java - Grails, Spring Security LDAP Plugin -


i'm trying ldap plugin work. want ldap authentication against active directory seems i'm missing something.

config

grails {     plugins {         springsecurity {               userlookup.userdomainclassname = 'de.ac.dmf.security.user'             userlookup.authorityjoinclassname = 'de.ac.dmf.security.userrole'             authority.classname = 'de.ac.dmf.security.role'              ldap {                 context.managerdn = 'cn=dmf systemuser,cn=users,dc=dmf,dc=local'                 context.managerpassword = 'password1'                 context.server = 'ldap://192.168.100.133:389/'                 authorities{                     groupsearchbase ='ou=groups'                     groupsearchfilter = '(member={0})'                     retrievegrouproles = false                     retrievedatabaseroles = false                     defaultrole = 'user'                     ignorepartialresultexception = true                 }                 search{                     base = 'cn=users,dc=dmf,dc=local'                     filter = '(samaccountname={0})'                     searchsubtree = true                  }                 // mapper.userdetailsclass = 'user'                 // auth.hideusernotfoundexceptions = false                 userememberme = false             }         }     } } 

on every login exception

2011-04-29 08:49:09,129 [http-8080-1] debug springsecurity.requestholderauthenticationfilter  - authentication request failed: org.springframework.security.authentication.authenticationserviceexception: [ldap: error code 32 - 0000208d: nameerr: dsid-031001e4, problem 2001 (no_object), data 0, best match of:     'cn=users,dc=dmf,dc=local'; remaining name 'cn=users,dc=dmf,dc=local' 

it doesn't matter user ad i'm trying authenticate. configuration wrong?

i'm using

  • grails 1.3.7
  • spring-security-core 1.1.2
  • spring-security-ldap 1.04

are sure base configuration? looks ou=users work instead of cn=users. easiest way figure out use tool ad explorer (http://technet.microsoft.com/de-de/sysinternals/bb963907), connect ad, browse user , take @ path user...


Comments

Popular posts from this blog

objective c - Change font of selected text in UITextView -

php - Accessing POST data in Facebook cavas app -

c# - Getting control value when switching a view as part of a multiview -