IDP3 fails with LDAP bind and space character in the DN/distinguished name
Petursson, Sigurdur
spetursson at miami.edu
Mon Aug 7 09:33:15 EDT 2017
The Shibboleth IdP 3 appears to have issues with spaces in the
distinguished name during an LDAP bind:
The following fail:
idp.authn.LDAP.bindDN = CN=IDP Service
Account,CN=Users,DC=,DC=mydomain,DC=edu
idp.authn.LDAP.bindDN = CN=IDP\ Service\
Account,CN=Users,DC=,DC=mydomain,DC=edu
idp.authn.LDAP.bindDN = "CN=IDP Service
Account,CN=Users,DC=,DC=mydomain,DC=edu"
idp.authn.LDAP.bindDN = 'CN=IDP Service
Account,CN=Users,DC=,DC=mydomain,DC=edu'
The binding works only after modifying the underlying service account
(removing spaces):
idp.authn.LDAP.bindDN = CN=IDPServiceAccount,CN=Users,DC=,DC=mydomain,DC=edu
Note that LDAP bind with space in the DN takes place without issues with
client tools such as ldapsearch.
Is there a way to escape the space or might this be a bug?
More information about the users
mailing list