InvalidSearchFilterException: Missing 'equals' -- Problems connecting IdPv3 to LDAP

[Alexander Herr]

Hi,

I am trying to connect a simple SP to my IdP, I finally also got the login
page to display however when trying to login, I get the following error:

Login Failure: javax.naming.directory.InvalidSearchFilterException:
Missing 'equals'; remaining name 'ou=users,dc=site,dc=de'

This is with the default LDAP settings (except where credentials were
needed) in Shibboleth and happens regardless of finding a user present in
the database or not.

Any ideas where I went wrong?

This is the log of the idp:


2016-02-09 13:26:22,910 - DEBUG
[org.ldaptive.auth.PooledSearchDnResolver:244] - resolve user=idp
2016-02-09 13:26:22,915 - DEBUG
[org.ldaptive.auth.PooledSearchDnResolver:310] - searching for DN using
userFilter
2016-02-09 13:26:22,917 - DEBUG [org.ldaptive.SearchOperation:138] - execute
request=[org.ldaptive.SearchRequest at -2072801272::baseDn=ou=users,dc=site,dc=de,
searchFilter=[org.ldaptive.SearchFilter at -1337062875::filter=undefined,
parameters={user=idp}], returnAttributes=[1.1], searchScope=ONELEVEL,
timeLimit=0, sizeLimit=0, derefAliases=null, typesOnly=false,
binaryAttributes=null, sortBehavior=UNORDERED, searchEntryHandlers=null,
searchReferenceHandlers=null, controls=null, followReferrals=false,
intermediateResponseHandlers=null] with
connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection at 288570015::config=[org.ldaptive.ConnectionConfig at 967820202::ldapUrl=ldap://localhost:389,
connectTimeout=3000, responseTimeout=-1,
sslConfig=[org.ldaptive.ssl.SslConfig at 15386994::credentialConfig=net.shibboleth.idp.authn.impl.X509ResourceCredentialConfig at 5c8c6bcf,
trustManagers=null, enabledCipherSuites=null, enabledProtocols=null,
handshakeCompletedListeners=null], useSSL=false, useStartTLS=false,
connectionInitializer=[org.ldaptive.BindConnectionInitializer at 1621453193::bindDn=uid=idp,ou=users,dc=site,dc=de,
bindSaslConfig=null, bindControls=null]],
providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory at 973158207::metadata=[ldapUrl=ldap://localhost:389,
count=1], environment={com.sun.jndi.ldap.connect.timeout=3000,
java.naming.ldap.version=3,
java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory},
providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig at 2056041383::operationExceptionResultCodes=[PROTOCOL_ERROR,
SERVER_DOWN], properties={},
connectionStrategy=org.ldaptive.provider.ConnectionStrategies$DefaultConnectionStrategy at 16c0d01f,
controlProcessor=org.ldaptive.provider.ControlProcessor at 61dbd78b,
environment=null, tracePackets=null, removeDnUrls=true,
searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED,
PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null]],
providerConnection=org.ldaptive.provider.jndi.JndiConnection at 229bbd4a]
2016-02-09 13:26:22,930 - WARN
[net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:175] -
Profile Action ValidateUsernamePasswordAgainstLDAP: Login by idp produced
exception
org.ldaptive.LdapException:
javax.naming.directory.InvalidSearchFilterException: Missing 'equals';
remaining name 'ou=users,dc=site,dc=de'
        at
org.ldaptive.provider.ProviderUtils.throwOperationException(ProviderUtils.java:77)
Caused by: javax.naming.directory.InvalidSearchFilterException: Missing
'equals'
        at com.sun.jndi.ldap.Filter.encodeSimpleFilter(Filter.java:330)