ldap.properties and ldap for attribute-resolver

[Joseph Fischetti]

I'm exploring other configuration options for ldap authn and attribute resolution.

The data connector within attribute-resolver.xml can be set up with a space delimited list of ldap URLs per the documentation here [1].
ldapURL	- Space-delimited list of URLs - URL(s) to the LDAP server. Each listed URL is tried according to the connectionStrategy.
I believe it would also be acceptable (though maybe unnecessary? ) to define a backup data connector instead. Which is preferable?

Also, can ldap.properties be configured the same way?
This [2] page gives the following description for the ldap.properties file:
idp.authn.LDAP.ldapURL - LDAP URL - "Connection URI for LDAP directory"

I put a dummy url (first) in a space separated list in ldap.properties and the configuration starts up and works fine, but that doesn't mean anything.

Whats the right way to have failover ldap servers for both authn and attribute resolution? 

------------------------------
[1] https://wiki.shibboleth.net/confluence/display/IDP30/LDAPConnector
[2] https://wiki.shibboleth.net/confluence/display/IDP30/LDAPAuthnConfiguration





Joseph Fischetti 
Linux System Administrator 
Marist College