IdPv3 LDAP password issue

[Negib A. Sherif]

That is true. Those two files you mentioned are xml files. But, the actual pwd is in ldap.properties file and any xml special/reserved characters in the pwd will not be treated. Therefore, no need to add an escape.  If you make ldap.properities file to ldap.xml, the pwd without "amp;" for & will fail.


________________________________
From: users <users-bounces at shibboleth.net> on behalf of Nate Klingenstein <nate.klingenstein at utah.edu>
Sent: Friday, February 26, 2016 10:25 AM
To: Shib Users
Subject: Re: IdPv3 LDAP password issue

In Idp 3.x, ldap configuration is not an .xml file, ldap authentication works fine without adding prefix to a password that has & character.

Well, it kinda is.  The default distribution includes property files that aggregate a lot of options in a different format using Spring.  I think you could move all those values into their expanded locations and remove ldap.properties and everything would function identically.

The properties file just sets a bunch of properties that are in turn loaded by configuration that lives in XML.  You can find the references with a grep.

conf/authn/ldap-authn-config.xml
conf/attribute-resolver-ldap.xml
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160226/b9dd5ee7/attachment.html>