IDP Login Delay Question

[Joseph Lucia]

Thanks Peter,

I have tried with each server individually, the delay happens with any of
them or all of them in the list. The LDAP is Active Directory, I am not
sure on the subtree issues, I will need to investigate. I decided to build
a separate IDP VM for testing purposes, I will see if it behaves the same
as the current server.

Joseph Lucia
Information Systems Specialist
Central York School District
717-846-6789 x1211
jlucia at cysd.k12.pa.us






On Mar 27, 2014 ~ Mar 27, 2014 ~ 9:37 AM 9:37 AM, "Peter Schober"
<peter.schober at univie.ac.at> wrote:

>* Joseph Lucia <jlucia at cysd.k12.pa.us> [2014-03-27 13:11]:
>> ShibUserPassAuth {
>>
>>    edu.vt.middleware.ldap.jaas.LdapLoginModule required
>>       ldapUrl="ldap://dc1.mydomain.com ldap://dc2.mydomain.com
>> ldap://dc3.mydomain.com"
>>       baseDn="dc=mydomain,dc=com"
>>       subtreeSearch="true"
>>       ssl="true"
>>       tls="false"
>>       userFilter="sAMAccountName={0}"
>>       bindDn="CN=Binder,dc=mydomain,dc=com"
>>       bindCredential="mybinderpassword";
>> };
>
>Servers being called dc (domain controller) is this MS-Active
>Directory? Isn't there some issue with subtree searches from the
>baseDN (and whether or not to connect to the Global Catalog port or
>not)?
>Also, can you remove 2 of the 3 servers and try again, each time with
>only one of those in the ldapUrl list? Does that change anything?
>-peter
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net

--
CONFIDENTIALITY NOTICE – This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.