Hello I’ve got a CAS server that works fine when connecting to eDirectory.
I’ve changed it to connect to Active Directory but I get the below. The strange thing is that half of CAS says that the user has been authenticated while the second half of the log says there is a timeout. The JVM does have the ca certs for the LDAP servers and an ldapsearch query to AD works fine so it should not be a firewall problem. Is there some hint to debug this? Thanks Thierry 2017-01-06 17:24:08,867 INFO [org.jasig.cas.web.flow.InitialFlowSetupAction] - <Setting path for cookies to: /> 2017-01-06 17:24:17,186 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - <org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler successfully authenticated [username: delaitt]> 2017-01-06 17:24:19,590 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN ============================================================= WHO: [username: delaitt] WHAT: supplied credentials: [username: delaitt] ACTION: AUTHENTICATION_FAILED APPLICATION: CAS WHEN: Fri Jan 06 17:24:19 GMT 2017 CLIENT IP ADDRESS: XX SERVER IP ADDRESS: XX ============================================================= > 2017-01-06 17:24:19,592 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN ============================================================= WHO: [username: delaitt] WHAT: Uncategorized exception occured during LDAP processing; nested exception is javax.naming.NamingException: LDAP response read timed out, timeout used:2000ms.; remaining name ‘OU=XX' ACTION: TICKET_GRANTING_TICKET_NOT_CREATED APPLICATION: CAS WHEN: Fri Jan 06 17:24:19 GMT 2017 CLIENT IP ADDRESS: XX SERVER IP ADDRESS: XX ============================================================= The University of Westminster is a charity and a company limited by guarantee. Registration number: 977818 England. Registered Office: 309 Regent Street, London W1B 2UW. This message and its attachments are private and confidential. If you have received this message in error, please notify the sender and remove it and its attachments from your system. -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/43216485-7AB0-4E19-AD62-471E3148E642%40westminster.ac.uk.
