Follow-up: I bit the bullet and changed the LDAP handler type to AUTHENTICATED, stuffed it with the bind DN used by another application, and set the pool passivator to BIND. Now all authentication attempts and attribute resolutions work properly.
Best regards, -- Carlos M. Fernández Enterprise Systems Manager *Saint Joseph’s University* Philadelphia PA 19131 T: +1 610 660 1501 On Mon, Jul 10, 2017 at 6:21 PM, Carlos Fernandez <[email protected]> wrote: > I included a link to the logs here: https://drive.google.com/a/ > sju.edu/file/d/0B-j8Pz4AXloHczFURXdhaGYwU1E/view?usp=drive_web > > Basically it looks like this: > > ---8<--- > 2017-07-10 13:02:40,170 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] > - <Attempting LDAP authentication for jb617017> > 2017-07-10 13:02:40,171 DEBUG [org.ldaptive.auth.FormatDnResolver] - > <Formatting DN for jb617017 with uid=%s,ou=people,o=sju.edu> > 2017-07-10 13:02:40,171 DEBUG [org.ldaptive.auth.Authenticator] - > <authenticate dn=uid=jb617017,ou=people,o=sju.edu with > request=[org.ldaptive.auth.AuthenticationRequest@1587638954::user=[org. > ldaptive.auth.User@1520364966::identifier=jb617017, context=null], > returnAttributes=[udcid, uid, employeeType, mail, displayName, givenName, > departmentNumber, pswUserName, sn, employeeNumber]]> > 2017-07-10 13:02:40,171 DEBUG [org.ldaptive.auth. > PooledBindAuthenticationHandler] - <authenticate > criteria=[org.ldaptive.auth.AuthenticationCriteria@ > 530348177::dn=uid=jb617017,ou=people,o=sju.edu, > authenticationRequest=[org.ldaptive.auth.AuthenticationRequest@ > 2074611074::user=[org.ldaptive.auth.User@1520364966::identifier=jb617017, > context=null], returnAttributes=[udcid, uid, employeeType, mail, > displayName, givenName, departmentNumber, pswUserName, sn, employeeNumber, > udcid, uid, employeeType, mail, displayName, givenName, departmentNumber, > pswUserName, sn, employeeNumber]]]> > 2017-07-10 13:02:40,171 DEBUG [org.ldaptive.SearchOperation] - <execute > request=[org.ldaptive.SearchRequest@600881066::baseDn=, > searchFilter=[org.ldaptive.SearchFilter@1642584434::filter=(objectClass=*), > parameters={}], returnAttributes=[1.1], searchScope=OBJECT, timeLimit=PT0S, > sizeLimit=1, derefAliases=null, typesOnly=false, binaryAttributes=null, > sortBehavior=UNORDERED, searchEntryHandlers=null, > searchReferenceHandlers=null, controls=null, referralHandler=null, > intermediateResponseHandlers=null] with connection=[org.ldaptive. > DefaultConnectionFactory$DefaultConnection@1236378265:: > config=[org.ldaptive.ConnectionConfig@2142472158::ldapUrl=ldaps:// > axldap.sju.edu, connectTimeout=PT1H23M20S, responseTimeout=null, > sslConfig=[org.ldaptive.ssl.SslConfig@1154240951::credentialConfig=[org. > ldaptive.ssl.X509CredentialConfig@-747746929::trustCertificates= > file:/etc/cas/credentials/axldap.crt, authenticationCertificate=null, > authenticationKey=null], trustManagers=null, enabledCipherSuites=null, > enabledProtocols=null, handshakeCompletedListeners=null], useSSL=true, > useStartTLS=false, connectionInitializer=null, connectionStrategy=org. > ldaptive.DefaultConnectionStrategy@22c0dfad], providerConnectionFactory=[ > org.ldaptive.provider.jndi.JndiConnectionFactory@ > 412312959::metadata=[ldapUrl=ldaps://axldap.sju.edu, count=1], > environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory, > com.sun.jndi.ldap.connect.timeout=5000000, java.naming.ldap.version=3, > java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, > java.naming.security.protocol=ssl}, classLoader=null, > providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@2080218308:: > operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], > properties={}, > controlProcessor=org.ldaptive.provider.ControlProcessor@5d1a2be5, > environment=null, tracePackets=null, removeDnUrls=true, > searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, > PARTIAL_RESULTS], classLoader=null, sslSocketFactory=null, > hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi. > JndiConnection@7983aa5c]> > 2017-07-10 13:02:40,182 DEBUG [org.ldaptive.SearchOperation] - <execute > response=[org.ldaptive.Response@2058915982::result=[ > org.ldaptive.SearchResult@-1951941189::entries=[[dn=[], > responseControls=null, messageId=-1]], references=[]], resultCode=SUCCESS, > message=null, matchedDn=null, responseControls=null, referralURLs=null, > messageId=-1] for request=[org.ldaptive.SearchRequest@600881066::baseDn=, > searchFilter=[org.ldaptive.SearchFilter@1642584434::filter=(objectClass=*), > parameters={}], returnAttributes=[1.1], searchScope=OBJECT, timeLimit=PT0S, > sizeLimit=1, derefAliases=null, typesOnly=false, binaryAttributes=null, > sortBehavior=UNORDERED, searchEntryHandlers=null, > searchReferenceHandlers=null, controls=null, referralHandler=null, > intermediateResponseHandlers=null] with connection=[org.ldaptive. > DefaultConnectionFactory$DefaultConnection@1236378265:: > config=[org.ldaptive.ConnectionConfig@2142472158::ldapUrl=ldaps:// > axldap.sju.edu, connectTimeout=PT1H23M20S, responseTimeout=null, > sslConfig=[org.ldaptive.ssl.SslConfig@1154240951::credentialConfig=[org. > ldaptive.ssl.X509CredentialConfig@-747746929::trustCertificates= > file:/etc/cas/credentials/axldap.crt, authenticationCertificate=null, > authenticationKey=null], trustManagers=null, enabledCipherSuites=null, > enabledProtocols=null, handshakeCompletedListeners=null], useSSL=true, > useStartTLS=false, connectionInitializer=null, connectionStrategy=org. > ldaptive.DefaultConnectionStrategy@22c0dfad], providerConnectionFactory=[ > org.ldaptive.provider.jndi.JndiConnectionFactory@ > 412312959::metadata=[ldapUrl=ldaps://axldap.sju.edu, count=1], > environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory, > com.sun.jndi.ldap.connect.timeout=5000000, java.naming.ldap.version=3, > java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, > java.naming.security.protocol=ssl}, classLoader=null, > providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@2080218308:: > operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], > properties={}, > controlProcessor=org.ldaptive.provider.ControlProcessor@5d1a2be5, > environment=null, tracePackets=null, removeDnUrls=true, > searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, > PARTIAL_RESULTS], classLoader=null, sslSocketFactory=null, > hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi. > JndiConnection@7983aa5c]> > 2017-07-10 13:02:40,182 DEBUG [org.ldaptive.BindOperation] - <execute > request=[org.ldaptive.BindRequest@1840527521:: > bindDn=uid=jb617017,ou=people,o=sju.edu, saslConfig=null, > controls=[[org.ldaptive.control.PasswordPolicyControl@-350057371::criticality=false, > timeBeforeExpiration=0, graceAuthNsRemaining=0, error=null]], > referralHandler=null, intermediateResponseHandlers=null] with > connection=[org.ldaptive.DefaultConnectionFactory$ > DefaultConnection@1236378265::config=[org.ldaptive. > ConnectionConfig@2142472158::ldapUrl=ldaps://axldap.sju.edu, > connectTimeout=PT1H23M20S, responseTimeout=null, > sslConfig=[org.ldaptive.ssl.SslConfig@1154240951::credentialConfig=[org. > ldaptive.ssl.X509CredentialConfig@-747746929::trustCertificates= > file:/etc/cas/credentials/axldap.crt, authenticationCertificate=null, > authenticationKey=null], trustManagers=null, enabledCipherSuites=null, > enabledProtocols=null, handshakeCompletedListeners=null], useSSL=true, > useStartTLS=false, connectionInitializer=null, connectionStrategy=org. > ldaptive.DefaultConnectionStrategy@22c0dfad], providerConnectionFactory=[ > org.ldaptive.provider.jndi.JndiConnectionFactory@ > 412312959::metadata=[ldapUrl=ldaps://axldap.sju.edu, count=1], > environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory, > com.sun.jndi.ldap.connect.timeout=5000000, java.naming.ldap.version=3, > java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, > java.naming.security.protocol=ssl}, classLoader=null, > providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@2080218308:: > operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], > properties={}, > controlProcessor=org.ldaptive.provider.ControlProcessor@5d1a2be5, > environment=null, tracePackets=null, removeDnUrls=true, > searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, > PARTIAL_RESULTS], classLoader=null, sslSocketFactory=null, > hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi. > JndiConnection@7983aa5c]> > 2017-07-10 13:02:40,189 DEBUG [org.ldaptive.BindOperation] - <execute > response=[org.ldaptive.Response@1635611633::result=null, > resultCode=SUCCESS, message=null, matchedDn=null, responseControls=[[org. > ldaptive.control.PasswordPolicyControl@-350057371::criticality=false, > timeBeforeExpiration=0, graceAuthNsRemaining=0, error=null]], > referralURLs=null, messageId=-1] for request=[org.ldaptive. > BindRequest@1840527521::bindDn=uid=jb617017,ou=people,o=sju.edu, > saslConfig=null, > controls=[[org.ldaptive.control.PasswordPolicyControl@-350057371::criticality=false, > timeBeforeExpiration=0, graceAuthNsRemaining=0, error=null]], > referralHandler=null, intermediateResponseHandlers=null] with > connection=[org.ldaptive.DefaultConnectionFactory$ > DefaultConnection@1236378265::config=[org.ldaptive. > ConnectionConfig@2142472158::ldapUrl=ldaps://axldap.sju.edu, > connectTimeout=PT1H23M20S, responseTimeout=null, > sslConfig=[org.ldaptive.ssl.SslConfig@1154240951::credentialConfig=[org. > ldaptive.ssl.X509CredentialConfig@-747746929::trustCertificates= > file:/etc/cas/credentials/axldap.crt, authenticationCertificate=null, > authenticationKey=null], trustManagers=null, enabledCipherSuites=null, > enabledProtocols=null, handshakeCompletedListeners=null], useSSL=true, > useStartTLS=false, connectionInitializer=null, connectionStrategy=org. > ldaptive.DefaultConnectionStrategy@22c0dfad], providerConnectionFactory=[ > org.ldaptive.provider.jndi.JndiConnectionFactory@ > 412312959::metadata=[ldapUrl=ldaps://axldap.sju.edu, count=1], > environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory, > com.sun.jndi.ldap.connect.timeout=5000000, java.naming.ldap.version=3, > java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, > java.naming.security.protocol=ssl}, classLoader=null, > providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@2080218308:: > operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], > properties={}, > controlProcessor=org.ldaptive.provider.ControlProcessor@5d1a2be5, > environment=null, tracePackets=null, removeDnUrls=true, > searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, > PARTIAL_RESULTS], classLoader=null, sslSocketFactory=null, > hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi. > JndiConnection@7983aa5c]> > 2017-07-10 13:02:40,189 DEBUG [org.ldaptive.auth. > PooledBindAuthenticationHandler] - <authenticate > response=[org.ldaptive.auth.AuthenticationHandlerResponse@ > 88667336::connection=[org.ldaptive.DefaultConnectionFactory$ > DefaultConnection@1236378265::config=[org.ldaptive. > ConnectionConfig@2142472158::ldapUrl=ldaps://axldap.sju.edu, > connectTimeout=PT1H23M20S, responseTimeout=null, > sslConfig=[org.ldaptive.ssl.SslConfig@1154240951::credentialConfig=[org. > ldaptive.ssl.X509CredentialConfig@-747746929::trustCertificates= > file:/etc/cas/credentials/axldap.crt, authenticationCertificate=null, > authenticationKey=null], trustManagers=null, enabledCipherSuites=null, > enabledProtocols=null, handshakeCompletedListeners=null], useSSL=true, > useStartTLS=false, connectionInitializer=null, connectionStrategy=org. > ldaptive.DefaultConnectionStrategy@22c0dfad], providerConnectionFactory=[ > org.ldaptive.provider.jndi.JndiConnectionFactory@ > 412312959::metadata=[ldapUrl=ldaps://axldap.sju.edu, count=1], > environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory, > com.sun.jndi.ldap.connect.timeout=5000000, java.naming.ldap.version=3, > java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, > java.naming.security.protocol=ssl}, classLoader=null, > providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@2080218308:: > operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], > properties={}, > controlProcessor=org.ldaptive.provider.ControlProcessor@5d1a2be5, > environment=null, tracePackets=null, removeDnUrls=true, > searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, > PARTIAL_RESULTS], classLoader=null, sslSocketFactory=null, > hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi. > JndiConnection@7983aa5c], result=true, resultCode=SUCCESS, message=null, > controls=[[org.ldaptive.control.PasswordPolicyControl@-350057371::criticality=false, > timeBeforeExpiration=0, graceAuthNsRemaining=0, error=null]]] for > criteria=[org.ldaptive.auth.AuthenticationCriteria@ > 530348177::dn=uid=jb617017,ou=people,o=sju.edu, > authenticationRequest=[org.ldaptive.auth.AuthenticationRequest@ > 2074611074::user=[org.ldaptive.auth.User@1520364966::identifier=jb617017, > context=null], returnAttributes=[udcid, uid, employeeType, mail, > displayName, givenName, departmentNumber, pswUserName, sn, employeeNumber, > udcid, uid, employeeType, mail, displayName, givenName, departmentNumber, > pswUserName, sn, employeeNumber]]]> > 2017-07-10 13:02:40,189 DEBUG [org.ldaptive.auth.PooledSearchEntryResolver] > - <resolve criteria=[org.ldaptive.auth.AuthenticationCriteria@ > 530348177::dn=uid=jb617017,ou=people,o=sju.edu, > authenticationRequest=[org.ldaptive.auth.AuthenticationRequest@ > 2074611074::user=[org.ldaptive.auth.User@1520364966::identifier=jb617017, > context=null], returnAttributes=[udcid, uid, employeeType, mail, > displayName, givenName, departmentNumber, pswUserName, sn, employeeNumber, > udcid, uid, employeeType, mail, displayName, givenName, departmentNumber, > pswUserName, sn, employeeNumber]]]> > 2017-07-10 13:02:40,190 DEBUG [org.ldaptive.SearchOperation] - <execute > request=[org.ldaptive.SearchRequest@600881066::baseDn=, > searchFilter=[org.ldaptive.SearchFilter@1642584434::filter=(objectClass=*), > parameters={}], returnAttributes=[1.1], searchScope=OBJECT, timeLimit=PT0S, > sizeLimit=1, derefAliases=null, typesOnly=false, binaryAttributes=null, > sortBehavior=UNORDERED, searchEntryHandlers=null, > searchReferenceHandlers=null, controls=null, referralHandler=null, > intermediateResponseHandlers=null] with connection=[org.ldaptive. > DefaultConnectionFactory$DefaultConnection@716181532:: > config=[org.ldaptive.ConnectionConfig@1003104271::ldapUrl=ldaps:// > axldap.sju.edu, connectTimeout=PT1H23M20S, responseTimeout=null, > sslConfig=[org.ldaptive.ssl.SslConfig@2004319975::credentialConfig=[org. > ldaptive.ssl.X509CredentialConfig@-747746929::trustCertificates= > file:/etc/cas/credentials/axldap.crt, authenticationCertificate=null, > authenticationKey=null], trustManagers=null, enabledCipherSuites=null, > enabledProtocols=null, handshakeCompletedListeners=null], useSSL=true, > useStartTLS=false, connectionInitializer=null, connectionStrategy=org. > ldaptive.DefaultConnectionStrategy@7d9f6903], providerConnectionFactory=[ > org.ldaptive.provider.jndi.JndiConnectionFactory@ > 1060322508::metadata=[ldapUrl=ldaps://axldap.sju.edu, count=1], > environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory, > com.sun.jndi.ldap.connect.timeout=5000000, java.naming.ldap.version=3, > java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, > java.naming.security.protocol=ssl}, classLoader=null, > providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@1431560565:: > operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], > properties={}, > controlProcessor=org.ldaptive.provider.ControlProcessor@191f3d7e, > environment=null, tracePackets=null, removeDnUrls=true, > searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, > PARTIAL_RESULTS], classLoader=null, sslSocketFactory=null, > hostnameVerifier=null]], providerConnection=null]> > 2017-07-10 13:02:40,190 DEBUG [org.ldaptive.pool.SearchValidator] - > <validation failed for search request > [org.ldaptive.SearchRequest@600881066::baseDn=, > searchFilter=[org.ldaptive.SearchFilter@1642584434::filter=(objectClass=*), > parameters={}], returnAttributes=[1.1], searchScope=OBJECT, timeLimit=PT0S, > sizeLimit=1, derefAliases=null, typesOnly=false, binaryAttributes=null, > sortBehavior=UNORDERED, searchEntryHandlers=null, > searchReferenceHandlers=null, controls=null, referralHandler=null, > intermediateResponseHandlers=null]> > java.lang.IllegalStateException: Connection is not open > at org.ldaptive.DefaultConnectionFactory$DefaultConnection. > getProviderConnection(DefaultConnectionFactory.java:244) > ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.SearchOperation.executeSearch(SearchOperation.java:103) > ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.SearchOperation.invoke(SearchOperation.java:85) > ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.SearchOperation.invoke(SearchOperation.java:15) > ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.AbstractOperation.execute(AbstractOperation.java:126) > ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.pool.SearchValidator.validate(SearchValidator.java:82) > ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.pool.SearchValidator.validate(SearchValidator.java:20) > ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.pool.AbstractPool.validate(AbstractPool.java:210) > ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.pool.AbstractConnectionPool. > activateAndValidateConnection(AbstractConnectionPool.java:630) > ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.pool.BlockingConnectionPool.getConnection( > BlockingConnectionPool.java:151) ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.pool.PooledConnectionFactory.getConnection( > PooledConnectionFactory.java:68) ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.auth.PooledSearchEntryResolver.performLdapSearch( > PooledSearchEntryResolver.java:60) ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.auth.AbstractSearchEntryResolver.resolve( > AbstractSearchEntryResolver.java:321) ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.auth.Authenticator.resolveEntry(Authenticator.java:393) > ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.auth.Authenticator.authenticate(Authenticator.java:259) > ~[ldaptive-1.2.0.jar:?] > ... > 2017-07-10 13:02:40,190 WARN [org.ldaptive.pool.BlockingConnectionPool] - > <connection failed check out validation: org.ldaptive.pool. > AbstractConnectionPool$DefaultPooledConnectionProxy@2ab0ee23> > 2017-07-10 13:02:40,190 DEBUG [org.ldaptive.pool.BlockingConnectionPool] > - <attempt to remove unknown available connection: org.ldaptive.pool. > AbstractConnectionPool$DefaultPooledConnectionProxy@2ab0ee23> > 2017-07-10 13:02:40,190 INFO [org.ldaptive.pool.BlockingConnectionPool] - > <destroyed connection: org.ldaptive.pool.AbstractConnectionPool$ > DefaultPooledConnectionProxy@2ab0ee23> > 2017-07-10 13:02:40,190 DEBUG [org.ldaptive.auth.Authenticator] - <entry > resolution failed for resolver=[org.ldaptive.auth. > PooledSearchEntryResolver@525244463::factory=[org.ldaptive.pool. > PooledConnectionFactory@960299606::pool=[org.ldaptive. > pool.BlockingConnectionPool@1932465229::name=null, > poolConfig=[org.ldaptive.pool.PoolConfig@322642843::minPoolSize=10, > maxPoolSize=200, validateOnCheckIn=false, validateOnCheckOut=true, > validatePeriodically=true, validatePeriod=PT5M], activator=null, > passivator=org.ldaptive.pool.ClosePassivator@785f5e33, > validator=[org.ldaptive.pool.SearchValidator@698469596:: > searchRequest=[org.ldaptive.SearchRequest@600881066::baseDn=, > searchFilter=[org.ldaptive.SearchFilter@1642584434::filter=(objectClass=*), > parameters={}], returnAttributes=[1.1], searchScope=OBJECT, timeLimit=PT0S, > sizeLimit=1, derefAliases=null, typesOnly=false, binaryAttributes=null, > sortBehavior=UNORDERED, searchEntryHandlers=null, > searchReferenceHandlers=null, controls=null, referralHandler=null, > intermediateResponseHandlers=null]] pruneStrategy=[org.ldaptive. > pool.IdlePruneStrategy@572991705::prunePeriod=PT5M, idleTime=PT5M], > connectOnCreate=true, connectionFactory=[org.ldaptive. > DefaultConnectionFactory@1749737725::provider=org.ldaptive.provider.jndi. > JndiProvider@6a669501, config=[org.ldaptive.ConnectionConfig@1003104271:: > ldapUrl=ldaps://axldap.sju.edu, connectTimeout=PT1H23M20S, > responseTimeout=null, sslConfig=[org.ldaptive.ssl.SslConfig@2004319975:: > credentialConfig=[org.ldaptive.ssl.X509CredentialConfig@- > 747746929::trustCertificates=file:/etc/cas/credentials/axldap.crt, > authenticationCertificate=null, authenticationKey=null], > trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, > handshakeCompletedListeners=null], useSSL=true, useStartTLS=false, > connectionInitializer=null, connectionStrategy=org.ldaptive. > DefaultConnectionStrategy@7d9f6903]], initialized=true, availableCount=6, > activeCount=0]], baseDn=ou=people,o=sju.edu, userFilter=null, > userFilterParameters=null, allowMultipleEntries=false, subtreeSearch=true, > derefAliases=null, referralHandler=null, searchEntryHandlers=null]> > org.ldaptive.pool.ValidationException: Validation of connection failed > at org.ldaptive.pool.AbstractConnectionPool. > activateAndValidateConnection(AbstractConnectionPool.java:633) > ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.pool.BlockingConnectionPool.getConnection( > BlockingConnectionPool.java:151) ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.pool.PooledConnectionFactory.getConnection( > PooledConnectionFactory.java:68) ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.auth.PooledSearchEntryResolver.performLdapSearch( > PooledSearchEntryResolver.java:60) ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.auth.AbstractSearchEntryResolver.resolve( > AbstractSearchEntryResolver.java:321) ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.auth.Authenticator.resolveEntry(Authenticator.java:393) > ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.auth.Authenticator.authenticate(Authenticator.java:259) > ~[ldaptive-1.2.0.jar:?] > at org.ldaptive.auth.Authenticator.authenticate(Authenticator.java:224) > ~[ldaptive-1.2.0.jar:?] > ... > > ---8<--- > > The LDAP server isn't mine, and the fellow who manages it was out of the > office today. I'll ask him to check tomorrow. > > Best regards, > -- > Carlos M. Fernández > Enterprise Systems Manager > *Saint Joseph’s University* > Philadelphia PA 19131 > T: +1 610 660 1501 > > On Mon, Jul 10, 2017 at 5:23 PM, Daniel Fisher <[email protected]> wrote: > >> On Mon, Jul 10, 2017 at 12:44 PM, Carlos Fernandez <[email protected]> >> wrote: >> >>> 2017-07-10 12:26:33,172 WARN [org.ldaptive.pool.BlockingConnectionPool] >>> - <connection failed check out validation: org.ldaptive.pool.AbstractConn >>> ectionPool$DefaultPooledConnectionProxy@3b167a90> >>> >> >> Some debug logs for org.ldaptive may shed some light on this. Or take a >> look at your LDAP logs to see why validation is failing. >> >> --Daniel Fisher >> >> >> -- >> - CAS gitter chatroom: https://gitter.im/apereo/cas >> - CAS mailing list guidelines: https://apereo.github.io/cas/M >> ailing-Lists.html >> <http://spamburger.sju.edu/canit/urlproxy.php?_q=aHR0cHM6Ly9hcGVyZW8uZ2l0aHViLmlvL2Nhcy9NYWlsaW5nLUxpc3RzLmh0bWw%3D&_s=Y2Zlcm5hbmQ%3D&_c=77a03ca9> >> - CAS documentation website: https://apereo.github.io/cas >> <http://spamburger.sju.edu/canit/urlproxy.php?_q=aHR0cHM6Ly9hcGVyZW8uZ2l0aHViLmlvL2Nhcw%3D%3D&_s=Y2Zlcm5hbmQ%3D&_c=9d7960c0> >> - CAS project website: https://github.com/apereo/cas >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit https://groups.google.com/a/ap >> ereo.org/d/msgid/cas-user/CAFC6YwR5m2%2BAFZMwx8H8UYpsYUGHMwx >> q7G9km0jWE9HYGWm-dQ%40mail.gmail.com >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFC6YwR5m2%2BAFZMwx8H8UYpsYUGHMwxq7G9km0jWE9HYGWm-dQ%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> > > -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAE7KU84cY_krQ3y0YENoHChu4Hzc73ZcKvoX6DiOR7vR9uZesA%40mail.gmail.com.
