<div dir="ltr"><br><div>Hi,</div><div><br></div><div>From some of the previous posts I gathered that it was possible to connect to ldap without ssl. I have tried by commenting the respective entries in ldap.properties and ldap-authn-config.</div><div><br></div><div>I am able to get to the idp login page but when after submitting credentials I get :</div><div>Login Failure: Pool is empty and connection creation failed.<br></div><div><br></div><div>Appreciate any pointers on recommended approaches to connect to ldap without SSL.</div><div><br></div><div>idp-process.log:</div><div><div>2015-05-21 09:56:19,576 - WARN [org.ldaptive.pool.BlockingConnectionPool:534] - unable to create available connection</div><div>2015-05-21 10:00:48,514 - ERROR [org.ldaptive.pool.BlockingConnectionPool:484] - [org.ldaptive.pool.BlockingConnectionPool@427397920::name=search-pool, poolConfig=[org.ldaptive.pool.PoolConfig@1926828943::minPoolSize=3, maxPoolSize=10, validateOnCheckIn=false, validateOnCheckOut=false, validatePeriodically=true, validatePeriod=300], activator=null, passivator=null, validator=[org.ldaptive.pool.SearchValidator@1347579987::searchRequest=[org.ldaptive.SearchRequest@1954274106::baseDn=, searchFilter=[org.ldaptive.SearchFilter@1642584434::filter=(objectClass=*), parameters={}], returnAttributes=[1.1], searchScope=OBJECT, timeLimit=0, sizeLimit=1, derefAliases=null, typesOnly=false, binaryAttributes=null, sortBehavior=UNORDERED, searchEntryHandlers=null, searchReferenceHandlers=null, controls=null, followReferrals=false, intermediateResponseHandlers=null]] pruneStrategy=[org.ldaptive.pool.IdlePruneStrategy@40941274::prunePeriod=300, idleTime=600], connectOnCreate=true, connectionFactory=[org.ldaptive.DefaultConnectionFactory@1647588233::provider=org.ldaptive.provider.jndi.JndiProvider@7c887af2, config=[org.ldaptive.ConnectionConfig@553929280::ldapUrl=ldap://<a href="http://ldap.server.com:389">ldap.server.com:389</a>, connectTimeout=3000, responseTimeout=-1, sslConfig=null, useSSL=false, useStartTLS=false, connectionInitializer=[org.ldaptive.BindConnectionInitializer@650505948::bindDn=uid=<a href="mailto:user@server.com">user@server.com</a>, bindSaslConfig=null, bindControls=null]]], initialized=true, availableCount=0, activeCount=0] unable to connect to the ldap</div><div>org.ldaptive.LdapException: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece]</div><div>        at org.ldaptive.provider.ProviderUtils.throwOperationException(ProviderUtils.java:77)</div><div>Caused by: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece]</div><div>        at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3135)</div><div>2015-05-21 10:00:48,515 - WARN [org.ldaptive.pool.BlockingConnectionPool:575] - unable to create active connection</div><div>2015-05-21 10:00:48,515 - ERROR [org.ldaptive.pool.BlockingConnectionPool:170] - Could not service check out request</div><div>2015-05-21 10:00:48,516 - WARN [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:213] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by xxxx produced exception</div><div>org.ldaptive.pool.PoolExhaustedException: Pool is empty and connection creation failed</div><div>        at org.ldaptive.pool.BlockingConnectionPool.getConnection(BlockingConnectionPool.java:171)</div><div>2015-05-21 10:00:49,379 - WARN [org.ldaptive.AbstractOperation$ReopenOperationExceptionHandler:277] - Operation exception encountered, reopening connection</div></div><div><br></div></div>