IdP v3.1.1 and LDAP error code 32

Emerson Mello emerson_ml at yahoo.com.br
Sat May 9 15:27:22 EDT 2015


Hi,

I’m have some experience to deploy IdP v2x and SP v2x and now I’m trying to do a clean install of IdP v3.1.1 (that includes a local LDAP base) to integrate it with my SP 2.4.3.

After login process on IdP v3, I’m getting the follow error message on IdP login webpage:

Login Failure: javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object]; remaining name 'ou=people,dc=localdomain,dc=com’

Looking at idp-process.log I found:

2015-05-09 16:01:20,688 - WARN [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:213] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by camus produced exception
org.ldaptive.LdapException: javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object]; remaining name 'ou=people,dc=localdomain,dc=com'
	at org.ldaptive.provider.ProviderUtils.throwOperationException(ProviderUtils.java:77)
Caused by: javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object]
	at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3160)


How to solve it? 

My ldap.properties:

idp.authn.LDAP.ldapURL                          = ldap://localhost:389
idp.authn.LDAP.useStartTLS                     = false
idp.authn.LDAP.sslConfig                       = certificateTrust
idp.authn.LDAP.trustCertificates                = %{idp.home}/credentials/ldap-server.crt
idp.authn.LDAP.baseDN                           = ou=people,dc=localdomain,dc=com
idp.authn.LDAP.userFilter                       = (uid={user})
idp.authn.LDAP.bindDN                           = cn=shibreader,dc=localdomain,dc=com
idp.authn.LDAP.bindDNCredential                 = mypassword
idp.authn.LDAP.dnFormat                         = uid=%s,ou=people,dc=localdomain,dc=com
# and other default entries..


I didn’t change anything on conf/authn/jaas.config. 

And my LDAP has this entry: DN: uid=camus,ou=people,dc=localdomain,dc=com

Cheers,

Emerson





More information about the users mailing list