question on attribute resolver filter

[Leonard Kroll]

Hi, I am binding to the AD LDAP, but getting an event 1535, problem
2001, no object found.
It seems this is caused by an invalid filter in the request.
Can someone point out what I am doing wrong in the filter?
 
The user is identified by sAMAccountName and authenticates using it.
 
All help is greatly appreciated
~lennyK
 
 
<resolver:AttributeDefinition xsi:type="ad:Simple" id="sAMAccountName"
sourceAttributeID="sAMAccountName"
xmlns="urn:mace:shibboleth:2.0:resolver:ad">
<resolver:Dependency ref="myLDAP" />
<resolver:AttributeEncoder xsi:type="enc:SAML1String"
name="urn:mace:dir:attribute-def:sAMAccountName" />
<resolver:AttributeEncoder xsi:type="enc:SAML2String"
name="urn:oid:1.2.840.113556.1.4.221" friendlyName="sAMAccountName" />
</resolver:AttributeDefinition>
 
 
    <resolver:DataConnector id="myLDAP" xsi:type="LDAPDirectory"
xmlns="urn:mace:shibboleth:2.0:resolver:dc"
        ldapURL="ldap://xxx.xxx.xxx.xxx" 
        baseDN="ou=staff,dc=umassb,dc=net" 
        principal="aaaaa.bbbbb at umassb.net"
        principalCredential="xxxxxxxxxx"
        lowercaseAttributeNames="true"
        noResultIsError="true"
        searchScope="SUBTREE">
   
        <dc:FilterTemplate>
            <![CDATA[
                (sAMAccountName=($requestContext.sAMAccountName))
           ]]>
        </dc:FilterTemplate>
        <LDAPProperty name="java.naming.referral" value="follow"/>
    </resolver:DataConnector>
 
 
Leonard Kroll
UNIX / GIS Administrator
Univ. Massachusetts Boston
Leonard(dot)Kroll(at)umb.edu <mailto:at at umb.edu> 
Phone: 617-287-5048
fax:      617-287-5224
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111014/86d7b883/attachment.html