You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@kylin.apache.org by Jasee Tao <ja...@gmail.com> on 2016/06/12 02:37:51 UTC
ldap SearchBase配置不上
我的ldap配置如下：
ldap.server=ldap://ldap.my.com
ldap.username=cn=username,dc=my,dc=com
ldap.password=aes_passwd
ldap.user.searchBase=ou=Accounts,dc=my,dc=com
ldap.user.searchPattern=(uid={0})
LDAP目录结构如下：
uid=user,ou=city,ou=Account,dc=my,dc=com
不过日志里一直显示:
[localhost-startStop-1] search.FilterBasedLdapUserSearch:89 : SearchBase
not set. Searches will be performed from the root:
尝试登陆时，也报错：
org.springframework.security.authentication.InternalAuthenticationServiceException:
Empty filter; nested exception is
javax.naming.directory.InvalidSearchFilterException: Empty filter;
remaining name '/'
请帮忙看看我的配置是否有问题？
Re: ldap SearchBase配置不上
Posted by ShaoFeng Shi <sh...@apache.org>.
Cool, thanks for the update!
2016-06-13 9:23 GMT+08:00 Jasee Tao <ja...@gmail.com>:
> @ShaoFeng, Thank You!
> After configured 'ldap.user.groupSearchBase' it seems OK now.
>
> 2016-06-12 11:30 GMT+08:00 ShaoFeng Shi <sh...@apache.org>:
>
>> Here is my LDAP config, as an example:
>>
>> #LDAP user account directory;
>> ldap.user.searchBase=ou=People,dc=kyligence,dc=com
>> ldap.user.searchPattern=(&(cn={0}))
>> ldap.user.groupSearchBase=OU=Groups,DC=kyligence,DC=com
>>
>> 2016-06-12 11:23 GMT+08:00 Jasee Tao <ja...@gmail.com>:
>>
>>> Transform to English:
>>> My LDAP configuration is:
>>> ldap.server=ldap://ldap.my.com
>>> ldap.username=cn=username,dc=my,dc=com
>>> ldap.password=aes_passwd # hashed by AES
>>> ldap.user.searchBase=ou=Accounts,dc=my,dc=com
>>> ldap.user.searchPattern=(uid={0})
>>>
>>> And my LDAP directory tree:
>>> uid=user,ou=city,ou=Accounts,dc=my,dc=com
>>>
>>> The kylin.log raise:
>>> [localhost-startStop-1] search.FilterBasedLdapUserSearch:89 :
>>> SearchBase not set. Searches will be performed from the root:
>>>
>>> When I try to loggin, kylin.log also raise:
>>>
>>> org.springframework.security.authentication.InternalAuthenticationServiceException:
>>> Empty filter; nested exception is
>>> javax.naming.directory.InvalidSearchFilterException: Empty filter;
>>> remaining name '/'
>>>
>>> I want to kown how to configure SearchBase?
>>>
>>> 2016-06-12 11:15 GMT+08:00 Jasee Tao <ja...@gmail.com>:
>>>
>>>> It is already hashed by AES.
>>>>
>>>> 2016-06-12 11:09 GMT+08:00 ShaoFeng Shi <sh...@apache.org>:
>>>>
>>>>> has the "ldap.password" been hashed? If not, please follow the
>>>>> "Configure LDAP server info" step in
>>>>> https://kylin.apache.org/docs15/howto/howto_ldap_and_sso.html
>>>>>
>>>>> 2016-06-12 10:37 GMT+08:00 Jasee Tao <ja...@gmail.com>:
>>>>>
>>>>>> 我的ldap配置如下：
>>>>>> ldap.server=ldap://ldap.my.com
>>>>>> ldap.username=cn=username,dc=my,dc=com
>>>>>> ldap.password=aes_passwd
>>>>>>
>>>>>> ldap.user.searchBase=ou=Accounts,dc=my,dc=com
>>>>>> ldap.user.searchPattern=(uid={0})
>>>>>>
>>>>>> LDAP目录结构如下：
>>>>>> uid=user,ou=city,ou=Account,dc=my,dc=com
>>>>>>
>>>>>> 不过日志里一直显示:
>>>>>> [localhost-startStop-1] search.FilterBasedLdapUserSearch:89 :
>>>>>> SearchBase not set. Searches will be performed from the root:
>>>>>>
>>>>>> 尝试登陆时，也报错：
>>>>>> org.springframework.security.authentication.InternalAuthenticationServiceException:
>>>>>> Empty filter; nested exception is
>>>>>> javax.naming.directory.InvalidSearchFilterException: Empty filter;
>>>>>> remaining name '/'
>>>>>>
>>>>>> 请帮忙看看我的配置是否有问题？
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Best regards,
>>>>>
>>>>> Shaofeng Shi
>>>>>
>>>>>
>>>>
>>>
>>
>>
>> --
>> Best regards,
>>
>> Shaofeng Shi
>>
>>
>
--
Best regards,
Shaofeng Shi
Re: ldap SearchBase配置不上
Posted by Jasee Tao <ja...@gmail.com>.
@ShaoFeng, Thank You!
After configured 'ldap.user.groupSearchBase' it seems OK now.
2016-06-12 11:30 GMT+08:00 ShaoFeng Shi <sh...@apache.org>:
> Here is my LDAP config, as an example:
>
> #LDAP user account directory;
> ldap.user.searchBase=ou=People,dc=kyligence,dc=com
> ldap.user.searchPattern=(&(cn={0}))
> ldap.user.groupSearchBase=OU=Groups,DC=kyligence,DC=com
>
> 2016-06-12 11:23 GMT+08:00 Jasee Tao <ja...@gmail.com>:
>
>> Transform to English:
>> My LDAP configuration is:
>> ldap.server=ldap://ldap.my.com
>> ldap.username=cn=username,dc=my,dc=com
>> ldap.password=aes_passwd # hashed by AES
>> ldap.user.searchBase=ou=Accounts,dc=my,dc=com
>> ldap.user.searchPattern=(uid={0})
>>
>> And my LDAP directory tree:
>> uid=user,ou=city,ou=Accounts,dc=my,dc=com
>>
>> The kylin.log raise:
>> [localhost-startStop-1] search.FilterBasedLdapUserSearch:89 :
>> SearchBase not set. Searches will be performed from the root:
>>
>> When I try to loggin, kylin.log also raise:
>>
>> org.springframework.security.authentication.InternalAuthenticationServiceException:
>> Empty filter; nested exception is
>> javax.naming.directory.InvalidSearchFilterException: Empty filter;
>> remaining name '/'
>>
>> I want to kown how to configure SearchBase?
>>
>> 2016-06-12 11:15 GMT+08:00 Jasee Tao <ja...@gmail.com>:
>>
>>> It is already hashed by AES.
>>>
>>> 2016-06-12 11:09 GMT+08:00 ShaoFeng Shi <sh...@apache.org>:
>>>
>>>> has the "ldap.password" been hashed? If not, please follow the
>>>> "Configure LDAP server info" step in
>>>> https://kylin.apache.org/docs15/howto/howto_ldap_and_sso.html
>>>>
>>>> 2016-06-12 10:37 GMT+08:00 Jasee Tao <ja...@gmail.com>:
>>>>
>>>>> 我的ldap配置如下：
>>>>> ldap.server=ldap://ldap.my.com
>>>>> ldap.username=cn=username,dc=my,dc=com
>>>>> ldap.password=aes_passwd
>>>>>
>>>>> ldap.user.searchBase=ou=Accounts,dc=my,dc=com
>>>>> ldap.user.searchPattern=(uid={0})
>>>>>
>>>>> LDAP目录结构如下：
>>>>> uid=user,ou=city,ou=Account,dc=my,dc=com
>>>>>
>>>>> 不过日志里一直显示:
>>>>> [localhost-startStop-1] search.FilterBasedLdapUserSearch:89 :
>>>>> SearchBase not set. Searches will be performed from the root:
>>>>>
>>>>> 尝试登陆时，也报错：
>>>>> org.springframework.security.authentication.InternalAuthenticationServiceException:
>>>>> Empty filter; nested exception is
>>>>> javax.naming.directory.InvalidSearchFilterException: Empty filter;
>>>>> remaining name '/'
>>>>>
>>>>> 请帮忙看看我的配置是否有问题？
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> Best regards,
>>>>
>>>> Shaofeng Shi
>>>>
>>>>
>>>
>>
>
>
> --
> Best regards,
>
> Shaofeng Shi
>
>
Re: ldap SearchBase配置不上
Posted by ShaoFeng Shi <sh...@apache.org>.
Here is my LDAP config, as an example:
#LDAP user account directory;
ldap.user.searchBase=ou=People,dc=kyligence,dc=com
ldap.user.searchPattern=(&(cn={0}))
ldap.user.groupSearchBase=OU=Groups,DC=kyligence,DC=com
2016-06-12 11:23 GMT+08:00 Jasee Tao <ja...@gmail.com>:
> Transform to English:
> My LDAP configuration is:
> ldap.server=ldap://ldap.my.com
> ldap.username=cn=username,dc=my,dc=com
> ldap.password=aes_passwd # hashed by AES
> ldap.user.searchBase=ou=Accounts,dc=my,dc=com
> ldap.user.searchPattern=(uid={0})
>
> And my LDAP directory tree:
> uid=user,ou=city,ou=Accounts,dc=my,dc=com
>
> The kylin.log raise:
> [localhost-startStop-1] search.FilterBasedLdapUserSearch:89 :
> SearchBase not set. Searches will be performed from the root:
>
> When I try to loggin, kylin.log also raise:
>
> org.springframework.security.authentication.InternalAuthenticationServiceException:
> Empty filter; nested exception is
> javax.naming.directory.InvalidSearchFilterException: Empty filter;
> remaining name '/'
>
> I want to kown how to configure SearchBase?
>
> 2016-06-12 11:15 GMT+08:00 Jasee Tao <ja...@gmail.com>:
>
>> It is already hashed by AES.
>>
>> 2016-06-12 11:09 GMT+08:00 ShaoFeng Shi <sh...@apache.org>:
>>
>>> has the "ldap.password" been hashed? If not, please follow the
>>> "Configure LDAP server info" step in
>>> https://kylin.apache.org/docs15/howto/howto_ldap_and_sso.html
>>>
>>> 2016-06-12 10:37 GMT+08:00 Jasee Tao <ja...@gmail.com>:
>>>
>>>> 我的ldap配置如下：
>>>> ldap.server=ldap://ldap.my.com
>>>> ldap.username=cn=username,dc=my,dc=com
>>>> ldap.password=aes_passwd
>>>>
>>>> ldap.user.searchBase=ou=Accounts,dc=my,dc=com
>>>> ldap.user.searchPattern=(uid={0})
>>>>
>>>> LDAP目录结构如下：
>>>> uid=user,ou=city,ou=Account,dc=my,dc=com
>>>>
>>>> 不过日志里一直显示:
>>>> [localhost-startStop-1] search.FilterBasedLdapUserSearch:89 :
>>>> SearchBase not set. Searches will be performed from the root:
>>>>
>>>> 尝试登陆时，也报错：
>>>> org.springframework.security.authentication.InternalAuthenticationServiceException:
>>>> Empty filter; nested exception is
>>>> javax.naming.directory.InvalidSearchFilterException: Empty filter;
>>>> remaining name '/'
>>>>
>>>> 请帮忙看看我的配置是否有问题？
>>>>
>>>
>>>
>>>
>>> --
>>> Best regards,
>>>
>>> Shaofeng Shi
>>>
>>>
>>
>
--
Best regards,
Shaofeng Shi
Re: ldap SearchBase配置不上
Posted by Jasee Tao <ja...@gmail.com>.
Transform to English:
My LDAP configuration is:
ldap.server=ldap://ldap.my.com
ldap.username=cn=username,dc=my,dc=com
ldap.password=aes_passwd # hashed by AES
ldap.user.searchBase=ou=Accounts,dc=my,dc=com
ldap.user.searchPattern=(uid={0})
And my LDAP directory tree:
uid=user,ou=city,ou=Accounts,dc=my,dc=com
The kylin.log raise:
[localhost-startStop-1] search.FilterBasedLdapUserSearch:89 :
SearchBase not set. Searches will be performed from the root:
When I try to loggin, kylin.log also raise:
org.springframework.security.authentication.InternalAuthenticationServiceException:
Empty filter; nested exception is
javax.naming.directory.InvalidSearchFilterException: Empty filter;
remaining name '/'
I want to kown how to configure SearchBase?
2016-06-12 11:15 GMT+08:00 Jasee Tao <ja...@gmail.com>:
> It is already hashed by AES.
>
> 2016-06-12 11:09 GMT+08:00 ShaoFeng Shi <sh...@apache.org>:
>
>> has the "ldap.password" been hashed? If not, please follow the "Configure
>> LDAP server info" step in
>> https://kylin.apache.org/docs15/howto/howto_ldap_and_sso.html
>>
>> 2016-06-12 10:37 GMT+08:00 Jasee Tao <ja...@gmail.com>:
>>
>>> 我的ldap配置如下：
>>> ldap.server=ldap://ldap.my.com
>>> ldap.username=cn=username,dc=my,dc=com
>>> ldap.password=aes_passwd
>>>
>>> ldap.user.searchBase=ou=Accounts,dc=my,dc=com
>>> ldap.user.searchPattern=(uid={0})
>>>
>>> LDAP目录结构如下：
>>> uid=user,ou=city,ou=Account,dc=my,dc=com
>>>
>>> 不过日志里一直显示:
>>> [localhost-startStop-1] search.FilterBasedLdapUserSearch:89 : SearchBase
>>> not set. Searches will be performed from the root:
>>>
>>> 尝试登陆时，也报错：
>>> org.springframework.security.authentication.InternalAuthenticationServiceException:
>>> Empty filter; nested exception is
>>> javax.naming.directory.InvalidSearchFilterException: Empty filter;
>>> remaining name '/'
>>>
>>> 请帮忙看看我的配置是否有问题？
>>>
>>
>>
>>
>> --
>> Best regards,
>>
>> Shaofeng Shi
>>
>>
>
Re: ldap SearchBase配置不上
Posted by Jasee Tao <ja...@gmail.com>.
It is already hashed by AES.
2016-06-12 11:09 GMT+08:00 ShaoFeng Shi <sh...@apache.org>:
> has the "ldap.password" been hashed? If not, please follow the "Configure
> LDAP server info" step in
> https://kylin.apache.org/docs15/howto/howto_ldap_and_sso.html
>
> 2016-06-12 10:37 GMT+08:00 Jasee Tao <ja...@gmail.com>:
>
>> 我的ldap配置如下：
>> ldap.server=ldap://ldap.my.com
>> ldap.username=cn=username,dc=my,dc=com
>> ldap.password=aes_passwd
>>
>> ldap.user.searchBase=ou=Accounts,dc=my,dc=com
>> ldap.user.searchPattern=(uid={0})
>>
>> LDAP目录结构如下：
>> uid=user,ou=city,ou=Account,dc=my,dc=com
>>
>> 不过日志里一直显示:
>> [localhost-startStop-1] search.FilterBasedLdapUserSearch:89 : SearchBase
>> not set. Searches will be performed from the root:
>>
>> 尝试登陆时，也报错：
>> org.springframework.security.authentication.InternalAuthenticationServiceException:
>> Empty filter; nested exception is
>> javax.naming.directory.InvalidSearchFilterException: Empty filter;
>> remaining name '/'
>>
>> 请帮忙看看我的配置是否有问题？
>>
>
>
>
> --
> Best regards,
>
> Shaofeng Shi
>
>
Re: ldap SearchBase配置不上
Posted by ShaoFeng Shi <sh...@apache.org>.
has the "ldap.password" been hashed? If not, please follow the "Configure
LDAP server info" step in
https://kylin.apache.org/docs15/howto/howto_ldap_and_sso.html
2016-06-12 10:37 GMT+08:00 Jasee Tao <ja...@gmail.com>:
> 我的ldap配置如下：
> ldap.server=ldap://ldap.my.com
> ldap.username=cn=username,dc=my,dc=com
> ldap.password=aes_passwd
>
> ldap.user.searchBase=ou=Accounts,dc=my,dc=com
> ldap.user.searchPattern=(uid={0})
>
> LDAP目录结构如下：
> uid=user,ou=city,ou=Account,dc=my,dc=com
>
> 不过日志里一直显示:
> [localhost-startStop-1] search.FilterBasedLdapUserSearch:89 : SearchBase
> not set. Searches will be performed from the root:
>
> 尝试登陆时，也报错：
> org.springframework.security.authentication.InternalAuthenticationServiceException:
> Empty filter; nested exception is
> javax.naming.directory.InvalidSearchFilterException: Empty filter;
> remaining name '/'
>
> 请帮忙看看我的配置是否有问题？
>
--
Best regards,
Shaofeng Shi