<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <br>
    <br>
    <div class="moz-cite-prefix">On 15/03/16 15:50, Daniel Fisher wrote:<br>
    </div>
    <blockquote
cite="mid:CAFC6YwQ=ZbF5cG81E+qcL4QyATxrzaBuLNLD8+U1dVkESmxjHg@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div class="gmail_extra">
          <div class="gmail_quote">On Tue, Mar 15, 2016 at 11:27 AM, <span
              dir="ltr"><<a moz-do-not-send="true"
                href="mailto:ssn@ebi.ac.uk" target="_blank">ssn@ebi.ac.uk</a>></span>
            wrote:<br>
            <blockquote class="gmail_quote" style="margin:0 0 0
              .8ex;border-left:1px #ccc solid;padding-left:1ex">
              <div text="#000000" bgcolor="#FFFFFF"><b>2016-03-15
                  12:50:11,928 - INFO
                  [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:152]
                  - Profile Action ValidateUsernamePasswordAgainstLDAP:
                  Login by 'user1' failed</b><b><br>
                </b><b>2016-03-15 12:50:18,282 - INFO
                  [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:152]
                  - Profile Action ValidateUsernamePasswordAgainstLDAP:
                  Login by 'domain\user1' failed</b></div>
            </blockquote>
            <div><br>
            </div>
            <div>Put the 'org.ldaptive' package in DEBUG and you should
              see the cause.</div>
            <div><br>
            </div>
          </div>
        </div>
      </div>
    </blockquote>
    <br>
    2016-03-15 16:44:36,455 - INFO
    [org.ldaptive.auth.PooledSearchDnResolver:268] - search for
    user=user1 failed using
    filter=[org.ldaptive.SearchFilter@1040207474::filter=(&(uid={0})(eduPersonAffiliation=*)),

    parameters={user=user1}]<br>
    <br>
    Culprit is (most likely a syntax error)<br>
    idp.authn.LDAP.userFilter                       =
    (&(uid={0})(eduPersonAffiliation=*))<br>
    <br>
    Now using (which works)<br>
    idp.authn.LDAP.userFilter                       = (uid={user}) <br>
  </body>
</html>