Hi Jeff,
The stack trace suggests that your LDAP server may be using a
self-signed security certificate. As such, Java will not talk to it. The
resolution to this is to install a copy of the certificate locally, so
that it knows to trust it.
http://confluence.atlassian.com/display/CONFKB/Unable+to+Connect+to+SSL+
Services+due+to+PKIX+Path+Building+Failed+sun.security.provider.certpath
.SunCertPathBuilderException
<http://confluence.atlassian.com/display/CONFKB/Unable+to+Connect+to+SSL
+Services+due+to+PKIX+Path+Building+Failed+sun.security.provider.certpat
h.SunCertPathBuilderException> and
http://confluence.atlassian.com/display/DOC/Connect+to+LDAP,+JIRA+or+Oth
er+Services+Via+SSL
<http://confluence.atlassian.com/display/DOC/Connect+to+LDAP,+JIRA+or+Ot
her+Services+Via+SSL> seem to provide reasonable instructions as to how
this might be done.
Cheers,
Stuart Lewis
Digital Services Programmer
Te Tumu Herenga The University of Auckland Library
Auckland Mail Centre, Private Bag 92019, Auckland 1142, New Zealand
Ph: 64 9 373-7599 x81928
http://www.library.auckland.ac.nz <http://www.library.auckland.ac.nz/> /
From: Jeffrey Trimble [mailto:[email protected]]
Sent: Tuesday, 9 June 2009 4:34 a.m.
To: DSpace Tech
Subject: [Dspace-tech] LDAP install -- not working --OUCH
Okay, LDAP gives me the correct login screen. Now, we're running LDAP
with ssl. Is there something I'm missing
in my configurations? Do I need to have https or ssl running on the
tomcat server? They (our computer folks) did gave
me a certificate for the ldaps.
I have to admit, this is not anywhere near my forte of expertise.
Thanks in advance,
Jeff
2009-06-08 11:47:59,738 WARN org.dspace.authenticate.LDAPAuthentication
@
anonymous:session_id=58759540715B6215DFC3CBEF346A67F4:ip_addr=150.134.13
0.127:ldap_authentication:type=failed_auth
javax.naming.CommunicationException\colon; simple bind failed\colon;
edir01.cc.ysu.edu\colon;636 [Root exception is
javax.net.ssl.SSLHandshakeException\colon;
sun.security.validator.ValidatorException\colon; PKIX path building
failed\colon;
sun.security.provider.certpath.SunCertPathBuilderException\colon; unable
to find valid certification path to requested target]
2009-06-08 11:47:59,738 INFO
org.dspace.app.webui.servlet.PasswordServlet @
anonymous:session_id=58759540715B6215DFC3CBEF346A67F4:ip_addr=150.134.13
0.127:failed_login:[email protected], result=5
2009-06-08 11:48:11,186 INFO org.dspace.authenticate.LDAPAuthentication
@
anonymous:session_id=58759540715B6215DFC3CBEF346A67F4:ip_addr=150.134.13
0.127:auth:attempting trivial auth of [email protected]
2009-06-08 11:48:11,202 WARN org.dspace.authenticate.LDAPAuthentication
@
anonymous:session_id=58759540715B6215DFC3CBEF346A67F4:ip_addr=150.134.13
0.127:ldap_authentication:type=failed_auth
javax.naming.CommunicationException\colon; simple
bind failed\colon; edir01.cc.ysu.edu\colon;636 [Root exception is
javax.net.ssl.SSLHandshakeException\colon;
sun.security.validator.ValidatorException\colon; PKIX path building
failed\colon; sun.security.provider.certpath.SunCertPathBuilder
Exception\colon; unable to find valid certification path to requested
target]
2009-06-08 11:48:11,203 INFO
org.dspace.app.webui.servlet.PasswordServlet @ ano
nymous:session_id=58759540715B6215DFC3CBEF346A67F4:ip_addr=150.134.130.1
27:failed_login:[email protected], result=5
2009-06-08 11:48:28,102 ERROR
org.apache.catalina.core.ContainerBase.[Catalina].[localhost].[/jspui].[
register] @ Servlet.service() for servlet register threw exception
java.lang.IllegalStateException: Cannot forward after response has been
committed
at
org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDisp
atcher.java:313)
at
org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispat
cher.java:301)
at
org.dspace.app.webui.util.JSPManager.showJSP(JSPManager.java:91)
at
org.dspace.app.webui.servlet.RegisterServlet.doDSGet(RegisterServlet.jav
a:131)
at
org.dspace.app.webui.servlet.DSpaceServlet.processRequest(DSpaceServlet.
java:151)
at
org.dspace.app.webui.servlet.DSpaceServlet.doGet(DSpaceServlet.java:99)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:689)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:252)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:173)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValv
e.java:213)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValv
e.java:178)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java
:126)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java
:105)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.
java:107)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:1
48)
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:86
9)
at
org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.proc
essConnection(Http11BaseProtocol.java:664)
at
org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint
.java:527)
at
org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollow
erWorkerThread.java:80
at
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool
.java:684)
at java.lang.Thread.run(Thread.java:619)
2009-06-08 11:48:46,389 INFO org.dspace.authenticate.LDAPAuthentication
@
anonymous:session_id=58759540715B6215DFC3CBEF346A67F4:ip_addr=150.134.13
0.127:auth:attempting trivial auth of user=jatrimble
2009-06-08 11:48:46,400 WARN org.dspace.authenticate.LDAPAuthentication
@
anonymous:session_id=58759540715B6215DFC3CBEF346A67F4:ip_addr=150.134.13
0.127:ldap_authentication:type=failed_auth
javax.naming.CommunicationException\colon; simple bind failed\colon;
edir01.cc.ysu.edu\colon;636 [Root exception is
javax.net.ssl.SSLHandshakeException\colon;
sun.security.validator.ValidatorException\colon; PKIX path building
failed\colon;
sun.security.provider.certpath.SunCertPathBuilderException\colon; unable
to find valid certification path to requested target]
2009-06-08 11:48:46,400 INFO org.dspace.app.webui.servlet.LDAPServlet @
anonymous:session_id=58759540715B6215DFC3CBEF346A67F4:ip_addr=150.134.13
0.127:failed_login:netid=jatrimble, result=5
Jeffrey Trimble
System LIbrarian
William F. Maag Library
Youngstown State University
330.941.2483 (Office)
[email protected]
http://www.maag.ysu.edu
http://digital.maag.ysu.edu
------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
DSpace-tech mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-tech
