来自java程序的ldap身份验证错误

Question

public static void main(String[] args)
{


    // Setup environment for authenticating

    Hashtable<String, String> environment = 
        new Hashtable<String, String>();

    environment.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");

    environment.put(Context.PROVIDER_URL,"ldap://192.168.0.100:389");

    environment.put(Context.SECURITY_AUTHENTICATION,"simple");

    environment.put(Context.SECURITY_PRINCIPAL,"uid=dilip.duraiswamy,dc=xxxx,dc=local");

    environment.put(Context.SECURITY_CREDENTIALS,"xxxx");

    try
    {
        DirContext authContext = 
            new InitialDirContext(environment);

        // user is authenticated
        System.out.println("USER IS AUTHETICATED");

    }
    catch (AuthenticationException ex)
    {

        // Authentication failed
        System.out.println("AUTH FAILED : "+ex );

    }
    catch (NamingException ex)
    {
        ex.printStackTrace();
    }
}

得到错误为 javax.naming.AuthenticationException：[LDAP：错误代码 49 - 80090308：LdapErr：DSID-0C09042F，注释：AcceptSecurityContext 错误，数据 52e，v2580

Answer 1

对于身份验证，添加正确的专有名称。

如果 DN 在有空格或某些特殊字符的情况下未正确指定，通常会出现此问题。

​这里的 52e - 代表无效凭证

http://www-01.ibm.com/support/docview.wss?uid=swg21290631