[java-identity-provider] branch main updated: IDP-1848 Expose any missing settings for LDAP pooling

[Rod Widdowson]

This is an automated email from the git hooks/post-receive script.

rdw pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=12c6857d97eaa6ade9249c891bf38279bb3e8755

The following commit(s) were added to refs/heads/main by this push:
       new  12c6857d9 IDP-1848 Expose any missing settings for LDAP pooling
12c6857d9 is described below

commit 12c6857d97eaa6ade9249c891bf38279bb3e8755
Author: Rod Widdowson <rdw at steadingsoftware.com>
AuthorDate: Mon Aug 23 20:19:47 2021 +0100

    IDP-1848 Expose any missing settings for LDAP pooling
    
    https://shibboleth.atlassian.net/browse/IDP-1848
    
    Wire in
            idp.pool.LDAP.validateDN
    as a replacement for
            idp.authn.LDAP.validateDN
    Deprecate the second
---
 .../src/main/resources/net/shibboleth/idp/conf/global-system.xml        | 1 +
 .../resources/net/shibboleth/idp/flows/authn/password-authn-beans.xml   | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/global-system.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/global-system.xml
index 600d60d75..39a5dcbe5 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/global-system.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/global-system.xml
@@ -94,6 +94,7 @@
                 <entry key="idp.xml.securityManager">
                     <null/>
                 </entry>
+                <entry key="idp.authn.LDAP.validateDN" value="idp.pool.LDAP.validateDN" />
                 <entry key="idp.consent.userStorageKey" value="idp.consent.attribute-release.userStorageKey" />
                 <entry key="idp.consent.userStorageKeyAttribute" value="idp.consent.attribute-release.userStorageKeyAttribute" />
                 <entry key="idp.persistentId.store" value="idp.persistentId.generator" />
diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/password-authn-beans.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/password-authn-beans.xml
index c56364c61..77ffc193e 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/password-authn-beans.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/password-authn-beans.xml
@@ -159,7 +159,7 @@
         p:validateOnCheckout="%{idp.pool.LDAP.validateOnCheckout:false}"
         p:validatePeriodically="%{idp.pool.LDAP.validatePeriodically:true}"
         p:validatePeriod="%{idp.pool.LDAP.validatePeriod:PT5M}"
-        p:validateDn="#{'%{idp.authn.LDAP.validateDN:}'.trim()}"
+        p:validateDn="#{'%{idp.pool.LDAP.validateDN:%{idp.authn.LDAP.validateDN:}}'.trim()}"
         p:validateFilter="#{'%{idp.pool.LDAP.validateFilter:(objectClass=*)}'.trim()}"
         p:bindPoolPassivatorType="#{'%{idp.authn.LDAP.bindPoolPassivator:none}'.trim()}"
         p:prunePeriod="%{idp.pool.LDAP.prunePeriod:PT5M}"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.