<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Mar 5, 2015 at 4:03 PM, David Gersic <span dir="ltr"><<a href="mailto:dgersic@niu.edu" target="_blank">dgersic@niu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr">
<div style="font-size:12pt;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255)">
<p><span style="font-size:12pt">It might help to post the actual configuration file you're using. Mask out the sensitive bits before posting, of course.</span></p></div></div></blockquote><div><br></div><div>David:</div><div><br></div><div>No problem. Just didn't think anybody would want to see that. The entire non-commented-out part of login.conf is as follows:</div><div><br></div><div>ShibUserPassAuth {</div><div><br></div><div> edu.vt.middleware.ldap.jaas.LdapLoginModule required<br></div><div> ldapUrl="ldap://<a href="http://XXXXXX.bucknell.edu:389/">XXXXXX.bucknell.edu:389/</a>"</div><div> ssl="false"</div><div> tls="false"</div><div> baseDN="cn=Users,dc=bucknell,dc=edu"</div><div> subtreeSearch="false"</div><div> bindDn="<a href="mailto:servicename@bucknell.edu">servicename@bucknell.edu</a>"</div><div> bindCredential="XXXXXXX"</div><div> userFilter="cn={0}";</div><div><br></div><div>};<br></div><div><br></div><div>The LDAP connector in the attribute-resolver.xml file:</div><div><br></div><div><div> <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"</div><div> ldapURL="ldap://<a href="http://XXXXXX.bucknell.edu/">XXXXXX.bucknell.edu/</a>" </div><div> baseDN="cn=Users,dc=bucknell,dc=edu" </div><div> principal="<a href="mailto:servicename@bucknell.edu">servicename@bucknell.edu</a>"</div><div> principalCredential="XXXXXXXX"></div><div> <dc:FilterTemplate></div><div> <![CDATA[</div><div> (sAMAccountName=$requestContext.principalName)</div><div> ]]></div><div> </dc:FilterTemplate></div><div> <dc:ReturnAttributes>employeeType uid cn sn displayName givenName mail bucknellEmployeeType memberOf bucknelleduPersonEntitlement</dc:ReturnAttributes></div><div> <dc:LDAPProperty name="java.naming.referral" value="follow"/></div><div> </resolver:DataConnector></div><div><br></div></div><div><br></div><div>And this is the login handler portion of handler.xml</div><div><br></div><div><br></div><div><div> <ph:LoginHandler xsi:type="ph:UsernamePassword" </div><div> jaasConfigurationLocation="file:///usr/local/idp/conf/login.config"></div><div> <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod></div><div> </ph:LoginHandler></div><div><br></div><div> <ph:LoginHandler xsi:type="ph:PreviousSession"></div><div> <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PreviousSession</ph:AuthenticationMethod></div><div> </ph:LoginHandler></div></div><div><br></div><div><br></div><div>It all seems pretty standard which is why I am so confused as to why it's not working.</div><div><br></div><div>Thanks,</div><div>Mike</div></div></div></div>