[SHIRO-305] Connect to a SSL secured LDAP

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.1.0
• Fix Version/s: 1.2.0
• Component/s: Realms
• Environment: Windows 7, Tomcat 6.x
• Assignee: Les Hazlewood
• Reporter: Peter Diefenthäler
• Created: 15/Jun/11 07:25
• Updated: 24/Jan/12 01:11
• Resolved: 07/Jan/12 03:41

Description

Configuration for connecting the Shiro framework with a SSL secured LDAP (LDAPv2 & LDAPv3 on SSLv3 port) fails.

Parameters for LDAP in the shiro.ini file:
[main]
...
ldapRealm.contextFactory.environment[java.naming.security.protocol] = ssl
ldapRealm.contextFactory.environment[com.sun.jndi.ldap.connect.pool.protocol] = plain ssl
ldapRealm.contextFactory.environment[com.sun.jndi.ldap.connect.pool] = true

These entries lead to following error message:

org.apache.shiro.config.ConfigurationException: Map property value [ssl] contained key-value pair token [ssl] that does not properly split to a single key and pair. This must be the case for all map entries.