LDAP defaults

[Nate Klingenstein]

All,

Just a couple questions:

1)  Is there a reason why the attribute filter for resolution doesn’t depend on the authentication filter like the other properties do, and is there a difference between requestContext.principalName and {user}?  e.g.

idp.authn.LDAP.bindDN                           = uid=myservice,ou=system
idp.attribute.resolver.LDAP.bindDN              = %{idp.authn.LDAP.bindDN}

…

idp.authn.LDAP.userFilter                       = (uid={user})
idp.attribute.resolver.LDAP.searchFilter        = (uid=$requestContext.principalName)

2)  What is the meaning of the “true” built into the Spring property for useStartTLS?  Is there a reason why it’s not just “true” or a pointer to the property?

idp.attribute.resolver.LDAP.useStartTLS         = %{idp.authn.LDAP.useStartTLS:true}

   <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"
       ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"
       baseDN="%{idp.attribute.resolver.LDAP.baseDN}"
       principal="%{idp.attribute.resolver.LDAP.bindDN}"
       principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"
       useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS:true}”>

Thanks in advance for the help,
Nate.