LDAP Connection

[Peter Schober]

* Douglas E. Engert <deengert at anl.gov> [2013-01-14 20:29]:
> On 1/14/2013 12:49 PM, Ogunleye, Philip wrote:
> >
> > Think I’m down to my final issue with the setup.  I have installed the apache directory service as I have had no luck connecting to Active Directory.  That being said my login.config has been attached
> > but does not appear to correct as it is still failing as shown below.  I’m confused as to why it is not connecting and would appreciate any help.
> >
> 
> If ldap://read-auto-01-rv.snaponglobal.com is  really AD, then you are using the wrong attributes
> and port numbers.
> 
> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass
>   has some examples "Example JAAS config for stacked Keberos + AD/LDAP login modules"
> 
> AD uses sAMAccountName not uid for example.

The aim had been using AD before but above the OP explicitly wrote he
installed the Apache Directory Server, so the MS-AD specifics don't
apply here.

@Philip: Result code 49 is username or password wrong.
Maybe try connecting with another tool until you know you habe the
parameters right. The IdP is just another LDAP client. With the right
parameters it will just work. What is right for your environment only
you can know.

Also if your aim is to connect to MS-AD ultimately I don't understand
why you install Apache Directory Server (instead of resolving the
MS-AD problem; many people connect their Shib IdP to MS-AD so it is
certainly doable), only to run into other, probably unrelated
problems.
-peter