<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://issues.shibboleth.net/jira">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt" bgcolor="#f5f5f5">
<!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-9ad86df3-a762-4d91-99cd-acfb6bcc5116" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="rbenedetti@cineca.it" id="email_rbenedetti@cineca.it" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=rbenedetti%40cineca.it" style="color:#0052cc;; color: #3b73af; text-decoration: none">ROBERTO BENEDETTI</a> <strong>created</strong> an issue </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tbody>
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="page-title-pattern-first-line " style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; padding-top: 10px"> <a href="https://issues.shibboleth.net/jira/browse/IDP" style="color: #3b73af; text-decoration: none">Identity Provider</a> / <a href="https://issues.shibboleth.net/jira/browse/IDP-1675" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-dcda2f02-46ce-4ced-b3be-002c8113f040" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom"></a> <a href="https://issues.shibboleth.net/jira/browse/IDP-1675" style="color: #3b73af; text-decoration: none">IDP-1675</a> </td>
</tr>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1675" style="color: #3b73af; text-decoration: none">unexpected behaviour on LDAP connector (unwanted alias dereferencing)</a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand wrapper-special-margin" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 10px; padding-bottom: 5px" bgcolor="#ffffff">
<table class="keyvalue-table" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Issue Type:</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-avatar-dcda2f02-46ce-4ced-b3be-002c8113f040" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom"> Bug </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Affects Versions:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 3.4.4 </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Assignee:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="rdw@iay.org.uk" id="email_rdw@iay.org.uk" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=rdw%40iay.org.uk" style="color:#0052cc;; color: #3b73af; text-decoration: none">Rod Widdowson</a> </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Components:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> Attribute Resolver </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Created:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 10/Sep/20 3:21 PM </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Priority:</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-static-major-5db8d9f5-f4be-41d0-abdf-020eb2b0fa84" height="16" width="16" border="0" align="absmiddle" alt="Major" style="vertical-align: text-bottom"> Major </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Reporter:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="rbenedetti@cineca.it" id="email_rbenedetti@cineca.it" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=rbenedetti%40cineca.it" style="color:#0052cc;; color: #3b73af; text-decoration: none">ROBERTO BENEDETTI</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand issue-description-container" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 5px; padding-bottom: 10px" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0"> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0; margin-top: 0">hi.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">we are experiencing an unexpected behavior in LDAP attribute resolution for some (not every) of our users.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">when the IdP tries to resolve user attributes querying the LDAP server, we get these lines in the LDAP log file <span class="error">[1]</span> but these lines in the IdP log file <span class="error">[2]</span>.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">apparently, when querying with this search base:</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">"ou=utenti,o=unito,dc=unito,dc=it"</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">we get results pertaining to this LDAP subtree:</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">"ou=appartenenza,ou=personale,o=unito,dc=unito,dc=it"</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">which is actually the position where the alias (not the record) is located.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">the final result is that user attributes are not resolved (and thus returned) to the SP.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">as you may see, "deref=0" is specified/received by the LDAP server so this should not be the case.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">we noticed that this does not occur with every user but just with a subset of them (and, with the ones in this set, it does always happen).</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">we also verified that, copying the query parameters and submitting the query to the LDAP server via "ldapsearch", the result is the one expected.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">we also made an other test: we tried removing the alias entry from LDAP - which is indeed needed by other applications but not by the IdP - and obtained the expected result: user attributes properly resolved. re-writing the alias record, we obtained the initial (and unwanted) result.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">please consider that, inspecting logs of two weeks ago, we realized that for these same users attributes were properly resolved and that, since then, no change was made on IdP or LDAP configuration and on IdP war and OpenLDAP binaries.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">could you please</p>
<ul class="alternate" type="square">
<li>elaborate on what could be the cause of this weird behavior</li>
<li>provide a way to at least workaround this issue<br> ?</li>
</ul> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">feel free to ask for any further info that could help your analysis.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">thanks in advance,<br> roberto benedetti</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"><span class="error">[1]</span></p>
<div class="preformatted panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="preformattedContent panelContent" style="padding: 9px 12px">
<pre style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal; white-space: pre; word-break: normal; word-wrap: break-word; word-break: break-word; white-space: pre-wrap">Sep 10 16:31:40 ldap09 slapd-unito-prod[1358]: conn=4268306 fd=134 ACCEPT from IP=10.253.100.1:65314 (IP=0.0.0.0:8501)
Sep 10 16:31:40 ldap09 slapd-unito-prod[1358]: conn=4268306 fd=134 TLS established tls_ssf=128 ssf=128
Sep 10 16:31:40 ldap09 slapd-unito-prod[1358]: conn=4268306 op=0 BIND dn="cn=Manager,dc=unito,dc=it" method=128
Sep 10 16:31:40 ldap09 slapd-unito-prod[1358]: conn=4268306 op=0 BIND dn="cn=Manager,dc=unito,dc=it" mech=SIMPLE ssf=0
Sep 10 16:31:40 ldap09 slapd-unito-prod[1358]: conn=4268306 op=0 RESULT tag=97 err=0 text=
Sep 10 16:31:40 ldap09 slapd-unito-prod[1358]: conn=4268306 op=1 SRCH base="ou=utenti,o=unito,dc=unito,dc=it" scope=2 deref=0 filter="(&(&(objectClass=ateneoPerson)(objectClass=eduPerson)(objectClass=inetOrgPerson)(objectClass=schacEmployeeInfo)(objectClass=schacPersonalCharacteristics)(objectClass=schacContactLocation))(uid=fculasso))"
Sep 10 16:31:40 ldap09 slapd-unito-prod[1358]: conn=4268306 op=1 SRCH attr=ateneoStrutturaDidatticaDN eduPersonEntitlement ateneoCDSCodice givenName dn objectclass schacPersonalPosition ateneoStrutturaAfferenzaOrganizzativaDN uid ateneoPersonCF ateneoStrutturaAfferenzaDidatticaDN ateneoPersonCDSDN sn ateneoStruttureCodice objectClass javaSerializedData javaClassName javaFactory javaCodeBase javaReferenceAddress javaClassNames javaRemoteLocation
Sep 10 16:31:40 ldap09 slapd-unito-prod[1358]: conn=4268306 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Sep 10 16:31:40 ldap09 slapd-unito-prod[1358]: conn=4268306 op=2 UNBIND
Sep 10 16:31:40 ldap09 slapd-unito-prod[1358]: conn=4268306 fd=134 closed
</pre>
</div>
</div> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> </p>
<div class="preformatted panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="preformattedContent panelContent" style="padding: 9px 12px">
<pre style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal; white-space: pre; word-break: normal; word-wrap: break-word; word-break: break-word; white-space: pre-wrap">2020-09-10 16:33:12,578 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:244] - Attribute Resolver 'ShibbolethAttributeResolver': Initiating attribute resolution
2020-09-10 16:33:12,579 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:252] - Attribute Resolver 'ShibbolethAttributeResolver': Attempting to resolve the following attribute definitions [commonName, strutturaAppartenenzaNome, WebEx_email, givenname_moodle, ateneoPersonMotStaStuCodDes, codCorsoLaurea, WebEx_firstname, eduPersonOrgDN, corsoLaurea, employeeNumber, ateneoPersonStaStuCodDes, spidEmail, ldapAnnoIscrizione, eduPersonPrincipalName, telefono, ateneiUnitoPersonCF, ateneiUnitoPersonCDSDN, eduPersonEntitlement, strutturaAppartenenzaElearning, ateneoPersonMotStaStuCod, strutturaAfferenza, givenName, spidAddress, nome, sn_moodle, ateneiUnitoStrutturaLavoroDN, strutturaAfferenzaNome, ateneiUnitoStrutturaAppartenenzaDN, schacExpiryDate, elearningInstanceList, ateneiUnitoStrutturaAfferenzaDN, departmentNumber, strutturaAppartenenza, spidGender, mail_moodle, profilo, telephoneNumber, spidPlaceOfBirth, cognome, eduPersonAffiliation, displayName, ateneiUnitoPersonMatricola, spidIdCard, codiceFiscale, WebEx_lastname, spidFiscalNumber, schacPersonalPosition, uid, eduPersonPrimaryAffiliation, codFacolta, transformedID, eduPersonScopedAffiliation, eduPersonTargetedID, surname, ateneiUnitoFacoltaDN, spidName, spidDateOfBirth, WebEx_uid, sn, email, organizationalUnit, spidMobilePhone, spidCode, ruolo, employeeType, eduPersonOrgUnitDN, eduPersonPrimaryOrgUnitDN, spidFamilyName, CfPartitaIvaImpresa, ateneoPersonStaStuCod]
2020-09-10 16:33:12,579 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:442] - Attribute Resolver 'ShibbolethAttributeResolver': Resolving dependencies for 'commonName'
2020-09-10 16:33:12,580 - DEBUG [net.shibboleth.idp.attribute.resolver.impl.AttributeResolverImpl:398] - Attribute Resolver 'ShibbolethAttributeResolver': Resolving data connector LDAPutenti
2020-09-10 16:33:12,581 - DEBUG [net.shibboleth.idp.attribute.resolver.dc.ldap.impl.TemplatedExecutableSearchFilterBuilder:212] - Template text (uid=$resolutionContext.principal) yields (uid=fculasso)
2020-09-10 16:33:12,581 - DEBUG [org.ldaptive.SearchOperation:138] - execute request=[org.ldaptive.SearchRequest@1926139859::baseDn=o=unito,dc=unito,dc=it, searchFilter=[org.ldaptive.SearchFilter@-158813687::filter=(uid=fculasso), parameters={}], returnAttributes=[], searchScope=SUBTREE, timeLimit=3000, sizeLimit=1, derefAliases=null, typesOnly=false, binaryAttributes=null, sortBehavior=UNORDERED, searchEntryHandlers=[[org.ldaptive.handler.DnAttributeEntryHandler@-1580910376::dnAttributeName=entryDN, addIfExists=false]], searchReferenceHandlers=null, controls=null, followReferrals=false, intermediateResponseHandlers=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@1961008189::config=[org.ldaptive.ConnectionConfig@18351142::ldapUrl=ldap://ldap-unito-prod.cineca.it:389, connectTimeout=3000, responseTimeout=3000, sslConfig=[org.ldaptive.ssl.SslConfig@545113949::credentialConfig=org.ldaptive.ssl.CredentialConfigFactory$2@59331b63, trustManagers=null, hostnameVerifier=null, hostnameVerifierConfig=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=false, useStartTLS=true, connectionInitializer=[org.ldaptive.BindConnectionInitializer@1735349302::bindDn=cn=Manager,dc=unito,dc=it, bindSaslConfig=null, bindControls=null]], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiStartTLSConnectionFactory@1584149930::metadata=[ldapUrl=ldap://ldap-unito-prod.cineca.it:389, count=1], environment=\{com.sun.jndi.ldap.connect.timeout=3000, java.naming.ldap.version=3, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, com.sun.jndi.ldap.read.timeout=3000}, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@504889592::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=org.ldaptive.provider.ConnectionStrategies$ActivePassiveConnectionStrategy@6a9d13f9, controlProcessor=org.ldaptive.provider.ControlProcessor@40c914bc, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null], sslSocketFactory=[org.ldaptive.ssl.TLSSocketFactory@1366915769::factory=sun.security.ssl.SSLSocketFactoryImpl@1381dfa2, sslConfig=[org.ldaptive.ssl.SslConfig@1944234651::credentialConfig=org.ldaptive.ssl.CredentialConfigFactory$2@59331b63, trustManagers=null, hostnameVerifier=null, hostnameVerifierConfig=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null]], hostnameVerifier=null], providerConnection=org.ldaptive.provider.jndi.JndiStartTLSConnection@4c9c0028]
2020-09-10 16:33:12,584 - DEBUG [org.ldaptive.provider.jndi.JndiStartTLSConnection:1117] - Ignoring naming exception
javax.naming.SizeLimitExceededException: [LDAP: error code 4 - Sizelimit Exceeded]
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3206)
2020-09-10 16:33:12,587 - DEBUG [org.ldaptive.SearchOperation:168] - execute response=[org.ldaptive.Response@992893262::result=[org.ldaptive.SearchResult@-1702958946::entries=[[dn=uid=fculasso,ou=010091,ou=appartenenza,ou=personale,o=unito,dc=unito,dc=it[[aliasedObjectName[uid=fculasso,ou=c,ou=utenti,o=unito,dc=unito,dc=it]], [uid[fculasso]], [objectClass[top, alias, extensibleObject]], [entryDN[uid=fculasso,ou=010091,ou=appartenenza,ou=personale,o=unito,dc=unito,dc=it]]], responseControls=null, messageId=-1]], references=[]], resultCode=SIZE_LIMIT_EXCEEDED, message=null, matchedDn=null, responseControls=null, referralURLs=null, messageId=-1] for request=[org.ldaptive.SearchRequest@1926139859::baseDn=o=unito,dc=unito,dc=it, searchFilter=[org.ldaptive.SearchFilter@-158813687::filter=(uid=fculasso), parameters={}], returnAttributes=[], searchScope=SUBTREE, timeLimit=3000, sizeLimit=1, derefAliases=null, typesOnly=false, binaryAttributes=null, sortBehavior=UNORDERED, searchEntryHandlers=[[org.ldaptive.handler.DnAttributeEntryHandler@-1580910376::dnAttributeName=entryDN, addIfExists=false]], searchReferenceHandlers=null, controls=null, followReferrals=false, intermediateResponseHandlers=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@1961008189::config=[org.ldaptive.ConnectionConfig@18351142::ldapUrl=ldap://ldap-unito-prod.cineca.it:389, connectTimeout=3000, responseTimeout=3000, sslConfig=[org.ldaptive.ssl.SslConfig@545113949::credentialConfig=org.ldaptive.ssl.CredentialConfigFactory$2@59331b63, trustManagers=null, hostnameVerifier=null, hostnameVerifierConfig=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=false, useStartTLS=true, connectionInitializer=[org.ldaptive.BindConnectionInitializer@1735349302::bindDn=cn=Manager,dc=unito,dc=it, bindSaslConfig=null, bindControls=null]], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiStartTLSConnectionFactory@1584149930::metadata=[ldapUrl=ldap://ldap-unito-prod.cineca.it:389, count=1], environment=\{com.sun.jndi.ldap.connect.timeout=3000, java.naming.ldap.version=3, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, com.sun.jndi.ldap.read.timeout=3000}, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@504889592::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=org.ldaptive.provider.ConnectionStrategies$ActivePassiveConnectionStrategy@6a9d13f9, controlProcessor=org.ldaptive.provider.ControlProcessor@40c914bc, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null], sslSocketFactory=[org.ldaptive.ssl.TLSSocketFactory@1366915769::factory=sun.security.ssl.SSLSocketFactoryImpl@1381dfa2, sslConfig=[org.ldaptive.ssl.SslConfig@1944234651::credentialConfig=org.ldaptive.ssl.CredentialConfigFactory$2@59331b63, trustManagers=null, hostnameVerifier=null, hostnameVerifierConfig=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null]], hostnameVerifier=null], providerConnection=org.ldaptive.provider.jndi.JndiStartTLSConnection@4c9c0028]
2020-09-10 16:33:12,588 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:139] - Data Connector 'LDAPutenti': produced the following 4 attributes during resolution [objectClass, uid, aliasedObjectName, entryDN]
2020-09-10 16:33:12,588 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:143] - Data Connector 'LDAPutenti': Attribute 'objectClass': Values '[StringAttributeValue\{value=top}, StringAttributeValue\{value=alias}, StringAttributeValue\{value=extensibleObject}]'
2020-09-10 16:33:12,589 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:143] - Data Connector 'LDAPutenti': Attribute 'uid': Values '[StringAttributeValue\{value=fculasso}]'
2020-09-10 16:33:12,589 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:143] - Data Connector 'LDAPutenti': Attribute 'aliasedObjectName': Values '[StringAttributeValue\{value=uid=fculasso,ou=c,ou=utenti,o=unito,dc=unito,dc=it}]'
2020-09-10 16:33:12,589 - DEBUG [net.shibboleth.idp.attribute.resolver.AbstractDataConnector:143] - Data Connector 'LDAPutenti': Attribute 'entryDN': Values '[StringAttributeValue\{value=uid=fculasso,ou=010091,ou=appartenenza,ou=personale,o=unito,dc=unito,dc=it}]'
</pre>
</div>
</div> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0"> </p> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1675#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-eb8e6dfb-b2c9-4f94-8977-98ad20c5573e" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1675#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian Jira <span id="footer-build-information">(v8.5.4#805004-<span title="0444eab799707f9ad7b248d69f858774aadfd250" data-commit-id="0444eab799707f9ad7b248d69f858774aadfd250}">sha1:0444eab</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="https://issues.shibboleth.net/jira/images/mail/atlassian-email-logo.png" alt="Atlassian logo" title="Atlassian logo" width="191" height="24" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
</body>
</html>