java - Grails, Spring Security LDAP Plugin -
i'm trying ldap plugin work. want ldap authentication against active directory seems i'm missing something.
config
grails { plugins { springsecurity { userlookup.userdomainclassname = 'de.ac.dmf.security.user' userlookup.authorityjoinclassname = 'de.ac.dmf.security.userrole' authority.classname = 'de.ac.dmf.security.role' ldap { context.managerdn = 'cn=dmf systemuser,cn=users,dc=dmf,dc=local' context.managerpassword = 'password1' context.server = 'ldap://192.168.100.133:389/' authorities{ groupsearchbase ='ou=groups' groupsearchfilter = '(member={0})' retrievegrouproles = false retrievedatabaseroles = false defaultrole = 'user' ignorepartialresultexception = true } search{ base = 'cn=users,dc=dmf,dc=local' filter = '(samaccountname={0})' searchsubtree = true } // mapper.userdetailsclass = 'user' // auth.hideusernotfoundexceptions = false userememberme = false } } } }
on every login exception
2011-04-29 08:49:09,129 [http-8080-1] debug springsecurity.requestholderauthenticationfilter - authentication request failed: org.springframework.security.authentication.authenticationserviceexception: [ldap: error code 32 - 0000208d: nameerr: dsid-031001e4, problem 2001 (no_object), data 0, best match of: 'cn=users,dc=dmf,dc=local'; remaining name 'cn=users,dc=dmf,dc=local'
it doesn't matter user ad i'm trying authenticate. configuration wrong?
i'm using
- grails 1.3.7
- spring-security-core 1.1.2
- spring-security-ldap 1.04
are sure base configuration? looks ou=users
work instead of cn=users
. easiest way figure out use tool ad explorer (http://technet.microsoft.com/de-de/sysinternals/bb963907), connect ad, browse user , take @ path user...
Comments
Post a Comment