Question on idp.authn.LDAP.dnFormat

[Daniel Fisher]

On Thu, Oct 13, 2016 at 4:05 PM, Jessica Coltrin <jcoltrin at pdx.edu> wrote:

> We've set this parameter
> idp.authn.LDAP.userFilter  = (&(|(ou:dn:=people)(ou:dn:=
> service))(uid={user}))
>
> But are a little stuck on dnFormat, previously we had
> idp.authn.LDAP.dnFormat = uid=%s,ou=people,dc=pdx,dc=edu
>

Those two properties are mutually exclusive.
If you review the comments in the properties file you'll see that
userFilter is used by anonSearchAuthenticator and bindSearchAuthenticator.
dnFormat is used by directAuthenticator and adAuthenticator.

Based on your note, you can comment out the dnFormat, it's not being used.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161013/c03db118/attachment.html>