[Fedora-directory-users] adding user programmatically

Richard Megginson rmeggins at redhat.com
Fri May 25 15:28:10 UTC 2007


Derek Alexander wrote:
> Hi,
>
> Am switching over from OpenLDAP to Fedora DS.
>
> The Java code that was creating user entries in OpenLDAP isn't working with
> Fedora DS and I thought perhaps the reason would be obvious to someone out there.
>
> This is what was working with OpenLDAP:
>
>             dirContext = new InitialDirContext(anonymousEnv);
>
>             // need to be administrator to do this
>             dirContext.addToEnvironment(Context.SECURITY_PRINCIPAL, ADMIN_DN);
>             dirContext.addToEnvironment(Context.SECURITY_CREDENTIALS,ADMIN_PWD);
>
>             // ref: RFC 2798
>             // the inetOrgPerson represents people who are associated with an organization in some way.
>             // mandatory attributes for inetOrgPerson are: cn, objectClass, sn
>
>             Attribute ocAttr = new BasicAttribute("objectClass", "top");
>             ocAttr.add("person");
>             ocAttr.add("organizationalPerson");
>             ocAttr.add("inetOrgPerson");
>
>             // create the attribute set
>             Attributes attrs = new BasicAttributes(true); // as LDAP attribute names are case-insensitive
>             attrs.put(ocAttr);
>             attrs.put("cn", username);
>             attrs.put("sn", username); // not relevant but mandatory and can't put "" in there
>             attrs.put("userPassword", password);
>             attrs.put("uid", uid);
>
>             // create entry in directory
>             logger.debug("About to create subcontext: "+dn);
>             accountContext = dirContext.createSubcontext(dn, attrs);
>
> Error I'm getting with Fedora DS at the last line of that code is:
>
> javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
>   
That usually means the password is not correct.  What do the Fedora DS 
access and error logs say?
>
> Have tried with ldapadd from the command line to create a user entry with all the same values and
> that works ok, so I'm a bit puzzled why the code doesn't work here.
>
> If anyone has any ideas, would appreciate them.
>
> Thanks,
> Derek
>
> Please access the attached hyperlink for an important electronic communications disclaimer: http://www.lse.ac.uk/collections/secretariat/legal/disclaimer.htm
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20070525/cab7ed1c/attachment.bin>


More information about the Fedora-directory-users mailing list