AW: Authentication with Ldap not working

Kevin Flückiger kevin.flueckiger at inovitas.ch
Fri Mar 13 06:31:49 EDT 2015


Thank you for your answer, Scott.
By restarting the container you mean restarting tomcat or how do you mean that?
I just saw the following line in the logs: Setting JAAS configuration file to: file:///opt/shibboleth-idp/conf/login.config
This actually is the file I am editing. Would this be the behavior if there is a syntax error in the JAAS config?
Do you have any hint how I could track this down? I'm more than ever out of ideas what to do...

Kevin

-----Ursprüngliche Nachricht-----
Von: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] Im Auftrag von Cantor, Scott
Gesendet: Donnerstag, 12. März 2015 15:23
An: Shib Users
Betreff: Re: Authentication with Ldap not working

On 3/12/15, 9:30 AM, "Kevin Flückiger" <kevin.flueckiger at inovitas.ch> wrote:

>am struggling. I see the following exception in the idp-process.log:
> 
>javax.security.auth.login.LoginException: No LoginModules configured for ShibUserPassAuth
> 
>Eventhough I have enabled the UsernamePassword LoginHandler in the handler.xml. The following is the configuration in my login.config file:
>ShibUserPassAuth {
> 
>   edu.vt.middleware.ldap.jaas.LdapLoginModule required
>      ldapUrl="ldap://localhost:10389"
>      baseDn="ou=services,ou=user,dc=example,dc=com"
>      bindDn="cn=admin,ou=administrative,ou=user,dc=example,dc=com"
>      bindCredential="password";
>};
> 
>To me it looks as if the login.config never gets loaded. I can put in there whatever I want, the exception stays the same. These are the lines in my handler.xml:
><ph:LoginHandler xsi:type="ph:UsernamePassword" jaasConfigurationLocation="file:///opt/shibboleth-idp/conf/login.config">

As you deduced, it's clearly not loading that file. Either you haven't restarted the container between changes, or there's something funny happening, like you changing a different file than you think you are.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list