<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Mon, May 11, 2015 at 2:42 PM, Guillaume Gilbert <span dir="ltr"><<a href="mailto:Gilbert.Guillaume@lacsq.org" target="_blank">Gilbert.Guillaume@lacsq.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">


<div style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10pt;line-height:normal;font-family:'Segoe UI';margin:4px 4px 1px">
<div><span style="font-family:arial,sans-serif;font-size:small"># LDAP authentication configuration, see authn/ldap-authn-config.xml</span><br></div></div>
<div> </div>
<div>## Authenticator strategy, either anonSearchAuthenticator, bindSearchAuthenticator, directAuthenticator, adAuthenticator<br>#idp.authn.LDAP.authenticator                   = anonSearchAuthenticator</div>
<div></div></blockquote><div><br></div><div>You haven't set an authenticator template, which means it's using anonymous search then bind.</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div># Search DN resolution, used by anonSearchAuthenticator, bindSearchAuthenticator<br>idp.authn.LDAP.baseDN                           = ou=users,ou=system<br>#idp.authn.LDAP.subtreeSearch                    = false<br>idp.authn.LDAP.userFilter                       = (uid={user})<br># bind search configuration<br>idp.authn.LDAP.bindDN                           = uid=admin,ou=system<br>idp.authn.LDAP.bindDNCredential                 = ********</div></blockquote><div><br></div><div>You have set a bindDN, which isn't used by the anonSearchAuthenticator.</div><div>Try setting this property:</div><div>idp.authn.LDAP.authenticator                   = bindSearchAuthenticator<br></div><div><br></div><div>--Daniel Fisher</div><div><br></div></div></div></div>