Glad to hear you solved it!   I'm actually surprised that there wasn't a
better error message since the bind would have failed since the username was
wrong.

I think the authenticatedReadOnly property is from the older version of the
LdapTemplate.  I'll update that in our CVS.  Thanks.

-Scott

On 4/27/07, Dmitry Kochelaev <[EMAIL PROTECTED]> wrote:

Hello,

Thank you, for your attitude. I've solved the problem just an hour
ago. It was in incorrect userName property. It should look like:
       <property name="userName" value="uid=admin" />
rather then like
       <property name="userName" value="admin" />

Also I should note, that there is no property authenticatedReadOnly (I
use spring-ldap-1.1.2.jar), but there is property anonymousReadOnly.

On 4/27/07, Scott Battaglia <[EMAIL PROTECTED]> wrote:
> You can try turning up the debug level in the log4j properties for
> org.springframework.ldap. That should give you some information.
>
> I'm not especially familiar with LDAP.  All I can do is point you to our
> sample file:
>
http://developer.ja-sig.org/source/browse/jasig/cas3/adaptors/ldap/src/main/resources/deployerConfigContext.xml?r=1.1
>
> Someone else may be able to provide more assistance.
>
> -Scott
>
>
> On 4/26/07, Dmitry Kochelaev <[EMAIL PROTECTED] > wrote:
> >
> > Hello,
> >
> > I've installed CAS on my Tomcat and tested it with default
> > Authentication Handler. It worked. Then I tried to configure it to use
> > my Apache Directory server. A do not get any error messages in log,
> > however, I'm not able to be authenticated.
> >
> > In LDAP I've following tree structure:
> > com->example->dkochelaev (this node has uid=dkochelaev)
> >
> > My CAS config (deployerConfigContext.xml) is created as described in
> > manual, so the part i've modified is:
> >         <property name="authenticationHandlers">
> >             <list>
> >                 <bean
> >
> >
> class="
org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler
"
> > />
> >
> >                 <bean
> >
> >
> class="org.jasig.cas.adaptors.ldap.FastBindLdapAuthenticationHandler"
> > >
> >                         <property name="filter"
> value="uid=%u" />
> >                         <property name="contextSource"
> ref="contextSource" />
> >                 </bean>
> >
> >             </list>
> >         </property>
> >     </bean>
> >     <bean id="contextSource"
> >
> class="org.jasig.cas.adaptors.ldap.util.AuthenticatedLdapContextSource
> ">
> >         <property name="anonymousReadOnly" value="false" />
> >         <property name="userName" value="admin" />
> >         <property name="password" value="secret" />
> >         <property name="urls">
> >             <list>
> >                 <value>ldaps://localhost:10389</value>
> >             </list>
> >         </property>
> >
> >         <property name="baseEnvironmentProperties">
> >             <map>
> >                 <entry>
> >
> >
> <key><value>java.naming.security.authentication</value></key>
> >                         <value>simple</value>
> >                 </entry>
> >             </map>
> >         </property>
> >     </bean>
> >
> >
> > One more thing that disturbs me is that when I change urls to
> > something like "bla-bla-bla" I also don't get any error messages. What
> > can be the root of the problem?
> >
> > --
> > Dmitry Kochelaev
> > _______________________________________________
> > Yale CAS mailing list
> > [email protected]
> > http://tp.its.yale.edu/mailman/listinfo/cas
> >
>
>
>
> --
> -Scott Battaglia
>
> LinkedIn: http://www.linkedin.com/in/scottbattaglia
> _______________________________________________
> Yale CAS mailing list
> [email protected]
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>


--
Dmitry Kochelaev
eVelopers Corporation
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas




--
-Scott Battaglia

LinkedIn: http://www.linkedin.com/in/scottbattaglia
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to