<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
@font-face
{font-family:Tahoma}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:#1F497D}
.MsoChpDefault
{font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:72.0pt 72.0pt 72.0pt 72.0pt}
div.WordSection1
{}
-->
</style>
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">Thanks Sean.</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">Ok I’ve attaché my config as a .7z archive, with my password as XXXXXXXX for security.</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">Not sure what:</span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">sAMAccountname={0} <span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">actually means. Is the
</span>={0} expanded into something if so what ? The username field in the login.jsp ?</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">In the attribute resolver.xml I also have:</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">(samAccountName=$requestContext.principalName)</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">Don’t know what that means either.</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">Dave</span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt; font-family:"Tahoma","sans-serif""> users-bounces@shibboleth.net [mailto:users-bounces@shibboleth.net]
<b>On Behalf Of </b>Sean McHugh<br>
<b>Sent:</b> 16 November 2012 15:40<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Re: Help with LDAP authentication</span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">On Fri, Nov 16, 2012 at 10:23 AM, Wynne, David <<a href="mailto:D.Wynne@ljmu.ac.uk" target="_blank">D.Wynne@ljmu.ac.uk</a>> wrote:</p>
<div>
<p class="MsoNormal"><span style="font-size:16.0pt">..</span></p>
<div>
<div>
<div>
<p class="MsoNormal"> </p>
</div>
<blockquote style="border:none; border-left:solid #CCCCCC 1.0pt; padding:0cm 0cm 0cm 6.0pt; margin-left:4.8pt; margin-right:0cm">
<div>
<div>
<p class="MsoNormal" style=""><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal" style=""><span style="font-size:16.0pt">I'm trying to authenticate with our Microsoft Active Directory service, so the following configs are relevant:</span></p>
<p class="MsoNormal" style=""><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal" style=""><span style="font-size:16.0pt">login-config</span></p>
<p class="MsoNormal" style=""><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal" style=""><span style="font-size:16.0pt">edu.vt.middleware.ldap.jaas.LdapLoginModule required</span></p>
<p class="MsoNormal" style=""><span style="font-size:16.0pt"> ldapUrl="ldap://<a href="http://bydc1.jmu.ac.uk" target="_blank">bydc1.jmu.ac.uk</a>"</span></p>
<p class="MsoNormal" style=""><span style="font-size:16.0pt"> baseDn="ou=people, dc=jmu, dc=ac, dc=uk"</span></p>
<p class="MsoNormal" style=""><span style="font-size:16.0pt"> ssl="false"</span></p>
<p class="MsoNormal" style=""><span style="font-size:16.0pt">// 16/11/2012 D.Wynne Have to BIND with correct user credentials</span></p>
<p class="MsoNormal" style=""><span style="font-size:16.0pt"> bindDn`"<a href="mailto:cn=XXXXXXXX@jmu.ac.uk" target="_blank">cn=XXXXXXXX@jmu.ac.uk</a>"</span></p>
<p class="MsoNormal" style=""><span style="font-size:16.0pt"> bindCredential="XXXXXXXX"</span></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">How about your useFilter ? Would be best if you posted the entire config</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Typically for AD installations, you may be using : sAMAccountname={0} or mail={0} or userprincipalname={0}</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">read more here: <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass</a></p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<blockquote style="border:none; border-left:solid #CCCCCC 1.0pt; padding:0cm 0cm 0cm 6.0pt; margin-left:4.8pt; margin-right:0cm">
<p class="MsoNormal">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a></p>
</blockquote>
</div>
</div>
</div>
</div>
<br>
<hr>
<font face="Tahoma" size="2"><b><i>Important Notice:<i></b><i> the information in this email and any attachments is for the sole use of the intended recipient(s). If you are not an intended recipient, or a person responsible for delivering it to an intended
recipient, you should delete it from your system immediately without disclosing its contents elsewhere and advise the sender by returning the email or by telephoning a number contained in the body of the email. No responsibility is accepted for loss or damage
arising from viruses or changes made to this message after it was sent. The views contained in this email are those of the author and not necessarily those of Liverpool John Moores University.<i></font>
</i></i></i></i>
</body>
</html>