IdPv3 LDAP password issue

[John Horne]

On Fri, 2016-02-26 at 14:20 +0000, Negib A. Sherif wrote:

> 
> If you are in IdP 2.x watch out for symbols in ldap password that
> assigned to  principalCredential in attribute-resolver.xml file. For
> instance, if the password contains & symbol, Ldap will not
> authenticate because & is one of the 5 xml reserved characters and
> IdP is not passing the value . To fix it, one need to include an
> escape "amp;" (no quote)  before & symbol in ldap principalCredential
> password.
> 
Hurrah and doh! We are using IdPv3, but it was your last comment about
v2 that solved it. I copy/pasted the password from our IdPv2 config
file, and buried in it was one of the escaped XML characters. When I
changed this back to its actual character (in ldap.properties), the
LDAP connection then worked.


Many thanks for the replies,

John.

-- 
John Horne                   Tel: +44 (0)1752 587287
Plymouth University, UK