Haven't looked at it. Is it using UPN for login? Do we need to use a different mechanism for attribute retrieval?
Mearl Danner Systems Programmer Samford University Technology Services http://www.samford.edu From: Daniel Fisher [mailto:[email protected]] Sent: Friday, June 28, 2013 3:08 PM To: [email protected] Subject: Re: [cas-dev] ldaptive integration FastBind in this context is referring to: http://msdn.microsoft.com/en-us/library/cc223503.aspx It isn't related to DN resolution. --Daniel Fisher On Fri, Jun 28, 2013 at 4:01 PM, Danner, Mearl <[email protected]<mailto:[email protected]>> wrote: I've attached my cas.log and my deployerConfig.xml We probably won't be able to use the fastbind against AD because we have 25K or so users spread out over 50 or 60 OUs. We need to search on samaccountname from the root to find them. Mearl Danner Systems Programmer Samford University Technology Services http://www.samford.edu -----Original Message----- From: Marvin S. Addison [mailto:[email protected]<mailto:[email protected]>] Sent: Friday, June 28, 2013 2:50 PM To: [email protected]<mailto:[email protected]> Subject: Re: [cas-dev] ldaptive integration > I can see that it finds the user and successfully binds as the user but > I get "invalid credentials" on the login screen. > > In the cas.log > > 2013-06-28 14:40:45,418 INFO > [org.jasig.cas.authentication.PolicyBasedAuthenticationManager] - > LdapAuthenticationHandler failed authenticating jmdanner+password Turn up org.jasig.cas and org.ldaptive to DEBUG and post the logs. > I noted in the documentation that Marvin provided that there was a > reference to an authControls bean. I can't find any documentation about > how to configure that bean. That was a typo that I have since corrected. M -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev
