LDAP error code 49 - 80090308 LdapErr DSID-0C0903A9 comment AcceptSecurityContext error data 52e v1db1

Question

LDAP  error code 49 - 80090308  LdapErr  DSID-0C0903A9  comment  AcceptSecurityContext error  data 52e  v1db1   I know  52e  code is when username is valid  but password is invalid  I am using the same user  name and password in my apache studio  I was able to establish the connection succesfully to LDAP   Here is my java code       String userName                  String password                   String base   DC PSLTESTDOMAIN DC LOCAL       String dn    cn     userName         base        Hashtable env   new Hashtable        env put Context INITIAL CONTEXT FACTORY  com sun jndi ldap LdapCtxFactory        env put Context PROVIDER URL   ldap                 env put Context SECURITY AUTHENTICATION   simple        env put Context SECURITY PRINCIPAL  dn       env put Context SECURITY CREDENTIALS  password       LDAPAuthenticationService ldap   new LDAPAuthenticationService          LdapContext ctx      DirContext ctx   null      try           ctx   new InitialDirContext env     My error is on this line  ctx   new InitialDirContext env    I do not know what exactly is causing this error

User · Answer

In my case I have to use something like  lt username gt   lt domain gt  to successfully login   sample user sample domain

User · Answer

data 52e - Returns when username is valid but password credential is invalid   You probably need something like   String dn    cn     userName          CN Users     base

User · Answer

LDAP is trying to authenticate with AD when sending a transaction to another server DB  This authentication fails because the user has recently changed her password  although this transaction was generated using the previous credentials  This authentication will keep failing until     unless you change the transaction status to Complete or Cancel in which case LDAP will stop sending these transactions

User · Answer

When you use Context SECURITY AUTHENTICATION as  simple   you need to supply the userPrincipalName attribute value  user domain base

User · Answer

For me issue is resolved by changing envs like this     env put  LDAP BASEDN   base   env put Context SECURITY PRINCIPAL  user domain

User · Answer

if you debug and loook at ctx null maybe your username hava proble  you shoud write like  ac administrator  double      or  administrator ac

User · Answer

For me the cause of the issue was that the format of username was incorrect  It was earlierly specified as  quot mydomain user quot   I removed the domain part and the error was gone  PS I was using ServerBind authentication

User · Answer

For me the issue resolved when I set the principal section like this   env put Context SECURITY PRINCIPAL  userId domainWithoutProtocolAndPortNo

User · Answer

Using domain Name may solve the problem  get domain name using powershell   env userdomain        Hashtable lt String  Object gt  env   new Hashtable lt String  Object gt         String principalName    domainName  userName       env put Context INITIAL CONTEXT FACTORY   com sun jndi ldap LdapCtxFactory        env put Context PROVIDER URL   ldap   URL 389 OU ou-xx DC fr DC XXXXXX DC com        env put Context SECURITY AUTHENTICATION   simple        env put Context SECURITY PRINCIPAL  principalName       env put Context SECURITY CREDENTIALS   Your Password         try           DirContext authContext   new InitialDirContext env              user is authenticated         System out println  USER IS AUTHETICATED          catch  AuthenticationException ex               Authentication failed         System out println  AUTH FAILED       ex          catch  NamingException ex            ex printStackTrace

User · Answer

I had a similar  issue when using AD on CAS   i e  52e error  In my case application accepts the Full Name when in the form of CN  instead of the actual username    For example  if you had a user who s full name is Ross Butler and their login username is rbutler --you would normally put something like  cn rbutler ou Users dc domain dc com but ours failed everytime   By changing this to cn Ross Butler ou Users dc domain dc com it passed

User · Answer

52e    1326    ERROR LOGON FAILURE    Returns when username is valid but password credential is invalid   Will prevent most other errors from being displayed as noted   http   ldapwiki com wiki Common 20Active 20Directory 20Bind 20Errors

User · Answer

For me the issue is resolved by adding domain name in user name as follow   string userName  yourUserName   string password  passowrd   string hostName  LdapServerHostName   string domain  yourDomain   System DirectoryServices AuthenticationTypes option   System DirectoryServices AuthenticationTypes SecureSocketsLayer   string userNameWithDomain   string Format   0   1   userName   domain   DirectoryEntry directoryOU   new DirectoryEntry  LDAP       hostName  userNameWithDomain  password  option

[authentication] LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1

Examples related to authentication

Examples related to ldap