ldap warning "Unsuccessful search response" after upgrade to IDP 5

[Fisher, Daniel]

> On Apr 3, 2024, at 4:02 AM, David Stava via users <users at shibboleth.net> wrote:
> 
> 
> Dear Peter,
> 
> many thanks for your reply.
> 
> in ldap.properties we have
> idp.authn.LDAP.dnFormat                         = %s at ista.ac.at
> idp.authn.LDAP.baseDN                           = dc=ista,dc=ac,dc=at
> idp.authn.LDAP.userFilter                       = (sAMAccountName={user})
> 

Do you have `idp.authn.LDAP.returnAttributes` set?
From your logs it looks like the EntryResolver is running and that should only happen if you’re asking for additional attributes at authentication.
If you do in fact need returnAttributes, I don’t believe the dnFormat configuration will work with that type of format.
In that case, you’d need to switch to using bindSearchAuthenticator with AD.

—Daniel Fisher