LDAP & JNDI

Question

I'm using the following text in my dn entry while trying to access an LDAP server:
oEnv.put(javax.naming.Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
oEnv.put(javax.naming.Context.PROVIDER_URL, m_sProviderUrl);
oEnv.put(javax.naming.Context.SECURITY_AUTHENTICATION, "simple");
oEnv.put(javax.naming.Context.SECURITY_PRINCIPAL, "uid=user1,dc=domain,dc=com");
oEnv.put(javax.naming.Context.SECURITY_CREDENTIALS, sPassword);
This does not work... But if I change the "uid" with "cn":
(javax.naming.Context.SECURITY_PRINCIPAL, "cn=First Last,dc=domain,dc=com");
I can access the LDAP server, and the authorization is successful.. Any idea why is that?
Am I doing something wrong in accessing the LDAP server? Or is there something not configured correctly on my LDAP server??

Answer 1

beavis,
If you just want to authenticate the user maybe you could lookup the user's cn first(by using any already authenticated user whose cn is known), then authenticate again using the cn of the user to compose a distinguished name.
I use kerberos to authenticate with the AD and the user's Windows login id would be used instead.....
I use the following code to search for a particular user instead of looping around....
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldap://company.com");
env.put(Context.SECURITY_AUTHENTICATION, "GSSAPI");
try
DirContext ctx = new InitialDirContext(env);
* user login id "userid" for searching
String filterString = "sAMAccountName=" + userid;
* specify your interested attributes for the return user
String[] returnAttr = { "cn", "sAMAccountName" };     
StringBuffer filterBuffer = new StringBuffer(filterString);
SearchControls ctls = new SearchControls();
ctls.setReturningAttributes(returnAttr);
ctls.setSearchScope(SearchControls.SUBTREE_SCOPE);
* userSearchBase is the distinguished name of the starting OU from where your
* user will be searched.
* e.g. "ou=People, dc=company, dc=com"
NamingEnumeration results = ctx.search(userSearchBase, filterString, ctls);
if ( results != null && results.hasMore() )
Wish that could be helpful....