How can I configure userFIlter login.config

Teresa Fasano t.fasano at cineca.it
Wed Jun 4 12:30:05 EDT 2014


Hi,
I need to set the userFilter in the login.config with the attribute uid 
and the name of two objectClass.

The filter in the ldapsearch is:
ldapsearch -x -H ldap://LDAP-MY-SERVER:389-D 'cn=blah,blah,blah' -w 
'xxxxxxxx'-b 'my-base-dn' -a never 
"(&(uid=user-test)(|(objectClass=name-of-class1)(objectClass=name-of-class2)))"

How can I configure the filter 
"(&(uid=user-test)(|(objectClass=name-of-class1)(objectClass=name-of-class2)))"?

I tried with 
userFilter="&(uid)(|(objectClass=name-of-class1)(objectClass=name-of-class2))) 
but I obtained:

18:22:04.616 - INFO 
[com.cineca.shibboleth.idp.provider.MultiLoginServlet:328] - The user 
identita.digitale cannot be authenticated
javax.security.auth.login.LoginException: 
javax.naming.directory.InvalidSearchFilterException: Missing 'equals';

Do you know how can I configure it?

thanks,
Teresa

-- 
----------------------------------
L'educazione è il pane dell'anima
----------------------------------

Teresa Fasano

CINECA
System and Technologies Department
Middleware and Infrastructure Group
Via Magnanelli, 6/3
Casalecchio di Reno (Bologna) ITALY

web:     http://www.cineca.it
e-mail:  t.fasano at cineca.it
phone:   +39 06 444 86 517



More information about the users mailing list