|
Error might occur #6 -- Wrong format of user identity |
|
Subject: Error might occur #6 -- Wrong format of user identity
Author: authen
In response to: Error might occur #5 -- Wrong user identity
Posted on: 02/08/2010 03:30:54 PM
Also, if you provide an user identity with wrong format, the Kerberos protocol will not go through either.
Server: myAD.myCompany.com Port: 389
Bind Function Type: Generic Bind method: SSPI Synchronous: checked Use auth. identit: checked
User: testuser@MYCOMPANY.COM Password: <password> (box checked)Domain: MYCOMPANY.COM
You will get, on the client side, the following error:
res = ldap_bind_s(ld, NULL, &NtAuthIdentity, 1158); // v.3 {NtAuthIdentity: User='testuser@MYCOMPANY.COM'; Pwd= <unavailable>; domain = 'MYCOMPANY.COM'.} Error <49>: ldap_bind_s() failed: Invalid Credentials. Server error: NTLM authentication protocol used instead but the server failed to support it.
On the server side, binding request was received but it used NTLM for SASL GSS-SPNEGO instead.
>
> On 02/08/2010 03:24:56 PM authen wrote:
Also, if you provide a wrong user identity, the Kerberos protocol will not go through either.
Server: myAD.myCompany.com Port: 389
Bind Function Type: Generic Bind method: SSPI Synchronous: checked Use auth. identit: checked
User: wrongtestuser Password: <password> (box checked)Domain: MYCOMPANY.COM
You will get, on the client side, the following error:
res = ldap_bind_s(ld, NULL, &NtAuthIdentity, 1158); // v.3 {NtAuthIdentity: User='wrongtestuser'; Pwd= <unavailable>; domain = 'MYCOMPANY.COM'.} Error <49>: ldap_bind_s() failed: Invalid Credentials. Server error: NTLM authentication protocol used instead but the server failed to support it.
On the server side, binding request was received but it used NTLM for SASL GSS-SPNEGO instead.
References:
|
|
|
|