[Solved] Setting up LDAP with Shibboleth Idp 2.4.0

[Nate Klingenstein]

To be clear, it's possible to append the base search DN to the URL, I just find it harder to read.  I'm not sure what specifying a null baseDn will do in that case versus not specifying baseDn at all.

To answer your below question, yes, this is the subtreeSearch parameter.

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass

Something similar will need to be specified in the attribute resolver, of course(searchScope).

https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverLDAPDataConnector

On May 20, 2013, at 20:05 , Farrukh Najmi wrote:

> The default search strategy in edu.vt.middleware.ldap.jaas.LdapLoginModule seems to not work unless you start serach at the parent entry (ou=people). I suspect this is configurable but it is not obvious to me how. Any advice?