Re: Roller LDAP Support : solution?

[zhe <zh...@yahoo.com>]

greate, thanks for your hard work. I tried to follow the instruction and got
the following error:
ERROR 2005-07-29 07:02:13,124 StandardWrapperValve:invoke -
Servlet.service() for servlet default threw exception
org.acegisecurity.ldap.LdapDataAccessException: Unable to connect to LDAP
server; nested exception is javax.naming.CommunicationException: Request: 1
cancelled
javax.naming.CommunicationException: Request: 1 cancelled
        at com.sun.jndi.ldap.LdapRequest.getReplyBer(LdapRequest.java:77)
        at com.sun.jndi.ldap.Connection.readReply(Connection.java:435)
        at com.sun.jndi.ldap.LdapClient.ldapBind(LdapClient.java:357)


Can you give me some suggestion how it happended? 

Thanks!

here is my related config:

     <bean id="ldapAuthProvider"
          
class="org.acegisecurity.providers.ldap.LdapAuthenticationProvider">
      <constructor-arg>
        <bean
class="org.acegisecurity.providers.ldap.authenticator.BindAuthenticator" >
           <constructor-arg>
                <ref local="initialDirContextFactory"/>
         </constructor-arg>
           <property name="userDnPatterns">
                <list>
                        <value>uid={0},ou=people </value></list>
           </property>
        </bean>
      </constructor-arg>
      <constructor-arg>
        <bean
class="org.acegisecurity.providers.ldap.populator.DefaultLdapAuthoritiesPopulator">
           <constructor-arg><ref
local="initialDirContextFactory"/></constructor-arg>
           <constructor-arg><value>ou=groups</value></constructor-arg>
           <property name="groupRoleAttribute"><value>ou</value></property>
        </bean>
      </constructor-arg>
    </bean>

<bean id="initialDirContextFactory" 
class="org.acegisecurity.ldap.DefaultInitialDirContextFactory">
      <constructor-arg
value="ldap://ldap.xxx.umich.edu:xxx/dc=xxx,dc=umich,dc=edu"/>
</bean>


    <bean id="authenticationManager"
class="org.acegisecurity.providers.ProviderManager">
        <property name="providers">
            <list>
                <ref local="ldapAuthProvider"/>
                <ref local="daoAuthenticationProvider"/>
                <ref local="anonymousAuthenticationProvider"/>
                <!-- rememberMeAuthenticationProvider added programmatically
-->
            </list>
        </property>
    </bean>

-- 
View this message in context: http://www.nabble.com/-Fwd%3A-Re%3A-Roller-LDAP-Support--tf1792699s12275.html#a5401224
Sent from the Roller - User forum at Nabble.com.

Re: Roller LDAP Support : solution?

[zhe <zh...@yahoo.com>]

You are right:

change the ldap to ldaps, now error is gone. Thanks Pranay.
-- 
View this message in context: http://www.nabble.com/-Fwd%3A-Re%3A-Roller-LDAP-Support--tf1792699s12275.html#a5434306
Sent from the Roller - User forum at Nabble.com.

Re: Roller LDAP Support : solution?

[pranav shah <ps...@inteqnet.com>]

Hi,

Please change ldap url to ldaps://xxx.xxx.edu:636:dc=abc,dc=com type of
value. If u use ssl then ldap uri will be ldaps. 

Regards,
Pranav Shah


-- 
View this message in context: http://www.nabble.com/-Fwd%3A-Re%3A-Roller-LDAP-Support--tf1792699s12275.html#a5433993
Sent from the Roller - User forum at Nabble.com.

Re: Roller LDAP Support : solution?

[zhe <zh...@yahoo.com>]

Thanks for your suggestion. I have tried with userid/password, however it
still does not work. Our ldap server is using SSL, is there anything special
setting for that? 
-- 
View this message in context: http://www.nabble.com/-Fwd%3A-Re%3A-Roller-LDAP-Support--tf1792699s12275.html#a5433902
Sent from the Roller - User forum at Nabble.com.

Re: Roller LDAP Support : solution?

[pranav shah <ps...@inteqnet.com>]

Hi Zhe,

I do not see your LDAP Connection working. It seems like Bind is not working
for u. Please check if your ldap server gives anonymous access or not or use
user which has read-only access to your LDAP ( or use it's manager
dn/password to test and then change it to other user which has access to
read entries).

>From your confing, I do not see managerDn and password in
initialDirContextFactory. Please specify it and see. 

<bean id="initialDirContextFactory"
class="org.acegisecurity.ldap.DefaultInitialDirContextFactory">
      <constructor-arg
value="ldap://ldap.xxx.umich.edu:389/dc=xxx,dc=umich,dc=edu:389"/>
      <property name="managerDn"><value>FULL_DN_OF_MANAGER_ACCOUNT like
cn=Manager, DC=umich,dc=edu</value></property>
      <property
name="managerPassword"><value>PASSWORD_OF_MANAGERDN</value></property>
        <property name="extraEnvVars">
            <map>
                <entry>
                    <key>
                        <value>java.naming.referral</value>
                    </key>
                    <value>follow</value>
                </entry>
            </map>
        </property>
    </bean>

See if this works for you. 

Regards,
Pranav
-- 
View this message in context: http://www.nabble.com/-Fwd%3A-Re%3A-Roller-LDAP-Support--tf1792699s12275.html#a5408655
Sent from the Roller - User forum at Nabble.com.