<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On Mon, 3 Jun 2013, at 14:21 , Farrukh Najmi <<a href="mailto:farrukh@wellfleetsoftware.com">farrukh@wellfleetsoftware.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
<div bgcolor="#FFFFFF" text="#000000">
<br>
On 05/20/2013 03:31 PM, Nate Klingenstein wrote:<br>
> It's your choice whether authentication happens via an
anonymous BIND or via a search by an authenticated DN. The LDAP
login module supports both.<br>
> In order to retrieve attributes about the user from a
directory, the IdP will need a privileged user account to perform
the search.<br>
<br>
<br>
After successfully using Shib 2 SSO with my SP using LDAP search via
an anonymous BIND I am now trying to do the same by authenticating
with a privileged user by specifying bindDn and bindCredentials for
the JAAS config for my LdapLoginModule as follows:<br>
<br>
ShibUserPassAuth {<br>
<br>
edu.vt.middleware.ldap.jaas.LdapLoginModule required<br>
ldapUrl=<a class="moz-txt-link-rfc2396E" href="ldap://wellfleet1.wellfleetsoftware.com:33389/">"ldap://wellfleet1.wellfleetsoftware.com:33389/"</a><br>
baseDn="dc=springframework,dc=org"<br>
bindDn="uid=admin,ou=system,dc=springframework,dc=org"<br>
bindCredentials="secret"<br></div></blockquote><div><br></div>bindCredential - singular I think</div><div><br></div><div><br><blockquote type="cite"><div bgcolor="#FFFFFF" text="#000000">
ssl="false"<br>
userFilter="uid={0}"<br>
subtreeSearch="true";<br>
};<br></div></blockquote><br></div><div><br></div><br></body></html>