manifoldcf-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Theodor Carp (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CONNECTORS-1131) Ldap authentication for the administration console
Date Wed, 12 Jul 2017 12:25:00 GMT

    [ https://issues.apache.org/jira/browse/CONNECTORS-1131?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16083893#comment-16083893
] 

Theodor Carp commented on CONNECTORS-1131:
------------------------------------------

Hi,

Using the below settings:

  <property name="org.apache.manifoldcf.authimplementationclass" value="org.apache.manifoldcf.core.auth.LdapAuthenticator"
/>
  <property name="org.apache.manifoldcf.login.authenticationtype" value="LDAP-AUTHENTICATION"
/>
  <property name="org.apache.manifoldcf.login.ldap.providerurl" value="ldap://hdp01.local:389"
/>
  <property name="org.apache.manifoldcf.login.ldap.securityauthenticationtype" value="simple"
/>
  <property name="org.apache.manifoldcf.login.ldap.securityprincipal" value="uid=$(userID),ou=Users,dc=local"
/>
  <property name="org.apache.manifoldcf.login.ldap.contextsearchquery" value="(uid=$(userID))"
/>
  <property name="org.apache.manifoldcf.login.ldap.searchattribute" value="uid" />

I'm getting errors like: 

ERROR 2017-07-12 15:20:32,951 (qtp1295083508-17) - User not authenticated = authenticating_user
exception = [LDAP: error code 32 - No Such Object]
javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object]; remaining name
''
	at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3161)
	at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3082)
	at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2888)
[...]
FATAL 2017-07-12 15:20:32,956 (qtp1295083508-17) - Exception logging in: User not authenticated:
[LDAP: error code 32 - No Such Object]
org.apache.manifoldcf.core.interfaces.ManifoldCFException: User not authenticated: [LDAP:
error code 32 - No Such Object]
	at org.apache.manifoldcf.core.auth.LdapAuthenticator.verifyLogin(LdapAuthenticator.java:162)
	at org.apache.manifoldcf.core.auth.LdapAuthenticator.verifyUILogin(LdapAuthenticator.java:107)
	at org.apache.manifoldcf.ui.beans.AdminProfile.login(AdminProfile.java:103)
[...]
Caused by: javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object]; remaining
name ''
	at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3161)
	at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3082)
	at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2888)


But if do maual ldapsearch basicaly using the same settings: e.g.:

ldapsearch -x -W -H ldap://hdp01.local -b "dc=local" -s sub '(uid=authenticating_user)'

It basically works ok.

for reference i'm running manifold 2.7, on tomcat, using postgresql for database and zookeeper
as config repo and orchestrator.

Any ideas?

Best,
T

> Ldap authentication for the administration console
> --------------------------------------------------
>
>                 Key: CONNECTORS-1131
>                 URL: https://issues.apache.org/jira/browse/CONNECTORS-1131
>             Project: ManifoldCF
>          Issue Type: Wish
>            Reporter: colin
>            Assignee: Karl Wright
>             Fix For: ManifoldCF 2.2
>
>         Attachments: AdminProfile.java, LdapAuthenticator.java
>
>
> Hi Guys,
> Could more options be added for authenticating to the MCF administration ui?
> The username / password can be set in the properties.xml but it would make it easier
for enterprise integration if ldap was supported.
> Thanks,
> Colin



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message