Syntax for referral in login.config

[Christopher Bland]

Hello All,

Have been struggling with the syntax for querying Active Directory using ssl.  Currently getting a error which I believe is caused by the referral property.  I am configured like this

ShibUserPassAuth {
   edu.vt.middleware.ldap.jaas.LdapLoginModule required
      host="<host>"
      port="636"
      base="<base>"
      sslSocketFactory="{trustCertificates=file:/opt/shibboleth-idp/trustedservercerts/activedirectory.crt}"
      ssl="false"
      tls="true"
      userField="userPrincipalName"
      subtreeSearch="true"
      referral="follow"
      serviceUser="<service_user>"
      serviceCredential="<password>";
};


Does anyone have a working example of an AD SSL query which uses the referral property?


-Chris