IdP v3.4.4 change user for attribute search

[Kai Zimmer]

Am 08.08.19 um 14:51 schrieb Peter Schober:
> * Rod Widdowson <rdw at steadingsoftware.com> [2019-08-08 14:40]:
>>> So where and how can i change the user for attribute queries (or why isn't the account shibidp used for it)?
>> https://wiki.shibboleth.net/confluence/display/IDP30/LDAPConnector#LDAPConnector-DefaultConfiguration
> But if
>    idp.authn.LDAP.authenticator = bindSearchAuthenticator
> and
>    idp.authn.LDAP.bindDN = cn=somedn
> has been set in ldap.properties and the default of
>    idp.attribute.resolver.LDAP.bindDN = %{idp.authn.LDAP.bindDN:undefined}
> has been left unchanged there, when used with the unchanged example
> from conf/attribute-resolver-ldap.xml:
>    principal="%{idp.attribute.resolver.LDAP.bindDN}"
> shouldn't that lead to all LDAP binds using the value of the
> idp.authn.LDAP.bindDN property?

I have to admit that i changed the default DataConnector definition 
because i followed a workshop example configuration.

Best regards,

Kai