Grouper Users - Open Discussion List

[Scott Koranda <>]

> I think this is fixed in trunk, though I didn't test, and
> Scott is not having success replacing his subject.jar with a
> better one...  we will keep trying
> 
> https://bugs.internet2.edu/jira/browse/GRP-601

Once Scott got over being stupid he was able to conduct a
proper test and the new code/jar is working great.

Thanks much Chris,

Scott

> 
> Thanks, Chris
> 
> -----Original Message----- From: Scott Koranda
> [mailto:]
>  Sent: Monday, May 02, 2011 3:12
> PM To: Chris Hyzer Cc: 
> 
>  Subject:
> Re: [grouper-users] multiple LDAP for sources.xml?
> 
> > Someone might already know, but in the meantime, please
> > send along all the errors in the log that might be
> > relevant...
> 
> Attached.
> 
> Thanks,
> 
> Scott
> 
> > 
> > Thanks, Chris
> > 
> > -----Original Message----- From: Scott Koranda
> > [mailto:]
> >  Sent: Monday, May 02, 2011
> > 2:59 PM To: Chris Hyzer Cc: 
> > 
> > Subject: Re: [grouper-users] multiple LDAP for
> > sources.xml?
> > 
> > > You can have multiple of any type, mix and match, so
> > > yes.
> > > 
> > 
> > Thanks. I wante to confirm that before further debugging.
> > 
> > So I am trying to add a second LDAP as a source but this
> > LDAP should be contacted using an anonymous bind. I have
> > configured sources.xml to look like this:
> > 
> > <init-param>
> > <param-name>INITIAL_CONTEXT_FACTORY</param-name>
> > <param-value>com.sun.jndi.ldap.LdapCtxFactory</param-value>
> > </init-param> <init-param>
> > <param-name>PROVIDER_URL</param-name>
> > <param-value>ldap://my.server.edu</param-value>
> > </init-param>
> > 
> > I am not specifying SECURITY_AUTHENTICATION,
> > SECURITY_PRINCIPAL, SECURITY_CREDENTIALS, nor
> > SECURITY_PROTOCOL.
> > 
> > I would have thought then that this should enable an
> > anonymous bind, according to the documentation for
> > LdapCtxFactory, but I keep getting errors in
> > grouper_error.log.
> > 
> > Is there anything in the grouper Java code that is
> > requiring a non-anonymous bind?
> > 
> > (Yes, I can hit the server with other clients using an
> > anonymous bind...).
> > 
> > Thanks,
> > 
> > Scott