Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Received-SPF: neutral (athena.apache.org: local policy)
DomainKey-Signature: a=rsa-sha256; s=domk; d=labeo.de; c=nofws; q=dns;
	h=X-RZG-AUTH:X-RZG-CLASS-ID:Date:From:MIME-Version:To:Subject:
	References:In-Reply-To:Content-Type:Content-Transfer-Encoding;
	b=Fd1FdFOKnObFUyMa2gUbDWydvbJG/dcnW+KYwgeb5p0gHBoca025KZoyCCTWKL5tb+0
	l+iisnHlcgKFmXejIeNKUGHe0ZdZ+WYenDMAWiYA25ztYB2fltupRzr5VRfnbCGcNGpAV
	SZvKTMD4w7hKjdcbvnzc93ZmBuFck4W61FE=
Message-ID: <499C1328.9070201@labeo.de>
Date: Wed, 18 Feb 2009 14:54:48 +0100
From: Stefan Zoerner <stefan@labeo.de>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: Apache Directory Developers List <dev@directory.apache.org>
Subject: Re: ApacheDs - DIGEST-MD5
References: <22076098.post@talk.nabble.com> <22076693.post@talk.nabble.com>
 <22077027.post@talk.nabble.com> <499C0093.9020806@labeo.de>
 <22078860.post@talk.nabble.com>
In-Reply-To: <22078860.post@talk.nabble.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Nowhere wrote:
> thanks for you interesting...
> I can't say what is my command line...I don't understand what you mean,
> sorry :(
> Perhaps you mean java command line? I use: java AdvancedBindDemo fullname
> inClearText where fullname exists on my server. If I change my code from:

> 
> ---> // Step 3: Bind with found DN and given password
>             ctx.addToEnvironment(Context.SECURITY_PRINCIPAL, dn);
>             ctx.addToEnvironment(Context.SECURITY_CREDENTIALS, password);
>             // Perform a lookup in order to force a bind operation with JNDI
>             ctx.lookup(dn); <------
> 
> TO:
> 
> ---> // Step 3: Bind with found DN and given password
>             ctx.addToEnvironment(Context.SECURITY_PRINCIPAL, "fullname");
>             ctx.addToEnvironment(Context.SECURITY_CREDENTIALS, password);
>             // Perform a lookup in order to force a bind operation with JNDI
>             ctx.lookup(dn); <---
> 
> Where I force cn I wish to use (and replace full dn) it works fine. With dn
> I get the exception I said in previous post.

Yes, thanks that was what I meant. I see much clearer now.

> Anyway I can tell you it works for several users, yes... my problem is
> getting it working with full dn and not only uid or cn...Sorry if I can't
> explain it in a better way.
> Thanks...any else question or help will be appreciated,

Is the value of the fullname and the uid attribute of your users the 
same? I would it expect that it works with uid only; the CN is not 
necessarily unique.

Why do you want to perform a search and use the DN, if you can use the 
unique uis immediatly? Do you plan to use another attribute for logon 
(like mail)?

Greetings from Hamburg,
     Stefan