cancel
Showing results for 
Search instead for 
Did you mean: 

ldap integration with activiti on tomcat7

ilansch
Champ in-the-making
Champ in-the-making
Hi,
I want acitivi it to work with Windows Server 2012R2 Active Directory for authentication.
I have configured the activiti-custom-context ldap settings as following:

<!– Server connection params –>
            <property name="server" value="ldap://NIA-DC01" />
            <property name="port" value="389" />
            <property name="user" value="uid=DevUser,OU=Salli,OU=Users,DC=NIA,DC=DOM" />
            <property name="password" value="MyPass" />

            <!– Query params –>
            <property name="baseDn" value="DC=NIA,DC=DOM" />
            <property name="queryUserByUserId" value="(&amp;(objectClass=inetOrgPerson)(uid={0}))" />
            <property name="queryUserByFullNameLike" value="(&amp;(objectClass=inetOrgPerson)(|({0}=*{1}*)({2}=*{3}*)))" />
            <property name="queryGroupsForUser" value="(&amp;(objectClass=groupOfUniqueNames)(uniqueMember={0}))" />

            <!– Attribute config –>
            <property name="userIdAttribute" value="uid" />
            <property name="userFirstNameAttribute" value="cn" />
            <property name="userLastNameAttribute" value="sn" />
            <property name="userEmailAttribute" value="mail" />


            <property name="groupIdAttribute" value="cn" />
            <property name="groupNameAttribute" value="cn" />

          </bean>
      </list>
    </property>    

I am getting the following exception:
LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903C5, comment: AcceptSecurityContext error, data 52e, v23f0

DevUser exist on active directory: http://i.imgur.com/pqM2pRu.png

What am i missing ? I have also edited activiti-ui-context as following:
  <property name="adminGroups">
  <list>
    <value>admin</value>
  </list>
  </property>
  <property name="userGroups">
    <list>
      <value>user</value>
    </list>
</property>
2 REPLIES 2

ilansch
Champ in-the-making
Champ in-the-making

jbarrez
Star Contributor
Star Contributor
When I google "LdapErr: DSID-0C0903C5" it seems to point to 'invalid credentials' …