SOLVED: Unable to authenticate via LDAP to directory (Active Directory) with Spring Security -



SOLVED: Unable to authenticate via LDAP to directory (Active Directory) with Spring Security -

i'm using: - spring 3.1.3

and problem i'm unable connect active directory via ldap using valid credentials.

i don't know if caused malformed pattern or configuration issue userdn or url's rootdn. although , @ first glance , seems correct.

this current spring security config file:

... <security:authentication-manager alias="authenticationmanager"> <security:authentication-provider ref="ldapauthprovider" /> </security:authentication-manager> <bean id="ldapauthprovider" class="org.springframework.security.ldap.authentication.ldapauthenticationprovider"> <constructor-arg> <bean id="bindauthenticator" class="org.springframework.security.ldap.authentication.bindauthenticator"> <constructor-arg ref="contextsource" /> <property name="userdnpatterns"> <list><value>samaccountname={0}</value></list> </property> </bean> </constructor-arg> </bean> <bean id="contextsource" class="org.springframework.security.ldap.defaultspringsecuritycontextsource"> <constructor-arg value="ldap://remotehost:port/ou=my%20company,dc=domain,dc=subdomain"/> <property name="userdn" value="cn=managerusercn,ou=users,ou=test accounts,ou=my company,dc=domain,dc=subdomain/> <property name="password" value="thepass"/> </bean> ...

*i have replaced real urls, organizations, groups, etc descriptive data

*it's requeriment searching samaccountname.

and namingexception throwed doauthentication:bindwithdn next:

*org.springframework.ldap.authenticationexception: [ldap: error code 49 - 80090308: ldaperr: dsid-0c0903a9, comment: acceptsecuritycontext error, info 52e, v1db1*

and 52e code interpretation read on ldap wiki not exclusively right because launching both typing existing username , nonexistent username.

im refering to:

note: returns when username valid password/credential invalid. prevent other errors beingness displayed noted.

not me.

sorry english language , ...

greetings!

i have found reply question.

i got specifiying user-search property in bindauthentication. previusly had tested usersearch alternative without including base of operations directory (first parameter). so, me, it's mandatory , allow authentication works.

in code:

<bean id="ldapauthprovider" class="org.springframework.security.ldap.authentication.ldapauthenticationprovider"> <constructor-arg> <bean id="bindauthenticator" class="org.springframework.security.ldap.authentication.bindauthenticator"> <constructor-arg ref="contextsource" /> <property name="usersearch" ref="usersearch"/> </bean> </constructor-arg> </bean> <bean id="usersearch" class="org.springframework.security.ldap.search.filterbasedldapusersearch"> <constructor-arg> <value>ou=my company,dc=domain,dc=subdomain</value> </constructor-arg> <constructor-arg> <value>(samaccountname={0})</value> </constructor-arg> <constructor-arg ref="contextsource" /> <property name="searchsubtree"> <value>true</value> </property> </bean>

perhaps can help similar issue.

pd: alternative utilize especified activedirectoryldapauthenticationprovider

<bean id="ldapactivedirectoryauthprovider" class="org.springframework.security.ldap.authentication.ad.activedirectoryldapauthenticationprovider"> <constructor-arg value="domain.subdomain" /> <constructor-arg value="ldap://host:port" /> <property name="convertsuberrorcodestoexceptions" value="true"/> </bean>

it seems work fine too.

spring spring-security ldap

-

Comments

Post a Comment

Popular posts from this blog

formatting - SAS SQL Datepart function returning odd values -

formatting - SAS SQL Datepart function returning odd values - i'm having massive problem project can't seem right. i'm trying modify info variable in datetime format. first info 30mar12:00:00:00. i've been advised utilize code below returns value 30mar60:5:30:00. want date component , have no thought how info got exported in format wasn't in microsoft access. i've tried several mods code 1 time again comes blank or sends error message. proc sql; update dataset set date = datepart(date); quit; any advice appreciated. i'm guessing variable date numeric , formatted datetime. 1 time you've carried out conversion, alter format date9. sas datetime value number of seconds since 01 jan 1960, whereas dates number of days since 01 jan 1960. both stored numbers, using right format display value key. illustration below. data _null_; a='30mar12:00:00:00'dt; b=datepart(a); c=b; format b datetime. c date9.; set b c; run; ...
Read more

c++ - Apple Mach-O Linker Error(Duplicate Symbols For Architecture armv7) -

c++ - Apple Mach-O Linker Error(Duplicate Symbols For Architecture armv7) - here error: duplicate symbol _objc_metaclass_$_bfapplinkreturntorefererview in: /users/user/documents/facebooksdk/facebooksdk.framework/facebooksdk(bfapplinkreturntorefererview.o) /users/user/desktop/project/project/project/assets/facebook/editor/ios/facebooksdk/facebooksdk.a(bfapplinkreturntorefererview.o) ld: 889 duplicate symbols architecture armv7 clang: error: linker command failed exit code 1 (use -v see invocation) i have searched find solution of error couldn't. there tons of similar error this, 1 hasn't been asked yet. problem shows when add together "-objc" "other linker flags". need add together utilize admob service. problem? how can solve this? i faced same issue while integrating facebook-ios-sdk. because using 3rd party library had bolts.framework linked against it. solution found incorporate facebook-ios-sdk source code hosted on github. ...
Read more

php - Yii 2: Unable to find a class into the extension 'yii2-admin' -

php - Yii 2: Unable to find a class into the extension 'yii2-admin' - extension's github project: https://github.com/mdmsoft/yii2-admin i'm using advanced template of yii2, i've backend , frontend , common folders advanced folder. the advanced folder on same level of vendor folder. i've others extensions , working then installed yii2-admin composer php composer.phar require mdmsoft/yii2-admin "*" installation worked well. into vendor folder i've mdmsoft folder yii2-admin subfolder it. this actual content of v endor/yiisoft/extensions.php (modified composer installation, haven't manually touched it) <?php $vendordir = dirname(__dir__); homecoming array ( 'yiisoft/yii2-jui' => array ( 'name' => 'yiisoft/yii2-jui', 'version' => '2.0.0.0', 'alias' => array ( '@yii/jui' => $vendordir . '/yiisoft/yii2-jui', ...
Read more