ldap warning "Unsuccessful search response" after upgrade to IDP 5

Peter Schober peter.schober at univie.ac.at
Tue Apr 2 15:14:22 UTC 2024


David Stava via users <users at shibboleth.net> [2024-04-02 17:00 CEST]:
> org.ldaptive.LdapException: Error resolving entry for
>     username at domain. Unsuccessful search response:
>     org.ldaptive.SearchResponse at 1220993256::messageID=2,
>     controls=[], resultCode=INVALID_DN_SYNTAX, matchedDN=,
>     diagnosticMessage=0000208F: NameErr: DSID-03100233, problem 2006
>     (BAD_NAME), data 8350, best match of:
>     'username at domain'

What is your idp.authn.LDAP.authenticator property currently set to
(in conf/ldap.properties)?

If you want the M$-proprietary username at domain form of DNs to work
you'll need to configure the apropriate authenticator, e.g.:

  idp.authn.LDAP.authenticator = adAuthenticator

HTH,
-peter


More information about the users mailing list