[java-identity-provider] branch master updated: IDP-1175 Setup sensible searchFilter for AD

[Rod Widdowson]

This is an automated email from the git hooks/post-receive script.

rdw pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=68f5f1acf12a08ed238e669f3251344fa28f2ab9

The following commit(s) were added to refs/heads/master by this push:
       new  68f5f1a   IDP-1175 Setup sensible searchFilter for AD
68f5f1a is described below

commit 68f5f1acf12a08ed238e669f3251344fa28f2ab9
Author: Rod Widdowson <rdw at steadingsoftware.com>
AuthorDate: Sun Apr 29 11:25:11 2018 +0100

    IDP-1175 Setup sensible searchFilter for AD
    
    (Windows Installer only)
    
    https://issues.shibboleth.net/jira/browse/IDP-1175
---
 idp-installer/src/main/wix/scripts/shib_write_configs.vbs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/idp-installer/src/main/wix/scripts/shib_write_configs.vbs b/idp-installer/src/main/wix/scripts/shib_write_configs.vbs
index 0e6b7b7..271ec54 100644
--- a/idp-installer/src/main/wix/scripts/shib_write_configs.vbs
+++ b/idp-installer/src/main/wix/scripts/shib_write_configs.vbs
@@ -156,6 +156,7 @@ if ConfigureAd = "true" then
         LDAPFile.Writeline "idp.authn.LDAP.baseDN=" & LDAPSearchPath
         LDAPFile.Writeline "idp.authn.LDAP.userFilter= (sAMAccountName={user})"
         LDAPFile.Writeline "idp.authn.LDAP.bindDN=" & AdUser & "@" & AdDomain
+        LDAPFile.Writeline "idp.attribute.resolver.LDAP.searchFilter= (sAMAccountName=$resolutionContext.principal)"
         LDAPFile.Writeline "idp.authn.LDAP.bindDNCredential=" & AdPass
         LDAPFile.Writeline "idp.authn.LDAP.dnFormat= %s@" & AdDomain
         LDAPFile.Close

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.