Unable to get attribute value.

[Nate Klingenstein]

Tomomi,

Try setting the userFilter to (samAccountName={user}).

Take care,
Nate.
 
-----Original message-----
> From: Tomomi
> Sent: Tuesday, August 13 2019, 11:37 pm
> To: users at shibboleth.net
> Subject: RE: Unable to get attribute value.
> 
> Hi Nate,
> 
> Thank you for your answer!!
> 
> I tried changing the ldap.properties many times, but it doesn't work.
> Do you have any solution tips.
> 
> My ldap.properties is below;
> 
> idp.authn.LDAP.authenticator                   = adAuthenticator
> idp.authn.LDAP.ldapURL                          = ldap://domain.com
> idp.authn.LDAP.useStartTLS                     = false
> idp.authn.LDAP.useSSL                          = false
> idp.authn.LDAP.returnAttributes                 =
> passwordExpirationTime,loginGraceRemaining
> idp.authn.LDAP.baseDN                           = cn=Users,dc=domain,dc=com
> idp.authn.LDAP.subtreeSearch                   = true
> idp.authn.LDAP.userFilter                       = (uid={user})
> idp.authn.LDAP.bindDN                           = admin at domain.com
> idp.authn.LDAP.bindDNCredential                 = password
> idp.authn.LDAP.dnFormat                         = %s at domain.com
> 
> idp.attribute.resolver.LDAP.ldapURL             = %{idp.authn.LDAP.ldapURL}
> idp.attribute.resolver.LDAP.connectTimeout      =
> %{idp.authn.LDAP.connectTimeout:PT3S}
> idp.attribute.resolver.LDAP.responseTimeout     =
> %{idp.authn.LDAP.responseTimeout:PT3S}
> idp.attribute.resolver.LDAP.baseDN              =
> %{idp.authn.LDAP.baseDN:undefined}
> idp.attribute.resolver.LDAP.bindDN              =
> %{idp.authn.LDAP.bindDN:undefined}
> idp.attribute.resolver.LDAP.bindDNCredential    =
> %{idp.authn.LDAP.bindDNCredential:undefined}
> idp.attribute.resolver.LDAP.useStartTLS         =
> %{idp.authn.LDAP.useStartTLS:true}
> idp.attribute.resolver.LDAP.trustCertificates   =
> %{idp.authn.LDAP.trustCertificates:undefined}
> idp.attribute.resolver.LDAP.searchFilter        =
> (uid=$resolutionContext.principal)
> 
> Please help!
> 
> Thanks,
> Tomomi
> 
> 
> 
> 
> --
> Sent from: https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>