resolver failure from password character?

[IAM David Bantz]

Setting up a secondary test IdP using test instance of directory for authN,
I get the following error in logs:

ERROR []
> net.shibboleth.utilities.java.support.service.AbstractReloadableService:231
> >  Service 'shibboleth.AttributeResolverService': Reload for
> shibboleth.AttributeResolverService failed
> net.shibboleth.utilities.java.support.service.ServiceException:
> org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line
> 1748 in XML document from file
> [/opt/shibboleth-idp/conf/attribute-resolver.xml] is invalid; nested
> exception is org.xml.sax.SAXParseException; lineNumber: 1748; columnNumber:
> 125; The entity name must immediately follow the '&' in the entity
> reference.


That appears to be referring to the & as part of the bind credential in a
data connector:

<resolver:DataConnector id="uaADLDAP" xsi:type="LDAPDirectory"
xmlns="urn:mace:shibboleth:2.0:resolver:dc"
> ... principalCredential="********&" >


which seems to say I need to have the bind password not end with (or
contain?) the "&" character.

Can that be right?

David Bantz
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170314/aba21890/attachment.html>