idp v3 authentication - The username you entered cannot be identified

Sundeep Singh Nanuwa ssn at ebi.ac.uk
Tue Mar 15 12:56:54 EDT 2016



On 15/03/16 15:50, Daniel Fisher wrote:
> On Tue, Mar 15, 2016 at 11:27 AM, <ssn at ebi.ac.uk 
> <mailto:ssn at ebi.ac.uk>> wrote:
>
>     *2016-03-15 12:50:11,928 - INFO
>     [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:152]
>     - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by
>     'user1' failed**
>     **2016-03-15 12:50:18,282 - INFO
>     [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:152]
>     - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by
>     'domain\user1' failed*
>
>
> Put the 'org.ldaptive' package in DEBUG and you should see the cause.
>

2016-03-15 16:44:36,455 - INFO 
[org.ldaptive.auth.PooledSearchDnResolver:268] - search for user=user1 
failed using 
filter=[org.ldaptive.SearchFilter at 1040207474::filter=(&(uid={0})(eduPersonAffiliation=*)), 
parameters={user=user1}]

Culprit is (most likely a syntax error)
idp.authn.LDAP.userFilter                       = 
(&(uid={0})(eduPersonAffiliation=*))

Now using (which works)
idp.authn.LDAP.userFilter                       = (uid={user})
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160315/5143de6f/attachment.html>


More information about the users mailing list