Hi
I have just installed Liferay Portal 5.1.1 on Debian Etch with Tomcat 5.5 and Postgres 5.3. Now I have configured LDAP authentication with out LDAP server, OpenLDAP, but the schema has the group members as "uid" (just the username, not the user full dn), so if I configure "ldap.import.method=group", groups are imported OK, but not the members, obtaining this error (administrador is one of the user that belongs to the group being imported):
13:10:11,285 ERROR [PortalLDAPUtil:60] Error importing LDAP users and groups
javax.naming.InvalidNameException: administrador: [LDAP: error code 34 - invalid DN]; remaining name 'administrador'
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2923)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2737)
at com.sun.jndi.ldap.LdapCtx.c_getAttributes(LdapCtx.java:1291)
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_getAttributes(ComponentDirContext.java:213)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.getAttributes(PartialCompositeDirContext.java:121)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.getAttributes(PartialCompositeDirContext.java:109)
at javax.naming.directory.InitialDirContext.getAttributes(InitialDirContext.java:123)
at javax.naming.directory.InitialDirContext.getAttributes(InitialDirContext.java:118)
at com.liferay.portal.security.ldap.PortalLDAPUtil.getAttributes(PortalLDAPUtil.java:230)
at com.liferay.portal.security.ldap.PortalLDAPUtil._importUsersAndMembershipFromLDAPGroup(PortalLDAPUtil.java:970)
at com.liferay.portal.security.ldap.PortalLDAPUtil.importLDAPGroup(PortalLDAPUtil.java:585)
at com.liferay.portal.security.ldap.PortalLDAPUtil.importFromLDAP(PortalLDAPUtil.java:512)
at com.liferay.portal.util.PortalInstances._initCompany(PortalInstances.java:358)
at com.liferay.portal.util.PortalInstances.initCompany(PortalInstances.java:89)
at com.liferay.portal.servlet.MainServlet.init(MainServlet.java:430)
at javax.servlet.GenericServlet.init(GenericServlet.java:211)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1105)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:932)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3951)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:4225)
at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759)
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:739)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:524)
at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:608)
at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:535)
at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:470)
at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1122)
at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:310)
at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1021)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:718)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1013)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:442)
at org.apache.catalina.core.StandardService.start(StandardService.java:450)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:709)
at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:294)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
If I use "ldap.import.method=user", users are imported correctly but not the groups. Is there any additional parameter so the users are searched by the "memberUid" field of the groups entries, instead ofg using directly the dn that is supposed to be stored in the field?
Thanks in advance.
