IdP v3.4.4 change user for attribute search

[Peter Schober]

* Rod Widdowson <rdw at steadingsoftware.com> [2019-08-08 14:40]:
> > So where and how can i change the user for attribute queries (or why isn't the account shibidp used for it)?
> 
> https://wiki.shibboleth.net/confluence/display/IDP30/LDAPConnector#LDAPConnector-DefaultConfiguration

But if
  idp.authn.LDAP.authenticator = bindSearchAuthenticator
and
  idp.authn.LDAP.bindDN = cn=somedn
has been set in ldap.properties and the default of
  idp.attribute.resolver.LDAP.bindDN = %{idp.authn.LDAP.bindDN:undefined}
has been left unchanged there, when used with the unchanged example
from conf/attribute-resolver-ldap.xml:
  principal="%{idp.attribute.resolver.LDAP.bindDN}"
shouldn't that lead to all LDAP binds using the value of the
idp.authn.LDAP.bindDN property?

-peter