Quantcast
Channel: Adobe Community : Popular Discussions - CQ5 (read only)
Viewing all articles
Browse latest Browse all 12476

SSO and LDAP working together

$
0
0

Hello everyone!


I'm currently running CQ5.5 Update 2.

 

What I am trying to accomplish:

 

So, I have a user logged into a windows remote desktop. He connects to a locally hosted dispatcher instance, which authenticates the user, forwards the header to CQ5, and logs him in.

 

Additionally, when the user logs in, CQ5 will ask an Active Directory instance for the SSO user's information. If he does not yet exist, he will be created with the appropriate attributes, and logged in.

 

 

What I have been able to accomplish

 

Currently I have the two working separately. But, if I have both enabled neither work.

 

So, if I have only the LDAP configuration enabled, I can enter the user's common name, and it will import him. (Basic LDAP works)

 

If I have the user already created, and have my SSO configuration enabled, it will allow him to log on. (Basic SSO works)

 

But, if he does not yet exist, it gives me the following error: (When trying to log in VIA SSO, CQ5 will not request credentials / user information through LDAP)

 

 

22.10.2012 09:53:21.329 *INFO* [10.110.41.162 [1350917601328] GET /libs/cq/core/content/login.html?resource=%2F&$$login$$=%24%24login%24%24&j_reason=User+n ame+and+password+do+not+match HTTP/1.1] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate XXX: LoginModule ignored Credentials

 

22.10.2012 09:53:21.329 *ERROR* [10.110.41.162 [1350917601328] GET /libs/cq/core/content/login.html?resource=%2F&$$login$$=%24%24login%24%24&j_reason=User+n ame+and+password+do+not+match HTTP/1.1] com.day.cq.auth.impl.LoginSelectorHandler requestCredentials: Abort login due to apparent misconfiguration.

22.10.2012 09:53:21.329 *ERROR* [10.110.41.162 [1350917601328] GET /libs/cq/core/content/login.html?resource=%2F&$$login$$=%24%24login%24%24&j_reason=User+n ame+and+password+do+not+match HTTP/1.1] com.day.cq.auth.impl.LoginSelectorHandler requestCredentials: Possible reasons: login page not existing or not accessible

 

Any help would be tremendous. I'll reply to this post with my configuration files.


Viewing all articles
Browse latest Browse all 12476

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>