<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix"><br>
Here is the relevant stack trace from logs/idp-process.log. <br>
<br>
12:49:53.223 - DEBUG
[edu.vt.middleware.ldap.jaas.LdapLoginModule:136] - Authentication
failed<br>
javax.naming.AuthenticationException: Cannot authenticate dn,
invalid dn<br>
at
edu.vt.middleware.ldap.auth.AbstractAuthenticator.authenticateAndAuthorize(AbstractAuthenticator.jav<br>
a:160) ~[vt-ldap-3.3.6.jar:na]<br>
at
edu.vt.middleware.ldap.jaas.JaasAuthenticator.authenticate(JaasAuthenticator.java:74)
~[vt-ldap-3.3.<br>
6.jar:na]<br>
at
edu.vt.middleware.ldap.auth.Authenticator.authenticate(Authenticator.java:320)
~[vt-ldap-3.3.6.jar:n<br>
a]<br>
at
edu.vt.middleware.ldap.auth.Authenticator.authenticate(Authenticator.java:277)
~[vt-ldap-3.3.6.jar:n<br>
a]<br>
at
edu.vt.middleware.ldap.jaas.JaasAuthenticator.authenticate(JaasAuthenticator.java:60)
~[vt-ldap-3.3.<br>
6.jar:na]<br>
at
edu.vt.middleware.ldap.jaas.LdapLoginModule.login(LdapLoginModule.java:103)
~[vt-ldap-3.3.6.jar:na]<br>
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
Method) ~[na:1.7.0_21]<br>
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
~[na:1.7.0_21]<br>
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[na:1.7.0_21]<br>
at java.lang.reflect.Method.invoke(Method.java:601)
~[na:1.7.0_21]<br>
at
javax.security.auth.login.LoginContext.invoke(LoginContext.java:784)
[na:1.7.0_21]<br>
at
javax.security.auth.login.LoginContext.access$000(LoginContext.java:203)
[na:1.7.0_21]<br>
at
javax.security.auth.login.LoginContext$4.run(LoginContext.java:698)
[na:1.7.0_21]<br>
at
javax.security.auth.login.LoginContext$4.run(LoginContext.java:696)
[na:1.7.0_21]<br>
<br>
<br>
FWIW, The same config works fine in my webapp using
spring-security.<br>
<br>
<bean id="contextSource"
class="org.springframework.security.ldap.DefaultSpringSecurityContextSource"><br>
<constructor-arg
value=<a class="moz-txt-link-rfc2396E" href="ldap://localhost:33389/dc=springframework,dc=org">"ldap://localhost:33389/dc=springframework,dc=org"</a>/><br>
</bean><br>
<br>
<bean id="userSearch"
class="org.springframework.security.ldap.search.FilterBasedLdapUserSearch"><br>
<constructor-arg index="0" value=""/><br>
<constructor-arg index="1" value="(uid={0})"/><br>
<constructor-arg index="2" ref="contextSource" /><br>
</bean><br>
<br>
Any suggestions what else could I try?<br>
<br>
On 05/20/2013 12:07 PM, Farrukh Najmi wrote:<br>
</div>
<blockquote cite="mid:519A4A3C.6000500@wellfleetsoftware.com"
type="cite">
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<br>
I have been unsuccessful thus far in setting up IdP 2.4.0 with my
test ldap server (spring-security-ldap-sample).<br>
<br>
I have made the following config changes by adding config elements
shown for each file below:<br>
<br>
<ul style="margin-top:0pt;margin-bottom:0pt;"
id="docs-internal-guid-67ebb44e-c29c-e9ff-cdbb-e95ad1814002">
<li dir="ltr"
style="list-style-type:disc;font-size:16px;font-family:Arial;color:#666666;background-color:transparent;font-weight:bold;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">conf/login.config</span></p>
</li>
</ul>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;"><br
class="kix-line-break">
edu.vt.middleware.ldap.jaas.LdapLoginModule required</span></p>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">
ldapUrl=<a moz-do-not-send="true"
class="moz-txt-link-rfc2396E"
href="ldap://localhost:33389/dc=springframework,dc=org">"ldap://localhost:33389/dc=springframework,dc=org"</a></span></p>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">
baseDn=""</span></p>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">
ssl="false"</span></p>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">
userFilter="uid={0}";</span></p>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">};</span></p>
<ul style="margin-top:0pt;margin-bottom:0pt;">
<li dir="ltr"
style="list-style-type:disc;font-size:16px;font-family:Arial;color:#666666;background-color:transparent;font-weight:bold;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">
<h3 dir="ltr"
style="line-height:1.15;margin-top:14pt;margin-bottom:4pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">conf/handler.xml</span></h3>
</li>
</ul>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;"><br
class="kix-line-break">
<!-- Username/password login handler --> </span></p>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">
<ph:LoginHandler xsi:type="ph:UsernamePassword"</span></p>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">
jaasConfigurationLocation=<a moz-do-not-send="true"
class="moz-txt-link-rfc2396E"
href="file:///home/najmi/shibboleth/shibboleth-identityprovider-2.4.0/installation/conf/login.config">"file:///home/najmi/shibboleth/shibboleth-identityprovider-2.4.0/installation/conf/login.config"</a>></span></p>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">
<ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod></span></p>
<p dir="ltr"
style="line-height:1.15;margin-top:0pt;margin-bottom:0pt;"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;">
</ph:LoginHandler></span></p>
<br>
<span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;"></span>I
then try and login at the idp/login.jsp page with well-known
credentials. I get the error below.<br>
<h3>ERROR</h3>
<p> An error occurred while processing your request. Please
contact your helpdesk or user ID office for assistance. </p>
<p> <strong>Error Message: Invalid IdP URL (HTTP 404)</strong> </p>
<br>
Also, I notice that the login.jsp code "Log in to
<idpui:serviceName/>"<br>
<br>
renders as "Log in to Unspecified Service Provider". I guess this
is telling that my config for the ldap provider is not being read
for some reason.<br>
<br>
I have done no customization of the login.jsp page beyond changing
the logo. <br>
What could be wrong and how can I debug this better.<br>
<br>
TIA for your kind help.<br>
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Regards,
Farrukh Najmi
Web: <a class="moz-txt-link-freetext" href="http://www.wellfleetsoftware.com">http://www.wellfleetsoftware.com</a>
</pre>
</body>
</html>