My previous red5 log wasn't "debug". I'm attaching the red5-debug.sh output now, although I don't see much difference as far as ldap is concerned.

The debug log is interresting: it shows that the error certainly lies in the getUidCnHashMap method in LdapAuthBase.java

Sebastian, I think this is a bug. In line 234:
Attribute attrib = attributes.get("uid");
==> This means that for openldap we suppose that the user has a uid attribute containing the user login (which is often the case for openldap). Here we have an AD directory (and it's also working like openLDAP with a search and bind process as Vieri showed with his other application tcpdump capture) but in this case we should not try to find the userlogin in the 'uid' attribute, but with the attribute defined in configuration ( field_user_principal=samAccountName here).

What do you think Sebastian ?

Thibault


Reply via email to