I've been trying to get CAS to authenticate with LDAP (Tivoli Directory Server) 
and am having trouble using anything but plain text for the password (it's 
stored as binary, however). I've changed the password to several different 
encryption schemes (when creating/modifying users with tools like JXPlorer) and 
nothing but plain text seems to work.  We happened across this link on 
configuring CAS to work with MD5 and so I made all of the changes outlined 
therein.

http://www.ja-sig.org/wiki/pages/viewpage.action?pageId=23691266

However, now when it tries to authenticate with LDAP it gets this exception:
Authentication failed: javax.naming.CommunicationException: [LDAP: error code 2
- Protocol Error]

It looks like this exception is happening in 
AuthenticatedLdapDigestMd5ContextSource::getDirContext(...)

We need to create users programatically in one area of the system and need CAS 
to be able to authenticate those same users in the future.  We want to use MD5 
to store the passwords and are thus far unable to do so.  Any advice on how 
best to do this?  It seems like we must be making something more complicated 
than it needs to be (or we're missing something critical in TDS?)

As far as TDS itself Digest-MD5 is "enabled" and password encryption is set to 
MD5.

Thanks!




      
-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to