Kerberos SPNEGO

[BÖSCH Christian]

On 08.05.20, 09:01 , "users on behalf of Daniel Lutz" <users-bounces at shibboleth.net on behalf of daniel.lutz at switch.ch> wrote:

    BÖSCH Christian schrieb/wrote (08.05.20 08:40):
    > But now there's another error:
    > 
    > Caused by: com.unboundid.ldap.sdk.LDAPSearchException: Unable to parse string '(|(eduPersonPrincipalName=xy at AD.ABC.NET)(uid=$krb_principalname.get(0)))' as an LDAP filter because it contains an unexpected opening parenthesis at position 69.
    > 
    > Looks like that the unboundId library doesn't like the "(" from .get(0) ?

    I'm not sure, but you may try avoiding the underscore in the attribute name "krb_principalname".
    Try naming the attribute "krbPrincipalname".

    I guess that the Velocity engine recognizes the variable as "$krb" instead of "$krb_principalname".

    Then, your search filter expression would look like:

      (|(eduPersonPrincipalName=$resolutionContext.principal)(uid=$krbPrincipalname.get(0)))

No, same problem again.
It still complains about the opening parenthesis like in the error above....

Christian


    Daniel
    -- 
    For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
    To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4155 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20200508/78211c0b/attachment.p7s>