I'd like a hint regarding ldap.properties

[Joe Edwards]

Thanks, that helped!

I got stuck while figuring out something that I didn't have to.
I can use kerberos to do the AD domain authentication.

And, I didn't see that org.ldaptive log setting.
That does show me what I was looking for.

Next task is to set up so that an SP can select the jaas
LoginModule or kerberos AD authentication.

Joe


On Thu, 30 Apr 2015, Cantor, Scott wrote:
> On 4/30/15, 12:56 PM, "Joe Edwards" <joee at uw.edu> wrote:
>> I figure that others use the domain\samaccountname to bind.
>> And that the solution is straight forward.
>
> That's not really all that common. Personally if I could do that 
> direct bind, I'd just use Kerberos instead and leave the LDAP
> part to attribute lookup only.
>
>> How do I see what parameters are being sent to the ad server?
>
> I don't know that every last parameter is logged,
> but the ldaptive code logs plenty of stuff if it's told to.
>
> This is right in the log config:
>
> <!-- Logs LDAP related messages -->
>    <logger name="org.ldaptive" level="WARN"/>
>
> If you need more, turn that up.
> ....snip ..........snip