Thanks for your answer. How to know if there is a permission issue ?
I have tried the TRACE level but there was no info in the log and when I browse the ldap with the binding user, I can see the attributes. I have even tried a simple configuration with uid only and it does not work :( 2016-01-28 19:38 GMT+01:00 Misagh Moayyed <[email protected]>: > Your LDAP response is not returning any attributes. Either they are not > available, or a permissions issue, etc. You want to consult with your LDAP > instance. > > > > From: [email protected] [mailto:[email protected]] On Behalf Of Nicolas > Dupont-Jubien > Sent: Thursday, January 28, 2016 9:34 AM > To: CAS Community <[email protected]> > Subject: [cas-user] LdapAuthenticationHandler exception details: uid > attribute not found > > > > Hi, > > I try to configure CAS Server 4.1.x and following the procedures : > > * CAS Overlay Template > * LDAP (Authenticated Bind + LDAPS) > * SAML 1.1 > > But unfortunately, I still have the error after LDAP Successul > authentication: > > LdapAuthenticationHandler exception details: uid attribute not found > > > I am totally stucked. If anyone has a hint, it will be welcome. > > Details > > [STDOUT] 2016-01-28 16:52:10,210 DEBUG [org.ldaptive.auth.Authenticator] - > <authenticate > response=[org.ldaptive.auth.AuthenticationHandlerResponse@21463007::connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@20858861::config=[org.ldaptive.ConnectionConfig@25942145::ldapUrl=ldaps://ldap.host:636, > connectTimeout=3000, responseTimeout=-1, sslConfig=null, useSSL=true, > useStartTLS=false, connectionInitializer=null], > providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@25205438::metadata=[ldapUrl=ldaps://ldap.host:636, > count=1], > environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory, > com.sun.jndi.ldap.connect.timeout=3000, java.naming.ldap.version=3, > java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, > java.naming.security.protocol=ssl}, > providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@26226567::operationExceptionResultCodes=[PROTOCOL_ERROR, > SERVER_DOWN], properties={}, > connectionStrategy=org.ldaptive.provider.ConnectionStrategies$DefaultConnectionStrategy@6a64e7, > controlProcessor=org.ldaptive.provider.ControlProcessor@1aa7703, > environment=null, tracePackets=null, removeDnUrls=true, > searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, > PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null]], > providerConnection=org.ldaptive.provider.jndi.JndiConnection@c819b7], > result=true, resultCode=SUCCESS, message=null, controls=null] for > dn=uid=myuser,ou=People,dc=sesame with > request=[org.ldaptive.auth.AuthenticationRequest@9610255::user=myuser, > retAttrs=[uid, mail, givenName, sn]]> > [STDOUT] 2016-01-28 16:52:10,211 DEBUG > [org.jasig.cas.authentication.LdapAuthenticationHandler] - <LDAP response: > [org.ldaptive.auth.AuthenticationResponse@3043705::authenticationResultCode=AUTHENTICATION_HANDLER_SUCCESS, > ldapEntry=[dn=uid=myuser,ou=People,dc=sesame[]], accountState=null, > result=true, resultCode=SUCCESS, message=null, controls=null]> > [STDOUT] 2016-01-28 16:52:10,211 INFO > [org.jasig.cas.authentication.PolicyBasedAuthenticationManager] - > <LdapAuthenticationHandler failed authenticating myuser+password> > [STDOUT] 2016-01-28 16:52:10,212 DEBUG > [org.jasig.cas.authentication.PolicyBasedAuthenticationManager] - > <LdapAuthenticationHandler exception details: uid attribute not found for > myuser> > > > > -- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. > > -- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
