v3 LDAP Settings

Daniel Fisher dfisher at vt.edu
Thu Mar 24 12:56:28 EDT 2016


On Wed, Mar 23, 2016 at 4:01 PM, Craig Pluchinsky <craigp at iup.edu> wrote:

> Here is the data connector config that didn't fail over as expected
>
>     <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"
>         ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"
>         baseDN="%{idp.attribute.resolver.LDAP.baseDN}"
>         principal="%{idp.attribute.resolver.LDAP.bindDN}"
>
> principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"
>         useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS:true}"
>         connectionStrategy="RANDOM">
>         <dc:FilterTemplate>
>             <![CDATA[
>                 %{idp.attribute.resolver.LDAP.searchFilter}
>             ]]>
>         </dc:FilterTemplate>
>     </resolver:DataConnector>
>
>
Add an ldap property like so: <LDAPProperty name="com.sun
.jndi.ldap.connect.timeout" value="3000"/> to get the same behavior. I've
got an outstanding task to add documentation for this and to provide a
concrete setter in the resolver schema. Eventually you won't need to set
provider specific properties.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160324/6c8dc522/attachment.html>


More information about the users mailing list