v3 LDAP Settings
Daniel Fisher
dfisher at vt.edu
Thu Mar 24 12:56:28 EDT 2016
On Wed, Mar 23, 2016 at 4:01 PM, Craig Pluchinsky <craigp at iup.edu> wrote:
> Here is the data connector config that didn't fail over as expected
>
> <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"
> ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"
> baseDN="%{idp.attribute.resolver.LDAP.baseDN}"
> principal="%{idp.attribute.resolver.LDAP.bindDN}"
>
> principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"
> useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS:true}"
> connectionStrategy="RANDOM">
> <dc:FilterTemplate>
> <![CDATA[
> %{idp.attribute.resolver.LDAP.searchFilter}
> ]]>
> </dc:FilterTemplate>
> </resolver:DataConnector>
>
>
Add an ldap property like so: <LDAPProperty name="com.sun
.jndi.ldap.connect.timeout" value="3000"/> to get the same behavior. I've
got an outstanding task to add documentation for this and to provide a
concrete setter in the resolver schema. Eventually you won't need to set
provider specific properties.
--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160324/6c8dc522/attachment.html>
More information about the users
mailing list