Error in LDAP as Authentication

[Former Member]

Hi Experts ,

I have set up LDAP as a authentication source for our CUP . But when I try to logon with my network id & password I receive error "User credentials not valid."

Also one more issue is the Userid field doesn't allow to enter more than 15 characters ..

I tried : Test Connection: from connectore & it's working fine.

Request your expert help. The error log is atatched below.

Thanks ,

Shailesh

-

---

2009-01-22 15:50:18,930 [SAPEngine_Application_Thread[impl:3]_30] ERROR Failed to log in abc.xyz

com.virsa.ae.service.umi.AuthenticationFailureException: : [LDAP: error code 34 - 0000208F: NameErr: DSID-031001BA, problem 2006 (BAD_NAME), data 8350, best match of:

'DC=dc=ds,DC=dev,DC=ancxyz,'

]

at com.virsa.ae.service.umi.ldap.LDAPAuthenticator.authenticate(LDAPAuthenticator.java:318)

at com.virsa.ae.actions.LoginAction.requestorLoginHandler(LoginAction.java:868)

at com.virsa.ae.actions.LoginAction.execute(LoginAction.java:87)

at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:256)

at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:424)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:390)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)

at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)

at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)

at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)

at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)

at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)

at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)

at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)

at java.security.AccessController.doPrivileged(Native Method)

at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)

at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)

[Former Member]

Hi Shailesh,

All the suggestions made by Ashok are very important. Are you sure everything is good with user path and group path fields?

Is every filed configured correctly in LDAP mapping? Does login name contain '.' in the name as I see 'abc.xyz' in the error log?

What kind of LDAP are you using?

Regards,

Alpesh

[Former Member]

Yes i did check the configuration & filed mappping they seem to be ok.

Yes the userid;s have a format like with a dot in between e,g shailesh.deshpande..Does it have any impact ?

We are on AC-CUP 5.3_00.0 .

[Former Member]

Hi Shailesh-

check following fields in ldap connection (all fields are case-sensitive)

The error seems to be coming from

-check Domain filed

-check User principal Name field

-check User Path field

-check Group Path field

and finally restart J2EE.

close all other browser sessions.

make sure you are using correct network id and password

give it a try and see

thanks,

Ashok

[Former Member]

Thanks Ashok,

I have tried restart but it doesn't help.

I am now looking for entries you mentioned to check if they are correct.

Also any idea about whythe Userid field doesn't allow to enter more than 15 characters

Regards,

Shailesh

[Former Member]

Shailesh-

Did the issue resolve?

Also any idea about whythe Userid field doesn't allow to enter more than 15 characters

I suspect if you are on AE 5.2 SP9 or less.

Heard SAP saying- 15 character limit on the login id field will be waved off in 5.2 SP11 onwards. Check for SP11 and apply.

Thanks,

Ashok