Shib v3 IDP with multiple OU's

[Daniel McDonald]

Raymond thank you so much, I can now authenticate with 2 top level OU's 
The example I used is for 2 seperate AD servers each with 2 OU's and it 
works, although a few values are duplicated since its not 2 seperate 
servers. I think I can change the code to fit our setup of 1 AD server 
with 4 OU's.

Dan

On 08/17/2016 04:25 PM, Raymond Gardner wrote:
>
> If I’m reading you correctly, I think you want your ldap.properties to 
> use your new aggregateAuthenticator instead of bindSearchAuthenticator.
>
> (bindSearchAuthenticator is likely still configured to use the 
> ‘idp.authn.LDAP.ldapURL’ property which you said you have renamed it.  
> This is likely why you get an invalid connector at startup.)
>
> >>I have idp.authn.LDAP.authenticator = bindSearchAuthenticator if thats 
> relevant.
>
> */[Raymond Gardner]/*
>
> ldap.properties
>
> idp.authn.LDAP.authenticator = aggregateAuthenticator
>
>
> >>Am I editing the right place in ldap-authn-config.xml or should I be 
> putting the block of code somewhere else?
>
> */[Raymond Gardner]/*
>
> ldap-authn-config.xml is likely setup correctly.
>
> **************************************************************** This 
> email message is intended for the use of the person to whom it has 
> been sent, and may contain information that is confidential or legally 
> protected. If you are not the intended recipient or have received this 
> message in error, you are not authorized to copy, distribute, or 
> otherwise use this message or its attachments. Please notify the 
> sender immediately by return e-mail and permanently delete this 
> message and any attachments. NTT America makes no warranty that this 
> email is error or virus free. Thank you. 
> ****************************************************************
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160819/17059b4a/attachment.html>