authn eDirectory LDAP and grace logins

[Daniel Fisher]

On Thu, Jun 16, 2016 at 10:33 AM, cbaker <craigb at clemson.edu> wrote:

> So the ldapEntry definitely doesn't contain the grace logins.  How would I
> go about making a custom entry resolver, any examples or can you point me
> to
> a place in the idp source to go read even?
>

You can probably achieve your goal just by modifying configuration.
Declare a search entry resolver bean:

    <!-- use the same connection pool that DN resolution uses -->
    <bean id="searchEntryResolver"
class="org.ldaptive.auth.SearchEntryResolver"
        p:connectionFactory-ref="bindSearchPooledConnectionFactory" />

Wire the entry resolver to your authenticator:

    <bean name="bindSearchAuthenticator"
class="org.ldaptive.auth.Authenticator"
p:entryResolver-ref="searchEntryResolver"
    ...

Note that entry resolution will *always* occur with this pool, regardless
of whether the bind succeeded for failed.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160616/835853e9/attachment.html>