Mailing-List: contact api-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: api@directory.apache.org
Received-SPF: pass (athena.apache.org: domain of ayyagarikiran@gmail.com
 designates 209.85.215.50 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:sender:in-reply-to:references:date
         :x-google-sender-auth:message-id:subject:from:to:content-type
         :content-transfer-encoding;
        b=q1bLpGCDVDxmI3AQoYAcc6Rn5vamZTfvAmUA4lH07J1TQ5Q5id85dd2KHA+wpn7zLS
         cbQ+veJ43m7u6kFSHSYUX3Yv1DV4XHdmi9TZVJ1cr00p4RWJPL5B9Kku1dhVdG1Fsn/7
         C1rQodqzNOzM+qJHQs8L18MYa7fVBileZVow4=
MIME-Version: 1.0
Sender: ayyagarikiran@gmail.com
In-Reply-To: 
 <97F4356AEA71904482CD192135C038F96A3BC61F0B@BANPMAILBOX01.citrite.net>
References: 
 <97F4356AEA71904482CD192135C038F96A3BC61F0B@BANPMAILBOX01.citrite.net>
Date: Mon, 6 Sep 2010 19:07:51 +0530
Message-ID: <AANLkTinMoRW_QqSFyWu_8h0keVxAvnAAKcLuG8y2uMvz@mail.gmail.com>
Subject: Re: Using LDAPConnection class...
From: Kiran Ayyagari <kayyagari@apache.org>
To: api@directory.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Mon, Sep 6, 2010 at 6:51 PM, Arvind N <Arvind.N@citrix.com> wrote:
> Hi,
> =A0 Just downloaded the ldap client api version 0.1 and wrote sample prog=
ram to
> connect to a Active Directory seem to hit a weird problem.
> The tutorial does not provide much info so thought of checking in the lis=
t.
> Do let me know if I have got the wrong list.
>
> The piece that is failing is
>
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0LdapConnection connection =
=3D new LdapConnection(svrIP, new Integer(svrPort));
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0BindRequest request =3D ne=
w BindRequest();
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0request.setCredentials(pas=
sword);
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0request.setName("cn=3DArvi=
nd N");
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0BindResponse resp =3D conn=
ection.bind(request);
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0LdapResult result =3D resp=
.getLdapResult();
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0System.out.println("the er=
ror message is " + result.getErrorMessage());
>
> For this I always get an error message
> ** the error message is 80090308: LdapErr: DSID-0C090334, comment: Accept=
SecurityContext error, data 525, vece **
> Googled quite a bit to not avail and to dig deeper hit ethereal.
> Noticed that in the LDAP protocol extract, the bind request had something=
 like this
> ....
> DN: cn=3DArvind N
> ..
>
> To cross verify if I had done anything wrong...
>
> I downloaded a java based LDAP browser JXplorer and provided the same inp=
ut of
> User DN of "Arvind N" and the same credentials and it logged in just fine
> In this login ethereal trace noticed the below difference... and this see=
ms to work always...
>
> ....
> DN: Arvind N
> .....
>
>
> Other then the above difference I did not notice any other difference in =
the LDAP packet
> between JXplorer(Which logged in just fine) and Apache LDAP Client API( f=
ailed to login)....
> Do let me know how can I make Apache LDAP client API to send DN: as plain=
 DN: Arvind N,
> which I think should make the thing work just fine...
client-api requires the user name in the form of a DN so 'Arvind N'
cannot be used as it is not a valid DN. JXplorer must be doing some
behind the scenes work to make it work with AD.


Kiran Ayyagari