LDAP integration validation failure

[Goggins, Patrick]

Building up a new V3 IDP on Windows and had it setup to the point basic authentication via LDAP(AD) was functional. After configuring the Attribute-Resolve.xml file with the additional attributes, I ended up adding in the myLDAP data connector. With this configured, I restarted the IDP service and have been receiving ConnectionFactoryValidator error message.

I've adjusted logging for org.ldaptive and log.loglevel.ldap to debug and can see the below:

2016-09-28 16:09:03,549 - DEBUG [org.ldaptive.ssl.AggregateTrustManager:129] - checkServerTrusted for sun.security.ssl.X509TrustManagerImpl at 3b55dd15 succeeded
2016-09-28 16:09:03,549 - DEBUG [org.ldaptive.ssl.DefaultHostnameVerifier:125] - verifying hostname=dc-1.mydomain.local against cert=
2016-09-28 16:09:03,549 - DEBUG [org.ldaptive.ssl.DefaultHostnameVerifier:196] - verifyDNS using subjectAltNames=[DC-1. mydomain.local]
2016-09-28 16:09:03,549 - DEBUG [org.ldaptive.ssl.DefaultHostnameVerifier:203] - verifyDNS found hostname match: DC-1. mydomain.local
2016-09-28 16:09:03,549 - DEBUG [org.ldaptive.ssl.HostnameVerifyingTrustManager:93] - checkCertificateTrusted for org.ldaptive.ssl.DefaultHostnameVerifier at 796f632b succeeded against 
2016-09-28 16:09:03,549 - DEBUG [org.ldaptive.ssl.AggregateTrustManager:129] - checkServerTrusted for org.ldaptive.ssl.HostnameVerifyingTrustManager at 5b88b8e succeeded
2016-09-28 16:09:03,549 - DEBUG [org.ldaptive.ssl.AggregateTrustManager:157] - invoking getAcceptedIssuers invoked for sun.security.ssl.X509TrustManagerImpl at 3b55dd15
2016-09-28 16:09:03,549 - DEBUG [org.ldaptive.ssl.AggregateTrustManager:157] - invoking getAcceptedIssuers invoked for org.ldaptive.ssl.HostnameVerifyingTrustManager at 5b88b8e
2016-09-28 16:09:03,611 - ERROR [net.shibboleth.idp.attribute.resolver.dc.ldap.impl.ConnectionFactoryValidator:95] - Connection factory validation failed

With ldap.properties is looking like:

idp.authn.LDAP.ldapURL= ldaps://dc-1.mydomain.local:636
idp.authn.LDAP.useStartTLS                     = false
idp.authn.LDAP.useSSL                          = true
idp.authn.LDAP.sslConfig                       = certificateTrust
idp.authn.LDAP.trustCertificates= %{idp.home}/credentials/ldap-server.crt
idp.authn.LDAP.trustStore= %{idp.home}/credentials/ldap-server.truststore
idp.authn.LDAP.returnAttributes= passwordExpirationTime,loginGraceRemaining
idp.authn.LDAP.baseDN= "CN=Users, DC=mydomain, DC=local"
idp.authn.LDAP.subtreeSearch = true
idp.authn.LDAP.userFilter= (sAMAccountName={user})
idp.authn.LDAP.bindDN= shib_user at mydomain.local
idp.authn.LDAP.bindDNCredential= "xxxxxxxxxx"


Any idea what is causing the error?

~Patrick