Hi Konrad,

I'm sorry but Wireshark was my last piece of advice. Some checks to defeat
this issue :
- could you try to switch to a dummy password  ?
- could you confirm the JDK/JRE version ?
- could you confirm that Wireshark is showing a password based
authentication for both LSC and LDAP browser connection (and not
SSPI/Kerberos) on the same LDAP server host and port ?
- could you check the connection LDAP extended controls that are used by
both tools (LSC and LDAP brower) ?

Regards,

Sebastien BAHLOUL
IAM / Security specialist
Ldap Synchronization Connector : http://lsc-project.org
Blog : http://sbahloul.wordpress.com/


2013/5/22 Eichstädt, Konrad <[email protected]>

>  Hi Sebastian, ****
>
> ** **
>
> we tried many things including the monitoring using Whireshark but we have
> no clue what the root cause of the error is. Do you have any idea what we
> can try to find the problem? ****
>
> ** **
>
> Many Thanks, ****
>
> ** **
>
> Best regards ****
>
> ** **
>
> Konrad ****
>
> ** **
>
> Konrad Eichstädt****
>
> Staatsbibliothek zu Berlin****
>
> Preußischer Kulturbesitz****
>
> Potsdamer Str. 33
> 10785 Berlin****
>
> Informations- und Datenmanagement****
>
> IDM II elektronische Ressourcen****
>
> Tel: +49 030 266 432222****
>
> ** **
>
> *Von:* Sébastien Bahloul [mailto:[email protected]]
> *Gesendet:* Mittwoch, 22. Mai 2013 08:29
> *An:* Eichstädt, Konrad
> *Cc:* Clément Oudot; lsc-users
> *Betreff:* Re: AW: [lsc-users] LSC Error connecting AD****
>
> ** **
>
> Hi Konrad,****
>
> Any XML entity should be escaped accordingly but your password (as shown
> in your LSC.XML file) doesn't contain any of them.****
>
> Regards,****
>
> Le 22 mai 2013 07:30, "Eichstädt, Konrad" <
> [email protected]> a écrit :****
>
> Good Morning Clement,
>
> I tried using the FQDN but still we get the same result. Is there any
> possibility to get more debug information which part of the LDAP
> authentication failed?
>
> Many Thanks,
>
> Best regards
>
> Konrad
>
> Konrad Eichstädt
> Staatsbibliothek zu Berlin
> Preußischer Kulturbesitz
> Potsdamer Str. 33
> 10785 Berlin
> Informations- und Datenmanagement
> IDM II elektronische Ressourcen
> Tel: +49 030 266 432222
>
> -----Ursprüngliche Nachricht-----
> Von: Clément OUDOT [mailto:[email protected]]
> Gesendet: Dienstag, 21. Mai 2013 16:42
> An: Eichstädt, Konrad
> Cc: Sébastien Bahloul; [email protected]
> Betreff: Re: [lsc-users] LSC Error connecting AD
>
> 2013/5/21 Eichstädt, Konrad <[email protected]>:
> > Hi Sebastian,
> >
> >
> >
> > we did this already using the LDAP Browser successfully. We used the
> > same credentials and with the LDAP Browser we got a connection.
> >
>
> Try to use a full DN to bind to Active Directory.
>
> Clément.****
>
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-users

Reply via email to