Shib v3 IDP with multiple OU's

[Daniel McDonald]

Ive been trying to use the example from the link you provided,  the one 
thats titled: "Complete example with DN resolvers and authentication 
handlers for bindSearch" but im not sure if im adding it to the right 
place.

I edited ldap-authn-config.xml and replaced the section "<!-- Bind 
Search Configuration -->" (lines 88-110) with the code from the docs 
"Complete example...". I then edited ldap.properties and changed 
idp.authn.LDAP.ldapURL to idp.authn.LDAP.ldapURL1 and 
idp.authn.LDAP.ldapURL2, assigned them values and did likewise with the 
rest of the properties.

I got an LDAP error (Invalid connector configuration) as soon as shib 
starts up when it tries to bind.

I have idp.authn.LDAP.authenticator = bindSearchAuthenticator if thats 
relevant.

Am I editing the right place in ldap-authn-config.xml or should I be 
putting the block of code somewhere else?

Dan

On 08/15/2016 06:06 PM, Raymond Gardner wrote:
>
> >The doc for LDAPAuthnConfiguration 
> <https://wiki.shibboleth.net/confluence/display/IDP30/LDAPAuthnConfiguration> 
> says that you can have idp.authn.LDAP.userFilter=
> >(&(|(ou:dn:=people)(ou:dn:=guests))(uid={user})) and have it search 
> multiple OU's.
>
> */[Raymond Gardner] You are getting warm!/*
>
> *//*
>
> */I think you want a multiple directories configuration:/*
>
> */https://wiki.shibboleth.net/confluence/display/IDP30/LDAPAuthnConfiguration#LDAPAuthnConfiguration-MultipleDirectories/*
>
> *//*
>
> */or/*
>
> *//*
>
> */https://wiki.shibboleth.net/confluence/display/IDP30/LDAPAuthnConfiguration#LDAPAuthnConfiguration-DNResolution/*
>
> *//*
>
> **************************************************************** This 
> email message is intended for the use of the person to whom it has 
> been sent, and may contain information that is confidential or legally 
> protected. If you are not the intended recipient or have received this 
> message in error, you are not authorized to copy, distribute, or 
> otherwise use this message or its attachments. Please notify the 
> sender immediately by return e-mail and permanently delete this 
> message and any attachments. NTT America makes no warranty that this 
> email is error or virus free. Thank you. 
> ****************************************************************
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160817/b613a109/attachment.html>