How can I configure userFIlter login.config

[David Gersic]

>>> On 6/4/2014 at 11:30 AM, Teresa Fasano <t.fasano at cineca.it> wrote: 
> Hi,
> I need to set the userFilter in the login.config with the attribute uid 
> and the name of two objectClass.
> 
> The filter in the ldapsearch is:
> ldapsearch -x -H ldap://LDAP-MY-SERVER:389-D 'cn=blah,blah,blah' -w 
> 'xxxxxxxx'-b 'my-base-dn' -a never 
> "(&(uid=user-test)(|(objectClass=name-of-class1)(objectClass=name-of-class2)))"
> 
> How can I configure the filter 
> "(&(uid=user-test)(|(objectClass=name-of-class1)(objectClass=name-of-class2)))"?
> 
> I tried with 
> userFilter="&(uid)(|(objectClass=name-of-class1)(objectClass=name-of-class2))) 
> but I obtained:
> 
> 18:22:04.616 - INFO 
> [com.cineca.shibboleth.idp.provider.MultiLoginServlet:328] - The user 
> identita.digitale cannot be authenticated
> javax.security.auth.login.LoginException: 
> javax.naming.directory.InvalidSearchFilterException: Missing 'equals';
> 
> Do you know how can I configure it?
> 
> thanks,
> Teresa


The example configuration includes:

userFilter="uid={0}";

Your test configuration seems to be missing the "={0}" part of this, which could be what it's complaining about when it says: "Missing 'equals';"