Active Directory as Authentication Source

[Rod Widdowson]

> (1) Any suggestions on why the authentication phase is not completed?


What are you setting "base" to in login.config? As I recall it needs to be something like

nase="CN=Users, DC=toplevel, DC=edu"

For a domain called toplevel.edu

> (2) Should I be looking at treating authentication to an AD server more like a
> Kerberos authentication scheme rather than an LDAP type scheme.

I would advise against it, it just opens a completely different can of worms with the principal being not what you expected.

If you haven't found it already https://wiki.shibboleth.net/confluence/display/SHIB2/LdapServerIssues has a wealth of useful info.

Rod