<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:14pt;color:#000000;background-color:#FFFFFF;font-family:'Times New Roman', Times, serif;">
<p>Nate,</p>
<p><br>
</p>
<p>Shib IdP works fine when I use JAAS authentication without baseDN. I want to stick with Ldap authentication. I don't have access to LDAP log to trace the problem. I also don't want to use JAAS authentication permanently. With my Local OpenLdap the Shib IdP
works fine using local Ldap configuration. I think I have to deal with the guys who are handling remote Ldap.</p>
<p><br>
</p>
<p>Thanks.</p>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Nate Klingenstein <nate.klingenstein@utah.edu><br>
<b>Sent:</b> Tuesday, February 23, 2016 11:17 AM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Re: LDAP baseDN problem </font>
<div> </div>
</div>
<div>Negib,
<div class=""><br class="">
</div>
<div class="">LDAP error codes were never really standardized with gusto, but this one means just what it says: no such object. The search is getting attempted and the LDAP directory is finding nothing when it needs to find one result.</div>
<div class=""><br class="">
</div>
<div class="">The LDAP directory itself will usually log something more informative, but we can’t tell you what is “right” or “wrong” in your environment. You’ll need to check the filter, the base DN, and other pieces of the query in your configuration and
compare them to what is “right” for this directory.</div>
<div class=""><br class="">
</div>
<div class="">Take care,</div>
<div class="">Nate.</div>
<div class=""><br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Feb 23, 2016, at 09:08, Negib A. Sherif <<a href="mailto:aa8288@wayne.edu" class="">aa8288@wayne.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div id="divtagdefaultwrapper" class="" style="font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px; font-size:14pt; background-color:rgb(255,255,255); font-family:'Times New Roman',Times,serif">
<p class="" style="margin-top:0px; margin-bottom:0px"></p>
<div class="">Hello, </div>
<div class="">I have Shib IdP 3.2.1 running. I have problem authenticating to remote LDAP. It is failing on baseDN config line on ldap.properties. Given baseDN is dc=wayne,dc=edu</div>
<div class="">I am not using JASS configuration and only <import resource="ldap-authn-config.xml" /> is enabled on authn/password-authn-config.xml file. CAN SOMEONE HELP WHY IT IS FAILING. Appreciate your help.</div>
<div class=""><br class="">
</div>
<div class="">See error below from idp-process.log </div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">WARN [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:175] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by ABA produced exception <span class="" style="font-size:14pt">org.ldaptive.LdapException: javax.naming.NameNotFoundException:
[LDAP: error code 32 - No Such Object]; remaining name 'dc=wayne,dc=edu'</span></div>
<div class="">at org.ldaptive.provider.ProviderUtils.throwOperationException(ProviderUtils.java:77) <span class="" style="font-size:14pt">Caused by: javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object] </span><span class="" style="font-size:14pt">at
com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3160)</span></div>
<div class=""><br class="">
</div>
<br class="">
<p class="" style="margin-top:0px; margin-bottom:0px"></p>
</div>
<span class="" style="font-family:Helvetica; font-size:12px; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px; float:none; display:inline!important">--<span class="Apple-converted-space"> </span></span><br class="" style="font-family:Helvetica; font-size:12px; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px">
<span class="" style="font-family:Helvetica; font-size:12px; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px; float:none; display:inline!important">To
unsubscribe from this list send an email to<span class="Apple-converted-space"> </span></span><a href="mailto:users-unsubscribe@shibboleth.net" class="" style="font-family:Helvetica; font-size:12px; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px">users-unsubscribe@shibboleth.net</a></div>
</blockquote>
</div>
<br class="">
</div>
</div>
</div>
</div>
</body>
</html>