IDPv3 Attribute Resolver help

[Cantor, Scott]

> Ok, that's a bit confusing (I would have expected the certificate config
> to be ignored if TLS was off), but fair enough if it works that way.

You're wiring up objects here, so giving it the path to something means it's going to create an object around that data. It doesn't know anything about what it will eventually do or not do with them.

> Digging into the error logs, I'm also seeing the following error which
> might be relevant:

Well, that means your bind credentials are invalid, and also means the connector itself is syntactically fine and it's creating the connection to see if it's usable at startup. And it means the TCP/LDAP connection itself is fine, this is just LDAP error stuff, which the IdP has little or nothing to do with, it just does what you tell it.

Authentication and attributes are entirely separate in the configuration. Any overlap in LDAP configuration is via properties that happen to be shared or pointing to each other.

-- Scott