<html><head></head><body><p dir="ltr">So, anybody knows if there is a class that extend ldaptive with the possibility to aggregate different Authenticator together? </p>
<p dir="ltr">Is it impossible for me to use both LDAP and AD to authenticate the users by configuring simply the ldap-authn-config.xml file? </p>
<p dir="ltr">I will try to configure JaaS on my IdP to answer this use case, but if someone find out a better solution, please, answer to this thread by giving his solution. </p>
<p dir="ltr">I hope to find out a solution that uses ldap-authn-config.xml </p>
<p dir="ltr">Thank you for all your help! </p>
<p dir="ltr">Best Regards, </p>
<p dir="ltr"><!-- tmjah_g_1299s -->---<br>
Marco Malavolti<br>
Consortium GARR<br>
Via dei Tizii 6 (RM) <br>
Italia<br>
Skype: marco.mala<!-- tmjah_g_1299e --><br><br></p>
<div class="gmail_quote" >Il giorno 31 mag 2016, alle ore 21:48, Daniel Fisher <<a href="mailto:dfisher@vt.edu" target="_blank">dfisher@vt.edu</a>> ha scritto:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Tue, May 31, 2016 at 1:34 PM, Michael A Grady <span dir="ltr"><<a href="mailto:mgrady@unicon.net" target="_blank">mgrady@unicon.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word"><div>But once you have to start replicating all that config, the advantage versus just going back to using JAAS to configure the multiple sources gets unclear. The JAAS config is simpler, but perhaps doesn't get you all the same account state options -- if you are going to use those. And it sounds like the JAAS options are going to get more flexible with 3.3 when it becomes available.</div></div></blockquote><div><br></div><div>One advantage is performance. JAAS failover attempts DN resolution and authentication against each directory in sequence (probably without connection pooling). The AggregateDnResolver attempts !
DN
resolution concurrently, followed by a single authentication attempt (probably with connection pooling). The configuration is certainly more complex, but wiring together disparate directories isn't a simple thing.</div><div><br></div><div>--Daniel Fisher</div><div><br></div></div></div></div>
<pre class="blue">-- <br>To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net</pre></blockquote></div></body></html>