On Tue, Aug 31, 2021 at 06:58:24AM -0700, Juan López wrote: > I'm trying to set my LDAP authentication, I've already followed what the > documentation says here: > https://wiki.lyrasis.org/display/DSDOC7x/Authentication+Plugins#AuthenticationPlugins-LDAPAuthentication > But, now when I try to log in with my institutional user, Dspace throws > this error: > > > 2021-08-24 09:29:15,622 INFO org.dspace.authenticate.LDAPAuthentication @ > anonymous::auth:attempting trivial auth of user=juanfelipe.lopezf > 2021-08-24 09:29:15,626 WARN org.dspace.authenticate.LDAPAuthentication @ > anonymous::ldap_authentication:type=failed_auth > javax.naming.AuthenticationException\colon; [LDAP\colon; error code 49 - > 80090308\colon; LdapErr\colon; DSID-0C090439, comment\colon; > AcceptSecurityContext error, data 52e, v4563] 2021-08-24 09:29:15,626 INFO > org.dspace.authenticate.LDAPAuthentication @ anonymous::failed_login:no DN > found for user juanfelipe.lopezf 2021-08-24 09:29:15,626 INFO
Within the LDAP context that you specified as the value of
authentication-ldap.object_context, there is no object which has
"juanfelipe.lopezf" as a value of the attribute named by the value you
have set on "authentication-ldap.id_field".
We don't use LDAP here but, if we did, I would check that the value of
authentication-ldap.id_field is the name of the attribute which holds
the user object's name ("uid", "cname", or whatever you use at your
site). I would check that authentication-ldap.object_context names
the context in which the juanfelipe.lopezf object is defined. I would
check that any commas in these values are escaped as shown in the page
that you mentioned above.
If that is all correct, you might post the complete content of your
'config/modules/authentication-ldap.cfg' (with any passwords removed)
and a complete sample user object from your LDAP directory, such as
may be produced using 'ldapsearch'.
The information at
https://wiki.lyrasis.org/display/DSDOC7x/Authentication+Plugins#AuthenticationPlugins-DebuggingLDAPconnectionandconfiguration
may be helpful.
--
Mark H. Wood
Lead Technology Analyst
University Library
Indiana University - Purdue University Indianapolis
755 W. Michigan Street
Indianapolis, IN 46202
317-274-0749
www.ulib.iupui.edu
--
All messages to this mailing list should adhere to the Code of Conduct:
https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx
---
You received this message because you are subscribed to the Google Groups
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/dspace-tech/YS5HxGaSRiicpZKM%40IUPUI.Edu.
signature.asc
Description: PGP signature
