topic LDAP: error code 50 in Alfresco Archive

LDAP: error code 50

bparis — Wed, 14 Jul 2010 08:34:31 GMT

Hi,if you need to authenticate against an ldap server in the situation where the uid is not in the DN, alfresco will search the DN making a query filterde with (&(objectclass=inetOrgPerson)(uid=entered_username))To make this query succeeding, your ldap server has to permit the "principal" user i

Re: LDAP: error code 50

dward — Wed, 14 Jul 2010 09:18:17 GMT

userSearchCtls.setReturningAttributes(new String[] {});

states that we don't want any attributes in our search result. We don't need the uid - we already have it.

Re: LDAP: error code 50

bparis — Wed, 14 Jul 2010 09:34:23 GMT

I know we already have the uid…. the idea is simply to ask an attribute we can read (anyone, but uid is certainly readable) instead of ALL attributes.

I just tested that we even could simply comment out the line
userSearchCtls.setReturningAttributes(new String[] {});

to avoid the ldap -50 error

B

Re: LDAP: error code 50

dward — Wed, 14 Jul 2010 13:01:46 GMT

The javadoc for SearchControls says this


    /**
     * Specifies the attributes that will be returned as part of the search.
     *<p>
     * null indicates that all attributes will be returned.
     * An empty array indicates no attributes are returned.
     *
     * @param attrs An array of attribute ids identifying the attributes that
     *           will be returned. Can be null.
     * @see #getReturningAttributes
     */
‍‍‍‍‍‍‍‍‍‍‍‍

What LDAP server are you using?

Re: LDAP: error code 50

bparis — Wed, 14 Jul 2010 13:20:16 GMT

well, … strange !

Our server is Sun Directory Server (version 5.2p6)

b

Re: LDAP: error code 50

dward — Wed, 14 Jul 2010 14:17:37 GMT

Well it looks like maybe the bug is in Sun Directory Server. But if your workaround helps us interoperate better with it we should probably add it. I don't see how it could break other directory servers. I have logged http://issues.alfresco.com/jira/browse/ALF-3868 .

Re: LDAP: error code 50

bparis — Wed, 14 Jul 2010 15:06:17 GMT

from strange to very strange:

doing this
userSearchCtls.setReturningAttributes(null);

makes the search successfull !

b