JAAS LDAP module and directAuthenticator

[Daniel Fisher]

On Fri, Apr 27, 2018 at 9:04 AM, Losen, Stephen C. (scl) <scl at virginia.edu>
wrote:

> Is it possible to configure the JAAS LDAP module in IDP 3.3.2 to do the
> equivalent of the directAuthenticator on the non-JAAS LDAP password verify
> module?  To verify the user's password you bind with the user's DN using
> the user's password, rather than using a service bind account and search.
>

You can override the DN resolver in your JAAS config like so:

dnResolver="org.ldaptive.auth.FormatDnResolver{{format=cn=%s,ou=myorg,dc=myschool,dc=edu}}"

The FormatDnResolver constructs a DN using String.format, where the input
is the user argument.
(Which is what the directAuthenticator uses.)
Or you can plug in your own implementation.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180427/f2163501/attachment.html>