无法在Apache Directory Studio中创建用于与AEM进行LDAP集成的新条目

时间:2018-07-14 10:33:28

标签: ldap aem

出现以下错误:

  

创建条目时出错    -[LDAP:错误代码67-NOT_ALLOWED_ON_RDN:MessageType失败:ADD_REQUES     java.lang.Exception:[LDAP:错误代码67-NOT_ALLOWED_ON_RDN:MessageType失败:ADD_REQUEST   讯息编号:15       添加请求:   条目       dn [n]:cn = bella + uid = bella + userPassword = 54321,dc = example,dc = com       objectClass:人       objectClass:顶部       objectClass:uidObject       uid:贝拉       SN:麦当劳       cn:贝拉       userPassword:0x35 0x34 0x33 0x32 0x31   :ERR_62条目cn = bella + uid = bella + userPassword = 54321,dc = example,dc = com没有userPassword attributeType,它是RDN的一部分。“]       在org.apache.directory.studio.connection.core.io.api.DirectoryApiConnectionWrapper.checkResponse(DirectoryApiConnectionWrapper.java:1374)       在org.apache.directory.studio.connection.core.io.api.DirectoryApiConnectionWrapper.access $ 9(DirectoryApiConnectionWrapper.java:1342)       在org.apache.directory.studio.connection.core.io.api.DirectoryApiConnectionWrapper $ 6.run(DirectoryApiConnectionWrapper.java:958)       在org.apache.directory.studio.connection.core.io.api.DirectoryApiConnectionWrapper.runAndMonitor(DirectoryApiConnectionWrapper.java:1269)       在org.apache.directory.studio.connection.core.io.api.DirectoryApiConnectionWrapper.checkConnectionAndRunAndMonitor(DirectoryApiConnectionWrapper.java:1205)       在org.apache.directory.studio.connection.core.io.api.DirectoryApiConnectionWrapper.createEntry(DirectoryApiConnectionWrapper.java:980)       在org.apache.directory.studio.ldapbrowser.core.jobs.CreateEntryRunnable.createEntry(CreateEntryRunnable.java:225)       在org.apache.directory.studio.ldapbrowser.core.jobs.CreateEntryRunnable.run(CreateEntryRunnable.java:124)       在org.apache.directory.studio.connection.ui.RunnableContextRunner $ 1.run(RunnableContextRunner.java:116)       在org.eclipse.jface.operation.ModalContext $ ModalContextThread.run(ModalContext.java:119)

     

[LDAP:错误代码67-NOT_ALLOWED_ON_RDN:MessageType失败:ADD_REQUEST   讯息编号:15       添加请求:   条目       dn [n]:cn = bella + uid = bella + userPassword = 54321,dc = example,dc = com       objectClass:人       objectClass:顶部       objectClass:uidObject       uid:贝拉       SN:麦当劳       cn:贝拉       userPassword:0x35 0x34 0x33 0x32 0x31   :ERR_62条目cn = bella + uid = bella + userPassword = 54321,dc = example,dc = com没有userPassword attributeType,它是RDN的一部分;“]

我已经尝试过6.1和6.3版的AEM,但仍然无法正常工作。

1 个答案:

答案 0 :(得分:2)

错误消息显示:

您的客户端正在尝试添加RDN为cn=bella+uid=bella+userPassword=54321的条目,但该条目本身不包含值为userPassword: 54321的属性。

无论使用什么LDAP客户端,这都是可怕的安全噩梦!

您真的不能在RDN中放入 userPassword ,因为任何允许搜索用户条目的LDAP客户端都可以读取它。