java - Cas Ldap认证失败: attributes are empty-6ren

java - Cas Ldap认证失败: attributes are empty

转载作者：太空宇宙更新时间：2023-11-04 14:14:19

我正在尝试使用 LDAP 连接对 cas 上的用户进行身份验证。LDAP 说可以，但他没有向我发送属性...

这是交易:

2015-01-14 10:52:34,353 DEBUG [org.jasig.cas.authentication.LdapAuthenticationHandler] - <Attempting LDAP authentication for ffischer+password>
2015-01-14 10:52:34,354 DEBUG [org.ldaptive.auth.FormatDnResolver] - <Formatting DN for ffischer with %s@AGADIR-DEV>
2015-01-14 10:52:34,354 DEBUG [org.ldaptive.auth.Authenticator] - <authenticate dn=ffischer@AGADIR-DEV with request=[org.ldaptive.auth.AuthenticationRequest@1009044935::user=ffischer, retAttrs=[sAMAccountName, name]]>
2015-01-14 10:52:34,355 DEBUG [org.ldaptive.auth.PooledBindAuthenticationHandler] - <authenticate criteria=[org.ldaptive.auth.AuthenticationCriteria@339862186::dn=ffischer@AGADIR-DEV, authenticationRequest=[org.ldaptive.auth.AuthenticationRequest@1009044935::user=ffischer, retAttrs=[sAMAccountName, name]]]>
2015-01-14 10:52:34,359 DEBUG [org.ldaptive.BindOperation] - <execute request=[org.ldaptive.BindRequest@1445552746::bindDn=ffischer@AGADIR-DEV, saslConfig=null, controls=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@291843681::config=[org.ldaptive.ConnectionConfig@172930161::ldapUrl=ldap://192.168.1.93, connectTimeout=3000, responseTimeout=-1, sslConfig=[org.ldaptive.ssl.SslConfig@891841536::credentialConfig=[org.ldaptive.ssl.X509CredentialConfig@-1559905052::trustCertificates=classpath:todo, authenticationCertificate=null, authenticationKey=null], trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=false, useStartTLS=false, connectionInitializer=null], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@922503511::connectionCount=1, environment={java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, com.sun.jndi.ldap.connect.timeout=3000, java.naming.ldap.version=3}, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@1832061684::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=DEFAULT, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null, controlProcessor=org.ldaptive.provider.ControlProcessor@3214512e]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@53ddbcb1]>
2015-01-14 10:52:34,365 DEBUG [org.ldaptive.BindOperation] - <execute response=[org.ldaptive.Response@2061991076::result=null, resultCode=SUCCESS, message=null, matchedDn=null, responseControls=null, referralURLs=null, messageId=-1] for request=[org.ldaptive.BindRequest@1445552746::bindDn=ffischer@AGADIR-DEV, saslConfig=null, controls=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@291843681::config=[org.ldaptive.ConnectionConfig@172930161::ldapUrl=ldap://192.168.1.93, connectTimeout=3000, responseTimeout=-1, sslConfig=[org.ldaptive.ssl.SslConfig@891841536::credentialConfig=[org.ldaptive.ssl.X509CredentialConfig@-1559905052::trustCertificates=classpath:todo, authenticationCertificate=null, authenticationKey=null], trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=false, useStartTLS=false, connectionInitializer=null], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@922503511::connectionCount=1, environment={java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, com.sun.jndi.ldap.connect.timeout=3000, java.naming.ldap.version=3}, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@1832061684::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=DEFAULT, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null, controlProcessor=org.ldaptive.provider.ControlProcessor@3214512e]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@53ddbcb1]>
2015-01-14 10:52:34,366 DEBUG [org.ldaptive.auth.PooledBindAuthenticationHandler] - <authenticate response=[org.ldaptive.auth.AuthenticationHandlerResponse@1940402693::connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@291843681::config=[org.ldaptive.ConnectionConfig@172930161::ldapUrl=ldap://192.168.1.93, connectTimeout=3000, responseTimeout=-1, sslConfig=[org.ldaptive.ssl.SslConfig@891841536::credentialConfig=[org.ldaptive.ssl.X509CredentialConfig@-1559905052::trustCertificates=classpath:todo, authenticationCertificate=null, authenticationKey=null], trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=false, useStartTLS=false, connectionInitializer=null], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@922503511::connectionCount=1, environment={java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, com.sun.jndi.ldap.connect.timeout=3000, java.naming.ldap.version=3}, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@1832061684::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=DEFAULT, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null, controlProcessor=org.ldaptive.provider.ControlProcessor@3214512e]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@53ddbcb1], result=true, resultCode=SUCCESS, message=null, controls=null] for criteria=[org.ldaptive.auth.AuthenticationCriteria@339862186::dn=ffischer@AGADIR-DEV, authenticationRequest=[org.ldaptive.auth.AuthenticationRequest@1009044935::user=ffischer, retAttrs=[sAMAccountName, name]]]>
2015-01-14 10:52:34,367 DEBUG [org.jasig.cas.authentication.support.UpnSearchEntryResolver] - <resolve criteria=[org.ldaptive.auth.AuthenticationCriteria@339862186::dn=ffischer@AGADIR-DEV, authenticationRequest=[org.ldaptive.auth.AuthenticationRequest@1009044935::user=ffischer, retAttrs=[sAMAccountName, name]]]>
2015-01-14 10:52:34,368 DEBUG [org.ldaptive.SearchOperation] - <execute request=[org.ldaptive.SearchRequest@1446887226::baseDn=dc=AGADIR-DEV,dc=lan, searchFilter=[org.ldaptive.SearchFilter@-523261394::filter=userPrincipalName={0}, parameters={0=ffischer@AGADIR-DEV}], returnAttributes=[sAMAccountName, name], searchScope=SUBTREE, timeLimit=0, sizeLimit=0, derefAliases=null, typesOnly=false, binaryAttributes=null, sortBehavior=UNORDERED, searchEntryHandlers=null, searchReferenceHandlers=null, controls=null, followReferrals=false, intermediateResponseHandlers=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@291843681::config=[org.ldaptive.ConnectionConfig@172930161::ldapUrl=ldap://192.168.1.93, connectTimeout=3000, responseTimeout=-1, sslConfig=[org.ldaptive.ssl.SslConfig@891841536::credentialConfig=[org.ldaptive.ssl.X509CredentialConfig@-1559905052::trustCertificates=classpath:todo, authenticationCertificate=null, authenticationKey=null], trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=false, useStartTLS=false, connectionInitializer=null], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@922503511::connectionCount=1, environment={java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, com.sun.jndi.ldap.connect.timeout=3000, java.naming.ldap.version=3}, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@1832061684::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=DEFAULT, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null, controlProcessor=org.ldaptive.provider.ControlProcessor@3214512e]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@53ddbcb1]>
2015-01-14 10:52:34,375 DEBUG [org.ldaptive.SearchOperation] - <execute response=[org.ldaptive.Response@565100753::result=[[]], resultCode=SUCCESS, message=null, matchedDn=null, responseControls=null, referralURLs=[ldap://ForestDnsZones.AGADIR-DEV.lan/DC=ForestDnsZones,DC=AGADIR-DEV,DC=lan], messageId=-1] for request=[org.ldaptive.SearchRequest@1446887226::baseDn=dc=AGADIR-DEV,dc=lan, searchFilter=[org.ldaptive.SearchFilter@-523261394::filter=userPrincipalName={0}, parameters={0=ffischer@AGADIR-DEV}], returnAttributes=[sAMAccountName, name], searchScope=SUBTREE, timeLimit=0, sizeLimit=0, derefAliases=null, typesOnly=false, binaryAttributes=null, sortBehavior=UNORDERED, searchEntryHandlers=null, searchReferenceHandlers=null, controls=null, followReferrals=false, intermediateResponseHandlers=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@291843681::config=[org.ldaptive.ConnectionConfig@172930161::ldapUrl=ldap://192.168.1.93, connectTimeout=3000, responseTimeout=-1, sslConfig=[org.ldaptive.ssl.SslConfig@891841536::credentialConfig=[org.ldaptive.ssl.X509CredentialConfig@-1559905052::trustCertificates=classpath:todo, authenticationCertificate=null, authenticationKey=null], trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=false, useStartTLS=false, connectionInitializer=null], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@922503511::connectionCount=1, environment={java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, com.sun.jndi.ldap.connect.timeout=3000, java.naming.ldap.version=3}, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@1832061684::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=DEFAULT, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null, controlProcessor=org.ldaptive.provider.ControlProcessor@3214512e]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@53ddbcb1]>
2015-01-14 10:52:34,375 DEBUG [org.jasig.cas.authentication.support.UpnSearchEntryResolver] - <resolved result=[[]] for criteria=[org.ldaptive.auth.AuthenticationCriteria@339862186::dn=ffischer@AGADIR-DEV, authenticationRequest=[org.ldaptive.auth.AuthenticationRequest@1009044935::user=ffischer, retAttrs=[sAMAccountName, name]]]>
2015-01-14 10:52:34,376 INFO [org.ldaptive.auth.Authenticator] - <Authentication succeeded for dn: ffischer@AGADIR-DEV>
2015-01-14 10:52:34,377 DEBUG [org.ldaptive.auth.Authenticator] - <authenticate response=[org.ldaptive.auth.AuthenticationHandlerResponse@1940402693::connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@291843681::config=[org.ldaptive.ConnectionConfig@172930161::ldapUrl=ldap://192.168.1.93, connectTimeout=3000, responseTimeout=-1, sslConfig=[org.ldaptive.ssl.SslConfig@891841536::credentialConfig=[org.ldaptive.ssl.X509CredentialConfig@-1559905052::trustCertificates=classpath:todo, authenticationCertificate=null, authenticationKey=null], trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=false, useStartTLS=false, connectionInitializer=null], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@922503511::connectionCount=1, environment={java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, com.sun.jndi.ldap.connect.timeout=3000, java.naming.ldap.version=3}, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@1832061684::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=DEFAULT, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null, controlProcessor=org.ldaptive.provider.ControlProcessor@3214512e]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@53ddbcb1], result=true, resultCode=SUCCESS, message=null, controls=null] for dn=ffischer@AGADIR-DEV with request=[org.ldaptive.auth.AuthenticationRequest@1009044935::user=ffischer, retAttrs=[sAMAccountName, name]]>
2015-01-14 10:52:34,378 DEBUG [org.jasig.cas.authentication.LdapAuthenticationHandler] - <LDAP response: [org.ldaptive.auth.AuthenticationResponse@274142856::authenticationResultCode=AUTHENTICATION_HANDLER_SUCCESS, ldapEntry=[dn=ffischer@AGADIR-DEV[]], accountState=null, result=true, resultCode=SUCCESS, message=null, controls=null]>
2015-01-14 10:52:34,378 INFO [org.jasig.cas.authentication.PolicyBasedAuthenticationManager] - <LdapAuthenticationHandler failed authenticating ffischer+password>

是AD配置的问题吗？我用的是AD 2008 R2Cas服务器4.0.0

感谢帮助

最佳答案

问题是，当应用程序搜索您的用户帐户时，它使用 ffischer@AGADIR-DEV 作为在 userPrincipalName 属性中查找的值。但是，此属性包含 samAccountName 以及由 @ 分隔的完整域名，在您的情况下为 AGADIR-DEV.lan。

要解决此问题，您应该更新搜索帐户的方式，或者也使用 userPrincipalName 进行登录。这也可能需要一些调整，因为我不熟悉您使用的库的工作原理。

关于java - Cas Ldap认证失败: attributes are empty，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/27940112/

文章推荐： java - 更新时嵌入的 AttributeOverride 不起作用

文章推荐： css - Rails CSS 编译

文章推荐： html - CSS样式加载消息

文章推荐： java - 使用运行时调用的抽象方法的值

c# - if((attributes and File Attributes.Hidden) == File Attributes.Hidden) { } 如何工作？
关于 this页面，我看到以下代码: if ((attributes & FileAttributes.Hidden) == FileAttributes.Hidden) 但我不明白为什么会变成这样。
attributes - pthread互斥锁的 “attribute”是什么？
函数pthread_mutex_init允许您指定指向属性的指针。但是我还没有找到关于pthread属性是什么的很好的解释。我一直只是提供NULL。这个论点有用吗？该文档，对于那些忘记它的人: PT
xml - 我怎样才能结合xsl :attribute and xsl:use-attribute-sets to conditionally use an attribute set?
我们有一个 xml 节点“item”，其属性为“style”，即“Header1”。但是，这种风格可以改变。我们有一个名为 Header1 的属性集，它定义了它在 PDF 中的外观，通过 xsl:fo
JavaScript: element.setAttribute(attribute,value) , element.attribute=value & element.[attribute]=value 不改变属性值
我的任务是在用户点击它时从输入框中删除占位符并使标签可见。如果用户未在其中再次填写任何内容，请放回占位符并使标签不可见。我可以隐藏它但不能重新分配它。我试过 element.setAttribute
attributes - ASP.NET 5 : Bind attribute with Include parameter - include is not a valid named attribute argument
我从文章中编写代码，并且有: public IActionResult Create([Bind(Include="Imie,Nazwisko,Stanowisko,Wiek")] Pracownik
attributes - 单点触控 : Understand Foundation Attributes
你能给我解释一下以下属性吗？ 1) [MonoTouch.Foundation.Register("SomeClass")] 这个属性是否只用于向IB注册类？以编程方式扩展 iOS 类时是否必须使用此
c++ - this.attribute 应该是 this->attribute 是什么意思
我正在编写一个 C++ 程序，在调试时我在执行以下函数: int CClass::do_something() { ... // I've put a breakpoint here } 我的 C
javascript - polymer 1.0 : Is there any way to use 'layout' as an attribute instead of as a CSS class or using Attribute serialization in the class attribute?
我已经在 polymer 0.5 中构建了我的应用程序。现在我已经将它更新到 polymer 1.0。对于响应式布局，我使用了一个布局属性，它使用 Polymer 0.5 中布局属性的自定义逻辑。
attributes - Jade : element attributes without value
我是使用 Jade 的新手——到目前为止它很棒。但是我需要发生的一件事是具有“itemscope”属性的元素: 我的 Jade 符是: header(itemscope, itemtype='ht
attributes - 为什么在 Chef 中使用普通属性(attribute.set[..])？
我正在研究一个厨师实现，有时在过去的地方使用了 attribute.set，attribute.default 会这样做。为了解决这个问题，我对 Chef 属性优先范式非常熟悉。我知道“正常”属性(使
HTML "data-attribute"与简单 "custom attribute"
我经常看到html data-attribute (s) 将特定值/参数添加到 html 元素，例如使用它们将按钮“链接”到要打开的模式对话框等的 Bootstrap。现在，我看到一个几乎著名的
ruby - self.attribute 与 @attribute 的优势？
假设如下: def create_new_salt self.salt = self.object_id.to_s + rand.to_s end 为什么使用“ self ”更好。而不是实例变量“
主干.js 访问模型中的模型属性 - this.attribute VS this.get ('attribute' )？
根据我的理解，Backbone.js 模型的属性应该通过以下方式声明为有点私有(private)的成员变量 this.set({ attributeName: attributeValue }) //
xml - 在Hive XML SerDe中使用 “Attribute to Attribute”映射
我有一个看起来像下面的XML文档: ... ... ... ...
JSF 复合 :attribute with f:attribute conversion error
我正在实现一个 JSF 组件，需要有条件地添加一些属性。这个问题类似于之前的 JSF: p:dataTable with f:attribute results in "argument type m
安卓市场发布: 'android:icon' attribute: attribute is not a string value
我正在尝试将应用程序发布到 Android 电子市场，但出现以下错误: W/ResourceType(16964): No known package when getting value for r
c++ - 玛雅编程 : Separating attributes into sections in the attribute editor
抱歉这么具体的应用程序，但我注意到另一篇关于 Maya 开发的回答很好的帖子。我刚刚为 Maya 编写了一个插件节点。它只是根据湍流函数杀死一堆粒子。湍流由许多可在属性编辑器中调整的属性驱动。在属
html - html元素中data-attribute=false与data-attribute ="false"有什么区别吗？
我在 html 元素中的数据属性为 Update .它具有数据属性的 bool 值。跟下面的元素Update有什么区别吗？因为数据属性用双引号引起来。 html是否支持 bool 值？最佳答案 b
c# - 错误 : "is not an attribute class" when using ConfigurationElementType attribute
我正在尝试为企业库 5.0 的异常处理 block 创建自定义异常处理程序。据我了解，我需要使用属性开始上课“[ConfigurationElementType(typeof(CustomHandle
css - [attribute~=value] 和 [attribute*=value] 的区别
我找不到这两个选择器之间的区别。两者似乎都做同样的事情，即根据包含给定字符串的特定属性值选择标签。对于 [attribute~=value] :http://www.w3schools.com/cs

太空宇宙

个人简介

我是一名优秀的程序员,十分优秀！

作者热门文章

滴滴打车优惠券免费领取

全站热门文章

首页

博学

6Ren·AI

商城

java - Cas Ldap认证失败: attributes are empty