Change between 2.4.0 and 3.2.1

[Michael A Grady]

> On Jun 29, 2016, at 3:40 PM, Daniel Fisher <dfisher at vt.edu> wrote:
> 
> On Wed, Jun 29, 2016 at 3:11 PM, Eu <0bahba at gmail.com <mailto:0bahba at gmail.com>> wrote:
> How can I use the same method on Shibboleth 3.2.1?
> I can not found the authorizationFilter option.
> 
> The notion of coupling authorization in the authentication API was not ported from vt-ldap to ldaptive.
> You should get the same fundamental behavior with a properly configured filter:
> 
> userFilter="(&(Federated=Y)(uid={user}))"
> 
> --Daniel Fisher
> 

That points out another difference in JAAS config from v2 to v3, in that his sample config used "userField", not "userFilter". I discovered earlier today that you get an ERROR message if there is no "userFilter" specified:

  Invalid userFilter, cannot be null or empty.

I took it that means that the options of just listing the fields to be searched as values of userField no longer works, you must put them in the form of a userFilter.

--
Michael A. Grady
IAM Architect, Unicon, Inc.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160629/83153b65/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://shibboleth.net/pipermail/users/attachments/20160629/83153b65/attachment-0001.sig>