Shibboleth IdP v3.2.1 & LDAP+AD Authentication

[Marco Malavolti]

So, anybody knows if there is a class that extend ldaptive with the possibility to aggregate different Authenticator together? 

Is it impossible for me to use both LDAP and AD to authenticate the users by configuring simply the ldap-authn-config.xml file? 

I will try to configure JaaS on my IdP to answer this use case, but if someone find out a better solution, please, answer to this thread by giving his solution. 

I hope to find out a solution that uses ldap-authn-config.xml 

Thank you for all your help! 

Best Regards, 

---
Marco Malavolti
Consortium GARR
Via dei Tizii 6 (RM) 
Italia
Skype: marco.mala



Il giorno 31 mag 2016, 21:48, alle ore 21:48, Daniel Fisher <dfisher at vt.edu> ha scritto:
>On Tue, May 31, 2016 at 1:34 PM, Michael A Grady <mgrady at unicon.net>
>wrote:
>
>> But once you have to start replicating all that config, the advantage
>> versus just going back to using JAAS to configure the multiple
>sources gets
>> unclear. The JAAS config is simpler, but perhaps doesn't get you all
>the
>> same account state options -- if you are going to use those. And it
>sounds
>> like the JAAS options are going to get more flexible with 3.3 when it
>> becomes available.
>>
>
>One advantage is performance. JAAS failover attempts DN resolution and
>authentication against each directory in sequence (probably without
>connection pooling). The AggregateDnResolver attempts DN resolution
>concurrently, followed by a single authentication attempt (probably
>with
>connection pooling). The configuration is certainly more complex, but
>wiring together disparate directories isn't a simple thing.
>
>--Daniel Fisher
>
>
>------------------------------------------------------------------------
>
>-- 
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160601/ac122f5e/attachment.html>