Troubleshooting
Problem
Error when trying to setup LDAP authentication for external account
Symptom
No activity on LDAP server when trying to authenticate external account
Error Message[2007-10-15 12:23:18.483] DEBUG 000000000000 GLOBAL_SCOPE SecurityManager
user:severs attempting to log in (SSO:false)
[2007-10-15 12:23:18.484]
DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication user:severs is identified as
an EXTERNAL GIS User
[2007-10-15 12:23:18.484] DEBUG 000000000000
GLOBAL_SCOPE LDAPAuthentication performing LDAP search....
[2007-10-15
12:23:18.558] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication ...search
filter:(cn=severs)
[2007-10-15 12:23:18.558] DEBUG 000000000000
GLOBAL_SCOPE LDAPAuthentication ...selected attributes:userPassword
[2007-10-15 12:23:18.558] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication
...search root:o=associates
[2007-10-15 12:23:18.694] DEBUG 000000000000
GLOBAL_SCOPE LDAPAuthentication entry found -> cn=SEVERS,o=associates
[2007-10-15 12:23:18.694] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication
...binding as user: cn=SEVERS,o=associates
[2007-10-15 12:23:18.695]
DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication ......connection properties:
{java.naming.provider.url=ldap://10.1.5.7:389,
java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory,
java.naming.security.principal=cn=SEVERS,o=associates,
java.naming.security.authentication=simple,
java.naming.security.credentials=gentran01}
[2007-10-15 12:23:21.744]
ERROR 000000000000 GLOBAL_SCOPE LDAPAuthentication ......bind as user NAMING
EXCEPTION:
javax.naming.AuthenticationException: [LDAP: error code 49 -
NDS error: failed authentication (-669)]
at
com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3005)
at
com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2951)
at
com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2752)
at
com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2666)
at
com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:307)
at
com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:190)
at
com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:208)
at
com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:151)
at
com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:81)
at
javax.naming.spi.NamingManager.getInitialContext(NamingManager.java(Compiled
Code))
at
javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java(Inlined
Compiled Code))
at
javax.naming.InitialContext.init(InitialContext.java(Inlined Compiled Code))
at javax.naming.InitialContext.<init>(InitialContext.java(Compiled
Code))
at
javax.naming.directory.InitialDirContext.<init>(InitialDirContext.java:94)
at
com.sterlingcommerce.woodstock.security.LDAPAuthentication.isExternallyAuthentic
atedViaUserBind(LDAPAuthentication.java:275)
at
com.sterlingcommerce.woodstock.security.LDAPAuthentication.isAuthenticated(LDAPA
uthentication.java:148)
at
com.sterlingcommerce.woodstock.security.AuthenticationService.isAuthenticated(Au
thenticationService.java:435)
at
com.sterlingcommerce.woodstock.security.SecurityManager.isAuthenticated(Security
Manager.java:303)
at
com.sterlingcommerce.woodstock.security.User.isAuthenticated(User.java:378)
at
com.sterlingcommerce.woodstock.ui.UserAutho.isAuthenticated(UserAutho.java:111)<
br /> at
com.sterlingcommerce.woodstock.ui.EntityObject.isAuthorized(EntityObject.java:43
3)
at
com.sterlingcommerce.woodstock.ui.servlet.MBILogin.doPost(MBILogin.java:181)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at
javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at
org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:358)
at
org.mortbay.jetty.servlet.WebApplicationHandler$Chain.doFilter(WebApplicationHan
dler.java:342)
at
com.sterlingcommerce.woodstock.services.pshttp.jetty.ActivityMonitorFilter.doFil
ter(ActivityMonitorFilter.java:286)
at
org.mortbay.jetty.servlet.WebApplicationHandler$Chain.doFilter(WebApplicationHan
dler.java:334)
at
org.mortbay.jetty.servlet.WebApplicationHandler.dispatch(WebApplicationHandler.j
ava:286)
at
org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:567)
at org.mortbay.http.HttpContext.handle(HttpContext.java:1807)
at
org.mortbay.jetty.servlet.WebApplicationContext.handle(WebApplicationContext.jav
a:525)
at org.mortbay.http.HttpContext.handle(HttpContext.java:1757)
at org.mortbay.http.HttpServer.service(HttpServer.java:879)
at
org.mortbay.http.HttpConnection.service(HttpConnection.java:789)
at
org.mortbay.http.HttpConnection.handleNext(HttpConnection.java:960)
at
com.sterlingcommerce.woodstock.services.pshttp.jetty.FlushingHttpConnection.hand
leNext(FlushingHttpConnection.java:123)
at
org.mortbay.http.HttpConnection.handle(HttpConnection.java:806)
at
com.sterlingcommerce.woodstock.services.pshttp.jetty.ConduitStreamListener.handl
eNewConnection(ConduitStreamListener.java:209)
at
com.sterlingcommerce.woodstock.services.pshttp.jetty.ConduitStreamListener.acces
s$400(ConduitStreamListener.java:82)
at
com.sterlingcommerce.woodstock.services.pshttp.jetty.ConduitStreamListener$1.run
(ConduitStreamListener.java:284)
at
org.mortbay.util.ThreadPool.handle(ThreadPool.java:385)
at
org.mortbay.util.ThreadPool$PoolThread.run(ThreadPool.java:520)
[2007-10-15 12:23:21.744] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication
...failed bind as user, authentication FAILED
[2007-10-15 12:23:21.744]
ALL 000000000000 GLOBAL_SCOPE SecurityManager user:severs authorization FAILED
(SSO:false)
[2007-10-15 12:34:20.047] DEBUG 000000000000 GLOBAL_SCOPE
SecurityManager user:severs attempting to log in (SSO:false)
[2007-10-15
12:34:20.048] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication user:severs is
identified as an EXTERNAL GIS User
[2007-10-15 12:34:20.048] DEBUG
000000000000 GLOBAL_SCOPE LDAPAuthentication performing LDAP search....
[2007-10-15 12:34:20.055] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication
...search filter:(cn=severs)
[2007-10-15 12:34:20.055] DEBUG 000000000000
GLOBAL_SCOPE LDAPAuthentication ...selected attributes:userPassword
[2007-10-15 12:34:20.055] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication
...search root:o=associates
[2007-10-15 12:34:20.1] DEBUG 000000000000
GLOBAL_SCOPE LDAPAuthentication entry found -> cn=SEVERS,o=associates
[2007-10-15 12:34:20.1] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication
...binding as user: cn=SEVERS,o=associates
[2007-10-15 12:34:20.1] DEBUG
000000000000 GLOBAL_SCOPE LDAPAuthentication ......connection properties:
{java.naming.provider.url=ldap://10.1.5.7:389,
java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory,
java.naming.security.principal=cn=SEVERS,o=associates,
java.naming.security.authentication=simple,
java.naming.security.credentials=gentran01}
[2007-10-15 12:34:23.108]
ERROR 000000000000 GLOBAL_SCOPE LDAPAuthentication ......bind as user NAMING
EXCEPTION:
javax.naming.OperationNotSupportedException: [LDAP: error code
53 - NDS error: login lockout (-197)]
at
com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3078)
at
com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2951)
at
com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2752)
at
com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2666)
at
com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:307)
at
com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:190)
at
com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:208)
at
com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:151)
at
com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:81)
at
javax.naming.spi.NamingManager.getInitialContext(NamingManager.java(Compiled
Code))
at
javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java(Inlined
Compiled Code))
at
javax.naming.InitialContext.init(InitialContext.java(Inlined Compiled Code))
at javax.naming.InitialContext.<init>(InitialContext.java(Compiled
Code))
at
javax.naming.directory.InitialDirContext.<init>(InitialDirContext.java:94)
at
com.sterlingcommerce.woodstock.security.LDAPAuthentication.isExternallyAuthentic
atedViaUserBind(LDAPAuthentication.java:275)
at
com.sterlingcommerce.woodstock.security.LDAPAuthentication.isAuthenticated(LDAPA
uthentication.java:148)
at
com.sterlingcommerce.woodstock.security.AuthenticationService.isAuthenticated(Au
thenticationService.java:435)
at
com.sterlingcommerce.woodstock.security.SecurityManager.isAuthenticated(Security
Manager.java:303)
at
com.sterlingcommerce.woodstock.security.User.isAuthenticated(User.java:378)
at
com.sterlingcommerce.woodstock.ui.UserAutho.isAuthenticated(UserAutho.java:111)<
br /> at
com.sterlingcommerce.woodstock.ui.EntityObject.isAuthorized(EntityObject.java:43
3)
at
com.sterlingcommerce.woodstock.ui.servlet.Login.doPost(Login.java:194)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at
javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at
org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:358)
at
org.mortbay.jetty.servlet.WebApplicationHandler.dispatch(WebApplicationHandler.j
ava:294)
at
org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:567)
at org.mortbay.http.HttpContext.handle(HttpContext.java:1807)
at
org.mortbay.jetty.servlet.WebApplicationContext.handle(WebApplicationContext.jav
a:525)
at org.mortbay.http.HttpContext.handle(HttpContext.java:1757)
at org.mortbay.http.HttpServer.service(HttpServer.java:879)
at
org.mortbay.http.HttpConnection.service(HttpConnection.java:789)
at
org.mortbay.http.HttpConnection.handleNext(HttpConnection.java:960)
at
org.mortbay.http.HttpConnection.handle(HttpConnection.java:806)
at
org.mortbay.http.SocketListener.handleConnection(SocketListener.java:218)
at org.mortbay.util.ThreadedServer.handle(ThreadedServer.java:331)
at org.mortbay.util.ThreadPool$PoolThread.run(ThreadPool.java:520)
[2007-10-15 12:34:23.108] DEBUG 000000000000 GLOBAL_SCOPE LDAPAuthentication
...failed bind as user, authentication FAILED
[2007-10-15 12:34:23.109]
ALL 000000000000 GLOBAL_SCOPE SecurityManager user:severs authorization FAILED
(SSO:false)
Log InLog in to view more of this document
Historical Number
NFX4907
Was this topic helpful?
Document Information
Modified date:
14 November 2019
UID
swg21555822