Authentication Error
I have my LDAP configured, but when users attempt to login, we see this error (on the Tomcat window):
Jul 2, 2010 1:23:10 PM org.apache.catalina.realm.JNDIRealm authenticate
SEVERE: Exception performing authentication
javax.naming.CommunicationException: intel.com:389
Any idea what the above means? I have my ldap registry configured to corp.intel.com and using port 3268, but for some reason, it looks like it's trying intel.com:389. How is that configured or possible?
Jul 2, 2010 1:23:10 PM org.apache.catalina.realm.JNDIRealm authenticate
SEVERE: Exception performing authentication
javax.naming.CommunicationException: intel.com:389
Any idea what the above means? I have my ldap registry configured to corp.intel.com and using port 3268, but for some reason, it looks like it's trying intel.com:389. How is that configured or possible?
One answer
I know this is a quite old question, but I want to leave this for future references.
I faced a few days ago exactly the same problem and it was a headache. I could fix it by adding the adCompat="true" property and changing the port from :389 to :3268 in the server.xml:
...
<Realm className="org.apache.catalina.realm.JNDIRealm"
connectionName="<user>"
connectionPassword="<password>"
adCompat="true"
connectionURL="ldap://<server>:3268"
alternateURL="ldap://<server>:3268"
referrals="follow"
roleBase="<your value>"
roleName="cn"
roleSearch="(members={0})"
roleSubtree="true"
userBase="<your value>"
userSearch="(something={0})"
userSubtree="true"/>
...
I faced a few days ago exactly the same problem and it was a headache. I could fix it by adding the adCompat="true" property and changing the port from :389 to :3268 in the server.xml:
...
<Realm className="org.apache.catalina.realm.JNDIRealm"
connectionName="<user>"
connectionPassword="<password>"
adCompat="true"
connectionURL="ldap://<server>:3268"
alternateURL="ldap://<server>:3268"
referrals="follow"
roleBase="<your value>"
roleName="cn"
roleSearch="(members={0})"
roleSubtree="true"
userBase="<your value>"
userSearch="(something={0})"
userSubtree="true"/>
...