ldap.properties password issue when switching to AD

[Cameron Kerr]

myad\svc_adAdmin is not a bind DN

You want something like cn=read,dc=example,dc=org

Or perhaps you just need ‘myad\\svc_adAdmin’

But I would recommend that you put in a proper DN. Other things may well expect that.

Cheers,
Cameron

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Lalith Jayaweera
Sent: Thursday, 26 April 2018 13:32
To: Shib Users <users at shibboleth.net>
Subject: ldap.properties password issue when switching to AD

we are are switching from EDS to AD and obviously the credentials are different now both the value and pattern.

in ldap.properties we got below two new values now

idp.authn.LDAP.bindDN = myad\svc_adAdmin
idp.authn.LDAP.bindDNCredential = Z0xxt+TZ9DA

However even though above credentials are correct, at run time, we are getting invalid credentials error

then I replaced and hardcoded the exact values in attribute-resolver.xml, then that error disappeared.

Has anyone experienced the same? and how to proceed on this via ldap.properties instead of hard coding.

Thanks

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180426/1d3bb9e7/attachment.html>