ldap warning "Unsuccessful search response" after upgrade to IDP 5

[Peter Schober]

Peter Schober via users <users at shibboleth.net> [2024-04-02 17:14 CEST]:
> David Stava via users <users at shibboleth.net> [2024-04-02 17:00 CEST]:
> > org.ldaptive.LdapException: Error resolving entry for
> >     username at domain. Unsuccessful search response:
> >     org.ldaptive.SearchResponse at 1220993256::messageID=2,
> >     controls=[], resultCode=INVALID_DN_SYNTAX, matchedDN=,
> >     diagnosticMessage=0000208F: NameErr: DSID-03100233, problem 2006
> >     (BAD_NAME), data 8350, best match of:
> >     'username at domain'
> 
> What is your idp.authn.LDAP.authenticator property currently set to
> (in conf/ldap.properties)?

Sorry, I skipped over that where you already wrote:

> when using password authentication with ldap adAuthenticator

INVALID_DN_SYNTAX (coming from your LDAP server) still seems clear?

Besides idp.authn.LDAP.authenticator=adAuthenticator what are the
values of other relevant settings (e.g. idp.authn.LDAP.dnFormat)?
Does the above exception occur with any/all user names or just with
some?  Does the resover work using those same user names, e.g. using
aacli?

-peter