AD nested groups

[Daniel Fisher]

On Tue, Jul 25, 2017 at 11:21 AM, Domingues, Michael D <
michael-domingues at uiowa.edu> wrote:

> Not directly related to this question, but worth noting. Unless I'm
> horribly misunderstanding things (and my testing leads me to believe that
> this is true), I don't think that the version of Ldaptive bundled with
> Shibboleth (as of 3.3.1) respects java.naming.referral = "follow".
>
The default ldaptive provider in the IDP is JNDI. The LDAPProperty element
feeds those properties directly to the provider. So that configuration
should tell JNDI to follow referrals. The functionality in later versions
of ldaptive provides the ability for ldaptive to chase referrals in a
provider agnostic way.

In short, following referrals should work, if you can coax JNDI into doing
it without throwing exceptions.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170725/3c383020/attachment.html>