Setting up CAS to use LDAP???
Terrel Ross
taross78 at gmail.com
Tue Jan 9 16:12:53 EST 2007
Any other suggestions of what I should do to get this to work? Thanks.
On 1/8/07, Terrel Ross <taross78 at gmail.com> wrote:
>
> Here is the log info:
>
> 2007-01-08 12:59:38,510 DEBUG [
> org.springframework.ldap.support.LdapContextSource] -
> <AuthenticationSource not set - using default implementation>
>
> 2007-01-08 12:59:38,510 WARN [
> org.springframework.ldap.support.LdapContextSource ] - <Property
> 'userName' not set - anonymous context will be used for read-write
> operations>
>
> 2007-01-08 12:59:38,510 DEBUG [
> org.springframework.ldap.support.LdapContextSource] - <Using LDAP
> pooling.>
>
> 2007-01-08 12:59:38,510 DEBUG [
> org.springframework.ldap.support.LdapContextSource] - <Trying provider
> Urls: ldaps://ldap.llu.edu:636>
>
>
> On 1/8/07, Scott Battaglia <scott.battaglia at gmail.com> wrote:
> >
> > Do you have any debugging turned on for org.springframework.ldap ?
> >
> > Thanks
> > -Scott
> >
> > On 1/8/07, Terrel Ross < taross78 at gmail.com> wrote:
> > >
> > > Hello again,
> > >
> > > This is the error I get when i turn on the debugger.
> > >
> > > 2007-01-08 11:42:17,401 INFO [
> > > org.jasig.cas.authentication.AuthenticationManagerImpl] -
> > > <AuthenticationHandler:
> > > org.jasig.cas.adaptors.ldap.FastBindLdapAuthenticationHandler failed
> > > to authenticate the user which provided the following credentials: tross>
> > >
> > > 2007-01-08 11:42:17,510 DEBUG [
> > > org.springframework.web.servlet.view.JstlView] - <Rendering view with
> > > name 'casLoginView' with model {credentials=tross,
> > > org.springframework.validation.BindException.credentials=org.springframework.validation.BindException:
> > > org.springframework.validation.BeanPropertyBindingResult: 1 errors
> > >
> > > Error in object 'credentials': codes [
> > > error.authentication.credentials.bad.credentials,
> > > error.authentication.credentials.bad]; arguments []; default message [
> > > error.authentication.credentials.bad],
> > > org.springframework.validation.BindException.currentFormObject=org.springframework.validation.BindException:
> > > org.springframework.validation.BeanPropertyBindingResult: 1 errors
> > >
> > > Error in object 'credentials': codes [
> > > error.authentication.credentials.bad.credentials,
> > > error.authentication.credentials.bad]; arguments []; default message [
> > > error.authentication.credentials.bad], currentFormObject=tross,
> > > flowExecutionContext=[FlowExecutionImpl at 2c7 flow = 'login-webflow',
> > > flowSessions = list[[FlowSessionImpl at 2c9 flow = 'login-webflow', state
> > > = 'viewLoginForm', scope = map['credentials' -> tross, 'currentFormObject'
> > > -> tross], flashMap = map['
> > > org.springframework.validation.BindException.credentials' ->
> > > org.springframework.validation.BindException:
> > > org.springframework.validation.BeanPropertyBindingResult: 1 errors
> > >
> > > Error in object 'credentials': codes [
> > > error.authentication.credentials.bad.credentials,
> > > error.authentication.credentials.bad]; arguments []; default message [
> > > error.authentication.credentials.bad], '
> > > org.springframework.validation.BindException.currentFormObject ' ->
> > > org.springframework.validation.BindException:
> > > org.springframework.validation.BeanPropertyBindingResult: 1 errors
> > >
> > > Error in object 'credentials': codes [
> > > error.authentication.credentials.bad.credentials ,
> > > error.authentication.credentials.bad]; arguments []; default message [
> > > error.authentication.credentials.bad]], status = Paused]]],
> > > flowExecutionKey=_cF606AEF8-38F2-BF9C-B2C3-B0D06EAECBCA_k78674ECB-2E8E-5C63-9378-07465466AB02}
> > > and static attributes {}>
> > >
> > > 2007-01-08 11:42:17,510 DEBUG [
> > > org.springframework.web.servlet.view.JstlView] - <Added model object
> > > 'credentials' of type [
> > > org.jasig.cas.authentication.principal.UsernamePasswordCredentials] to
> > > request in view with name 'casLoginView'
> > >
> > > I am pretty sure my LDAP username an password are correct. I have no
> > > idea why it isn't authenticating. Thanks in advance for your help.
> > >
> > > Terrel
> > >
> > > On 1/8/07, Scott Battaglia <scott.battaglia at gmail.com> wrote:
> > > >
> > > > You can change the Log4j logging settings by editing
> > > > /WEB-INF/classes/log4j.properties and restarting the server.
> > > >
> > > > -Scott
> > > >
> > > > On 1/8/07, Terrel Ross < taross78 at gmail.com> wrote:
> > > > >
> > > > > Is this something I would increase in CAS or the Tomcat server?
> > > > >
> > > > > On 1/5/07, Scott Battaglia < scott.battaglia at gmail.com > wrote:
> > > > > >
> > > > > > That should be all you need to do. The fact that you are
> > > > > > getting that message means that it is accessing the LDAP server. You can
> > > > > > try increasing the logging level ( i.e. changing it to DEBUG) to
> > > > > > see if you get useful messages.
> > > > > >
> > > > > > -Scott
> > > > > >
> > > > > > On 1/4/07, Terrel Ross < taross78 at gmail.com> wrote:
> > > > > > >
> > > > > > > This is what I added to the deployerConfigContext.xml file:
> > > > > > >
> > > > > > > <bean class="
> > > > > > > org.jasig.cas.adaptors.ldap.FastBindLdapAuthenticationHandler"
> > > > > > > >
> > > > > > > <property name="filter"
> > > > > > > value="uid=%u,ou=people,o=llu,o=lluashc" />
> > > > > > > <property
> > > > > > > name="contextSource" ref="contextSource" />
> > > > > > > </bean>
> > > > > > > </list>
> > > > > > > </property>
> > > > > > >
> > > > > > > </bean>
> > > > > > >
> > > > > > > <bean id="contextSource" class="
> > > > > > > org.jasig.cas.adaptors.ldap.util.AuthenticatedLdapContextSource
> > > > > > > ">
> > > > > > > <property name="urls">
> > > > > > > <list>
> > > > > > >
> > > > > > > <value>ldap://ldap.llu.edu:389</value>
> > > > > > > </list>
> > > > > > > </property>
> > > > > > > </bean>
> > > > > > >
> > > > > > > I am using server 3.0.6 and I have the following LDAP jar
> > > > > > > files(along with all the others) in the lib dir:
> > > > > > >
> > > > > > > cas-server-ldap-3.0.6.jar
> > > > > > > ldapbp.jar
> > > > > > > spring-ldap.jar
> > > > > > >
> > > > > > > We have a secure LDAP server but this is just a demo to get it
> > > > > > > to work. I run the server and after I try to enter a username a password, I
> > > > > > > get an error which states:
> > > > > > >
> > > > > > > The credentials you provided cannot be determined to be
> > > > > > > authentic.
> > > > > > >
> > > > > > > After this configuration, should I be able to login to the cas
> > > > > > > server with my LDAP credentials. I followed the instructions that were in
> > > > > > > the documentation, but I may have over looked a step. Do I have to create my
> > > > > > > own AuthenticationHandler? Thanks for responsing, I really appreciate it.
> > > > > > >
> > > > > > > Terrel
> > > > > > >
> > > > > > > On 1/4/07, Scott Battaglia < scott.battaglia at gmail.com> wrote:
> > > > > > > >
> > > > > > > > That should be the only addition (as well as configuring a
> > > > > > > > ContextSource and including the LDAP jar). Did it work for you?
> > > > > > > >
> > > > > > > > -Scott
> > > > > > > >
> > > > > > > > On 1/4/07, Terrel Ross <taross78 at gmail.com> wrote:
> > > > > > > >
> > > > > > > > > Hello,
> > > > > > > > >
> > > > > > > > > I just deployed the cas.war test server demo and was
> > > > > > > > > wondering if I could configure the login credentials to check with LDAP. I
> > > > > > > > > tried to setup the fastbind authentication, but I am having trouble getting
> > > > > > > > > it to work properly. Here's what I have in the contextSource bean:
> > > > > > > > >
> > > > > > > > > <bean class="
> > > > > > > > > org.jasig.cas.adaptors.ldap.FastBindLdapAuthenticationHandler"
> > > > > > > > > >
> > > > > > > > > <property name="filter"
> > > > > > > > > value="uid=%u,ou=people,o=llu,o=lluashc" />
> > > > > > > > > <property name="contextSource"
> > > > > > > > > ref="contextSource" />
> > > > > > > > > </bean>
> > > > > > > > >
> > > > > > > > > Is this the correct way to set it up?
> > > > > > > > >
> > > > > > > > > Is there any other configuration that I need to do over
> > > > > > > > > and beyond changing the deployerConfigContext.xml? Thanks
> > > > > > > > > in advance for your assistance.
> > > > > > > > >
> > > > > > > > > Terrel
> > > > > > > > >
> > > > > > > > > _______________________________________________
> > > > > > > > > Yale CAS mailing list
> > > > > > > > > cas at tp.its.yale.edu
> > > > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > > > _______________________________________________
> > > > > > > > Yale CAS mailing list
> > > > > > > > cas at tp.its.yale.edu
> > > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > > _______________________________________________
> > > > > > > Yale CAS mailing list
> > > > > > > cas at tp.its.yale.edu
> > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > > _______________________________________________
> > > > > > Yale CAS mailing list
> > > > > > cas at tp.its.yale.edu
> > > > > > http://tp.its.yale.edu/mailman/listinfo/cas
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > > _______________________________________________
> > > > > Yale CAS mailing list
> > > > > cas at tp.its.yale.edu
> > > > > http://tp.its.yale.edu/mailman/listinfo/cas
> > > > >
> > > > >
> > > > >
> > > >
> > > > _______________________________________________
> > > > Yale CAS mailing list
> > > > cas at tp.its.yale.edu
> > > > http://tp.its.yale.edu/mailman/listinfo/cas
> > > >
> > > >
> > > >
> > >
> > > _______________________________________________
> > > Yale CAS mailing list
> > > cas at tp.its.yale.edu
> > > http://tp.its.yale.edu/mailman/listinfo/cas
> > >
> > >
> > >
> >
> > _______________________________________________
> > Yale CAS mailing list
> > cas at tp.its.yale.edu
> > http://tp.its.yale.edu/mailman/listinfo/cas
> >
> >
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20070109/622d7a7b/attachment.html
More information about the cas
mailing list