<div dir="ltr">Since AD allows a lot flexibility in building the directory structure, your config needs to reflect local configuration. It's probably easier to check permutations using command-line ldap or an ldap browser like Apache Directory Studio. As a pure guess, might you want the baseDN to be OU=Users... rather than CN=Users...assuming your Shibboleth service account is in Users and some other fork...<div><br></div><div>BTW, I hope you plan to turn on tls or ssl before production.</div><div><br></div><div>David Bantz</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Mar 29, 2016 at 10:34 AM, Quynh Bui <span dir="ltr"><<a href="mailto:Quynh.Bui@perficient.com" target="_blank">Quynh.Bui@perficient.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="#0563C1" vlink="#954F72">
<div>
<p>I am working with Shib 2.3.8. After setup is complete, when at final testing step (login screen) I get the Credentials not recognized error. I understand this issue had been reported previously, but there doesn't seem to be a definitive
answer to resolve it. The LDAP string in login.config is:<u></u><u></u></p>
<p><u></u> <u></u></p>
<p> edu.vt.middleware.ldap.jaas.LdapLoginModule required<u></u><u></u></p>
<p> ldapUrl="ldap://servername:389"<u></u><u></u></p>
<p> bindDn="cn=trnadmin"<u></u><u></u></p>
<p> bindCredential="xxxxxxx"<u></u><u></u></p>
<p> baseDn="CN=Users,DC=traindomain,DC=com"<u></u><u></u></p>
<p> tls="false"<u></u><u></u></p>
<p> ssl="false"<u></u><u></u></p>
<p> userFilter="samAccountName";<u></u><u></u></p>
<p><u></u> <u></u></p>
<p> I've tried different input of attributes which make no difference in outcome. Is there an example of what attributes work for login.config with AD LDAP? Using similar attributes to above I was able to deploy the Shib web app to IdP
weblogic domain so It seems odd that login authentication doesn't work.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><u></u> <u></u></span></b></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">Regards,<span class="HOEnZb"><font color="#888888"><u></u><u></u></font></span></span></p><span class="HOEnZb"><font color="#888888">
<p class="MsoNormal"><b><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:black"><u></u> <u></u></span></b></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">Quynh Bui</span></b><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</font></span></div>
</div>
<br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br></div>