ldap authenticator problems

[Rene Paquin]

In the error message it refers to a file " defined in class path resource [net/shibboleth/idp/flows/authn/password-authn-beans.xml]"  yet I cannot find that file anywhere.  

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Rene Paquin
Sent: April 21, 2021 3:09 PM
To: Shib Users <users at shibboleth.net>
Subject: RE: ldap authenticator problems

This is confusing.  I created an IDP instance based on v4.01 with what is in essence the same configuration as 4.1 in terms of ldap connector etc and it works but when I switch to v 4.1 I get those ldap authentication errors.  

Rene

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Rene Paquin
Sent: April 21, 2021 11:28 AM
To: Shib Users <users at shibboleth.net>
Subject: RE: ldap authenticator problems

I have that set to bindSearchAuthenticator  and I have all the ldap properties setup.  



## Authenticator strategy, either anonSearchAuthenticator, bindSearchAuthenticator, directAuthenticator, adAuthenticator
idp.authn.LDAP.authenticator                   = bindSearchAuthenticator

## Connection properties ##
idp.authn.LDAP.ldapURL                          = ldaps://xxxxxxxxxxxxxxx.xxx
idp.authn.LDAP.useStartTLS                     = true
# Time in milliseconds that connects will block
idp.authn.LDAP.connectTimeout                  = PT3S
# Time in milliseconds to wait for responses
idp.authn.LDAP.responseTimeout                 = PT3S
# Connection strategy to use when multiple URLs are supplied, either ACTIVE_PASSIVE, ROUND_ROBIN, RANDOM
#idp.authn.LDAP.connectionStrategy               = ACTIVE_PASSIVE

## SSL configuration, either jvmTrust, certificateTrust, or keyStoreTrust
idp.authn.LDAP.sslConfig                       = certificateTrust
## If using certificateTrust above, set to the trusted certificate's path
idp.authn.LDAP.trustCertificates                = %{idp.home}/credentials/ldap-server.crt





-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: April 21, 2021 11:23 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: ldap authenticator problems

The easiest way I managed to reproduce what I think is that exact error is by uncommenting but also clearing out the idp.authn.LDAP.authenticator property in ldap.properties

That's nothing I would expect anybody to accidentally do, but that does create the exception.

We can patch the NPE regardless so it's not just crashing that way, but the code has to have one of those authenticator "types" to wire things up with default behavior so it's got to be something, or left undefined so it defaults.

-- Scott


-- 
For Consortium Member technical support, see https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=04%7C01%7Crpaquin%40wlu.ca%7Cc1d4a4f3ea194f6cdb2d08d904f8f4a9%7Cb45a5125b29846bc8b89ea5a7343fde8%7C1%7C0%7C637546289569726091%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=1JZVa9owWvDzhM4f4Aaagj3nghMyvjKwPF2bdBSQZ8I%3D&reserved=0
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-- 
For Consortium Member technical support, see https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=04%7C01%7Crpaquin%40wlu.ca%7Cc1d4a4f3ea194f6cdb2d08d904f8f4a9%7Cb45a5125b29846bc8b89ea5a7343fde8%7C1%7C0%7C637546289569726091%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=1JZVa9owWvDzhM4f4Aaagj3nghMyvjKwPF2bdBSQZ8I%3D&reserved=0
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-- 
For Consortium Member technical support, see https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=04%7C01%7Crpaquin%40wlu.ca%7Cc1d4a4f3ea194f6cdb2d08d904f8f4a9%7Cb45a5125b29846bc8b89ea5a7343fde8%7C1%7C0%7C637546289569726091%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=1JZVa9owWvDzhM4f4Aaagj3nghMyvjKwPF2bdBSQZ8I%3D&reserved=0
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net