LDAP Error Code Messaging

[Lille M]

Thank you Daniel.

I am getting error message below --- is there a mismatch I made when
updating 'ldap-authn-config.xml':

<bean name="bindSearchAuthenticator"
class="org.ldaptive.auth.Authenticator"
p:resolveEntryOnFailure="%{idp.authn.LDAP.resolveEntryOnFailure:false}"
p:authenticationResponseHandlers-ref="authenticationResponseHandler">
        <constructor-arg index="0" ref="bindSearchDnResolver" />
        <constructor-arg index="1" ref="authHandler" />
    </bean>

<bean id="authenticationResponseHandler"
class="org.ldaptive.auth.ext.FreeIPAAuthenticationResponseHandler" >
         <constructor-arg value="0" />
         <constructor-arg value="0" />
         <constructor-arg value="0" />
       </bean>



2018-11-07 13:53:15,326 - ERROR [net.shibboleth.idp.authn:-2] -
[7DE83AB47C079880EF3125704D18E737] - [127.0.0.1] - Uncaught runtime
exception
org.springframework.binding.expression.EvaluationException: An ELException
occurred getting the value for expression 'ValidateUsernamePassword' on
context [class
org.springframework.webflow.engine.impl.RequestControlContextImpl]
    at
org.springframework.binding.expression.spel.SpringELExpression.getValue(SpringELExpression.java:92)
Caused by: org.springframework.expression.spel.SpelEvaluationException:
EL1021E: A problem occurred whilst attempting to access the property
'ValidateUsernamePassword': 'Error creating bean with name
'ValidateUsernamePasswordAgainstLDAP' defined in file
[/opt/shibboleth-idp/system/flows/authn/password-authn-beans.xml]: Cannot
resolve reference to bean 'shibboleth.authn.LDAP.authenticator' while
setting bean property 'authenticator'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'bindSearchAuthenticator' defined in file
[/opt/shibboleth-idp/conf/authn/ldap-authn-config.xml]: Cannot resolve
reference to bean 'authenticationResponseHandler' while setting bean
property 'authenticationResponseHandlers'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'authenticationResponseHandler' defined in file
[/opt/shibboleth-idp/conf/authn/ldap-authn-config.xml]: Bean instantiation
via constructor failed; nested exception is
org.springframework.beans.BeanInstantiationException: Failed to instantiate
[org.ldaptive.auth.ext.FreeIPAAuthenticationResponseHandler]: Constructor
threw exception; nested exception is java.lang.IllegalArgumentException: 0'


On Wed, Nov 7, 2018 at 1:18 PM Daniel Fisher <dfisher at vt.edu> wrote:

> On Wed, Nov 7, 2018 at 3:36 PM Lille M <lillemacdoe at gmail.com> wrote:
>
>> Thanks Daniel!
>>
>> Below is the ldap.properties file (scrubbed).
>>
>>
>> idp.authn.LDAP.authenticator                    = bindSearchAuthenticator
>>
>
> You're using the bindSearchAuthenticator, so update ldap-authn-config.xml
> like so
>
> <bean name="bindSearchAuthenticator"
> class="org.ldaptive.auth.Authenticator"
> p:resolveEntryOnFailure="%{idp.authn.LDAP.resolveEntryOnFailure:false}"
> p:authenticationResponseHandlers-ref="authenticationResponseHandler">
>
> --Daniel Fisher
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181107/4c081f97/attachment.html>