this could work ?


Regards

/BL