topic Re: LDAP: error code 49 in Application Development and Automation Discussions

LDAP: error code 49

Former Member — Tue, 07 Aug 2007 15:06:56 GMT

Hi,

I am testing a single sign-on with spnego configuration. When I run diagtool spnego.conf, I always get this error.

Error connecting to the LDAP server

[EXCEPTION]

javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 52e, vece�]

at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:2988)

at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2934)

at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2735)

at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2649)

at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:290)

at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)

at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193)

at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:136)

at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:66)

at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:662)

at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:243)

at javax.naming.InitialContext.init(InitialContext.java:219)

at javax.naming.InitialContext.<init>(InitialContext.java:195)

at javax.naming.directory.InitialDirContext.<init>(InitialDirContext.java:80)

at com.sap.engine.config.diagtool.lib.ldap.LDAPServer.connect(LDAPServer.java:99)

at com.sap.engine.config.diagtool.tests.authentication.krb.MSActiveDirectoryKrbTest.checkServiceUser(MSActiveDirectoryKrbTest.java:153)

at com.sap.engine.config.diagtool.tests.authentication.krb.MSActiveDirectoryKrbTest.execute(MSActiveDirectoryKrbTest.java:127)

at com.sap.engine.config.diagtool.Task.execute(Task.java:55)

at com.sap.engine.config.diagtool.Launcher.run(Launcher.java:343)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at java.lang.reflect.Method.invoke(Method.java:324)

at com.sap.engine.config.diagtool.Launcher.main(Launcher.java:394)

Please help me to figure out what's wrong, and I would greatly appreciate that.

Regards,

-Napadol

Re: LDAP: error code 49

Former Member — Wed, 08 Aug 2007 15:14:00 GMT

Hello Napadol,

Most likely your Domain Name, User Name or Password is wrongly configured. Check the following URL for more details that might help: http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_19576&sliceId=1

Best Regards, Dylan

Re: LDAP: error code 49

Former Member — Wed, 08 Aug 2007 19:48:02 GMT

Hi Dylan,

Thank you for your response.

Re: LDAP: error code 49

Former Member — Thu, 09 Aug 2007 13:12:54 GMT

Hi Napadol,

Did you fix your problem as I have the exact same problem. Any help will be greatly appreciated.

Regards

Brian

Re: LDAP: error code 49

Former Member — Thu, 09 Aug 2007 13:30:32 GMT

Hi Brian,

I haven't fixed my problem yet. Some people got this problem fixed by changing the KPN to the real FQDN, but it didn't work for me.

Regards,

-Napadol

Re: LDAP: error code 49

Former Member — Fri, 10 Aug 2007 14:13:56 GMT

Napadol,

What version of Sun JDK are you using?

Regards

Brian

Re: LDAP: error code 49

Former Member — Fri, 10 Aug 2007 16:29:09 GMT

Hello,

You have implemented a trusted domain tree configured with a cross-referrals in order to forward the DNs to another LDAP within the domain. Most probably you login onto an LDAP server that forwards the search request (aka the logon request). As the LDAP connection is not configured against referrals, the authentication to LDAP fails.

for more details, see http://support.microsoft.com/kb/241737

This is a known issue on the DiagTool that the SAP NW Security Developers currently investigate.

Please use the WebDiagtool for root cause analysis. It provides the same functionality. If you'd like to collect the user data from the LDAP server (as the DiagTool does it automatically), please use ldifde command directly on the MS host.

Cheers,

Tsvetomir

Re: LDAP: error code 49

Former Member — Sat, 11 Aug 2007 03:03:19 GMT

Hi Brian,

My JDK version is 1.4.2_13. Did you fix the problem?

Regards,

-Napadol

Re: LDAP: error code 49

Former Member — Sat, 11 Aug 2007 03:12:47 GMT

Hi Tsvetomir,

Thank you for the info. I will try it.

Regards,

-Napadol