IDP41 configuration problem to authenticate against multiples branches of an AD

[Cantor, Scott]

I speculatively fixed one error by adjusting the example to demonstrate that you can't set the idp.authn.LDAP.authenticator property to do this, you have to inject the Ldaptive Authenticator bean into the LDAP CredentialValidator:

<util:list id="shibboleth.authn.Password.Validators">
    <bean parent="shibboleth.LDAPValidator" p:authenticator-ref="aggregateAuthenticator" />
</util:list>

Once you do that, you're replacing all of the built-in behavior, almost none of the LDAP properties matter at that point and will revert to default values unless the beans you're defining/adding are themselves adjusted with other settings.

I still don't think the example is right, or more so just not complete, it doesn't show the actual authentication handlers that would have to be declared that the map is pointing to, but it will probably shift the errors in that direction.

The second example for multiple directories has a longer (and probably still partly wrong) example that at least contains multiple authentication handlers referenced by a map (authHandler1, authHandler2). That's missing from the first example, it just points at non-existent beans.

-- Scott