Kerberos SPNEGO

BÖSCH Christian boesch at
Fri May 8 07:15:06 UTC 2020

On 08.05.20, 09:01 , "users on behalf of Daniel Lutz" <users-bounces at on behalf of daniel.lutz at> wrote:

    BÖSCH Christian schrieb/wrote (08.05.20 08:40):
    > But now there's another error:
    > Caused by: com.unboundid.ldap.sdk.LDAPSearchException: Unable to parse string '(|(eduPersonPrincipalName=xy at AD.ABC.NET)(uid=$krb_principalname.get(0)))' as an LDAP filter because it contains an unexpected opening parenthesis at position 69.
    > Looks like that the unboundId library doesn't like the "(" from .get(0) ?

    I'm not sure, but you may try avoiding the underscore in the attribute name "krb_principalname".
    Try naming the attribute "krbPrincipalname".

    I guess that the Velocity engine recognizes the variable as "$krb" instead of "$krb_principalname".

    Then, your search filter expression would look like:


No, same problem again.
It still complains about the opening parenthesis like in the error above....


    For Consortium Member technical support, see
    To unsubscribe from this list send an email to users-unsubscribe at
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4155 bytes
Desc: not available
URL: <>

More information about the users mailing list