Context SECURITY_AUTHENTICATION=EXTERNAL

Question

Hello
I have an AD/AM ldap (microsoft application mode ldap). I want to authenticate my users in the AD (active directory).
to do:
DirContext theExternalDirContext = null;               
Hashtable theExternal = new Hashtable();
theExternal.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
theExternal.put(Context.SECURITY_AUTHENTICATION,"EXTERNAL");
theExternal.put(Context.SECURITY_PRINCIPAL,"AD domain\\user");
theExternal.put(Context.SECURITY_CREDENTIALS,"password");
theExternal.put(Context.PROVIDER_URL,"ldap://url AD/AM");
theExternalDirContext = new InitialDirContext(theExternal);
When I execute this java:
javax.naming.AuthenticationNotSupportedException: [LDAP: error code 7 - 00002027: LdapErr: DSID-0C09049C, comment: Inval
id Authentication method, data 0, vece ]
Any help would be much appreciated
Thanks

Answer 1

Unfortunately ADAM does not support SSL client certitifcates as a credential mechanism. And it doesn't appear to be well documented :-(
ADAM only supports simple, http digest & SASL authentication mechanisms.
To authenticate user's connecting to ADAM with credentials stored in AD, you can either use simple authentication (via a user proxy object), or SASL.
Note that with the former, I recomend that you configure ADAM to use SSL, to protect the simple bind, as it is sent in the clear and with the latter, the server hosting the ADAM instance must be a member of the Active Directory domain.
Bind redirection is described at http://technet2.microsoft.com/WindowsServer/f/?en/library/2a678533-a3c9-4758-ab8f-c52477fc5c001033.mspx and Windows authentication is described at http://technet2.microsoft.com/WindowsServer/f/?en/library/2a678533-a3c9-4758-ab8f-c52477fc5c001033.mspx