Shibboleth V3 with LDAP - No Attributes

[eln00b]

OK.  I thought I had the basic information needed in there.  I started with
the basics of those files without any customization outside the LDAP
configuration.  So the attribute-resolver-ldap.xml has remained unchanged
from what ships with the basic installation.

My full LDAP configuration is this:



idp.authn.LDAP.authenticator                   = directAuthenticator

## Connection properties ##
idp.authn.LDAP.ldapURL                         = ldap://127.0.0.1:389
idp.authn.LDAP.useStartTLS                     = false
idp.authn.LDAP.useSSL                          = false
idp.authn.LDAP.connectTimeout                  = 3000

## SSL configuration, either jvmTrust, certificateTrust, or keyStoreTrust
idp.authn.LDAP.sslConfig                        = certificateTrust
## If using certificateTrust above, set to the trusted certificate's path
idp.authn.LDAP.trustCertificates                =
%{idp.home}/credentials/MyLDAP.pem
## If using keyStoreTrust above, set to the truststore path
idp.authn.LDAP.trustStore                       =
%{idp.home}/credentials/MyLDAP.keystore

## Return attributes during authentication
## NOTE: there is a separate property used for attribute resolution
idp.authn.LDAP.returnAttributes                 = uid 

## DN resolution properties ##

# Search DN resolution, used by anonSearchAuthenticator,
bindSearchAuthenticator
# for AD: CN=Users,DC=example,DC=org
idp.authn.LDAP.baseDN                           = ou=People,dc=myldap,dc=com
#idp.authn.LDAP.subtreeSearch                   = false
idp.authn.LDAP.userFilter                       = (uid={user})
# bind search configuration
# for AD: idp.authn.LDAP.bindDN=adminuser at domain.com
idp.authn.LDAP.bindDN                           = ldapuser1
idp.authn.LDAP.bindDNCredential                 = aTestPassw0rd

# Format DN resolution, used by directAuthenticator, adAuthenticator
# for AD use idp.authn.LDAP.dnFormat=%s at domain.com
idp.authn.LDAP.dnFormat                         =
uid=%s,ou=People,dc=myldap,dc=com

# LDAP attribute configuration, see attribute-resolver.xml
# Note, this likely won't apply to the use of legacy V2 resolver
configurations
idp.attribute.resolver.LDAP.ldapURL             = %{idp.authn.LDAP.ldapURL}
idp.attribute.resolver.LDAP.baseDN              =
%{idp.authn.LDAP.baseDN:undefined}
idp.attribute.resolver.LDAP.bindDN              =
%{idp.authn.LDAP.bindDN:undefined}
idp.attribute.resolver.LDAP.bindDNCredential    =
%{idp.authn.LDAP.bindDNCredential:undefined}
idp.attribute.resolver.LDAP.useStartTLS         =
%{idp.authn.LDAP.useStartTLS:true}
idp.attribute.resolver.LDAP.trustCertificates   =
%{idp.authn.LDAP.trustCertificates:undefined}
idp.attribute.resolver.LDAP.searchFilter        =
(uid=$resolutionContext.principal)
idp.attribute.resolver.LDAP.returnAttributes    = uid



-----

el n00b - Trying to understand technology and help create documentation online wherever I get stuck.
--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Shibboleth-V3-with-LDAP-No-Attributes-tp7628989p7628992.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.