<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><br></div><div><br>On Jul 31, 2015, at 11:33 PM, Jason Separovic <<a href="mailto:jseppa01@gmail.com">jseppa01@gmail.com</a>> wrote:<br><br></div><blockquote type="cite"><div>Hi,</div><div><br></div><div>I'm trying to setup a simple google apps test case with idp 3.1.2. I also have openldap <span style="font-family: Menlo; font-size: 11px;">2.4.39-8.el6 </span>setup on the same host</div><div><br></div><div>It seems as though ldap is working fine when I use the aacli command:</div><div><br></div><div><blockquote style="margin:0 0 0 40px; border:none; padding:0px;"><p style="margin: 0px; font-size: 11px; font-family: Menlo;">[root@dev1 bin]# ./aacli.sh --requester <a href="http://google.com">google.com</a> --principal jason</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;"><br></p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">{</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">"requester": "<a href="http://google.com">google.com</a>",</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">"principal": "jason",</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">"attributes": [</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;"><br></p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;"><br></p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> {</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> "name": "googleNameID",</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> "values": [</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> "StringAttributeValue{<a href="mailto:value=jason@jseppa.com">value=jason@jseppa.com</a>}" ]</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> } </p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; min-height: 13px;"><br></p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">]</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;">}</p></blockquote></div><blockquote style="margin:0 0 0 40px; border:none; padding:0px;"><div><br></div></blockquote><div><br></div><div>However, when I direct my browser to the google api, I get redirected to the idp login page as expected, however when I enter the ldap user/pass, the form just returns another blank form.</div><div>Tcpdump on 389 reveals no attempt to connect to ldap and, org.ldaptive TRACE shows nothing in the logs.</div><div><br></div><div>I'm using the following ldap in the attribute resolver, so I think the ldap.properties should be good:</div><div><br></div><div><p style="margin: 0px; font-size: 11px; font-family: Menlo;"> <resolver:DataConnector id="ldap" xsi:type="dc:LDAPDirectory"</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> baseDN="%{idp.attribute.resolver.LDAP.baseDN}" </p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> principal="%{idp.attribute.resolver.LDAP.bindDN}"</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"></p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> <dc:FilterTemplate></p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> <![CDATA[</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> %{idp.attribute.resolver.LDAP.searchFilter}</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> ]]></p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> </dc:FilterTemplate></p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo;"> </resolver:DataConnector></p></div><div><br></div><div>Is there anything that needs to be configured in order to use ldap in the auth process? I'm sure I'm missing something simple here, just beating my head against the wall a bit.</div></blockquote><br><div>The blank form sounds odd, but without more info I suggest start there.</div></body></html>