ldap 错误-LDAP：错误代码 49 - 80090308：LdapErr：DSID-0C0903A9

Question

我们已经在 tomcat 中配置了 ldap 设置。这些天它工作正常。但突然出现 ldap 错误。以下错误的含义是什么。

这是在 tomcat 配置文件中设置的 ldap 配置。

Jul 19, 2016 11:14:04 AM org.apache.tomcat.util.digester.SetPropertiesRule begin
    WARNING: [SetPropertiesRule]{Context/Realm} Setting property 'debug' to '99' did not find a matching property.
    Jul 19, 2016 11:14:04 AM org.apache.tomcat.util.digester.SetPropertiesRule begin
    WARNING: [SetPropertiesRule]{Context/Realm} Setting property 'curUserPattern' to '%s@corp' did not find a matching property.
    Jul 19, 2016 11:14:04 AM org.apache.tomcat.util.digester.SetPropertiesRule begin
    WARNING: [SetPropertiesRule]{Context/Realm} Setting property 'resourceName' to 'add_web_realm' did not find a matching property.
    Jul 19, 2016 11:14:05 AM org.apache.catalina.core.ContainerBase addChildInternal
    SEVERE: ContainerBase.addChild: start:
    org.apache.catalina.LifecycleException: Failed to start component [StandardEngine[Catalina].StandardHost[localhost].StandardContext[/add-web]]
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:154)


    Caused by: org.apache.catalina.LifecycleException: Failed to start component [Realm[JNDIRealm]]
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:154)
    at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5350)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
    ... 10 more
    Caused by: org.apache.catalina.LifecycleException: Exception opening directory server connection
    at org.apache.catalina.realm.JNDIRealm.startInternal(JNDIRealm.java:2191)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
    ... 12 more
    Caused by: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 775, v1db1^@]
    at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3087)

Answer 1

您的问题的答案在于 LDAP 错误代码：

[LDAP：错误代码 49 - 80090308：LdapErr：DSID-0C0903A9，注释：AcceptSecurityContext 错误，数据 775，v1db1^@]

这data 775是重要的部分。该十六进制代码转换为十进制系统错误代码 1909，这是 Windows 系统错误代码。这是记录在这里：

ERROR_ACCOUNT_LOCKED_OUT

1909 (0x775)

The referenced account is currently locked out and may not be logged on to.

因此，您尝试使用的帐户似乎已被锁定。