Active Directory as Authentication Source

[Michael Dahlberg]

On Thu, Mar 5, 2015 at 4:03 PM, David Gersic <dgersic at niu.edu> wrote:

>  It might help to post the actual configuration file you're using. Mask
> out the sensitive bits before posting, of course.
>

David:

No problem.  Just didn't think anybody would want to see that.  The entire
non-commented-out part of login.conf is as follows:

ShibUserPassAuth {

   edu.vt.middleware.ldap.jaas.LdapLoginModule required
      ldapUrl="ldap://XXXXXX.bucknell.edu:389/"
      ssl="false"
      tls="false"
      baseDN="cn=Users,dc=bucknell,dc=edu"
      subtreeSearch="false"
      bindDn="servicename at bucknell.edu"
      bindCredential="XXXXXXX"
      userFilter="cn={0}";

};

The LDAP connector in the attribute-resolver.xml file:

    <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"
        ldapURL="ldap://XXXXXX.bucknell.edu/"
        baseDN="cn=Users,dc=bucknell,dc=edu"
        principal="servicename at bucknell.edu"
        principalCredential="XXXXXXXX">
        <dc:FilterTemplate>
            <![CDATA[
                (sAMAccountName=$requestContext.principalName)
            ]]>
        </dc:FilterTemplate>
        <dc:ReturnAttributes>employeeType uid cn sn displayName givenName
mail bucknellEmployeeType memberOf
bucknelleduPersonEntitlement</dc:ReturnAttributes>
        <dc:LDAPProperty name="java.naming.referral" value="follow"/>
    </resolver:DataConnector>


And this is the login handler portion of handler.xml


    <ph:LoginHandler xsi:type="ph:UsernamePassword"

jaasConfigurationLocation="file:///usr/local/idp/conf/login.config">

<ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod>
    </ph:LoginHandler>

    <ph:LoginHandler xsi:type="ph:PreviousSession">

<ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PreviousSession</ph:AuthenticationMethod>
    </ph:LoginHandler>


It all seems pretty standard which is why I am so confused as to why it's
not working.

Thanks,
Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150305/e963e6c1/attachment.html