LDAP Programming
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me

The Shed is going Social! Join us on FaceBook and Twitter and chime in on the conversation.

Go Back   Dev Shed Forums > Databases > LDAP Programming
Reload this Page

LDAP for Active Directory


Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
« Previous Thread | Next Thread »  
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old April 3rd, 2007, 08:56 PM
stanley1610's Avatar
stanley1610 stanley1610 is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Nov 2002
Posts: 410 stanley1610 User rank is Sergeant (500 - 2000 Reputation Level)stanley1610 User rank is Sergeant (500 - 2000 Reputation Level)stanley1610 User rank is Sergeant (500 - 2000 Reputation Level)stanley1610 User rank is Sergeant (500 - 2000 Reputation Level)stanley1610 User rank is Sergeant (500 - 2000 Reputation Level) 
Time spent in forums: 1 Day 15 h 56 m 23 sec
Reputation Power: 18
LDAP for Active Directory
I have a program using Active Directory (Windows 2003 R1) via LDAP. All worked well.

However, when I installed one more Domain Controller (Win 2003 R2) and it is turned off for spare, the program can work sometimes but fails sometimes else.

The program is just configured to the original server only. What is wrong with more than one Domain Controllers?
__________________
------------------------------------------
Perl Kids Kiss Perl
Stanley
------------------------------------------
Reply With Quote
  #2  
Old May 29th, 2007, 08:39 PM
stanley1610's Avatar
stanley1610 stanley1610 is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Nov 2002
Posts: 410 stanley1610 User rank is Sergeant (500 - 2000 Reputation Level)stanley1610 User rank is Sergeant (500 - 2000 Reputation Level)stanley1610 User rank is Sergeant (500 - 2000 Reputation Level)stanley1610 User rank is Sergeant (500 - 2000 Reputation Level)stanley1610 User rank is Sergeant (500 - 2000 Reputation Level) 
Time spent in forums: 1 Day 15 h 56 m 23 sec
Reputation Power: 18
After checking, the following error occurs:
Code:
2007-05-14 10:28:40,541 DEBUG [org.acegisecurity.ui.webapp.AuthenticationProcessingFilter] - Authentication request failed: org.acegisecurity.AuthenticationServiceException: LdapCallback;null; nested exception is javax.naming.PartialResultException [Root exception is javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 531, vece ]]; nested exception is org.acegisecurity.ldap.LdapDataAccessException: LdapCallback;null; nested exception is javax.naming.PartialResultException [Root exception is javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 531, vece ]]


What does the error mean? How can I solve it?
Reply With Quote
  #3  
Old May 29th, 2007, 09:22 PM
Viper_SB's Avatar
Viper_SB Viper_SB is offline
Psycho Canadian
Dev Shed Demi-God (4500 - 4999 posts)
  
Join Date: Jan 2001
Location: Canada
Posts: 4,845 Viper_SB User rank is Brigadier General (60000 - 70000 Reputation Level)Viper_SB User rank is Brigadier General (60000 - 70000 Reputation Level)Viper_SB User rank is Brigadier General (60000 - 70000 Reputation Level)Viper_SB User rank is Brigadier General (60000 - 70000 Reputation Level)Viper_SB User rank is Brigadier General (60000 - 70000 Reputation Level)Viper_SB User rank is Brigadier General (60000 - 70000 Reputation Level)Viper_SB User rank is Brigadier General (60000 - 70000 Reputation Level)Viper_SB User rank is Brigadier General (60000 - 70000 Reputation Level)Viper_SB User rank is Brigadier General (60000 - 70000 Reputation Level)Viper_SB User rank is Brigadier General (60000 - 70000 Reputation Level)Viper_SB User rank is Brigadier General (60000 - 70000 Reputation Level)Viper_SB User rank is Brigadier General (60000 - 70000 Reputation Level)Viper_SB User rank is Brigadier General (60000 - 70000 Reputation Level) 
Time spent in forums: 1 Month 1 Day 20 h 16 m 27 sec
Reputation Power: 634
maybe a bug in it? I'm not sure about multiple domain controllers I only use it with one afaik
Reply With Quote
  #4  
Old July 3rd, 2008, 10:54 PM
hieuletrung hieuletrung is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Jul 2008
Posts: 2 hieuletrung User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 3 m 46 sec
Reputation Power: 0
This is the error


80090308: LdapErr: DSID-0C09030B, comment: AcceptSecurityContext error, data 531, v893
HEX: 0×531 - not permitted to logon from this workstation
DEC: 1329 - ERROR_INVALID_WORKSTATION (Logon failure: user not allowed to log on to this computer.)
LDAP[userWorkstations: <multivalued list of workstation names>]
NOTE: Returns only when presented with valid username and password/credential.
Reply With Quote
  #5  
Old November 16th, 2008, 06:42 AM
hieuletrung hieuletrung is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Jul 2008
Posts: 2 hieuletrung User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 3 m 46 sec
Reputation Power: 0
That is because of the account you are using to login is set to allow login to some specific workstation only
Reply With Quote
  #6  
Old June 13th, 2009, 08:27 AM
stanley1610's Avatar
stanley1610 stanley1610 is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Nov 2002
Posts: 410 stanley1610 User rank is Sergeant (500 - 2000 Reputation Level)stanley1610 User rank is Sergeant (500 - 2000 Reputation Level)stanley1610 User rank is Sergeant (500 - 2000 Reputation Level)stanley1610 User rank is Sergeant (500 - 2000 Reputation Level)stanley1610 User rank is Sergeant (500 - 2000 Reputation Level) 
Time spent in forums: 1 Day 15 h 56 m 23 sec
Reputation Power: 18
This post has been posted for quite a long time and I investigated it for quite a long time.

Finally I found out the solution.

I found that the server got AD authentication failure if the server runs as Local Administrator while the authentication successes if the server runs as Domain Users.

I don't know whether it is Acegi Security issue or Active Directory issue. The above can solve anyway.
Reply With Quote
  #7  
Old July 3rd, 2009, 06:30 AM
fridaylight fridaylight is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Jul 2009
Posts: 1 fridaylight User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 1 h 6 m 13 sec
Reputation Power: 0
Excel to Active Directory
Hi all,
is there any possibility to connect Excel to AD through LDAP by using java code? The point is, to use excel as a user interface to reach Active Directory (to write and to read).
many thanks
/fridaylight
Reply With Quote
  #8  
Old September 27th, 2010, 01:08 PM
MStewart78 MStewart78 is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Sep 2010
Posts: 1 MStewart78 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 29 m 9 sec
Reputation Power: 0
stanley1610,

I think I am facing the same problem you were. We are using Acegi Security, and when we use a ManagerDN to log into LDAP that is tied down to specific workstation (including the web server), the authentication fails. If we remove the workstation restriction, everything works fine.

We are running on Apache Tomcat, and after reading your last post, I tried setting the Log In for the apache service to a domain user rather than the Local machine. It is still not authenticating for me. Is that all that you did, or is there something that I am missing?

Thanks!
Reply With Quote
Reply

Viewing: Dev Shed Forums > Databases > LDAP Programming > LDAP for Active Directory

« Previous Thread | Next Thread »

Developer Shed Advertisers and Affiliates



Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Linear Mode Linear Mode
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 


Powered by: vBulletin Version 3.0.5
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.

© 2003-2013 by Developer Shed. All rights reserved. DS Cluster - Follow our Sitemap