2016-07-20 212 views
0

我們已經在tomcat.its中配置了ldap設置,所有這些日子都工作正常。但突然間低於ldap錯誤。什麼是以下錯誤的含義。ldap錯誤 - LDAP:錯誤代碼49 - 80090308:LdapErr:DSID-0C0903A9

這是在tomcat配置文件中設置的ldap配置。

Jul 19, 2016 11:14:04 AM org.apache.tomcat.util.digester.SetPropertiesRule begin 
    WARNING: [SetPropertiesRule]{Context/Realm} Setting property 'debug' to '99' did not find a matching property. 
    Jul 19, 2016 11:14:04 AM org.apache.tomcat.util.digester.SetPropertiesRule begin 
    WARNING: [SetPropertiesRule]{Context/Realm} Setting property 'curUserPattern' to '%[email protected]' did not find a matching property. 
    Jul 19, 2016 11:14:04 AM org.apache.tomcat.util.digester.SetPropertiesRule begin 
    WARNING: [SetPropertiesRule]{Context/Realm} Setting property 'resourceName' to 'add_web_realm' did not find a matching property. 
    Jul 19, 2016 11:14:05 AM org.apache.catalina.core.ContainerBase addChildInternal 
    SEVERE: ContainerBase.addChild: start: 
    org.apache.catalina.LifecycleException: Failed to start component [StandardEngine[Catalina].StandardHost[localhost].StandardContext[/add-web]] 
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:154) 


    Caused by: org.apache.catalina.LifecycleException: Failed to start component [Realm[JNDIRealm]] 
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:154) 
    at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5350) 
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) 
    ... 10 more 
    Caused by: org.apache.catalina.LifecycleException: Exception opening directory server connection 
    at org.apache.catalina.realm.JNDIRealm.startInternal(JNDIRealm.java:2191) 
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) 
    ... 12 more 
    Caused by: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 775, v1db1^@] 
    at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3087) 
+0

$ CATALINA_BASE/conf/server.xml改變了嗎? LDAP錯誤代碼49指示「憑證無效」,這意味着您發送給LDAP服務器的密碼不正確 –

回答

1

回答你的問題出在LDAP錯誤代碼:

[LDAP:錯誤代碼49 - 80090308:LdapErr:DSID-0C0903A9,評論: AcceptSecurityContext錯誤,數據775,v1db1^@]

data 775是重要組成部分。該十六進制代碼轉換爲十進制系統錯誤代碼1909,這是一個Windows系統錯誤代碼。這是記錄here

ERROR_ACCOUNT_LOCKED_OUT

1909 (0x775) 

The referenced account is currently locked out and may not be logged on to. 

所以這樣看來,你要使用的帳戶被鎖定。

+0

在主要問題中添加了ldap配置;在服務器重新啓動期間,我們發現上面的錯誤。我知道我們在哪裏給予帳戶配置中的設置?我沒有看到那裏。 – user739115

+0

我不確定我看到你在哪裏添加配置...應該不是有一些XML或什麼?你可以在你的配置文件中搜索'ldap://'或'dc ='或類似的東西來找到它的位置。 – ChadSikorra