如何使用受信任的域用户向活动目录进行身份验证？

Question

Using Active Directory Domains and Trusts, I added the trusted domain named domainB.com for the domainA.com Using this code to authenticate to active directory, I get the error "LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece"

Hashtable<String, String> env = new Hashtable<String, String>();
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldap://domainA.com:389/");
env.put(Context.SECURITY_AUTHENTICATION, "simple");
env.put(Context.SECURITY_PRINCIPAL, "domainB\\userB");
env.put(Context.SECURITY_CREDENTIALS, "*******");
env.put(Context.REFERRAL, "follow");
InitialLdapContext ctx = new InitialLdapContext(env, null); //this line will cause error

How can I authenticate to AD using the trusted domain user? Thank you for your help

Answer 1

error 49 usually means bad credentials.

Also in the last line you can use

DirContext context = new InitialDirContext(env);

JNDI will do the rest.