IBM Support

Error when trying to setup LDAP authentication for external account

Troubleshooting


Problem

Error when trying to setup LDAP authentication for external account

Symptom

No activity on LDAP server when trying to authenticate external account

Error Message

[2007-10-15 12:23:18.483] DEBUG 000000000000 GLOBAL_SCOPE SecurityManager user:severs attempting to log in (SSO:false)
[2007-10-15 12:23:18.484] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication user:severs is identified as an EXTERNAL GIS User
[2007-10-15 12:23:18.484] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication performing LDAP search....
[2007-10-15 12:23:18.558] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication ...search filter:(cn=severs)
[2007-10-15 12:23:18.558] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication ...selected attributes:userPassword
[2007-10-15 12:23:18.558] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication ...search root:o=associates
[2007-10-15 12:23:18.694] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication entry found -> cn=SEVERS,o=associates
[2007-10-15 12:23:18.694] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication ...binding as user: cn=SEVERS,o=associates
[2007-10-15 12:23:18.695] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication ......connection properties: {java.naming.provider.url=ldap://10.1.5.7:389, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.security.principal=cn=SEVERS,o=associates, java.naming.security.authentication=simple, java.naming.security.credentials=gentran01}
[2007-10-15 12:23:21.744] ERROR 000000000000 GLOBAL_SCOPE LDAPAuthentication ......bind as user NAMING EXCEPTION:
javax.naming.AuthenticationException: [LDAP: error code 49 - NDS error: failed authentication (-669)]
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3005)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2951)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2752)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2666)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:307)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:190)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:208)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:151)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:81)
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java(Compiled Code))
at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java(Inlined Compiled Code))
at javax.naming.InitialContext.init(InitialContext.java(Inlined Compiled Code))
at javax.naming.InitialContext.<init>(InitialContext.java(Compiled Code))
at javax.naming.directory.InitialDirContext.<init>(InitialDirContext.java:94)
at com.sterlingcommerce.woodstock.security.LDAPAuthentication.isExternallyAuthentic atedViaUserBind(LDAPAuthentication.java:275)
at com.sterlingcommerce.woodstock.security.LDAPAuthentication.isAuthenticated(LDAPA uthentication.java:148)
at com.sterlingcommerce.woodstock.security.AuthenticationService.isAuthenticated(Au thenticationService.java:435)
at com.sterlingcommerce.woodstock.security.SecurityManager.isAuthenticated(Security Manager.java:303)
at com.sterlingcommerce.woodstock.security.User.isAuthenticated(User.java:378)
at com.sterlingcommerce.woodstock.ui.UserAutho.isAuthenticated(UserAutho.java:111)< br /> at com.sterlingcommerce.woodstock.ui.EntityObject.isAuthorized(EntityObject.java:43 3)
at com.sterlingcommerce.woodstock.ui.servlet.MBILogin.doPost(MBILogin.java:181)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:358)
at org.mortbay.jetty.servlet.WebApplicationHandler$Chain.doFilter(WebApplicationHan dler.java:342)
at com.sterlingcommerce.woodstock.services.pshttp.jetty.ActivityMonitorFilter.doFil ter(ActivityMonitorFilter.java:286)
at org.mortbay.jetty.servlet.WebApplicationHandler$Chain.doFilter(WebApplicationHan dler.java:334)
at org.mortbay.jetty.servlet.WebApplicationHandler.dispatch(WebApplicationHandler.j ava:286)
at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:567)
at org.mortbay.http.HttpContext.handle(HttpContext.java:1807)
at org.mortbay.jetty.servlet.WebApplicationContext.handle(WebApplicationContext.jav a:525)
at org.mortbay.http.HttpContext.handle(HttpContext.java:1757)
at org.mortbay.http.HttpServer.service(HttpServer.java:879)
at org.mortbay.http.HttpConnection.service(HttpConnection.java:789)
at org.mortbay.http.HttpConnection.handleNext(HttpConnection.java:960)
at com.sterlingcommerce.woodstock.services.pshttp.jetty.FlushingHttpConnection.hand leNext(FlushingHttpConnection.java:123)
at org.mortbay.http.HttpConnection.handle(HttpConnection.java:806)
at com.sterlingcommerce.woodstock.services.pshttp.jetty.ConduitStreamListener.handl eNewConnection(ConduitStreamListener.java:209)
at com.sterlingcommerce.woodstock.services.pshttp.jetty.ConduitStreamListener.acces s$400(ConduitStreamListener.java:82)
at com.sterlingcommerce.woodstock.services.pshttp.jetty.ConduitStreamListener$1.run (ConduitStreamListener.java:284)
at org.mortbay.util.ThreadPool.handle(ThreadPool.java:385)
at org.mortbay.util.ThreadPool$PoolThread.run(ThreadPool.java:520)
[2007-10-15 12:23:21.744] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication ...failed bind as user, authentication FAILED
[2007-10-15 12:23:21.744] ALL 000000000000 GLOBAL_SCOPE SecurityManager user:severs authorization FAILED (SSO:false)
[2007-10-15 12:34:20.047] DEBUG 000000000000 GLOBAL_SCOPE SecurityManager user:severs attempting to log in (SSO:false)
[2007-10-15 12:34:20.048] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication user:severs is identified as an EXTERNAL GIS User
[2007-10-15 12:34:20.048] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication performing LDAP search....
[2007-10-15 12:34:20.055] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication ...search filter:(cn=severs)
[2007-10-15 12:34:20.055] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication ...selected attributes:userPassword
[2007-10-15 12:34:20.055] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication ...search root:o=associates
[2007-10-15 12:34:20.1] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication entry found -> cn=SEVERS,o=associates
[2007-10-15 12:34:20.1] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication ...binding as user: cn=SEVERS,o=associates
[2007-10-15 12:34:20.1] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication ......connection properties: {java.naming.provider.url=ldap://10.1.5.7:389, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.security.principal=cn=SEVERS,o=associates, java.naming.security.authentication=simple, java.naming.security.credentials=gentran01}
[2007-10-15 12:34:23.108] ERROR 000000000000 GLOBAL_SCOPE LDAPAuthentication ......bind as user NAMING EXCEPTION:
javax.naming.OperationNotSupportedException: [LDAP: error code 53 - NDS error: login lockout (-197)]
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3078)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2951)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2752)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2666)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:307)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:190)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:208)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:151)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:81)
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java(Compiled Code))
at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java(Inlined Compiled Code))
at javax.naming.InitialContext.init(InitialContext.java(Inlined Compiled Code))
at javax.naming.InitialContext.<init>(InitialContext.java(Compiled Code))
at javax.naming.directory.InitialDirContext.<init>(InitialDirContext.java:94)
at com.sterlingcommerce.woodstock.security.LDAPAuthentication.isExternallyAuthentic atedViaUserBind(LDAPAuthentication.java:275)
at com.sterlingcommerce.woodstock.security.LDAPAuthentication.isAuthenticated(LDAPA uthentication.java:148)
at com.sterlingcommerce.woodstock.security.AuthenticationService.isAuthenticated(Au thenticationService.java:435)
at com.sterlingcommerce.woodstock.security.SecurityManager.isAuthenticated(Security Manager.java:303)
at com.sterlingcommerce.woodstock.security.User.isAuthenticated(User.java:378)
at com.sterlingcommerce.woodstock.ui.UserAutho.isAuthenticated(UserAutho.java:111)< br /> at com.sterlingcommerce.woodstock.ui.EntityObject.isAuthorized(EntityObject.java:43 3)
at com.sterlingcommerce.woodstock.ui.servlet.Login.doPost(Login.java:194)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:358)
at org.mortbay.jetty.servlet.WebApplicationHandler.dispatch(WebApplicationHandler.j ava:294)
at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:567)
at org.mortbay.http.HttpContext.handle(HttpContext.java:1807)
at org.mortbay.jetty.servlet.WebApplicationContext.handle(WebApplicationContext.jav a:525)
at org.mortbay.http.HttpContext.handle(HttpContext.java:1757)
at org.mortbay.http.HttpServer.service(HttpServer.java:879)
at org.mortbay.http.HttpConnection.service(HttpConnection.java:789)
at org.mortbay.http.HttpConnection.handleNext(HttpConnection.java:960)
at org.mortbay.http.HttpConnection.handle(HttpConnection.java:806)
at org.mortbay.http.SocketListener.handleConnection(SocketListener.java:218)
at org.mortbay.util.ThreadedServer.handle(ThreadedServer.java:331)
at org.mortbay.util.ThreadPool$PoolThread.run(ThreadPool.java:520)
[2007-10-15 12:34:23.108] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication ...failed bind as user, authentication FAILED
[2007-10-15 12:34:23.109] ALL 000000000000 GLOBAL_SCOPE SecurityManager user:severs authorization FAILED (SSO:false)

[{"Product":{"code":"SS3JSW","label":"IBM Sterling B2B Integrator"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"Not Applicable","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Historical Number

NFX4907

Document Information

More support for:
IBM Sterling B2B Integrator

Software version:
All

Document number:
186967

Modified date:
14 November 2019

UID

swg21555822

Manage My Notification Subscriptions