I just have the error failed to authenticate which provided the
following credentials : homer in cas.log

and in my ldap log I can see :

Jan 18 14:53:27 debian slapd[4380]: conn=0 fd=14 ACCEPT from
IP=127.0.0.1:37509 (IP=0.0.0.0:389)
Jan 18 14:53:27 debian slapd[4380]: conn=0 op=0 BIND
dn="cn=admin,dc=exemple,dc=com" method=128
Jan 18 14:53:27 debian slapd[4380]: conn=0 op=0 BIND
dn="cn=admin,dc=exemple,dc=com" mech=SIMPLE ssf=0
Jan 18 14:53:27 debian slapd[4380]: conn=0 op=0 RESULT tag=97 err=0 text=
Jan 18 14:53:27 debian slapd[4380]: conn=0 op=1 SRCH
base="dc=exemple,dc=com" scope=2 deref=3
filter="(cn=homer,dc=exemple,dc=com)"
Jan 18 14:53:27 debian slapd[4380]: conn=0 op=1 SRCH attr=1.1
Jan 18 14:53:27 debian slapd[4380]: <= bdb_equality_candidates: (cn) not indexed
Jan 18 14:53:27 debian slapd[4380]: conn=0 op=1 SEARCH RESULT tag=101
err=0 nentries=0 text=

but I don't understand the meaning of those messages (tag=101...) I
try to index but don't know if it works and I believe that indexing is
just to accelerate the search and have no consequences on matching
results.

I don't know if the problem comes from the ldap or cas server...
2010/1/18 Patrick Berry <[email protected]>:
> Are there LDAP-related errors in the cas.log file?  This is the best
> place to find the root cause of your issue.
>
> Via mobile keyboard
>
> On Jan 18, 2010, at 2:23 PM, Clément <[email protected]> wrote:
>
>> Hi,
>>
>> I've got a question, I have configured a CAS server and a ldap with
>> openldap. The tomcat of my cas server is configured with ssl/tls
>> (https).
>>
>> Everything is working except the authentication and I don't understand
>> why because before I was using http, authentication seemed to work
>> fine and now it doesn't.
>>
>> I would like to know if because my tomcat is on https my ldap should
>> be also on ssl/tls (ldaps) or if the problem comes from another way.
>>
>> thanks
>>
>> C.
>>
>> --
>> You are currently subscribed to [email protected] as: [email protected]
>> To unsubscribe, change settings or access archives, see 
>> http://www.ja-sig.org/wiki/display/JSG/cas-user
>
> --
> You are currently subscribed to [email protected] as: 
> [email protected]
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>
>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to