[java-identity-provider] branch master updated: LDAP example should be configured for a single result only.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=aaa943a610ccdcfcfaeefa19c0e6a654eec118b5

The following commit(s) were added to refs/heads/master by this push:
       new  aaa943a61 LDAP example should be configured for a single result only.
aaa943a61 is described below

commit aaa943a610ccdcfcfaeefa19c0e6a654eec118b5
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Mon Jun 22 12:34:05 2020 -0400

    LDAP example should be configured for a single result only.
---
 idp-conf/src/main/resources/conf/attribute-resolver-ldap.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/idp-conf/src/main/resources/conf/attribute-resolver-ldap.xml b/idp-conf/src/main/resources/conf/attribute-resolver-ldap.xml
index ca46e5d66..80a2fe80f 100644
--- a/idp-conf/src/main/resources/conf/attribute-resolver-ldap.xml
+++ b/idp-conf/src/main/resources/conf/attribute-resolver-ldap.xml
@@ -62,6 +62,8 @@
         connectTimeout="%{idp.attribute.resolver.LDAP.connectTimeout}"
         trustFile="%{idp.attribute.resolver.LDAP.trustCertificates}"
         responseTimeout="%{idp.attribute.resolver.LDAP.responseTimeout}"
+        noResultIsError="true"
+        multipleResultsIsError="true"
         exportAttributes="mail displayName sn givenName departmentNumber employeeNumber eduPersonEntitlement eduPersonAssurance">
         <FilterTemplate>
             <![CDATA[

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.