How to get LDAP sub-error code using JNDI (MD5 or any other SASL mechanism)

Question

Hi All,
My objective is to find out if a user name exists in LDAP/Active Directory. I understand that there are specific sub error codes, like below:
· 525 - user not found
· 52e - invalid credentials
· 530 - not permitted to logon at this time
· 532 - password expired
· 533 - account disabled
· 701 - account expired
· 773 - user must reset password
· 775 - account locked.
When I tried with "simple" authentication, I am able to get exact reason code from which I can understand what went wrong.
Here's the code snippet:
     Hashtable<String, Object> env = new Hashtable<String, Object>();
          env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
*     env.put(Context.SECURITY_AUTHENTICATION,"simple");*
          env.put(Context.SECURITY_PRINCIPAL, "myUser");
          env.put(Context.SECURITY_CREDENTIALS, "mySecret");
          env.put(Context.PROVIDER_URL, "ldap://10.10.10.10:389/");
          env.put("com.sun.jndi.ldap.trace.ber", System.err); //debug trace
          DirContext ctx = null;
     try {
               ctx = new InitialLdapContext(env, null);
          } catch (javax.naming.AuthenticationException ae) {
               System.out.println("Message: "+ae.getMessage());
               ae.printStackTrace();
Output:
[LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, *data 525*, vece_
From above output it's clear that the sub error code is 525, that means User Not Found
If I want to achieve the same thing with Digest-MD5 algorithm, I am always getting sub error code as 0 from which I am not at all able to understand what went wrong.
Here's my code snippet:
             Hashtable<String, Object> env = new Hashtable<String, Object>();
          env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
        *     env.put(Context.SECURITY_AUTHENTICATION,"Digest-MD5");*
          env.put(Context.SECURITY_PRINCIPAL, "myUser");
          env.put(Context.SECURITY_CREDENTIALS, "mySecret");
          env.put(Context.PROVIDER_URL, "ldap://10.10.10.10:389/");
          env.put("com.sun.jndi.ldap.trace.ber", System.err); //debug trace
          DirContext ctx = null;
                 try {
               ctx = new InitialLdapContext(env, null);
          } catch (javax.naming.AuthenticationException ae) {
               System.out.println("Message: "+ae.getMessage());
               ae.printStackTrace();
Output:
[LDAP: error code 49 - 8009030C: LdapErr: DSID-0C09043E, comment: AcceptSecurityContext error, *data 0*, vece_
From the above sub error code 0, it's very difficult to understand what went wrong with the credentails.
Can any one help me out to find out what I am missing? Any help in this regard is highly appreciated.
Please let me know if there's any other way to check if the user exists in  LDAP/Active Directory.
Thanks a lot,
Siva.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       

Answer 1

Thank you,
As i was trying to obtain the input to UI from an xml file by which the axis converts to java objects and inturn have to get the reply as xml file . The error was in the jar files ,when i loaded the jar files another time my code started working.