LDAP baseDN problem

[Negib A. Sherif]

Nate,


Shib IdP works fine when I use JAAS authentication without baseDN. I want to stick with Ldap authentication. I don't have access to LDAP log to trace the problem. I also don't want to use JAAS authentication permanently. With my Local OpenLdap the Shib IdP works fine using local Ldap configuration. I think I have to deal with the guys who are handling remote Ldap.


Thanks.


________________________________
From: users <users-bounces at shibboleth.net> on behalf of Nate Klingenstein <nate.klingenstein at utah.edu>
Sent: Tuesday, February 23, 2016 11:17 AM
To: Shib Users
Subject: Re: LDAP baseDN problem

Negib,

LDAP error codes were never really standardized with gusto, but this one means just what it says: no such object.  The search is getting attempted and the LDAP directory is finding nothing when it needs to find one result.

The LDAP directory itself will usually log something more informative, but we can't tell you what is "right" or "wrong" in your environment.  You'll need to check the filter, the base DN, and other pieces of the query in your configuration and compare them to what is "right" for this directory.

Take care,
Nate.

On Feb 23, 2016, at 09:08, Negib A. Sherif <aa8288 at wayne.edu<mailto:aa8288 at wayne.edu>> wrote:


Hello,
I have Shib IdP 3.2.1 running. I have problem authenticating to remote LDAP. It is failing on baseDN config line on ldap.properties. Given baseDN is dc=wayne,dc=edu
I am not using JASS configuration and only <import resource="ldap-authn-config.xml" /> is enabled on authn/password-authn-config.xml file.  CAN SOMEONE HELP WHY IT IS FAILING.  Appreciate your help.

See error below from idp-process.log


WARN [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:175] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by ABA produced exception org.ldaptive.LdapException: javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object]; remaining name 'dc=wayne,dc=edu'
at org.ldaptive.provider.ProviderUtils.throwOperationException(ProviderUtils.java:77) Caused by: javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object] at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3160)



--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160223/614ffa25/attachment-0001.html>