IDPv3 Attribute Resolver help

[Christopher Bongaarts]

On 11/8/2016 11:53 AM, Tim Williams wrote:
> When I test this I see the following in the IDP debug output:
>
> request=[org.ldaptive.SearchRequest at 1460049006::baseDn=DC=ad,DC=streamingltd,DC=com,
> searchFilter=[org.ldaptive.SearchFilter at 1036406757::filter=(uid=dave_instructor),
> parameters={}], returnAttributes=[sn, givenName], searchScope=SUBTREE,
> timeLimit=3000, sizeLimit=1, derefAliases=null, typesOnly=false,
> binaryAttributes=null, sortBehavior=UNORDERED,
> searchEntryHandlers=[[org.ldaptive.handler.DnAttributeEntryHandler at -1580910376::dnAttributeName=entryDN,
> addIfExists=false]], searchReferenceHandlers=null, controls=null,
> followReferrals=false, intermediateResponseHandlers=null]
>
> Which seems to indicate that the parameters I want are being included in
> the request. The response is:
>
> response=[org.ldaptive.Response at 1062607293::result=[org.ldaptive.SearchResult at 4303153::entries=[],
> references=[]], resultCode=SUCCESS, message=null, matchedDn=null,
> responseControls=null,
> referralURLs=[ldap://ForestDnsZones.ad.streamingltd.com/DC=ForestDnsZones,DC=ad,DC=streamingltd,DC=com,
> ldap://DomainDnsZones.ad.streamingltd.com/DC=DomainDnsZones,DC=ad,DC=streamingltd,DC=com,
> ldap://ad.streamingltd.com/CN=Configuration,DC=ad,DC=streamingltd,DC=com],
> messageId=-1]
>
> Followed by a "Resolver plugin 'myLDAP' produced no value" error. I'm
> assuming this is because the response from AD didn't include any data.

Your search is not returning any matches.  Make sure the user you're 
binding as (bindDN) has sufficient privileges to find the user with 
uid=dave_instructor.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%