3:19 p.m.
I am trying to move from portal 2.4 to portal 2.6, and I can not get OpenLDAP to
authenticate the logins, while it connects to the LDAP Server, it seems to be unable to
locate the user admin which exists as:
cn=admin,ou=People,dc=example,dc=com
Saddly all the examples for 2.6 are for LDAP's other than openLDAP, so I am winging
it. Also teh error messages are not helpful at this time.
Thanks,
ERIC
RELATED DATA:
I get the following message from JBOSS:
14:17:02,817 ERROR [IdentityLoginModule] Error when validating password
org.jboss.portal.common.transaction.NestedException:
javax.security.auth.login.LoginException: org.jboss.portal.identity.IdentityException:
User search failed.
at org.jboss.portal.common.transaction.Transactions.apply(Transactions.java:253)
OpenLDAP shows:
connection_get(15): got connid=2
connection_read(15): checking for input on id=2
ber_get_next
ber_get_next: tag 0x30 len 48 contents:
ber_get_next
ber_get_next on fd 15 failed errno=11 (Resource temporarily unavailable)
do_bind
ber_scanf fmt ({imt) ber:
ber_scanf fmt (m}) ber:
>> dnPrettyNormal: <cn=Manager,dc=example,dc=com>
<<< dnPrettyNormal: <cn=Manager,dc=example,dc=com>,
<cn=manager,dc=fatwire,dc=com>
do_bind: version=3 dn="cn=Manager,dc=example,dc=com" method=128
do_bind: v3 bind: "cn=Manager,dc=example,dc=com" to
"cn=Manager,dc=example,dc=com"
send_ldap_result: conn=2 op=0 p=3
send_ldap_response: msgid=1 tag=97 err=0
ber_flush: 14 bytes to sd 15
connection_get(15): got connid=2
connection_read(15): checking for input on id=2
ber_get_next
ber_get_next: tag 0x30 len 90 contents:
ber_get_next
ber_get_next on fd 15 failed errno=11 (Resource temporarily unavailable)
do_search
ber_scanf fmt ({miiiib) ber:
>> dnPrettyNormal: <ou=People,dc=example.com>
<<< dnPrettyNormal: <ou=People,dc=example.com>,
<ou=people,dc=fatwire.com>
ber_scanf fmt ({mm}) ber:
ber_scanf fmt ({M}}) ber:
=> get_ctrls
ber_scanf fmt ({m) ber:
=> get_ctrls: oid="2.16.840.1.113730.3.4.2" (noncritical)
<= get_ctrls: n=1 rc=0 err=""
send_ldap_result: conn=2 op=1 p=3
send_ldap_response: msgid=2 tag=101 err=32
ber_flush: 14 bytes to sd 15
My ldap_identity-config.xml coptions section looks like:
<option-group>
<group-name>common</group-name>
userCtxDN
ou=People,dc=fatwire.com
uidAttributeID
cn
passwordAttributeID
userPassword
roleCtxDN
ou=Groups,dc=fatwire,dc=com
ridAttributeId
cn
roleDisplayNameAttributeID
cn
membershipAttributeID
uniqueMember
membershipAttributeIsDN
true
</option-group>
<option-group>
<group-name>userCreateAttibutes</group-name>
objectClass
<!--This objectclasses should work with Red Hat Directory-->
top
person
organizationalPerson
<!--Schema requires those to have initial value-->
cn
none
sn
none
</option-group>
<option-group>
<group-name>roleCreateAttibutes</group-name>
objectClass
top
groupOfUniqueNames
<!--Schema requires those to have initial value-->
cn
none
member
cn=admin,ou=People,dc=example,dc=com
</option-group>
Current OpenLDAP LDIF:
dn: ou=People,dc=example,dc=com
ou: People
objectclass: organizationalUnit
objectclass: top
dn: cn=admin,ou=People,dc=example,dc=com
userPassword: {SSHA}XXXXXXX
objectclass: top
objectclass: organizationalPerson
objectclass: person
cn: admin
sn: admin
dn: cn=ldapuser,ou=People, dc=example,dc=com
userPassword: {SSHA}XXXXXX
description: JBoss Portal ldapuser User for test LDAP integration password=username
objectClass: top
objectClass: organizationalPerson
objectClass: person
sn: ldapuser
cn: ldapuser
dn: ou=Groups,dc=example,dc=com
ou: Groups
objectclass: organizationalUnit
objectclass: top
dn: cn=User,ou=Groups,dc=example,dc=com
description: the JBoss Portal user group
objectClass: top
objectClass: groupOfUniqueNames
cn: User
uniqueMember: cn=ldapuser,ou=People,dc=example,dc=com
dn: cn=Admin,ou=Groups,dc=example,dc=com
description: the JBoss Portal admin group
objectClass: top
objectClass: groupOfUniqueNames
cn: Admin
uniqueMember: cn=admin,ou=People,dc=example,dc=com
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4059725#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...