有人能够通过 LDAP 将 JumpCloud 连接到 Rundeck 吗?

Was anyone able to connect JumpCloud to Rundeck via LDAP?

两天来,我一直在尝试通过 LDAP 将 JC 连接到 Rundeck,但没有成功。绑定用户的用户名和密码 100% 正确。

错误:

ERROR jaas.JettyCachingLdapLoginModule - Naming error
javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]

有人成功配置过吗?

我的 jaas-ldap.conf 文件如下所示:

    com.dtolabs.rundeck.jetty.jaas.JettyCachingLdapLoginModule sufficient
      debug="true"
      contextFactory="com.sun.jndi.ldap.LdapCtxFactory"
      providerUrl="ldaps://ldap.jumpcloud.com"
      bindDN="uid=<username>,ou=Users,o=<xxxxxx>,dc=jumpcloud,dc=com"
      bindPassword="<password>"
      authenticationMethod="simple"
      forceBindingLogin="false"
      userBaseDn="ou=Users,o=<xxxxxx>,dc=jumpcloud,dc=com"
      userRdnAttribute="uid"
      userIdAttribute="uid"
      userPasswordAttribute="userPassword"
      userObjectClass="posixAccount"
      roleBaseDn="ou=Users,o=<xxxxxxx>,dc=jumpcloud,dc=com"
      roleNameAttribute="cn"
      roleUsernameMemberAttribute="memberUid"
      roleMemberAttribute="memberUid"
      roleObjectClass="posixGroup"
      cacheDurationMillis="300000"
      reportStatistics="true"
      supplementalRoles="user"
      timeoutConnect="20000"
      nestedGroups="true";
rundeck {
com.dtolabs.rundeck.jetty.jaas.JettyCombinedLdapLoginModule sufficient
    debug="true"
    contextFactory="com.sun.jndi.ldap.LdapCtxFactory"
    providerUrl="ldap://ldap.jumpcloud.com:389"
    bindDn="uid=xxxxxxxxx,ou=Users,o=xxxxxxxxxxxx,dc=jumpcloud,dc=com"
    bindPassword="xxxxxxxxxxxxxxxxx"
    authenticationMethod="simple"
    forceBindingLogin="true"
    forceBindingLoginUseRootContextForRoles="true"
    userBaseDn="ou=Users,o=xxxxxxxxxxxx,dc=jumpcloud,dc=com"
    userRdnAttribute="cn"
    userIdAttribute="uid"
    userPasswordAttribute="userPassword"
    userObjectClass="person"
    roleBaseDn="ou=Users,o=XXXXXXXXXXX,dc=jumpcloud,dc=com"
    roleNameAttribute="cn"
    roleMemberAttribute="uniqueMember"
    roleObjectClass="(&(objectClass=groupOfNames)(cn=*))"
    rolePrefix=""
    cacheDurationMillis="600000"
    reportStatistics="true"

;

org.eclipse.jetty.jaas.spi.PropertyFileLoginModule required
    debug="true"
    file="/home/rundeck/server/config/realm.properties";

};

适合我:D