Ubuntu, Tomcat5.5 Cas & LDAPs

[Martin Lamprechter]

Hi,

I use Tomcat5.5 and Cas (3.2.1) on Ubuntu (7.10). Works fine - but not
with ldap :-/

I followed this Guide: http://www.ja-sig.org/wiki/display/CASUM/LDAP,
but cas didn't start.

Catalina-Error-Log says:
Caused by: java.security.AccessControlException: access denied
(java.io.FilePermission /tmp/cas.log write)

Well, when I change TOMCAT5_SECURITY from "yes" to "no", cas starts and
writes the log! But i can't authenticate against the ldap.
The Log shows:
2008-05-08 09:16:22,925 ERROR
[org.apache.catalina.core.ContainerBase.[Catalina]
.[localhost].[/cas].[cas]] - Servlet.service() for servlet cas threw
exception
javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308:
LdapErr:
DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece^@]
       at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3005)
       at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2951)
       at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2753)
       at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2667)
       at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:287)
       at
com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)
       at
com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193
)

Any idea?
_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

[Li Wei Nan]

http://www.websina.com/bugzero/faq/ldap-error-code-49.html

This error is caused by the wrong setting of
   java.naming.security.principal.

   A full DN must be used here, something like:

   CN=FName LName,OU=OrgUnit_the_user_stored_in,DC=Domain_name,DC=Domain_suffix

- Li Wei Nan

Le 2008-5-8 à 下午5:42, Martin Lamprechter a écrit :

error code 49 - 80090308:

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

[Martin Lamprechter]

 > http://www.websina.com/bugzero/faq/ldap-error-code-49.html
 > This error is caused by the wrong setting of
 >     java.naming.security.principal.
 >
 >     A full DN must be used here, something like:
 >
 >     CN=FName
 > LName,OU=OrgUnit_the_user_stored_in,DC=Domain_name,DC=Domain_suffix
 >
 > - Li Wei Nan

Thanks a lot!

I was wrong with the LDAP - i followed this Guide:
http://www.ja-sig.org/wiki/display/CASUM/Active+Directory
and everything works fine ;-)!

 >
 >
 >
 >
 > Le 2008-5-8 à  ä¸‹åˆ5:42, Martin Lamprechter a écrit :
 >
 >> error code 49 - 80090308:
 >
 > _______________________________________________
 > Yale CAS mailing list
 > cas@...
 > http://tp.its.yale.edu/mailman/listinfo/cas
 >

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas