<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:14pt;color:#000000;background-color:#FFFFFF;font-family:'Times New Roman', Times, serif;">
<p>That is true. Those two files you mentioned are xml files. But, the actual pwd is in ldap.properties file and any xml special/reserved characters in the pwd will not be treated. Therefore, no need to add an escape. If you make ldap.properities file to ldap.xml,
the pwd <span style="font-size: 14pt;">without "amp;" for & will fail. </span></p>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Nate Klingenstein <nate.klingenstein@utah.edu><br>
<b>Sent:</b> Friday, February 26, 2016 10:25 AM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Re: IdPv3 LDAP password issue</font>
<div> </div>
</div>
<div>
<div>
<blockquote type="cite" class="">
<div class=""><span class="" style="font-family:Helvetica; font-size:12px; font-style:normal; font-variant:normal; font-weight:normal; letter-spacing:normal; line-height:normal; orphans:auto; text-align:start; text-indent:0px; text-transform:none; white-space:normal; widows:auto; word-spacing:0px; float:none; display:inline!important">In
Idp 3.x, ldap configuration is not an .xml file, ldap authentication works fine without adding prefix to a password that has & character.</span></div>
</blockquote>
</div>
<br class="">
<div class="">Well, it kinda is. The default distribution includes property files that aggregate a lot of options in a different format using Spring. I think you could move all those values into their expanded locations and remove ldap.properties and everything
would function identically.</div>
<div class=""><br class="">
</div>
<div class="">The properties file just sets a bunch of properties that are in turn loaded by configuration that lives in XML. You can find the references with a grep.</div>
<div class=""><br class="">
</div>
<div class="">
<div class="" style="margin:0px; font-size:11px; font-family:Menlo">conf/authn/ldap-authn-config.xml</div>
</div>
<div class="" style="margin:0px; font-size:11px; font-family:Menlo">
<div class="" style="margin:0px">conf/attribute-resolver-ldap.xml</div>
</div>
</div>
</div>
</div>
</body>
</html>