Problems authenticating with TestShib
mstech
msimpson at amersham.ac.uk
Tue Jun 18 16:26:10 EDT 2013
Thanks! That was bang on.... (I told you I was a beginner)
So no surprises I am stumped again, I have been looking at this on and off
for a few days but cant seem to get a successful bind with AD going.
Currently my idp-process log shows this when I try to log on with an ad
account:
21:17:52.247 - WARN [edu.vt.middleware.ldap.auth.SearchDnResolver:1105] -
Error performing LDAP operation, retrying (attempt 0)
javax.naming.CommunicationException: ldap.amersham.ac.uk:636
at com.sun.jndi.ldap.Connection.<init>(Unknown Source) ~[na:1.6.0_43]
at com.sun.jndi.ldap.LdapClient.<init>(Unknown Source) ~[na:1.6.0_43]
at com.sun.jndi.ldap.LdapClient.getInstance(Unknown Source) ~[na:1.6.0_43]
at com.sun.jndi.ldap.LdapCtx.connect(Unknown Source) ~[na:1.6.0_43]
at com.sun.jndi.ldap.LdapCtx.<init>(Unknown Source) ~[na:1.6.0_43]
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(Unknown Source)
~[na:1.6.0_43]
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(Unknown Source)
~[na:1.6.0_43]
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(Unknown Source)
~[na:1.6.0_43]
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(Unknown Source)
~[na:1.6.0_43]
at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
~[na:1.6.0_43]
at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
~[na:1.6.0_43]
at javax.naming.InitialContext.init(Unknown Source) ~[na:1.6.0_43]
at javax.naming.ldap.InitialLdapContext.<init>(Unknown Source)
~[na:1.6.0_43]
at
edu.vt.middleware.ldap.handler.DefaultConnectionHandler.connectInternal(DefaultConnectionHandler.java:134)
~[vt-ldap-3.3.6.jar:na]
at
edu.vt.middleware.ldap.handler.AbstractConnectionHandler.connect(AbstractConnectionHandler.java:156)
~[vt-ldap-3.3.6.jar:na]
at edu.vt.middleware.ldap.AbstractLdap.connect(AbstractLdap.java:1006)
~[vt-ldap-3.3.6.jar:na]
at edu.vt.middleware.ldap.AbstractLdap.getContext(AbstractLdap.java:1058)
~[vt-ldap-3.3.6.jar:na]
at edu.vt.middleware.ldap.AbstractLdap.search(AbstractLdap.java:214)
~[vt-ldap-3.3.6.jar:na]
at
edu.vt.middleware.ldap.auth.SearchDnResolver.resolve(SearchDnResolver.java:139)
[vt-ldap-3.3.6.jar:na]
at edu.vt.middleware.ldap.auth.Authenticator.getDn(Authenticator.java:106)
[vt-ldap-3.3.6.jar:na]
at
edu.vt.middleware.ldap.jaas.JaasAuthenticator.authenticate(JaasAuthenticator.java:74)
[vt-ldap-3.3.6.jar:na]
at
edu.vt.middleware.ldap.auth.Authenticator.authenticate(Authenticator.java:320)
[vt-ldap-3.3.6.jar:na]
at
edu.vt.middleware.ldap.auth.Authenticator.authenticate(Authenticator.java:277)
[vt-ldap-3.3.6.jar:na]
at
edu.vt.middleware.ldap.jaas.JaasAuthenticator.authenticate(JaasAuthenticator.java:60)
[vt-ldap-3.3.6.jar:na]
at
edu.vt.middleware.ldap.jaas.LdapLoginModule.login(LdapLoginModule.java:103)
[vt-ldap-3.3.6.jar:na]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[na:1.6.0_43]
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
~[na:1.6.0_43]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
~[na:1.6.0_43]
at java.lang.reflect.Method.invoke(Unknown Source) ~[na:1.6.0_43]
at javax.security.auth.login.LoginContext.invoke(Unknown Source)
[na:1.6.0_43]
at javax.security.auth.login.LoginContext.access$000(Unknown Source)
[na:1.6.0_43]
at javax.security.auth.login.LoginContext$4.run(Unknown Source)
[na:1.6.0_43]
at java.security.AccessController.doPrivileged(Native Method) [na:1.6.0_43]
at javax.security.auth.login.LoginContext.invokePriv(Unknown Source)
[na:1.6.0_43]
at javax.security.auth.login.LoginContext.login(Unknown Source)
[na:1.6.0_43]
at
edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet.authenticateUser(UsernamePasswordLoginServlet.java:177)
[shibboleth-identityprovider-2.4.0.jar:na]
at
edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet.service(UsernamePasswordLoginServlet.java:123)
[shibboleth-identityprovider-2.4.0.jar:na]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:723)
[servlet-api.jar:na]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
[catalina.jar:6.0.37]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.37]
at
edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCacheFilter.java:50)
[shibboleth-identityprovider-2.4.0.jar:na]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina.jar:6.0.37]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.37]
at
edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:87)
[shibboleth-identityprovider-2.4.0.jar:na]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina.jar:6.0.37]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.37]
at
edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:52)
[shibboleth-common-1.4.0.jar:na]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina.jar:6.0.37]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.37]
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219)
[catalina.jar:6.0.37]
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
[catalina.jar:6.0.37]
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
[catalina.jar:6.0.37]
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103)
[catalina.jar:6.0.37]
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
[catalina.jar:6.0.37]
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
[catalina.jar:6.0.37]
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:861)
[tomcat-coyote.jar:6.0.37]
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:606)
[tomcat-coyote.jar:6.0.37]
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
[tomcat-coyote.jar:6.0.37]
at java.lang.Thread.run(Unknown Source) [na:1.6.0_43]
Caused by: java.net.UnknownHostException: ldap.amersham.ac.uk
at java.net.PlainSocketImpl.connect(Unknown Source) ~[na:1.6.0_43]
at java.net.SocksSocketImpl.connect(Unknown Source) ~[na:1.6.0_43]
at java.net.Socket.connect(Unknown Source) ~[na:1.6.0_43]
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.connect(Unknown Source)
~[na:1.6]
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.<init>(Unknown Source)
~[na:1.6]
at com.sun.net.ssl.internal.ssl.SSLSocketFactoryImpl.createSocket(Unknown
Source) ~[na:1.6]
at
edu.vt.middleware.ldap.ssl.AbstractTLSSocketFactory.createSocket(AbstractTLSSocketFactory.java:301)
~[vt-ldap-3.3.6.jar:na]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[na:1.6.0_43]
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
~[na:1.6.0_43]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
~[na:1.6.0_43]
at java.lang.reflect.Method.invoke(Unknown Source) ~[na:1.6.0_43]
at com.sun.jndi.ldap.Connection.createSocket(Unknown Source) ~[na:1.6.0_43]
... 59 common frames omitted
I have little doubt that I have made some fundamental mistakes in my
configurations somewhere, but I am finding so many conflicting snipets of
info online that I am struggling to know which way to turn
Any help would be amazing
Many thanks
Martin
--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Problems-authenticating-with-TestShib-tp7587572p7587641.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
More information about the users
mailing list