<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Hi Daniel,
<div class=""><br class="">
</div>
<div class="">You are correct. We are following referrals. I am reviewing the LdapServerIssues link you provided. For our AD setup we may need to setup a Global Catalog to solve my issues.</div>
<div class=""><br class="">
</div>
<div class="">Will keep you posted.</div>
<div class=""><br class="">
</div>
<div class="">-Chris</div>
<div class="">
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div>
<blockquote type="cite" class="">
<div class="">On Sep 2, 2015, at 10:26 AM, Daniel Fisher <<a href="mailto:dfisher@vt.edu" class="">dfisher@vt.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div dir="ltr" class="">
<div class="gmail_extra">
<div class="gmail_quote">On Tue, Sep 1, 2015 at 9:45 PM, Mr. Christopher Bland <span dir="ltr" class="">
<<a href="mailto:chris@fdu.edu" target="_blank" class="">chris@fdu.edu</a>></span> wrote:<br class="">
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div style="word-wrap:break-word" class="">
<div class="">
<div class="">
<div class="">]2015-09-01 20:51:46.457 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:127] - Verify with the following parameters:</div>
<div class="">2015-09-01 20:51:46.457 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:128] - hostname =
<a href="http://adserver1.addomain.fdu.edu/" target="_blank" class="">ADServer1.addomain.fdu.edu</a></div>
<div class="">2015-09-01 20:51:46.457 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:129] - cert = CN=<a href="http://adserver2.addomain.fdu.edu/" target="_blank" class="">ADServer2.addomain.fdu.edu</a></div>
<div class="">2015-09-01 20:51:46.458 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:202] - verifyDNS using subjectAltNames = [ADDOMAIN,
<a href="http://addomain.fdu.edu/" target="_blank" class="">addomain.fdu.edu</a>,
<a href="http://adserver6.addomain.fdu.edu/" target="_blank" class="">ADServer6.addomain.fdu.edu</a>]</div>
<div class="">2015-09-01 20:51:46.681 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:164] - Error occured attempting authentication</div>
<div class="">javax.naming.PartialResultException: null</div>
</div>
</div>
</div>
</blockquote>
<div class=""><br class="">
</div>
<div class="">Can you post your JAAS config? It looks like you're following referrals on DN resolution, but you'd have to explicitly configure that.</div>
<div class=""><br class="">
</div>
<div class="">Also, see this page: <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/LdapServerIssues" class="">
https://wiki.shibboleth.net/confluence/display/SHIB2/LdapServerIssues</a></div>
<div class=""><br class="">
</div>
<div class="">--Daniel Fisher</div>
<div class=""> </div>
</div>
</div>
</div>
-- <br class="">
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">
users-unsubscribe@shibboleth.net</a></div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>