IDP3 fails with LDAP bind and space character in the DN/distinguished name

Petursson, Sigurdur spetursson at miami.edu
Mon Aug 7 09:33:15 EDT 2017


The Shibboleth IdP 3 appears to have issues with spaces in the 
distinguished name during an LDAP bind:

The following fail:

idp.authn.LDAP.bindDN = CN=IDP Service 
Account,CN=Users,DC=,DC=mydomain,DC=edu
idp.authn.LDAP.bindDN = CN=IDP\ Service\ 
Account,CN=Users,DC=,DC=mydomain,DC=edu
idp.authn.LDAP.bindDN = "CN=IDP Service 
Account,CN=Users,DC=,DC=mydomain,DC=edu"
idp.authn.LDAP.bindDN = 'CN=IDP Service 
Account,CN=Users,DC=,DC=mydomain,DC=edu'

The binding works only after modifying the underlying service account 
(removing spaces):

idp.authn.LDAP.bindDN = CN=IDPServiceAccount,CN=Users,DC=,DC=mydomain,DC=edu

Note that LDAP bind with space in the DN takes place without issues with 
client tools such as ldapsearch.

Is there a way to escape the space or might this be a bug?






More information about the users mailing list