<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue-Light, Helvetica Neue Light, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1445272889626_2691"><span id="yui_3_16_0_1_1445272889626_2692">Thank you, I did. However it didn't solve my issue. :(</span></div><div id="yui_3_16_0_1_1445272889626_2691">I also played with various representations of the user names, including full canonical representation. </div><div id="yui_3_16_0_1_1445272889626_2691"><br></div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">Does this give any hints?</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class=""><br></div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class=""><br id="yui_3_16_0_1_1445272889626_3724" class=""></div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">2015-10-19 12:52:57,232 - DEBUG [org.ldaptive.auth.PooledSearchDnResolver:244] - resolve user=test@my.domain.com</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">2015-10-19 12:52:57,232 - DEBUG [org.ldaptive.auth.PooledSearchDnResolver:310] - searchi ng for DN using userFilter</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class=""><br id="yui_3_16_0_1_1445272889626_3729" class=""></div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">2015-10-19 12:52:57,234 - DEBUG [org.ldaptive.SearchOperation:138] - execute request=[or\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">g.ldaptive.SearchRequest@-1213229790::baseDn=cn=Users,DC=my,DC=domain,DC=com, searc\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">hFilter=[org.ldaptive.SearchFilter@-286285757::filter=(sAMAccountName={user}), parameter\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">s={user=test@my.domain.com}], returnAttributes=[1.1], searchScope=SUBTREE, timeLimi\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">t=0, sizeLimit=0, derefAliases=null, typesOnly=false, binaryAttributes=null, sortBehavio\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">r=UNORDERED, searchEntryHandlers=null, searchReferenceHandlers=null, controls=null, foll\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">owReferrals=false, intermediateResponseHandlers=null] with connection=[org.ldaptive.Defa\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">ultConnectionFactory$DefaultConnection@1173117487::config=[org.ldaptive.ConnectionConfig\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">@1363981390::ldapUrl=ldap://idp.my.domain.com, connectTimeout=3000, responseTimeout=-\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">1, sslConfig=[org.ldaptive.ssl.SslConfig@1454998072::credentialConfig=net.shibboleth.idp\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">.authn.impl.X509ResourceCredentialConfig@4f5ac161, trustManagers=null, enabledCipherSuit\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">es=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=false, useStar\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">tTLS=false, connectionInitializer=null], providerConnectionFactory=[org.ldaptive.provide\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">r.jndi.JndiConnectionFactory@776225939::metadata=[ldapUrl=ldap://idp.my.domain.com, c\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">ount=1], environment={com.sun.jndi.ldap.connect.timeout=3000, java.naming.ldap.version=3\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory}, providerConfig=[org.lda\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">ptive.provider.jndi.JndiProviderConfig@1477146338::operationExceptionResultCodes=[PROTOC\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">OL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=org.ldaptive.provider.Connecti\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">onStrategies$DefaultConnectionStrategy@60a0a322, controlProcessor=org.ldaptive.provider.\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">ControlProcessor@4d308483, environment=null, tracePackets=null, removeDnUrls=true, searc\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">hIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocke\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">tFactory=null, hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi.Jn\</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">diConnection@41dc316a]</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class=""><br id="yui_3_16_0_1_1445272889626_3755" class=""></div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">2015-10-19 12:52:57,258 - DEBUG [org.ldaptive.provider.jndi.NamingExceptionUtils:358] - naming exception class javax.naming.NamingException is ambiguous, </div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">maps to multiple result codes: [OPERATIONS_ERROR, ALIAS_PROBLEM, ALIAS_DEREFERENCING_PROBLEM, LOOP_DETECT, AFFECTS_MULTIPLE_DSAS, OTHER]</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class=""><br id="yui_3_16_0_1_1445272889626_3760" class=""></div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">2015-10-19 12:52:57,268 - WARN [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:212] </div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">- Profile Action ValidateUsernamePasswordAgainstLDAP: Login by test@my.domain.com produced exception</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">org.ldaptive.LdapException: javax.naming.NamingException: [LDAP: error code 1 - 000004DC: </div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">LdapErr: DSID-0C09072B, comment: In order to perform this operation a successful bind </div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">must be completed on the connection., data 0, v2580^@]; remaining name 'cn=Users,DC=my,DC=domain,DC=com'</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">at org.ldaptive.provider.ProviderUtils.throwOperationException(ProviderUtils.java:77)</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">Caused by: javax.naming.NamingException: [LDAP: error code 1 - 000004DC: LdapErr: DSID-0C09072B, </div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v2580^@]</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class=""> at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3175)</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">2015-10-19 12:52:57,316 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:363] - Not a usual scheme, returning name of 'urn:federation:MicrosoftOnline'</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">2015-10-19 12:52:57,318 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:787] - No UIInfo or logos returning null</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">2015-10-19 12:52:57,318 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:529] - No description matching the languages found, returning null</div><div id="yui_3_16_0_1_1445272889626_2691" dir="ltr" class="">...</div><div dir="ltr" id="yui_3_16_0_1_1445272889626_3775" class=""><br id="yui_3_16_0_1_1445272889626_3777" class=""></div><div dir="ltr" id="yui_3_16_0_1_1445272889626_3775" class=""><br></div> <br><div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: HelveticaNeue-Light, Helvetica Neue Light, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"> <font size="2" face="Arial"> On Saturday, October 17, 2015 6:16 AM, Peter Schober <peter.schober@univie.ac.at> wrote:<br> </font> </div> <br><br> <div class="y_msg_container">* Val P <<a shape="rect" ymailto="mailto:spamwall@redsigil.com" href="mailto:spamwall@redsigil.com">spamwall@redsigil.com</a>> [2015-10-17 02:02]:<br clear="none">> What I don't understand is why it's not doing a bind. It did a bind<br clear="none">> during the service start, and it was succesful, but it then<br clear="none">> unbound. During authentication, it tries to do a search, but there<br clear="none">> is no new bind.<br clear="none"><br clear="none">Can you try<br clear="none"> idp.authn.LDAP.authenticator = bindSearchAuthenticator<br clear="none">instead?<br clear="none">-peter<div class="yqt3968466267" id="yqtfd45875"><br clear="none">-- <br clear="none">To unsubscribe from this list send an email to <a shape="rect" ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br clear="none"></div><br><br></div> </div> </div> </div></div></body></html>