Syntax for referral in login.config

Peter Schober peter.schober at univie.ac.at
Sat Nov 1 06:38:01 EDT 2014


* Christopher Bland <chris at fdu.edu> [2014-11-01 02:55]:
> ShibUserPassAuth {
>    edu.vt.middleware.ldap.jaas.LdapLoginModule required
>       host="<host>"
>       port="636"
>       base="<base>"
>       sslSocketFactory="{trustCertificates=file:/opt/shibboleth-idp/trustedservercerts/activedirectory.crt}"
>       ssl="false"
>       tls="true"
>       userField="userPrincipalName"
>       subtreeSearch="true"
>       referral="follow"
>       serviceUser="<service_user>"
>       serviceCredential="<password>";
> };

You'll also want to adapt to the documented properties in
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass
as most of the properties have change names (and sometimes value
syntax, e.g. using ldapUrl over host and port) in the current
documentation.
-peter


More information about the users mailing list