<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"><meta name="Generator" content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang="EN-US" link="blue" vlink="purple"><div class="WordSection1"><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">We are using port 3268 and the ldaploginmodule. We have not tried another user, because the same user was able to query it via ldapsearch and ldifde. Do you suggest we still try using another more privileged user?</span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Thanks</span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Dan</span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p><div><div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> <a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> [mailto:<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a>] <b>On Behalf Of </b>David Bantz<br><b>Sent:</b> Wednesday, November 26, 2014 4:59 PM<br><b>To:</b> Shib Users<br><b>Subject:</b> Re: empoyeeID value not given</span></p></div></div><p class="MsoNormal"> </p><p class="MsoNormal"> </p><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><p class="MsoNormal">On Nov 26, 2014, at 14:51, Daniel Pryor <<a href="mailto:dpryor@parchment.com">dpryor@parchment.com</a>> wrote:</p></div><p class="MsoNormal"> </p><div><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">I set up a shibboleth to query against active directory for the basics (employeeID, given name, sn, etc). It picks up all fields except employeeID. </span></p></div></div></blockquote><div><p class="MsoNormal"> </p></div><div><p class="MsoNormal">Using the general services catalog port 3268? If so, is employeeID released? </p></div><p class="MsoNormal"><br><br></p><div><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">When the logs are in DEBUG mode it says discarding because no value was given.</span></p></div></div><p class="MsoNormal"><br><br></p><div><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">We have validated via ldifde and ldapsearch that the attribute is set.</span></p></div></div><div><p class="MsoNormal"> </p></div><p class="MsoNormal">Validated using your ShibbolethIdP service account? Or another account that might have more privileges.</p></div><div><p class="MsoNormal"><br><br></p><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></p><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Thoughts?</span></p></div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></p><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Thanks</span></p></div><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Dan</span></p></div><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">--<span class="apple-converted-space"> </span><br>To unsubscribe from this list send an email to<span class="apple-converted-space"> </span></span><a href="mailto:users-unsubscribe@shibboleth.net"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif";color:purple">users-unsubscribe@shibboleth.net</span></a></p></div></div><p class="MsoNormal"> </p></div></body></html>