<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 11">
<meta name=Originator content="Microsoft Word 11">
<link rel=File-List href="cid:filelist.xml@01CC8A6F.84854070">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
 name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
 name="State"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
 name="place"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
 name="PersonName"/>
<!--[if gte mso 9]><xml>
 <o:OfficeDocumentSettings>
  <o:DoNotRelyOnCSS/>
 </o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
 <w:WordDocument>
  <w:DisplayBackgroundShape/>
  <w:SpellingState>Clean</w:SpellingState>
  <w:GrammarState>Clean</w:GrammarState>
  <w:DocumentKind>DocumentEmail</w:DocumentKind>
  <w:EnvelopeVis/>
  <w:PunctuationKerning/>
  <w:ValidateAgainstSchemas/>
  <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
  <w:IgnoreMixedContent>false</w:IgnoreMixedContent>
  <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
  <w:Compatibility>
   <w:BreakWrappedTables/>
   <w:SnapToGridInCell/>
   <w:WrapTextWithPunct/>
   <w:UseAsianBreakRules/>
   <w:DontGrowAutofit/>
  </w:Compatibility>
  <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
 </w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
 <w:LatentStyles DefLockedState="false" LatentStyleCount="156">
 </w:LatentStyles>
</xml><![endif]--><!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
        {mso-style-parent:"";
        margin:0in;
        margin-bottom:.0001pt;
        mso-pagination:widow-orphan;
        font-size:12.0pt;
        font-family:"Times New Roman";
        mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
        {color:blue;
        text-decoration:underline;
        text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
        {color:purple;
        text-decoration:underline;
        text-underline:single;}
span.EmailStyle17
        {mso-style-type:personal-compose;
        mso-style-noshow:yes;
        mso-ansi-font-size:14.0pt;
        mso-bidi-font-size:14.0pt;
        font-family:"Times New Roman";
        mso-ascii-font-family:"Times New Roman";
        mso-hansi-font-family:"Times New Roman";
        mso-bidi-font-family:"Times New Roman";
        color:windowtext;
        mso-text-animation:none;
        font-weight:normal;
        font-style:normal;
        text-decoration:none;
        text-underline:none;
        text-decoration:none;
        text-line-through:none;}
span.SpellE
        {mso-style-name:"";
        mso-spl-e:yes;}
span.GramE
        {mso-style-name:"";
        mso-gram-e:yes;}
@page Section1
        {size:8.5in 11.0in;
        margin:1.0in 1.25in 1.0in 1.25in;
        mso-header-margin:.5in;
        mso-footer-margin:.5in;
        mso-paper-source:0;}
div.Section1
        {page:Section1;}
-->
</style>
<!--[if gte mso 10]>
<style>
 /* Style Definitions */ 
 table.MsoNormalTable
        {mso-style-name:"Table Normal";
        mso-tstyle-rowband-size:0;
        mso-tstyle-colband-size:0;
        mso-style-noshow:yes;
        mso-style-parent:"";
        mso-padding-alt:0in 5.4pt 0in 5.4pt;
        mso-para-margin:0in;
        mso-para-margin-bottom:.0001pt;
        mso-pagination:widow-orphan;
        font-size:10.0pt;
        font-family:"Times New Roman";
        mso-ansi-language:#0400;
        mso-fareast-language:#0400;
        mso-bidi-language:#0400;}
</style>
<![endif]-->
</head>

<body lang=EN-US link=blue vlink=purple style='tab-interval:.5in'>

<div class=Section1>

<div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.0pt;
mso-border-bottom-alt:solid windowtext .75pt;padding:0in 0in 1.0pt 0in'>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'>Hi, I am binding to the
AD LDAP, but getting an event 1535, problem 2001, no object found.<o:p></o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'>It seems this is caused
by an invalid filter in the request.<o:p></o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'>Can someone point out
what I am doing wrong in the filter?<o:p></o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'>The user is identified by
<span class=SpellE>sAMAccountName</span> and authenticates using it.<o:p></o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'>All help is greatly
appreciated<o:p></o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'>~lennyK<o:p></o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'>&lt;<span class=SpellE>resolver<span
class=GramE>:AttributeDefinition</span></span> <span class=SpellE>xsi:type</span>=&quot;<span
class=SpellE>ad:Simple</span>&quot; id=&quot;<span class=SpellE>sAMAccountName</span>&quot;
<span class=SpellE>sourceAttributeID</span>=&quot;<span class=SpellE>sAMAccountName</span>&quot;
<span class=SpellE>xmlns</span>=&quot;urn:mace:shibboleth:2.0:resolver:ad&quot;&gt;<o:p></o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'>&lt;<span class=SpellE>resolver<span
class=GramE>:Dependency</span></span> ref=&quot;<span class=SpellE>myLDAP</span>&quot;
/&gt;<o:p></o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'>&lt;<span class=SpellE>resolver<span
class=GramE>:AttributeEncoder</span></span> <span class=SpellE>xsi:type</span>=&quot;enc:SAML1String&quot;
name=&quot;<span class=SpellE>urn:mace:dir:attribute-def:sAMAccountName</span>&quot;
/&gt;<o:p></o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'>&lt;<span class=SpellE>resolver<span
class=GramE>:AttributeEncoder</span></span> <span class=SpellE>xsi:type</span>=&quot;enc:SAML2String&quot;
name=&quot;urn:oid:1.2.840.113556.1.4.221&quot; <span class=SpellE>friendlyName</span>=&quot;<span
class=SpellE>sAMAccountName</span>&quot; /&gt;<o:p></o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'>&lt;/<span class=SpellE>resolver<span
class=GramE>:AttributeDefinition</span></span>&gt;<o:p></o:p></span></font></p>

<p class=MsoNormal style='border:none;mso-border-bottom-alt:solid windowtext .75pt;
padding:0in;mso-padding-alt:0in 0in 1.0pt 0in'><font size=4
face="Times New Roman"><span style='font-size:14.0pt'><o:p>&nbsp;</o:p></span></font></p>

</div>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp; </span>&lt;<span
class=SpellE>resolver<span class=GramE>:DataConnector</span></span> id=&quot;<span
class=SpellE>myLDAP</span>&quot; <span class=SpellE>xsi:type</span>=&quot;<span
class=SpellE>LDAPDirectory</span>&quot; <span class=SpellE>xmlns</span>=&quot;urn:mace:shibboleth:2.0:resolver:dc&quot;<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=SpellE>ldapURL</span>=&quot;<span class=SpellE>ldap://xxx.xxx.xxx.xxx</span>&quot;
<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=SpellE><span class=GramE>baseDN</span></span>=&quot;<span class=SpellE>ou</span>=<span
class=SpellE>staff,dc</span>=<span class=SpellE>umassb,dc</span>=net&quot; <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span>principal=&quot;aaaaa.bbbbb@umassb.net&quot;<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=SpellE><span class=GramE>principalCredential</span></span>=&quot;<span
class=SpellE>xxxxxxxxxx</span>&#8221;<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=SpellE><span class=GramE>lowercaseAttributeNames</span></span>=&quot;true&quot;<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=SpellE><span class=GramE>noResultIsError</span></span>=&quot;true&quot;<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=SpellE><span class=GramE>searchScope</span></span>=&quot;SUBTREE&quot;&gt;<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span style='mso-spacerun:yes'>&nbsp;&nbsp; </span><o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>&lt;<span
class=SpellE><span class=GramE>dc:</span>FilterTemplate</span>&gt;<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span><span class=GramE>&lt;![</span>CDATA[<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span>(<span class=SpellE><span class=GramE>sAMAccountName</span></span>=($<span
class=SpellE>requestContext.sAMAccountName</span>))<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span>]]&gt;<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span>&lt;/<span class=SpellE>dc<span class=GramE>:FilterTemplate</span></span>&gt;<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>&lt;<span
class=SpellE>LDAPProperty</span> name=&quot;<span class=SpellE>java.naming.referral</span>&quot;
value=&quot;follow&quot;/&gt;<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp; </span>&lt;/<span
class=SpellE>resolver<span class=GramE>:DataConnector</span></span>&gt;<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><st1:PersonName w:st="on"><em><i><font size=4
 face="Times New Roman"><span style='font-size:13.5pt;mso-no-proof:yes'>Leonard
 Kroll</span></font></i></em></st1:PersonName><i><font size=4 color=blue><span
style='font-size:13.5pt;color:blue;font-style:italic;mso-no-proof:yes'><br>
</span></font></i><em><i><font size=4 face="Times New Roman"><span
style='font-size:13.5pt;mso-no-proof:yes'>UNIX / GIS&nbsp;Administrator</span></font></i></em><i><font
size=4 color=blue><span style='font-size:13.5pt;color:blue;font-style:italic;
mso-no-proof:yes'><br>
</span></font><em><i><font face="Times New Roman"><span style='mso-no-proof:
yes'>Univ. <st1:State w:st="on">Massachusetts</st1:State> <st1:City w:st="on"><st1:place
 w:st="on">Boston</st1:place></st1:City></span></font></i></em><font
color=blue><span style='color:blue;mso-no-proof:yes'><br>
</span></font></i><a href="mailto:at@umb.edu"><em><i><font color=black
face="Times New Roman"><span style='color:windowtext;mso-no-proof:yes;
text-decoration:none;text-underline:none'>Leonard(dot)Kroll(at)umb.edu</span></font></i></em></a><span
style='mso-no-proof:yes'><br>
<em><i><font face="Times New Roman">Phone: 617-287-5048</font></i></em><i><font
color=blue><span style='color:blue;font-style:italic'><br>
</span></font><em><i><font face="Times New Roman">fax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
617-287-5224</font></i></em></i></span><em><i><font color=blue
face="Times New Roman"><span style='color:blue'><o:p></o:p></span></font></i></em></p>

<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p>&nbsp;</o:p></span></font></p>

</div>

</body>

</html>