
<html>


<head>


<meta http-equiv="Content-Type" content="text/html; charset=utf-8">


</head>


<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">


Quynh,


<div class=""><br class="">


</div>


<div class="">


<div>


<blockquote type="cite" class="">


<div class="">


<div class="WordSection1" style="page: WordSection1; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">


<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">


I've tried different input of attributes which make no difference in outcome. Is there an example of what attributes work for login.config with AD LDAP?</div>


</div>


</div>


</blockquote>


<div><br class="">


</div>


<div>There is a nice fig leaf of an article called “LDAP Server Issues” that might help you.</div>


<div><br class="">


</div>


<div><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/LdapServerIssues" class="">https://wiki.shibboleth.net/confluence/display/SHIB2/LdapServerIssues</a></div>


<br class="">


<blockquote type="cite" class="">


<div class="WordSection1" style="page: WordSection1; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">


<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">


Using similar attributes to above I was able to deploy the Shib web app to IdP weblogic domain so It seems odd that login authentication doesn't work.</div>


</div>


</blockquote>


<br class="">


</div>


</div>


<div>You’ll want to turn on all relevant LDAP logging.  I can’t remember what it looks like in 2.3.8, but I can remember what the Xerces vulnerabilities looked like.  You might consider upgrading.</div>


<div><br class="">


</div>


<div><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPLogging" class="">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPLogging</a></div>


<div><br class="">


</div>


<div>Take care,</div>


<div>Nate.</div>


</body>


</html>