openldap ACLs

[Peter Schober]

* Holtom, Roger <Roger.Holtom at mso.umt.edu> [2014-03-13 21:54]:
> Thanks for the info.  I do have a privileged account setup in both
> the LDAP connector in attribute-resolver.xml and in login.config,
> but no go unless I open up the ACLs on the directory.  I’ll keep
> digging, as I must have some poor syntax in one or both of these
> files.

Unless you can verify that the same connection parameters work fine
from the IDP machine outside the IDP (e.g. using ldapsearch) it's not
a Shibboleth issue. So try that first.
There's also the openldap technical mailing list but you'd need to be
prepared for some serious RTFM there.
-peter