<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Mon, Sep 11, 2017 at 8:40 AM, vaishali prajapati <span dir="ltr"><<a href="mailto:vbprajapati39@gmail.com" target="_blank">vbprajapati39@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><font color="#000000" face="Verdana, Geneva, Helvetica, Arial, sans-serif"><span style="font-size:13.44px">Hello All,</span></font></div><div><font color="#000000" face="Verdana, Geneva, Helvetica, Arial, sans-serif"><span style="font-size:13.44px">             While configuring shibboleth IdP with active directory I got following Error:</span></font></div><span class=""><div><b><span style="color:rgb(0,0,0);font-family:Verdana,Geneva,Helvetica,Arial,sans-serif;font-size:13.44px">Error generated during login:[net.shibboleth.idp.auth<wbr>n.impl.ValidateUsernamePasswor<wbr>dAgainstLDAP:192] - Profile Action ValidateUsernamePasswordAgains<wbr>tLDAP: Login by shibboleth produced exception </span><br style="color:rgb(0,0,0);font-family:Verdana,Geneva,Helvetica,Arial,sans-serif;font-size:13.44px"><span style="color:rgb(0,0,0);font-family:Verdana,Geneva,Helvetica,Arial,sans-serif;font-size:13.44px">org.ldaptive.LdapException: javax.naming.NamingException: [LDAP: error code 1 - 000004DC: LdapErr: DSID-0C0906E8, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db1^@]; remaining name 'ou=***,dc=***,dc=***' </span><font color="#000000" face="Verdana, Geneva, Helvetica, Arial, sans-serif"><span style="font-size:13.44px"><br></span></font></b></div><div><span style="color:rgb(0,0,0);font-family:Verdana,Geneva,Helvetica,Arial,sans-serif;font-size:13.44px"><br></span></div></span><div><span style="color:rgb(0,0,0);font-family:Verdana,Geneva,Helvetica,Arial,sans-serif;font-size:13.44px">The configration of <b>ldap.properties</b> are as below:</span></div><div><div class="h5"><div><span style="color:rgb(0,0,0);font-family:Verdana,Geneva,Helvetica,Arial,sans-serif;font-size:13.44px"><br></span></div><span style="color:rgb(0,0,0);font-family:Verdana,Geneva,Helvetica,Arial,sans-serif;font-size:13.44px">## Authenticator strategy, either anonSearchAuthenticator, bindSearchAuthenticator, directAuthenticator, adAuthenticator </span><br style="color:rgb(0,0,0);font-family:Verdana,Geneva,Helvetica,Arial,sans-serif;font-size:13.44px"><span style="color:rgb(0,0,0);font-family:Verdana,Geneva,Helvetica,Arial,sans-serif;font-size:13.44px">#idp.authn.LDAP.authenticator                   =bindSearchAuthenticator </span></div></div></div></blockquote><div><br></div><div>Uncomment this line to use the bind credentials you've configured.</div><div><br></div><div>--Daniel Fisher</div><div> </div></div></div></div>