IDPv3.1.2 LDAP connector: using two distinct LDAP servers?

[Daniel Fisher]

On Tue, Jul 5, 2016 at 5:02 PM, Raymond Gardner <r.gardner at ntta.com> wrote:

> This poses a problem for me.  I do not have a generic bind account to use
> for configuring a bindDn property or a bindCredential property as is
> expected with the BindConnectionInitializer.
>
> The user provides these binding values during login.  How is one expected
> to configure this?
>

Have a look at the anonSearchDnResolver.


>
> Will an anonymous search work?
>

That depends on your directory. If you can resolve DNs with an anonymous
search, then it will work. Otherwise, you'll need to obtain a service
credential for searching.


>   Then, the authHandler will do the actual bind?
>

Yes. The bind operation occurs on a different connection than the DN
resolution.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160706/6c3606ab/attachment.html>