Credentials not recognized with LDAP

[Quynh Bui]

I revised the login attributes and the “Credentials not recognized” error went away; however, I now get this error

10:18:22.688 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:75] -   authtype = simple
10:18:22.688 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:76] -   dn = trnadmin
10:18:22.688 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:83] -   credential = <suppressed>
10:18:22.703 - DEBUG [edu.vt.middleware.ldap.Ldap:193] - Search with the following parameters:
10:18:22.703 - DEBUG [edu.vt.middleware.ldap.Ldap:194] -   dn = CN=Users,DC=traindomain,DC=com
10:18:22.703 - DEBUG [edu.vt.middleware.ldap.Ldap:195] -   filter = (sAMAccountName=weblogic)
10:18:22.703 - DEBUG [edu.vt.middleware.ldap.Ldap:196] -   filterArgs = []
10:18:22.703 - DEBUG [edu.vt.middleware.ldap.Ldap:197] -   searchControls = javax.naming.directory.SearchControls at 60a68829
10:18:22.703 - DEBUG [edu.vt.middleware.ldap.Ldap:198] -   handler = [edu.vt.middleware.ldap.handler.FqdnSearchResultHandler at 3862bba7, edu.vt.middleware.ldap.handler.EntryDnSearchResultHandler at 5a0deddc, edu.vt.middleware.ldap.handler.BinarySearchResultHandler at 487b34b4]
10:18:22.734 - ERROR [org.opensaml.saml2.binding.encoding.HTTPPostEncoder:139] - Error invoking Velocity template
java.net.SocketException: Connection reset by peer: socket write error


the attributes stand as follows:

   ldapUrl="ldap://servername:389"
      bindCredential="xxxxxxx"
      ssl="false"
      tls="false"
      baseDn="CN=Users,DC=traindomain,DC=com"
      subtreeSearch="true"
      userFilter="sAMAccountName={0}";

Quynh

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Daniel Fisher
Sent: Tuesday, March 29, 2016 9:01 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Credentials not recognized with LDAP

On Tue, Mar 29, 2016 at 5:15 PM, Quynh Bui <Quynh.Bui at perficient.com<mailto:Quynh.Bui at perficient.com>> wrote:
I’ve checked and the baseDN is correct as is: baseDn="CN=Users,DC=traindomain,DC=com"

When I turn on LDAP debugger I get the following:
15:42:54.059 - WARN [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.ComputedIDDataConnector:65] - This data connector is deprecated.  The StoredID data connector should be used in its place.
15:42:54.168 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:74] - Bind with the following parameters:
15:42:54.168 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:75] -   authtype = simple
15:42:54.168 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:76] -   dn = trnadmin
15:42:54.168 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:83] -   credential = <suppressed>

There is a gap in the logs here. You should see an authentication success or failure.

15:45:36.951 - INFO [Shibboleth-Access:74] - 20160329T204536Z|Training.traindomain.com<http://Training.traindomain.com>|traindomain.com:8005|/profile/SAML2/POST/SSO|


--Daniel Fisher

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160330/9a516413/attachment.html>