LDAP tomcat JNDIRealm

Question

我使用下面的server.xml文件來配置tomcat使用JNDIRealm連接到ldap服務器。

不過，我不斷收到錯誤：

造成的：javax.naming.CommunicationException：本地主機：389 [根異常是java.net.ConnectException：連接被拒絕：連接]

我無處使用本地主機：389如果你看到我的連接網址使用主機和636端口。那麼連接到本地主機是什麼造成的：389。

下面的server.xml：

<?xml version='1.0' encoding='utf-8'?> 
<Server port="8005" shutdown="SHUTDOWN"> 
<Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" /> 
<Listener className="org.apache.catalina.core.JasperListener" /> 
<Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" /> 
<Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" /> 
<Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" /> 
<GlobalNamingResources> 
<Resource name="UserDatabase" auth="Container" 
      type="org.apache.catalina.UserDatabase" 
      description="User database that can be updated and saved" 
      factory="org.apache.catalina.users.MemoryUserDatabaseFactory" 
      pathname="conf/tomcat-users.xml" /> 
</GlobalNamingResources> 
<Service name="Catalina"> 
<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol" 
SSLEnabled="true" maxThreads="150" scheme="https" secure="true" 
keystoreFile="keystore_key.jks" keystoreType="JKS" 
keystorePass="xxxxx" URIEncoding="UTF-8" clientAuth="false" sslProtocol="TLS" /> 
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" /> 
<Engine name="Catalina" defaultHost="localhost">  
<Realm className="org.apache.catalina.realm.JNDIRealm" 
      connectionURL="ldap://mycomapny.org:636" 
      userSubtree="true" 
      userBase="DC=test,DC=win,DC=user,DC=org" 
      userSearch="(&amp;(sAMAccountName={0})(objectcategory=user))" 
      userRoleName="memberOf" 
      roleBase="DC=test,DC=win,DC=user,DC=org" 
      roleName="cn" 
      roleSearch="(member={0})" 
      roleSubtree="true" 
      roleNested="true"/> 
<Host name="localhost" appBase="webapps"> 
      <Context docBase="spnego" path=""> 
       <Valve className="org.apache.catalina.authenticator.SpnegoAuthenticator" 
        storeDelegatedCredential="true" /> 
      </Context> 
     </Host> 
</Engine> 
</Service> 
</Server> 

Answer 1

你嘗試中的ConnectionURL設置指定LDAPS，即 的ConnectionURL = 「LDAPS：//mycompany.org：636」

端口389對一個不安全的連接