Setting up CAS to use LDAP???
Terrel Ross
taross78 at gmail.com
Mon Jan 8 16:01:44 EST 2007
Here is the log info:
2007-01-08 12:59:38,510 DEBUG [
org.springframework.ldap.support.LdapContextSource] - <AuthenticationSource
not set - using default implementation>
2007-01-08 12:59:38,510 WARN [
org.springframework.ldap.support.LdapContextSource] - <Property 'userName'
not set - anonymous context will be used for read-write operations>
2007-01-08 12:59:38,510 DEBUG [
org.springframework.ldap.support.LdapContextSource] - <Using LDAP pooling.>
2007-01-08 12:59:38,510 DEBUG [
org.springframework.ldap.support.LdapContextSource] - <Trying provider Urls:
ldaps://ldap.llu.edu:636>
On 1/8/07, Scott Battaglia <scott.battaglia at gmail.com> wrote:
>
> Do you have any debugging turned on for org.springframework.ldap ?
>
> Thanks
> -Scott
>
> On 1/8/07, Terrel Ross < taross78 at gmail.com> wrote:
> >
> > Hello again,
> >
> > This is the error I get when i turn on the debugger.
> >
> > 2007-01-08 11:42:17,401 INFO [
> > org.jasig.cas.authentication.AuthenticationManagerImpl] -
> > <AuthenticationHandler:
> > org.jasig.cas.adaptors.ldap.FastBindLdapAuthenticationHandler failed to
> > authenticate the user which provided the following credentials: tross>
> >
> > 2007-01-08 11:42:17,510 DEBUG [
> > org.springframework.web.servlet.view.JstlView] - <Rendering view with
> > name 'casLoginView' with model {credentials=tross,
> > org.springframework.validation.BindException.credentials=org.springframework.validation.BindException:
> > org.springframework.validation.BeanPropertyBindingResult: 1 errors
> >
> > Error in object 'credentials': codes [
> > error.authentication.credentials.bad.credentials,
> > error.authentication.credentials.bad]; arguments []; default message [
> > error.authentication.credentials.bad],
> > org.springframework.validation.BindException.currentFormObject=org.springframework.validation.BindException:
> > org.springframework.validation.BeanPropertyBindingResult: 1 errors
> >
> > Error in object 'credentials': codes [
> > error.authentication.credentials.bad.credentials,
> > error.authentication.credentials.bad]; arguments []; default message [
> > error.authentication.credentials.bad], currentFormObject=tross,
> > flowExecutionContext=[FlowExecutionImpl at 2c7 flow = 'login-webflow',
> > flowSessions = list[[FlowSessionImpl at 2c9 flow = 'login-webflow', state =
> > 'viewLoginForm', scope = map['credentials' -> tross, 'currentFormObject' ->
> > tross], flashMap = map['
> > org.springframework.validation.BindException.credentials' ->
> > org.springframework.validation.BindException:
> > org.springframework.validation.BeanPropertyBindingResult: 1 errors
> >
> > Error in object 'credentials': codes [
> > error.authentication.credentials.bad.credentials,
> > error.authentication.credentials.bad]; arguments []; default message [
> > error.authentication.credentials.bad], '
> > org.springframework.validation.BindException.currentFormObject ' ->
> > org.springframework.validation.BindException:
> > org.springframework.validation.BeanPropertyBindingResult: 1 errors
> >
> > Error in object 'credentials': codes [
> > error.authentication.credentials.bad.credentials ,
> > error.authentication.credentials.bad]; arguments []; default message [
> > error.authentication.credentials.bad]], status = Paused]]],
> > flowExecutionKey=_cF606AEF8-38F2-BF9C-B2C3-B0D06EAECBCA_k78674ECB-2E8E-5C63-9378-07465466AB02}
> > and static attributes {}>
> >
> > 2007-01-08 11:42:17,510 DEBUG [
> > org.springframework.web.servlet.view.JstlView] - <Added model object
> > 'credentials' of type [
> > org.jasig.cas.authentication.principal.UsernamePasswordCredentials] to
> > request in view with name 'casLoginView'
> >
> > I am pretty sure my LDAP username an password are correct. I have no
> > idea why it isn't authenticating. Thanks in advance for your help.
> >
> > Terrel
> >
> > On 1/8/07, Scott Battaglia <scott.battaglia at gmail.com> wrote:
> > >
> > > You can change the Log4j logging settings by editing
> > > /WEB-INF/classes/log4j.properties and restarting the server.
> > >
> > > -Scott
> > >
> > > On 1/8/07, Terrel Ross < taross78 at gmail.com> wrote:
> > > >
> > > > Is this something I would increase in CAS or the Tomcat server?
> > > >
> > > > On 1/5/07, Scott Battaglia < scott.battaglia at gmail.com > wrote:
> > > > >
> > > > > That should be all you need to do. The fact that you are getting
> > > > > that message means that it is accessing the LDAP server. You can try
> > > > > increasing the logging level ( i.e. changing it to DEBUG) to see
> > > > > if you get useful messages.
> > > > >
> > > > > -Scott
> > > > >
> > > > > On 1/4/07, Terrel Ross < taross78 at gmail.com> wrote:
> > > > > >
> > > > > > This is what I added to the deployerConfigContext.xml file:
> > > > > >
> > > > > > <bean class="
> > > > > > org.jasig.cas.adaptors.ldap.FastBindLdapAuthenticationHandler" >
> > > > > > <property name="filter"
> > > > > > value="uid=%u,ou=people,o=llu,o=lluashc" />
> > > > > > <property
> > > > > > name="contextSource" ref="contextSource" />
> > > > > > </bean>
> > > > > > </list>
> > > > > > </property>
> > > > > >
> > > > > > </bean>
> > > > > >
> > > > > > <bean id="contextSource" class="
> > > > > > org.jasig.cas.adaptors.ldap.util.AuthenticatedLdapContextSource
> > > > > > ">
> > > > > > <property name="urls">
> > > > > > <list>
> > > > > > <value>ldap://ldap.llu.edu:389</value>
> > > > > > </list>
> > > > > > </property>
> > > > > > </bean>
> > > > > >
> > > > > > I am using server 3.0.6 and I have the following LDAP jar
> > > > > > files(along with all the others) in the lib dir:
> > > > > >
> > > > > > cas-server-ldap-3.0.6.jar
> > > > > > ldapbp.jar
> > > > > > spring-ldap.jar
> > > > > >
> > > > > > We have a secure LDAP server but this is just a demo to get it
> > > > > > to work. I run the server and after I try to enter a username a password, I
> > > > > > get an error which states:
> > > > > >
> > > > > > The credentials you provided cannot be determined to be
> > > > > > authentic.
> > > > > >
> > > > > > After this configuration, should I be able to login to the cas
> > > > > > server with my LDAP credentials. I followed the instructions that were in
> > > > > > the documentation, but I may have over looked a step. Do I have to create my
> > > > > > own AuthenticationHandler? Thanks for responsing, I really appreciate it.
> > > > > >
> > > > > > Terrel
> > > > > >
> > > > > > On 1/4/07, Scott Battaglia < scott.battaglia at gmail.com> wrote:
> > > > > > >
> > > > > > > That should be the only addition (as well as configuring a
> > > > > > > ContextSource and including the LDAP jar). Did it work for you?
> > > > > > >
> > > > > > > -Scott
> > > > > > >
> > > > > > > On 1/4/07, Terrel Ross <taross78 at gmail.com> wrote:
> > > > > > >
> > > > > > > > Hello,
> > > > > > > >
> > > > > > > > I just deployed the cas.war test server demo and was
> > > > > > > > wondering if I could configure the login credentials to check with LDAP. I
> > > > > > > > tried to setup the fastbind authentication, but I am having trouble getting
> > > > > > > > it to work properly. Here's what I have in the contextSource bean:
> > > > > > > >
> > > > > > > > <bean class="
> > > > > > > > org.jasig.cas.adaptors.ldap.FastBindLdapAuthenticationHandler"
> > > > > > > > >
> > > > > > > > <property name="filter"
> > > > > > > > value="uid=%u,ou=people,o=llu,o=lluashc" />
> > > > > > > > <property name="contextSource"
> > > > > > > > ref="contextSource" />
> > > > > > > > </bean>
> > > > > > > >
> > > > > > > > Is this the correct way to set it up?
> > > > > > > >
> > > > > > > > Is there any other configuration that I need to do over and
> > > > > > > > beyond changing the deployerConfigContext.xml? Thanks in
> > > > > > > > advance for your assistance.
> > > > > > > >
> > > > > > > > Terrel
> > > > > > > >
> > > > > > > > _______________________________________________
> > > > > > > > Yale CAS mailing list
> > > > > > > > cas at tp.its.yale.edu
> > > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > > _______________________________________________
> > > > > > > Yale CAS mailing list
> > > > > > > cas at tp.its.yale.edu
> > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > > _______________________________________________
> > > > > > Yale CAS mailing list
> > > > > > cas at tp.its.yale.edu
> > > > > > http://tp.its.yale.edu/mailman/listinfo/cas
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > > _______________________________________________
> > > > > Yale CAS mailing list
> > > > > cas at tp.its.yale.edu
> > > > > http://tp.its.yale.edu/mailman/listinfo/cas
> > > > >
> > > > >
> > > > >
> > > >
> > > > _______________________________________________
> > > > Yale CAS mailing list
> > > > cas at tp.its.yale.edu
> > > > http://tp.its.yale.edu/mailman/listinfo/cas
> > > >
> > > >
> > > >
> > >
> > > _______________________________________________
> > > Yale CAS mailing list
> > > cas at tp.its.yale.edu
> > > http://tp.its.yale.edu/mailman/listinfo/cas
> > >
> > >
> > >
> >
> > _______________________________________________
> > Yale CAS mailing list
> > cas at tp.its.yale.edu
> > http://tp.its.yale.edu/mailman/listinfo/cas
> >
> >
> >
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20070108/942d897f/attachment-0001.html
More information about the cas
mailing list