Problems connecting to 389 directory server

[Darren Boss]

Ok, everything is working now. I was missing many of the resolver
configuration attributes in my attribute-resolver.xml so while set in the
properties, they were not being used in the connector.

I would have figured this out a lot earlier with the first deployment I did
was using internal CA signed certs for TLS. There were some other
configuration settings on our production ldap that made the connection a
lot easier and hid potential issue until now.

For anyone else with issues like this, take a look at
attribute-resolver-ldap.xml and compare the example to your configuration
in attribute-resolver.xml.

On Wed, Dec 6, 2017 at 12:59 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> > I wouldn't say that I fundamentally confuse that fact. I know that
> > idp.authn.LDAP elements configure the authentication and
> > idp.attribute.resolver elements configure attribute resolution and in
> most
> > cases use the configuration from various authn defined elements.
>
> It isn't that simple, particularly with respect to the trust properties.
> All of it depends on what's in your resolver configuration. The
> configuration is never the properties, it's always the XML. If the XML
> happens to refer to a property, then and only then is the property relevant.
>
> I say all that because I'm fairly certain your LDAP connector will turn
> out not to be referencing any of the relevant properties, because if it
> were you wouldn't be getting this result.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-- 

*Darren Boss*
*Senior Programmer/Analyst*
*Programmeur-analyste principal*
*darren.boss at computecanada.ca <darren.boss at computecanada.ca>*
*(o) 416.228.1234 x *230
*(c) 919.525.0083*

155 University Ave, Suite 302 Toronto, ON M5H 3B7
www.computecanada.ca / www.calculcanada.ca
@ComputeCanada
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171206/bb258cee/attachment-0001.html>