<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:14pt;color:#000000;background-color:#FFFFFF;font-family:'Times New Roman', Times, serif;">
<p><br>
</p>
Hey Daniel,
<div>I tried JAAS for authentication porting my 2.x DataConector and got the following error when attempting to login to Remote Ldap. <font color="#ff0000">Any Hint to fix the error below? Eventually, I want to stick with Ldap Authentication built in v3. </font></div>
<div><br>
</div>
<div>
<div>2016-02-04 10:47:56,091 - ERROR [net.shibboleth.idp.saml.profile:-2] - Uncaught runtime exception</div>
<div>java.lang.NullPointerException: null</div>
<div> at javax.naming.NameImpl.<init>(NameImpl.java:283)</div>
<div>2016-02-04 10:47:56,097 - WARN [org.opensaml.profile.action.impl.LogEvent:76] - An error event occurred while processing the request: RuntimeException</div>
<div><br>
</div>
</div>
<div><br>
</div>
<div>I have commented out ...LDAP.baseDN config lines from the following files. Otherwise, I keep getting baseDN error.<br>
<div><br>
</div>
<div>root@ShibIdP:/opt/shibboleth-idp# grep -R "LDAP.baseDN" conf/*</div>
<div><span style="font-size: 14pt;">conf/attribute-resolver.xml</span><br>
</div>
<div><span style="font-size: 14pt;">conf/authn/ldap-authn-config.xml</span><br>
</div>
<div><span style="font-size: 14pt;">conf/ldap.properties</span></div>
<div><br>
</div>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Daniel Fisher <dfisher@vt.edu><br>
<b>Sent:</b> Wednesday, February 3, 2016 4:38 PM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Re: IdP 3.2.1 Ldap problem</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div class="gmail_extra">
<div class="gmail_quote">On Wed, Feb 3, 2016 at 3:07 PM, Negib A. Sherif <span dir="ltr">
<<a href="mailto:aa8288@wayne.edu" target="_blank">aa8288@wayne.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr">
<div style="font-size:14pt; color:#000000; background-color:#ffffff; font-family:'Times New Roman',Times,serif">
<p><span style="font-size:14pt">exit; which is fine. uid is not duplicated and the two ldaps are unique. not a fail back. This is what I have on 2.x and it works perfectly. Right now, I am just trying to make it to work IdP 3.2.1 with the remote Ldap and come
back to add local ldap.</span></p>
</div>
</div>
</blockquote>
<div><br>
</div>
<div>You can port this configuration directly to v3 if you are willing to continue using JAAS for authentication. If you want to use the LDAP authentication built into v3 (which is what your logs indicate you are using) let me know and I'll provide some more
details. </div>
<div><br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr">
<div style="font-size:14pt; color:#000000; background-color:#ffffff; font-family:'Times New Roman',Times,serif">
<p><span style="font-size:14pt"> </span><br>
</p>
<span class="">
<div> <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"</div>
</span>
<div> xmlns="urn:mace:shibboleth:2.0:resolver:dc"</div>
<div> ldapURL="ldaps://<a href="http://A.wayne.edu:636" target="_blank">A.wayne.edu:636</a>"</div>
<div> principal="cn=remote-cn-name,ou=system groups,ou=groups,dc=wayne,dc=edu"</div>
<div> principalCredential="password"</div>
<div> lowercaseAttributeNames="true"></div>
<div> <dc:FilterTemplate></div>
<div> <![CDATA[</div>
<div> (uid=$requestContext.principalName)</div>
<div> ]]></div>
<div> </dc:FilterTemplate></div>
<div> <dc:ReturnAttributes>uid</dc:ReturnAttributes></div>
<div> <ConnectionPool minPoolSize="3"/></div>
<div> </resolver:DataConnector></div>
<div> </div>
</div>
</div>
</blockquote>
<div><br>
</div>
<div>This configuration should continue to work in v3. You can define properties in ldap.properties and put them in your configuration if that helps your deployments. Note that the default properties assume a single directory or multiple directories with the
same configuration, so you'll need to define additional properties for your use case.</div>
<div><br>
</div>
<div>--Daniel Fisher</div>
<div><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>