[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/conf/authn/ldap-authn-config.xml

noreply at shibboleth.net noreply at shibboleth.net
Wed Dec 17 11:22:44 EST 2014


Author: scantor
Date: Wed Dec 17 11:22:44 2014
New Revision: 7147

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=7147&view=rev
Log:
Default properties.

Modified:
    trunk/idp-conf/src/main/resources/conf/authn/ldap-authn-config.xml

Modified: trunk/idp-conf/src/main/resources/conf/authn/ldap-authn-config.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/authn/ldap-authn-config.xml?rev=7147&r1=7146&r2=7147&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/authn/ldap-authn-config.xml (original)
+++ trunk/idp-conf/src/main/resources/conf/authn/ldap-authn-config.xml Wed Dec 17 11:22:44 2014
@@ -10,7 +10,7 @@
        default-destroy-method="destroy"
        default-lazy-init="true">
 
-    <alias name="%{idp.authn.LDAP.authenticator}" alias="shibboleth.authn.LDAP.authenticator" />
+    <alias name="%{idp.authn.LDAP.authenticator:anonSearchAuthenticator}" alias="shibboleth.authn.LDAP.authenticator" />
     <bean id="shibboleth.authn.LDAP.returnAttributes" class="org.springframework.util.StringUtils" factory-method="commaDelimitedListToStringArray">
         <constructor-arg type="java.lang.String" value="%{idp.authn.LDAP.returnAttributes}" />
     </bean>
@@ -19,10 +19,12 @@
 
     <!-- Connection Configuration -->
     <bean id="connectionConfig" class="org.ldaptive.ConnectionConfig" abstract="true" p:ldapUrl="%{idp.authn.LDAP.ldapURL}"
-        p:useStartTLS="%{idp.authn.LDAP.useStartTLS}" p:useSSL="%{idp.authn.LDAP.useSSL}" p:connectTimeout="%{idp.authn.LDAP.connectTimeout}"
+        p:useStartTLS="%{idp.authn.LDAP.useStartTLS:true}"
+        p:useSSL="%{idp.authn.LDAP.useSSL:false}"
+        p:connectTimeout="%{idp.authn.LDAP.connectTimeout:3000}"
         p:sslConfig-ref="sslConfig" />
 
-    <alias name="%{idp.authn.LDAP.sslConfig}" alias="sslConfig" />
+    <alias name="%{idp.authn.LDAP.sslConfig:defaultTrust}" alias="sslConfig" />
 
     <bean id="defaultTrust" class="org.ldaptive.ssl.SslConfig" />
     <bean id="certificateTrust" class="org.ldaptive.ssl.SslConfig">
@@ -48,14 +50,21 @@
     <bean id="formatDnResolver" class="org.ldaptive.auth.FormatDnResolver" p:format="%{idp.authn.LDAP.dnFormat}" />
 
     <!-- Pool Configuration -->
-    <bean id="connectionPool" class="org.ldaptive.pool.BlockingConnectionPool" abstract="true" init-method="initialize"
-        p:blockWaitTime="%{idp.pool.LDAP.blockWaitTime}" p:poolConfig-ref="poolConfig" p:pruneStrategy-ref="pruneStrategy"
-        p:validator-ref="searchValidator" p:failFastInitialize="%{idp.pool.LDAP.failFastInitialize}" />
-    <bean id="poolConfig" class="org.ldaptive.pool.PoolConfig" p:minPoolSize="%{idp.pool.LDAP.minSize}"
-        p:maxPoolSize="%{idp.pool.LDAP.maxSize}" p:validateOnCheckOut="%{idp.pool.LDAP.validateOnCheckout}"
-        p:validatePeriodically="%{idp.pool.LDAP.validatePeriodically}" p:validatePeriod="%{idp.pool.LDAP.validatePeriod}" />
-    <bean id="pruneStrategy" class="org.ldaptive.pool.IdlePruneStrategy" p:prunePeriod="%{idp.pool.LDAP.prunePeriod}"
-        p:idleTime="%{idp.pool.LDAP.idleTime}" />
+    <bean id="connectionPool" class="org.ldaptive.pool.BlockingConnectionPool" abstract="true"
+        p:blockWaitTime="%{idp.pool.LDAP.blockWaitTime:3000}"
+        p:poolConfig-ref="poolConfig"
+        p:pruneStrategy-ref="pruneStrategy"
+        p:validator-ref="searchValidator"
+        p:failFastInitialize="%{idp.pool.LDAP.failFastInitialize:false}" />
+    <bean id="poolConfig" class="org.ldaptive.pool.PoolConfig"
+        p:minPoolSize="%{idp.pool.LDAP.minSize:3}"
+        p:maxPoolSize="%{idp.pool.LDAP.maxSize:10}"
+        p:validateOnCheckOut="%{idp.pool.LDAP.validateOnCheckout:false}"
+        p:validatePeriodically="%{idp.pool.LDAP.validatePeriodically:true}"
+        p:validatePeriod="%{idp.pool.LDAP.validatePeriod:300}" />
+    <bean id="pruneStrategy" class="org.ldaptive.pool.IdlePruneStrategy"
+        p:prunePeriod="%{idp.pool.LDAP.prunePeriod:300}"
+        p:idleTime="%{idp.pool.LDAP.idleTime:600}" />
     <bean id="searchValidator" class="org.ldaptive.pool.SearchValidator" />
 
     <!-- Anonymous Search Configuration -->
@@ -79,7 +88,7 @@
         <constructor-arg index="1" ref="authHandler" />
     </bean>
     <bean id="bindSearchDnResolver" class="org.ldaptive.auth.PooledSearchDnResolver" p:baseDn="%{idp.authn.LDAP.baseDN}"
-        p:subtreeSearch="%{idp.authn.LDAP.subtreeSearch}" p:userFilter="%{idp.authn.LDAP.userFilter}"
+        p:subtreeSearch="%{idp.authn.LDAP.subtreeSearch:false}" p:userFilter="%{idp.authn.LDAP.userFilter}"
         p:connectionFactory-ref="bindSearchPooledConnectionFactory" />
     <bean id="bindSearchPooledConnectionFactory" class="org.ldaptive.pool.PooledConnectionFactory"
         p:connectionPool-ref="bindSearchConnectionPool" />



More information about the commits mailing list