JNDI, Servlets and SSL won't authenticate

[bluecrush]

Greetings,

I am attempting to create a login servlet that will authenticate against LDAP. Unfortunately, I'm getting the following when I try to connect:

javax.naming.AuthenticationException: [LDAP: error code 32 - NDS error: no such entry (-601)] at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:272) at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2637) at com.sun.jndi.ldap.LdapCtx.(LdapCtx.java:283) at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175) at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193) at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:136) at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:66) at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667) at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:247) at javax.naming.InitialContext.init(InitialContext.java:223) at javax.naming.InitialContext.(InitialContext.java:197) at javax.naming.directory.InitialDirContext.(InitialDirContext.java:82) at bsu.LDAPLogin.doPost(LDAPLogin.java:124) at javax.servlet.http.HttpServlet.service(HttpServlet.java:709) at javax.servlet.http.HttpServlet.service(HttpServlet.java:802) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.netbeans.modules.web.monitor.server.MonitorFilter.doFilter(MonitorFilter.java:362) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:744) at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527) at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684) at java.lang.Thread.run(Thread.java:595)

Here's my servlet code:

String userName = "myusername";
    String passWord = "mysupersecretpassword";

    Hashtable authEnv = new Hashtable(11);
    authEnv.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
    authEnv.put(Context.PROVIDER_URL, "ldaps://my.ldapserver.url:636");
    authEnv.put(Context.SECURITY_AUTHENTICATION, "simple");
    authEnv.put(Context.SECURITY_PRINCIPAL, "cn=" + userName);
    authEnv.put(Context.SECURITY_CREDENTIALS, passWord);
    try {
        DirContext authContext = new InitialDirContext(authEnv);
    } catch (NamingException namEx) {
        out.println("Something went wrong!");
        namEx.printStackTrace(out);
    }

Any ideas?

I just found something about adding the ldap server's certificate to the application's cert store. Could this be the cause (since I haven't done this yet )? How do I do it?

Thanks for your help!

 

[Diancecht]

I think that you're connecting OK, but looking for something (a category) that is not under the LDAP

http://www.directory-info.com/LDAP/LDAPErrorCodes.html

Cheers,
Dian

 

[stevexff]

Looks like it - a '32' is LDAP_NO_SUCH_OBJECT.

Also, from a maintenence perspective, it would probably make sense to put the LDAP server URL and port in a configuration or property file.

Steve

[small]"Every program can be reduced by one instruction, and every program has at least one bug. Therefore, any program can be reduced to one instruction which doesn't work." (Object:erlDesignPatterns)[/small]