配置LDAP时出现Tomcat错误

时间:2009-02-25 09:50:00

标签: tomcat ldap

我在Tomcat server.xml文件中的Tomcat安全领域中引用LDAP。但是我收到一个不寻常的错误:Tomcat没有启动,进入日志我发现它无法连接到localhost:389 - Tomcat的默认LDAP URL。

但是,Tomcat配置为指向不同的URL(不是同一台机器的外部URL;完全不同),如下所示:

<Realm className="org.apache.catalina.realm.JNDIRealm" debug="99" 
        connectionURL="ldap://XXX.XX.XX.XXX:389" 
        userSubtree="true"  
        userPattern="(cn={0},ou=XXXXXXXX,ou=XXXXX,o=XXX)"  
        roleBase="ou=XXXXXXXX,o=XXX"  
        roleName="cn"  
        roleSearch="member={0}"  
        connectionName="cn=XXXXXXXX,ou=XXXXXXXX,o=XXX"  
        connectionPassword="XXXXXXXX"/>

基本上我不知道它为什么还在看localhost:389。如果以前有人遇到过这个,我会感激一些帮助!我用谷歌搜索了一段时间但是当人们将错误粘贴到页面中时,似乎没有很多答案。如果有人有任何建议,我将不胜感激。

这是日志文件:

24-Feb-2009 11:38:45 org.apache.coyote.http11.Http11Protocol init
INFO: Initializing Coyote HTTP/1.1 on http-8443
Starting service Tomcat-Standalone
Apache Tomcat/4.1.31
Catalina.start: LifecycleException:  Exception opening directory server connection:      
javax.naming.CommunicationException: localhost:389 
    [Root exception is java.net.ConnectException: Connection refused: connect]
LifecycleException:  Exception opening directory server connection:   
javax.naming.CommunicationException: localhost:389 
    [Root exception is java.net.ConnectException: Connection refused: connect]
at org.apache.catalina.realm.JNDIRealm.start(JNDIRealm.java:1558)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1126)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:316)
at org.apache.catalina.core.StandardService.start(StandardService.java:450)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:2143)
at org.apache.catalina.startup.Catalina.start(Catalina.java:463)
at org.apache.catalina.startup.Catalina.execute(Catalina.java:350)
at org.apache.catalina.startup.Catalina.process(Catalina.java:129)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:156)
----- Root Cause -----
javax.naming.CommunicationException: localhost:389 
    [Root exception is java.net.ConnectException: Connection refused: connect]
at com.sun.jndi.ldap.Connection.<init>(Connection.java:204)
at com.sun.jndi.ldap.LdapClient.<init>(LdapClient.java:119)
at com.sun.jndi.ldap.LdapClient.getInstance(LdapClient.java:1668)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2599)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:290)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:53)
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:662)
at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:243)
at javax.naming.InitialContext.init(InitialContext.java:219)
at javax.naming.InitialContext.<init>(InitialContext.java:195)
at javax.naming.directory.InitialDirContext.<init>(InitialDirContext.java:80)
at org.apache.catalina.realm.JNDIRealm.open(JNDIRealm.java:1482)
at org.apache.catalina.realm.JNDIRealm.start(JNDIRealm.java:1556)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1126)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:316)
at org.apache.catalina.core.StandardService.start(StandardService.java:450)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:2143)
at org.apache.catalina.startup.Catalina.start(Catalina.java:463)
at org.apache.catalina.startup.Catalina.execute(Catalina.java:350)
at org.apache.catalina.startup.Catalina.process(Catalina.java:129)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:156)
Caused by: java.net.ConnectException: Connection refused: connect
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:305)
at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:171)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:158)
at java.net.Socket.connect(Socket.java:452)
at java.net.Socket.connect(Socket.java:402)
at java.net.Socket.<init>(Socket.java:309)
at java.net.Socket.<init>(Socket.java:124)
at com.sun.jndi.ldap.Connection.createSocket(Connection.java:346)
at com.sun.jndi.ldap.Connection.<init>(Connection.java:181)
... 24 more
Stopping service Tomcat-Standalone
Catalina.stop: LifecycleException:  Coyote connector has not been started
LifecycleException:  Coyote connector has not been started
at org.apache.coyote.tomcat4.CoyoteConnector.stop(CoyoteConnector.java:1296)
at org.apache.catalina.core.StandardService.stop(StandardService.java:499)
at org.apache.catalina.core.StandardServer.stop(StandardServer.java:2178)
at org.apache.catalina.startup.Catalina.start(Catalina.java:494)
at org.apache.catalina.startup.Catalina.execute(Catalina.java:350)
at org.apache.catalina.startup.Catalina.process(Catalina.java:129)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:156)

3 个答案:

答案 0 :(得分:2)

尝试添加'alternateURL'属性,其值与connectionURL相同。出于某种原因,当我遇到类似的问题时,这对我有用。

答案 1 :(得分:2)

我知道这是一个非常古老的帖子,但我最近遇到了这个问题,问题在于我将我的JNDIRealm嵌套在LockoutRealm中。

通过将JNDIRealm作为我的顶级领域我不再有描述的问题。如果你确实需要锁定领域,这个解决方案没有帮助。

答案 2 :(得分:1)

  • 许多tomcats配置元素支持 debug 属性。尝试将 debug =“99”添加到领域配置中。 (参见tomcats realm-howto中的示例,搜索 debug =“99”
  • 额外额外确定它不是拼写错误,例如在connectionURL的大写中
  • 查看conf / server.xml中是否还有其他提及“localhost”(或“127.0”)的文件
  • 看看是否在conf / * / * / *。xml中提到“localhost”(或“127.0”)(虽然这不应该导致tomcat无法启动:它只会影响该应用程序)
  • 从最小的server.xml开始 - 如果您使用tomcat 5.x,则提供的文件“server-minimal.xml”比默认的server.xml更易于阅读
  • 确保您不受server.xml中各种xml注释的影响 - 我多次被它们咬过。