trouble locating the ldap auth error in Shib IdP

[Daniel Fisher]

On Sun, Jul 14, 2013 at 11:14 PM, Oleg Chaikovsky <
oleg.chaikovsky at aegisidentity.com> wrote:

>  Shibboleth IdP 2.4****
>
> Windows****
>
> ** **
>
> Connecting to AD using LDAPS – and here is the error – and the
> login.config file. I have searched other logs (except the ldap log) and
> found nothing to help discover the problem. When I use ldp.exe tool on
> Windows from the IdP server to connect to the AD server, using the same
> principal and credential, and baseDn, I can search just fine for any user.
> When I attempt to authenticate using testshib as a base – I get an
> authentication failed – but the error is simply ****
>
> 19:44:00.227 - DEBUG
> [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:194]
> - User authentication for USERID failed****
>
> javax.security.auth.login.LoginException: java.lang.NullPointerException**
> **
>
> ** **
>
> I have searched on the userlist archives – and only found the fact that
> folks have fixed their issue – but not where the fix was applied. I have
> tried both a baseDn of ou=GROUP, dc=domain, dc=edu and simply the two dc’s
> (at the recommendation of the ldap admin).  I simply can’t determine for
> myself where the error may lie. ****
>
> ** **
>
> Thanks****
>
> Oleg****
>
> ** **
>
> --------------------------****
>
> Login.config file portion****
>
> ** **
>
>    edu.vt.middleware.ldap.jaas.LdapLoginModule required****
>
>       ldapURL="ldaps://server.domain.edu"****
>
>                   port="636"****
>
>                   ssl="true"****
>
>       baseDn="dc=domain,dc=edu"****
>
>                   bindDn="USERID at domain.edu"****
>
>                   bindCredential="somepassword”****
>
>                   subtreeSearch="true"****
>
>       userFilter="samAccountName={0}";
>

Try ldapUrl instead of ldapURL.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130715/df6665de/attachment-0001.html