<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi Scott,<div class=""><br class=""><div class=""><div><blockquote type="cite" class=""><div class="">What did you set idp.authn.LDAP.authenticator to, if anything? The default is searching anonymously so that no credentials have to be supplied. You have to change that if that's not the case, and either bind directly or indirectly with service credentials.<br class=""><br class=""></div></blockquote><div><br class=""></div><div>You are right! </div><div><br class=""></div><div>I left the default value, that is:</div><div><br class=""></div><div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(83, 48, 225);" class="">#idp.authn.LDAP.authenticator = anonSearchAuthenticator</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(83, 48, 225);" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(83, 48, 225);" class="">Ok, now I’m using </div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(83, 48, 225);" class=""><span style="color: rgb(52, 187, 199);" class=""><br class=""></span></div><div style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(83, 48, 225);" class=""><span style="color: rgb(52, 187, 199);" class="">idp.authn.LDAP.authenticator</span><span style="color: rgb(0, 0, 0);" class=""> = </span><span style="color: rgb(195, 55, 32);" class="">bindSearchAuthenticator</span></div></div><div><br class=""></div><div>and everything is working! I mean, passed through authentication process with successful.</div><div><br class=""></div><br class=""><blockquote type="cite" class=""><div class=""><blockquote type="cite" class="">I didn’t change anything on conf/authn/jaas.config.<br class=""></blockquote><br class="">Are you using JAAS or LDAP? Those are entirely different settings. You can't affect JAAS settings with properties in a property file, JAAS doesnt suppor't that.<br class=""></div></blockquote><div><br class=""></div><div>I’m using LDAP, but I said that just to show more details about my environment.</div><br class=""><blockquote type="cite" class=""><div class=""><br class="">If you want it to "just work" based on a 2.x config, use JAAS. If you use JAAS and copy over a working attribute-resolver config, nothing in ldap.properties applies.<br class=""><br class=""></div></blockquote><div><br class=""></div><div>Great! I will try it as well.</div><div><br class=""></div><div>Cheers</div><div><br class=""></div><div>Emerson</div><br class=""><blockquote type="cite" class=""><div class="">-- Scott<br class=""><br class="">-- <br class="">To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">users-unsubscribe@shibboleth.net</a></div></blockquote></div><br class=""></div></div></body></html>