IDP41 configuration problem to authenticate against multiples branches of an AD

[Lanthier, Stéphanie]

Dear Shibboleth lists' readers',

As suggested, I looked over the v4 documentation.

I copied as-is the block named Complete example with DN resolvers and authentication handlers for bindSearch from the page https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631612/LDAPAuthnConfiguration#Advanced-Features

and I pasted it just before the last line of my password-authn-config.xml.

I modified the ldap.properties file accordingly.

I still meet errors, please see below. Any supplementary hint and help will be welcome. 

Best regards,
--Stéphanie


Uncaught Exception
A software error was encountered that prevents normal operation:


org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.authn.Password.Validators': Cannot resolve reference to bean 'shibboleth.LDAPValidator' while setting bean property 'sourceList' with key [0]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'ValidateUsernamePasswordAgainstLDAP' defined in class path resource [net/shibboleth/idp/flows/authn/password-authn-beans.xml]: Cannot resolve reference to bean 'shibboleth.authn.LDAP.authenticator' while setting bean property 'authenticator'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.authn.LDAP.authenticator' defined in class path resource [net/shibboleth/idp/flows/authn/password-authn-beans.xml]: Error setting property values; nested exception is org.springframework.beans.PropertyBatchUpdateException; nested PropertyAccessExceptions (1) are: PropertyAccessException 1: org.springframework.beans.MethodInvocationException: Property 'authenticatorType' threw exception; nested exception is java.lang.IllegalArgumentException: authenticatorType property did not have a valid value


--

Date: Wed, 4 May 2022 16:35:07 +0000
From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net>
Subject: Re: IDP41 configuration problem to authenticate against
	multiples branches of an AD
Message-ID: <3579A41B-0C0D-4C49-AC61-552627BA33F2 at osu.edu>
Content-Type: text/plain; charset="utf-8"

I don't know anything about the issue, but there should be equivalent material for V4, under advanced topics, DN resolution.

> I instead added the block just before the last line of my password-authn-config.xml. 

Whatever the right wiring is, that would be the logical place to put it, yes.

-- Scott

------------------------------