LDAP baseDN problem

[Nate Klingenstein]

Negib,

LDAP error codes were never really standardized with gusto, but this one means just what it says: no such object.  The search is getting attempted and the LDAP directory is finding nothing when it needs to find one result.

The LDAP directory itself will usually log something more informative, but we can’t tell you what is “right” or “wrong” in your environment.  You’ll need to check the filter, the base DN, and other pieces of the query in your configuration and compare them to what is “right” for this directory.

Take care,
Nate.

On Feb 23, 2016, at 09:08, Negib A. Sherif <aa8288 at wayne.edu<mailto:aa8288 at wayne.edu>> wrote:


Hello,
I have Shib IdP 3.2.1 running. I have problem authenticating to remote LDAP. It is failing on baseDN config line on ldap.properties. Given baseDN is dc=wayne,dc=edu
I am not using JASS configuration and only <import resource="ldap-authn-config.xml" /> is enabled on authn/password-authn-config.xml file.  CAN SOMEONE HELP WHY IT IS FAILING.  Appreciate your help.

See error below from idp-process.log


WARN [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:175] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by ABA produced exception org.ldaptive.LdapException: javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object]; remaining name 'dc=wayne,dc=edu'
at org.ldaptive.provider.ProviderUtils.throwOperationException(ProviderUtils.java:77) Caused by: javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object] at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3160)



--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160223/7038ff83/attachment.html>