Mailing-List: contact api-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: api@directory.apache.org
Subject: Re: Ldap Bind gives AccessSecurityContext error, data 20ee
To: api@directory.apache.org
References: <70b952e3d06e4e0087189e7665dd727e@MBX01C-ORD1.mex08.mlsrvr.com>
From: =?UTF-8?Q?Emmanuel_L=c3=a9charny?= <elecharny@gmail.com>
Message-ID: <56278326.1040700@gmail.com>
Date: Wed, 21 Oct 2015 14:20:54 +0200
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:38.0)
 Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <70b952e3d06e4e0087189e7665dd727e@MBX01C-ORD1.mex08.mlsrvr.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Le 20/10/15 23:32, Jayant Pandit a =C3=A9crit :
> Hello,
>
> I am just starting on an app to read users list from LDAP. I am trying =
the LDAP API for this. Domain controller is running windows 2012 R2 serve=
r. I could do it in .net but I prefer to do it in Java as the final produ=
ct will be a web-app. I am trying just a simple bind and it keeps giving =
this exception. The statement giving exception is very simple -
>
> conn.bind("....user dn....","..password..");
>
> The user DN is correct. I found it from the dsquery for the user. If I =
run it on a computer outside the domain, not even connected, I get events=
 2536 and 2537 on the ldap service at times. I have been trying various t=
hings like changing service users etc. so I couldn't keep track of exactl=
y when I get 2536 and when 2537. If I run the program on the domain contr=
oller itself I get same error but no offending events. Rather confusing. =
There are no other objectionable events in the service event log.

Can you try using Directory Studio to bind using this user and creds, to
see what's wrong ?

Otherwise, I have no idea what those 2536/2537 events can be. If you
have more information about what they mean, that would be appreciated.
Same for the errors you get on the domain controller : what are they ?