ldap.properties in version 3

[Tony Neath]

Here is a sanitized version of the login.config that I use in Version 2.4.3
/*
  This is the JAAS configuration file used by the Shibboleth IdP.
  
  A JAAS configuration file is a grouping of LoginModules defined in the
following manner:
  <LoginModuleClass> <Flag> <ModuleOptions>;
  
  LoginModuleClass - fully qualified class name of the LoginModule class
  Flag             - indicates whether the requirement level for the
modules; 
                         allowed values: required, requisite, sufficient,
optional
  ModuleOptions    - a space delimited list of name="value" options
  
  For complete documentation on the format of this file see:
 
http://java.sun.com/j2se/1.5.0/docs/api/javax/security/auth/login/Configuration.html
  
  For LoginModules available within the Sun JVM see:
 
http://java.sun.com/j2se/1.5.0/docs/guide/security/jaas/tutorials/LoginConfigFile.html
  
  Warning: Do NOT use Sun's JNDI LoginModule to authentication against an
LDAP directory,
  Use the LdapLoginModule that ships with Shibboleth and is demonstrated
below.

  Note, the application identifier MUST be ShibUserPassAuth
*/

ShibUserPassAuth {

// Acollege LDAP authentication
// See: https://spaces.internet2.edu/display/SHIB2/IdPAuthUserPass

   edu.vt.middleware.ldap.jaas.LdapLoginModule sufficient
      host="dc.acollege.ac.uk"
      port="389"
      base="ou=managed users,DC=acollege,DC=ac,DC=uk"
      tls="true"
      serviceCredential="password"
      userRoleAttribute="sAMAccountName"
      serviceUser="user at acollege.ac.uk"
      subtreeSearch = "true"
      userField="samAccountName";
	  
// Bcollege LDAP authentication
// See: https://spaces.internet2.edu/display/SHIB2/IdPAuthUserPass

   edu.vt.middleware.ldap.jaas.LdapLoginModule sufficient
      host="dc.bcollege.ac.uk"
      port="389"
      base="ou=Managed Users,DC=bcollege,DC=ac,DC=uk"
      tls="true"
      serviceCredential="password"
      userRoleAttribute="sAMAccountName"
      serviceUser="user at bcollege.ac.uk"
      subtreeSearch = "true"
      userField="samAccountName";	  

// Example Kerberos authentication, requires Oracle's JVM or OpenJDK.
// Warning: The module does not support verifying the KDC using a keytab.
// See: https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass
/*
   com.sun.security.auth.module.Krb5LoginModule required;
*/

};



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/ldap-properties-in-version-3-tp7611227p7611244.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.