Using AD as Primary - Luminis LDAP for Luminis internal users

I have set up my jaas.conf file as follows.

jaasEas {
com.pipeline.security.authen.JaasLdapLoginModule sufficient prefix=security.ias.eas.CAMPUS;
com.pipeline.security.authen.JaasLdapLoginModule sufficient prefix=security.ias.eas.luminis;
};

All is well with users and password changes in our EAS (CAMPUS). However, When I change luminis account password (say allusers-lo) in luminis and go to login I am redirected to the password change page and then when changing the password it errors out.

Failed to change password!

Please try again later or

Contact your system administrator. and in the cp.log the error is:
com.pipeline.security.authen.PasswordException: [CHANGE_PASSWORD_FAILED, Change password failed due to a failure in another subsystem, Failed to change the password in the EAS server.]

Has anyone came upon a fix for this? We are trying to get away from adding system users to the EAS and all users who don't have an account there should be passed back to the luminis ldap for authentication (if they exist there)

Any assistance would be appreciated.

jchannel

0
No votes yet

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

had to add layout owners to the EAS

There doesn't seem to be any way around it.