IDP 3.1 LDAP Authn without SSL

[Daniel Fisher]

On Thu, May 21, 2015 at 3:32 AM, NPTabunakawai <nimcee at gmail.com> wrote:

>
> Hi,
>
> From some of the previous posts I gathered that it was possible to connect
> to ldap without ssl. I have tried by commenting the respective entries in
> ldap.properties and ldap-authn-config.
>
> I am able to get to the idp login page but when after submitting
> credentials I get :
> Login Failure: Pool is empty and connection creation failed.
>
> Appreciate any pointers on recommended approaches to connect to ldap
> without SSL.
>
> idp-process.log:
> Caused by: javax.naming.AuthenticationException: [LDAP: error code 49 -
> 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error,
> data 525, vece]
>         at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3135)
>

Double check that the bindDN and bindDNCredential properties are correct. I
believe that particular message means your bindDN does not exist.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150521/bead9133/attachment.html>