Spring Ldap LDAP: error code 32 - 0000208D

Question

I am working on application to authenticate with the LDAP . Am using the spring LDAP template for authenticating but am getting the below response

{
    "message": "[LDAP: error code 32 - 0000208D: NameErr: DSID-031001E5, problem 2001 (NO_OBJECT), data 0, best match of:\n\t''\n\u0000]; nested exception is javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-031001E5, problem 2001 (NO_OBJECT), data 0, best match of:\n\t''\n\u0000]; remaining name '/'"
}

below are the configuration for spring

<beans:bean id="contextSource"
    class="org.springframework.ldap.core.support.LdapContextSource">
    <beans:property name="base" value="" />
    <beans:property name="url" value="<LDAP-URL>" />
    <beans:property name="userDn" value="<USER-DN>" />
    <beans:property name="password" value="<PASSWORD>" />
</beans:bean>

<beans:bean id="ldapTemplate" class="org.springframework.ldap.core.LdapTemplate">
    <beans:constructor-arg ref="contextSource" />
</beans:bean>

Java Code:

AndFilter filter = new AndFilter();
filter.and(new EqualsFilter("objectclass", "person")).and(new       EqualsFilter("sAMAccountName", username));
boolean result = ldapTemplate.authenticate(LdapUtils.emptyLdapName(),               filter.toString(), password);

I am new to LDAP and anyhelp or example would be really great.

mrmemio29 · Accepted Answer · 2015-11-27 07:11:21Z

2

You don't need to specify the full dn in further operations when you've already set the base. Are you sure you have the correct specs for the server? Error 32 is usually screwing up the prefixes or directory configs!

answered Nov 27, 2015 at 7:11

mrmemio29

3981 silver badge8 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

PremKumarR Over a year ago

Server configs looks fine when i change to bad password it says authentication failed which means it is authenticated and fails after

scottysseus Over a year ago

This is the correct answer. I was passing the full base DN (e.g. ou=users,dc=ad,dc=company,dc=com) to authenticate. Changing this to an empty String worked.

Taazar · Accepted Answer · 2020-02-04 14:40:36Z

0

Based on the previous correct answer the searchBase must be empty. My correct filter is:

FilterBasedLdapUserSearch userSearch = new FilterBasedLdapUserSearch("", "(&(CN={0})(memberOf=cn=Group-BioBank,OU=HyperV,OU=Services,DC=bob,DC=uk))", contextSource);

This filter works like a charm. (Spring4.x)

Filters explained: https://confluence.atlassian.com/kb/how-to-write-ldap-search-filters-792496933.html

edited Feb 4, 2020 at 14:40

Taazar

1,50318 silver badges27 bronze badges

answered Feb 4, 2020 at 14:11

Miguel Pinheiro

11 silver badge

Collectives™ on Stack Overflow

Spring Ldap LDAP: error code 32 - 0000208D

2 Answers 2

2 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related