<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue-Light, Helvetica Neue Light, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr">I'm trying to connect IDP3 to Windows LDAP (Server 2012 R2). I get an error when I try to authenticate a user:</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr"><br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr">DSID-0C09072b, In order to perform an operation, a succesful bind must be completed.</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr"><br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr">I ran a network trace, and I see the following behavior:</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr"><br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr"><service start></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr">...</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">4 0.028683 aa.aa.aa.aa -> bb.bb.bb.bb LDAP 112 bindRequest(1) "sync@my.domain.com" simple</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">5 0.030837 bb.bb.bb.bb -> aa.aa.aa.aa LDAP 88 bindResponse(1) success</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">...</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">7 0.040868 aa.aa.aa.aa -> bb.bb.bb.bb LDAP 102 unbindRequest(2)<br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">...</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""><br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""><try to authenticate></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">...</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""> 27 80.735579 aa.aa.aa.a -> bb.bb.bb.bb LDAP 165 searchRequest(1) "CN=Users,DC=my,DC=domain,DC=com" singleLevel<br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""> 28 80.736019 bb.bb.bb.bb -> aa.aa.aa.a LDAP 240 searchResDone(1) operationsError (000004DC: LdapErr: DSID-0C09072B, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v2580)</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">...</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""><br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">What I don't understand is why it's not doing a bind. It did a bind during the service start, and it was succesful, but it then unbound. During authentication, it tries to do a search, but there is no new bind.</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""><br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">Here's snippets from my ldap.properties (aa.aa.aa.aa and bb.bb.bb.bb are IP addresses)</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""><br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">id.authn.LDAP.authenticator = adAuthenticator<br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""><br id="yui_3_16_0_1_1445036739077_5902" class=""></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">idp.authn.LDAP.ldapURL = ldap://bb.bb.bb.bb:3268</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">idp.authn.LDAP.useStartTLS = false</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">idp.authn.LDAP.useSSL = false</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">...</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">idp.authn.LDAP.baseDN = CN=Users,DC=my,DC=domain,DC=com<br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">...</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">idp.authn.LDAP.bindDN = sync@my.domain.com<br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">idp.authn.LDAP.bindDNCredential = <secret></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">...</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">idp.authn.LDAP.dnFormat = %s@my.domain.com</div><div dir="ltr" id="yui_3_16_0_1_1445036739077_6233" class=""><br id="yui_3_16_0_1_1445036739077_6235" class=""></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""><br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class="">and attribute-resolver:</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""><br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""> <resolver:DataConnector id="myLDAP" xsi:type="LDAPDirectory" xmlns="urn:mace:shibboleth:2.0:resolver:dc"</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""> ldapURL="ldap://bb.bb.bb.bb:3268" baseDN="cn=Users,dc=my,dc=domain,dc=com" principal="sync@my.domain.com"</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""> principalCredential="<secret>"></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""> <FilterTemplate></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""> <![CDATA[</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""> (samAccountName=$requestContext.principalName)</div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""> ]]></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""> </FilterTemplate></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""> </resolver:DataConnector></div><div dir="ltr" id="yui_3_16_0_1_1445036739077_6083" class=""><br id="yui_3_16_0_1_1445036739077_6085" class=""></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""><br></div><div dir="ltr" id="yui_3_16_0_1_1445036739077_5908" class="">Any suggestions I could try?</div><div dir="ltr" id="yui_3_16_0_1_1445036739077_5908" class=""><br></div><div id="yui_3_16_0_1_1445036739077_5487" dir="ltr" class=""><br></div></div></body></html>