IdPv3 LDAP password issue

[Negib A. Sherif]

Hi Nate,

I have IdP 2.x ldap pwd with & and where able to solve the authentication by adding an escape prefix "amp;" only in data connector not in login.config file. In Idp 3.x, ldap configuration is not an .xml file, ldap authentication works fine without adding prefix to a password that has & character. My latest problem, that you recently sent a feed back to ldap problem with error 32, was due to baseDN. baseDN was  appended to ldapURL after port number which works in 2.x.  Since in IdP 3.x, there is a separate line to define baseDN in ldap.properties file, adding additional baseDn to ldaURL line was causing the problem.  After removing anything after port number in ldapURL line solved the problem and I now can connect to remote ldap. 


  

 

________________________________________
From: users <users-bounces at shibboleth.net> on behalf of Nate Klingenstein <nate.klingenstein at utah.edu>
Sent: Friday, February 26, 2016 9:56 AM
To: Shib Users
Subject: Re: IdPv3 LDAP password issue

> Ldap will not authenticate because & is one of the 5 xml reserved characters and IdP is not passing the value . To fix it, one need to include an escape "amp;" (no quote)  before & symbol in ldap principalCredential

Just wondering out loud since I had it wrong last time: would CDATA wrapping here do this encoding for you?
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net